BGP VPN BETWEEN FTD AND GOOGLE CLOUD PLATFORM

[fmugambi]

Hello Team,

Need to create a IPSEC tunnel to GCP environment, to use BGP not static routing.

What are the concepts here?

Will I use policy based or route-based setup?

Step by step guide will be appreciated.

Thank you in advance.

[MHM Cisco World]

Med or as-prepend  control INbound (ingress)

LP or weight control control OUTbound (egress)

MHM

[fmugambi]

okay. so to avoid asymmetric routing, do i need to invoke both, or by principle any can work?

[Cristian Matei]

Hi,

   Put both to avoid assymtric routing, however after configuration perform testing to confirm: local-pref for egress traffic and MED for ingress traffic.

Best,

Cristian.

[MHM Cisco World]

Yes you need to invoke both 

otherwise the FTD receive return traffic from different VTI and drop it

MHM