FTD BGP path selection

[Cisco-User500]

Hello,

I have an FTD managed through FDM. I have two S2S VPNs using VTI and would like to do some path selection. I created two route-maps each matching a specific prefix list and each has BGP weight and local preference. I see that there is an option to apply a weight under the neighbor, But I want to be more specific and apply that to certain subnets only. I cannot find the setting that uses route map.

Thanks

[Panos Bouras]

Hi @Cisco-User500 

BGP route-map is applied to a neighbor under address-family ipv4.

You can do it through GUI in FMC, I never done it via FDM.

Screenshot from FMC

[Cisco-User500]

Hi Panos,

Thanks for sharing the screenshot. Unfortunately, I can only use FDM to manage this device.

Thanks

[Panos Bouras]

Hi @Cisco-User500 

What gersion are you running?

There's no BGP configuration on GUI?

[Marvin Rhoads]

With FDM you should be able to use a route-map smart CLI object and configure BGP as described here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/fdm/fptd-fdm-config-guide-670/fptd-fdm-bgp.html#id_123038

Version 6.5 introduced the route-map as a Smart CLI feature.

[Cisco-User500]

Thanks Marvin.

I have already created two route-maps and set the weight on each one. I am just not sure how to apply these routes maps so the FTD prefers a path over another for certain subnets defined in the route maps.

[Marvin Rhoads]

You should be able to use this option in your BGP smart cli setup:

table-map route-map options . (IPv4 only.) Apply a route map that sets metrics, a tag value, or a traffic index for routes that are updated in the BGP routing table, or controls whether routes are downloaded to the RIB. Click route-map and select the Smart CLI object that defines the route map. In the route map, you can use match clauses for IP access list, autonomous system paths, communities, prefix lists, and next hop.