cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3074
Views
0
Helpful
16
Replies

Cisco ASA missing BGP route

geoff
Level 1
Level 1

Hi,

 

After configuring BGP on an ASA 5585-x no routes to peer are displayed with show bgp route.

 

Below are some configs and shows

 

Many thanks in advance.

 

Cheers

Geoff

 

sh run route

route outside 0.0.0.0 0.0.0.0 xx.xxx.xxx.xxx 1

route BGP-LINK 0.0.0.0 0.0.0.0 xx.xxx.xxx.xx 2

 

sh route bgp    

 

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2, V - VPN

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is xx.xxx.xxx.xxx to network 0.0.0.0

 

sh run router bgp

router bgp xxxxx

bgp log-neighbor-changes

bgp router-id xxx.xxx.xxx.xxx

address-family ipv4 unicast

  neighbor xx.xxx.xxx.xx remote-as xxxxx

  neighbor xx.xxx.xxx.xx activate

  network xxx.xxx.xx.x mask 255.255.254.0

  network xxx.xxx.xx.x mask 255.255.255.0

  aggregate-address xxx.xxx.xx.x 255.255.255.0

  no auto-summary

  no synchronization

exit-address-family

!

nat (public,BGP-LINK) after-auto source dynamic public-subnet interface

access-list BGP-LINK_access_in extended permit icmp any object public-subnet

access-list public_access_in extended permit icmp any object public-subnet

 

interface Port-channel2

no nameif

security-level 100

no ip address

!

interface Port-channel2.14

vlan 14

nameif public

security-level 100

ip address xxx.xxx.xx.x 255.255.255.128

 

interface TenGigabitEthernet0/8

nameif BGP-LINK

security-level 0

ip address xx.xxx.xxx.xx 255.255.255.254

ipv6 address xxxx:xxxx:x:xx::xx/127

ipv6 enable

!

16 Replies 16

Hi Rick,

 

Many thanks with sharing the accepted protocol in this forum, sorry as I am very new to this on any forum, just got stuck trying to resolve my issues on my own.

 

Sorry, it was a typo xxx.xxx.41.1 is correct.

 

Yes, I create acl to handle icmp protocol.

 

After spending many hours researching and testing, I have come to the following conclusion, place an ASR 1001-x in front of ASA 5585-x to handle pour routing and BGP. Or research an implementation of using ASA 5585-x with multiple contexts one for firewall and the other for BGP.

 

I will start new discussion and send you an note, many thanks for your kind assistance.

 

Cheers

Geoff

Geoff

 

You are quite welcome.

 

HTH

 

Rick

HTH

Rick
Review Cisco Networking for a $25 gift card