Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BGP - Route Filters

Hi

Just wondering if the XG supports BGP Route Filters. From what i am reading XG uses Quagga for & Quagga supports Route Filters. I just cant seem to find it in the XG.

I am simply trying to filter out the default route which is being advertised by BGP

Any suggestions would be appreciated.

 

Thanks

Adam



This thread was automatically locked due to age.
Parents Reply
  • Are there any links or example how to simply filter out default route from BGP? We are in identical situation when XG is learning default route from BGP which, obviously, breaks Internet access from device itsels and IPSec/SSL VPN tunnels coming to it.

     

    Thank you!

Children
  • I just had to work through this same issue with support last week.  Frustrating Sophos doesn't have a document written for this.

     

    For future reference:

     

    from CLI option 3 -> 1 -> 3 to access the 'Configure BGP' Option

    bgp> enable

    bgp# configure terminal

    bgp# ip prefix-list deny-route seq 5 deny 0.0.0.0/0

    bgp# ip prefix-list deny-route seq 10 permit 0.0.0.0/0 le 32

    bgp(config)# router bgp <LOCAL AS>

    bgp(config-router)# neighbor <IP ADDRESS> prefix-list deny-route in

    bgp(config-router)# exit

    bgp(config)# exit

    bgp# clear ip bgp <IP ADDRESS> soft in

    bgp# write