Mutual Redistribution between EIGRP and BGP

[dtran]

Hi all, hope everyone is doing well !!!

I've got a topology below and mutual route redistribution is needed on the N9504 but I do not want EIGRP routes coming from the Cisco 4431 get redistributed into BGP. what's the best method to accomplish this ? and what's the AD value that the NGFW will see in its forwarding table for EIGRP redistributed routes ?

Thanks all in advance !!! I appreciate any inputs / suggestions !!!

Danny

 

[David Ruess]

When you redistributes EIGRP routes into BGP you would attach a route-map referencing usually a prefix-list to specify routes you want to redistribute thats EIGRP

Example:

router bgp 65001

redistribute eigrp 1 route-map ROUTES

route-map ROUTES permit 10

match ip address prefix-list EIGRP_ROUTES

ip prefix-list EIGRP_ROUTES permit x.x.x.x/x  <------ add as many prefix list statements as needed for the EIGRP routes you want

-David

[Ruben Cocheno]

@dtran 

Note that your redistribution will affect your Routing domain including the SD-WAN part of the network.

You will need to match the source-protocol eigrp while redistributing it back to you Firewall

route-map eigrp-to-bgp
permit 10 match ip address prefix-list eigrp-mpls
ip prefix-list eigrp-mpls permit x.x.x.x/x <-- add all routes from EIGRP from mpls that you want to filter

route-map stop-eigrp 10 deny
match source-protocol eigrp 100
route-map stop-eigrp 20 permit


router eigrp 100
redistribute bgp 1000 metric 100 1 255 1 1500

router bgp 1000 bgp log-neighbor-changes
redistribute eigrp 100 route-map eigrp-to-bgp
neighbor 192.168.1.1 route-map stop-eigrp out

AD for those EIGRP redistributed routes will be 20

[dtran]

Thanks David and Ruben for your inputs !!! I very much appreciate it !!!

My end goal is to redistribute all EIGRP routes from the N7706 and only certain routes from Cisco 4431 MPLS router. I think I can use route-map / prefix-list for this. 

As for BGP into EIGRP ... I only want certain BGP routes get redistributed to the Cisco 4431 MPLS router. Is that possible? 

Thank you very much !!

Danny

[MHM Cisco World]

If you dont use redistrubte between eigrp and bgp then it will be separate' totally separate.

Where the prefix learn from ebgp will only advertise via ibgp to FW and it AD will be 200 (since it learn via ibgp)

The prefix learn from eigrp will advertise to N7706 via also same igp eigrp.

So no need redistrubte.

The only point here is that for ibgp you need to use next-hop self otherwise you need to redistrubte ebgp interface ip connect to sdwan to the FW.

MHM