Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BGP filtering to aws

 I have issue getting allowed route from aws. I have multiple routes in aws and I need one 192.168.104.0/24 I can push correct routes. 

!
hostname bgp
log stdout
!
debug bgp events
debug bgp keepalives
debug bgp updates
debug bgp fsm
debug bgp filters
!
bgp multiple-instance
bgp config-type cisco
!
router bgp 65000
no synchronization
bgp router-id 67.128.171.50
network 10.10.10.0 mask 255.255.255.0
network 10.10.13.0 mask 255.255.255.0
network 10.242.50.0 mask 255.255.255.0
redistribute connected
timers bgp 10 30
neighbor 169.254.143.213 remote-as 64512
neighbor 169.254.143.213 description AWS
neighbor 169.254.143.213 update-source 10.10.10.250,
neighbor 169.254.143.213 advertisement-interval 60
neighbor 169.254.143.213 timers 10 30
neighbor 169.254.143.213 send-community both
neighbor 169.254.143.213 prefix-list aws-route in
neighbor 169.254.143.213 prefix-list local-route out
neighbor 169.254.157.241 remote-as 64512
neighbor 169.254.157.241 description AWS
neighbor 169.254.157.241 update-source 10.10.10.250
neighbor 169.254.157.241 advertisement-interval 60
neighbor 169.254.157.241 timers 10 30
neighbor 169.254.157.241 send-community both
neighbor 169.254.157.241 prefix-list aws-route in
neighbor 169.254.157.241 prefix-list local-route out
no auto-summary
!
ip prefix-list aws-route seq 5 permit 192.168.104.0/24
ip prefix-list aws-route seq 10 deny any
ip prefix-list local-route seq 5 permit 10.10.13.0/24
ip prefix-list local-route seq 10 permit 10.10.10.0/24
ip prefix-list local-route seq 15 permit 10.242.50.0/24
ip prefix-list local-route seq 20 deny any
!
route-map aws-out permit 10
match ip address prefix-list aws-route
!
route-map aws-in permit 10
match ip address prefix-list local-route
!
line vty
no login
!



This thread was automatically locked due to age.