Hi Community,
I am having the following situation now,
R1 -asr1001 having static default route to firewall
0.0.0.0/0---> 192.168.0.17
On R1 I configured following & I like to prefer the BGP path over above default route path.
#R1 Config
interface TenGigabitEthernet0/0/0.500 >> Directly connected interface
encapsulation dot1Q 500
ip address 10.50.120.2 255.255.255.0
standby 1 ip 10.50.120.1
standby 1 priority 105
end
#BGP config on R1
router bgp 394566
bgp log-neighbor-changes
address-family ipv4
redistribute connected >> redistributed connected SVI
exit-address-family
ip vrf 250
rd 200:25
import ipv4 unicast map VRF-Global-to-VRF-250 >> filtering
!
!
interface TenGigabitEthernet0/0/0
no ip address
cdp enable
!
interface TenGigabitEthernet0/0/0.250 >> used for bgp with FW2
description firewall
encapsulation dot1Q 250
ip vrf forwarding 250
ip address 169.254.0.10 255.255.255.248
!
router bgp 394566
!
address-family ipv4 vrf 250
neighbor 169.254.0.9 remote-as 397013
neighbor 169.254.0.9 local-as 4200000001 no-prepend
neighbor 169.254.0.9 description firewall
neighbor 169.254.0.9 activate
neighbor 169.254.0.9 soft-reconfiguration inbound
exit-address-family
!
ip route vrf 250 10.53.120.0 255.255.255.0 169.254.0.9 global >> Added this route in vrf 250
end
#Advertisment
I see the routes are in vrf 250
asr1001#sh ip ro vrf 250
B 10.50.120.0/24
is directly connected, 01:04:19, TenGigabitEthernet0/0/0.500
L 10.50.120.2/32 is directly connected, TenGigabitEthernet0/0/0.500
asr1001#show bgp vpnv4 unicast vrf 250 neighbors 169.254.0.9 advertised-routes
BGP table version is 53, local router ID is 10.254.0.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 200:25 (default for vrf 250)
Import Map: VRF-Global-to-VRF-250, Address-Family: IPv4 Unicast, Pfx Count/Limit: 1/1000
*> 10.50.120.0/24 0.0.0.0 0 32768 ?
Total number of prefixes 1
I like to prefer the FW2 ( bgp path) over the default route path to reach destination 10.53.120.0/24
What config I am required to add please?
Thank you ...Yuvi
Trying to make the communication working from host in vlan 500 10.50.120.66 to destination 10.53.120.66
R2#sh run | i 10.53
ip route 10.53.0.0 255.255.0.0 192.168.0.60 50 >> R3
ip route 10.53.120.0 255.255.255.0 TenGigabitEthernet0/0/0.251 >> FW2 !Added now
ip route vrf 250 10.53.120.0 255.255.255.0 169.254.0.9 global >> FW2 !This really required?
R2#sh ip ro vrf 250 | i 10.53
S 10.53.120.0/24 [1/0] via 169.254.0.9
B 10.53.121.0/24 [20/0] via 169.254.0.9, 3d00h
R2#
R2#sh ip ro 10.53.120.66
Routing entry for 10.53.120.0/24
Known via "static", distance 1, metric 0 (connected)
Redistributing via ospf 1
Routing Descriptor Blocks:
* directly connected, via TenGigabitEthernet0/0/0.251
Route metric is 0, traffic share count is 1
Is this route table good please ?
Yesterday , I tried adding the vlan 500 interface with ( ip vrf forwording 250 ), Yesterday seen the hits on FW
If I am removing the ( ip vrf forwording 250 ) for vlan 500
The traffic hits not seen on the FW
R2#sh ip int brief
Te0/0/0.500 10.50.120.2 YES manual up up
interface TenGigabitEthernet0/0/0.500
description AzVWAN_NonProd_SVI_DCE
encapsulation dot1Q 500
ip address 10.50.120.2 255.255.255.0
standby 1 ip 10.50.120.1
standby 1 priority 105
Continuous ping running from host & repeat R2
[root@and-dce-rhel01 ~]# ping 10.53.120.66
PING 10.53.120.66 (10.53.120.66) 56(84) bytes of data.
R2#ping 10.53.120.66 repeat 1000
ON FW2 routing table
FW2(active)> show routing route | match 10.50.120
10.50.120.0/24 169.254.0.10 A?B 55681 4200000001
FW2(active)> show routing route | match 10.53.120
10.53.120.0/24 169.254.21.1 A?B 3370130 65515
admin@and-edgefw02(active)>
169.254.0.10 ( R2 interface used for bgp vrf 250)
