07-22-2025 04:59 AM - edited 07-24-2025 01:14 PM
Apologies! Removing customer design info
07-22-2025 05:07 AM
hello @Fozia_Shiekh, sick question btw...! U're facing a common SD-WAN limitation. In Cisco SD-WAN, OMP is not available as a redistribution protocol when leaking routes from the Global VPN to a Service VPN, which is why u're not seeing it in the dropdown.
So , since u're receiving BGP routes from AWS in the Global VPN and want to advertise them to Spoke routers via the HUB using OMP, u'll need to take an indirect approach:
Receive BGP routes in the Global VPN (as u're doing).
Use route leaking to move those routes into the Service VPN on the HUB router. In this step, attach a route policy to filter only the desired 24 prefixes and exclude the default route.
In the Service VPN, configure redistribution into OMP, using a matching route policy if needed.
And G this ensures the BGP learned routes reach the Service VPN and are then advertised over OMP to the Spokes.
Although OMP isn’t available in the Global - Service leak config, once the routes are in the Service VPN, they can be redistributed into OMP.
check these links G:
hope it helps G
-Enes
07-22-2025 05:52 AM - edited 07-24-2025 01:10 PM
NA
07-22-2025 05:09 AM
also G, check this sick lab: https://www.networkacademy.io/ccie-enterprise/sdwan/route-leaking
07-22-2025 05:54 AM - edited 07-24-2025 01:10 PM
NA
07-22-2025 05:52 AM
Global vpn in cedge is same as vpn0 in vedge
There is way to leak route from vpn0 to vpnX but can I ask why you sure aws advertise route in vpn0 (global vpn)??
MHM
07-22-2025 06:39 AM - edited 07-24-2025 01:11 PM
Apologies! Removing text
07-22-2025 06:43 AM
OMP by defualt redistrubte route from vpn0 to other vpn.
Now hub see prefix other not see it?
This not sdwan issue I think it AS issue.
I.e. branchs reject route if it learn from same AS
Use bgp as override or allow-as if you use same as in hub and spokes
MHM
07-22-2025 07:12 AM - edited 07-24-2025 01:11 PM
Apologies! Removing text
07-22-2025 07:17 AM
Can you draw your topolgy
MHM
07-22-2025 08:10 AM - edited 07-24-2025 01:11 PM
Apologies! Removing text
07-22-2025 11:39 AM
thanks for sharing topology
in sdwan the term leaking is confuse alot of engineer,
in sdwan we use redistrubte when we need to OMP->IGP route exchange
in sdwan we use advertise when we need to IGP->OMP routes exchange
in sdwan we use leaking between service VPN not between VPN0 and service VPN (there is some case need leaking between VPN0 and service VPN)
your case you only need redistrubte and advertise
https://youtu.be/UMkZs1Ys5RY?si=d-eE5-bPSXkPgS4f
this link how you can do that
NOTE:- in your toplogy I still not see where is BGP config, there is PC connect to hub abd there is VRRP subnet connect to spokes, these are direct connect there is no bgp
NOTE:- to correct my last statment, static and connect by defualt advertise to OMP, bgp not
07-23-2025 05:32 AM - edited 07-24-2025 01:11 PM
Apologies! Removing text
07-23-2025 05:47 AM
Ok get it
So hub connect to sdwan and get route via omp
And hub re-advertise these route via bgp to aws
As I share before' you use bgp in specific vpn (not vpn0) between hub and aws <<- here you need to make it vpn130 to match what branchs use
You need to redistrubte omp into bgp (check video)
AND
Advertise bgp into OMP (check video)
07-24-2025 03:09 AM - edited 07-24-2025 01:11 PM
Apologies! Removing text
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide