Creating a BGP "filter" for use with an IPSec tunnel?

[Pete Johnstone]

I'm trying to get a Cisco 7300 router to connect to AWS via VPN tunnel w/BGP, and it is mostly configured however it is trying to send all internet routes to the virtual private gateway on the AWS side, which has a hard limit of 100.

My question is how to configure the tunnel to only send certain routes, or set up a BGP filter?  Or what is the best way to do this?

I'm completely unfamiliar with this, so any help would be appreciated.

[Georg Pauwen]

Hello,

the simplest way to filter the outbound routes would be with a prefix list:

ip prefix-list ISP_OUT permit 172.31.0.0/16 le 20
!
router bgp 7224
neighbor 169.254.255.5 prefix-list ISP_OUT out

The prefix list defines the routes you want to send to the AWS gateway. If you post all the routes you want to advertise, we can help you with the specifics of the prefix list.