topic Re: BGP route-map on Check Point Firewall R80.30 to accept only one desired subnet in Firewall and Security Management

BGP route-map on Check Point Firewall R80.30 to accept only one desired subnet

Blason_R — Sun, 10 Apr 2022 02:20:23 GMT

HI Team,

I have eBGP configured on 5900 GWs and my version is R80.30. I am currently accepting all traffic from peer. I wanted to know and configure only subnet i.e. 192.168.10.0/24 from that peer and deny others.

Can someone please confirm how do I do that on GAIA clish?

Re: BGP route-map on Check Point Firewall R80.30 to accept only one desired subnet

Chris_Atkinson — Sun, 10 Apr 2022 10:13:20 GMT

Basic example should be something like this:

### Routemap Config ###

set routemap Peer-IN id 10 on
set routemap Peer-IN id 10 allow
set routemap Peer-IN id 10 match network 192.168.10.0/24 exact
set routemap Peer-IN id 20 on
set routemap Peer-IN id 20 restrict

### Apply For the Particular AS ###

set bgp external remote-as <AS-NUMBER> import-routemap Peer-IN preference 1 on

### Apply For a specific Peer ###

set bgp external remote-as <AS-NUMBER> peer <PEER-IP> import-routemap Peer-IN preference 1 on

### SAVE ###

save config

Re: BGP route-map on Check Point Firewall R80.30 to accept only one desired subnet

the_rock — Sun, 10 Apr 2022 12:12:00 GMT

This is your best reference:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100501