<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic BGP routemap in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/BGP-routemap/m-p/187544#M34582</link>
    <description>&lt;P&gt;Hi Everyone,&lt;/P&gt;&lt;P&gt;&amp;nbsp; I was hoping to get some help on advertising specific BGP routes via a routemap.&amp;nbsp; We have a VPN between our Checkpoint 5000 series gateway cluster running R81.10 and an Azure Virtual network gateway with BGP routing.&amp;nbsp; I am looking to advertise only the following routes:&lt;/P&gt;&lt;P&gt;10.100.16.0/24, 10.150.30.0/24, 10.150.40.0/24, and 10.70.75.0/24.&amp;nbsp; I have a routemap&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 20 on&lt;BR /&gt;set routemap BOYAzureexport id 20 allow&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.100.16.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.150.30.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.150.40.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.70.75.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 action aspath-prepend-count 1&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;To apply the routemap I used:&lt;/P&gt;&lt;P&gt;set bgp external remote-as 65512 export-routemap BOYAzureexport preference 10 on&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I thought perhaps since I have an action in the routemap with id 20, I needed to duplicate that with id 21 without an action, but that didn't work either.&amp;nbsp;&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 21 on&lt;BR /&gt;set routemap BOYAzureexport id 21 allow&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.60.16.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.200.50.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.200.60.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.60.65.0/24 all&lt;/P&gt;&lt;P&gt;I can get BGP to advertise all my static routes by adding&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 21 on&lt;BR /&gt;set routemap BOYAzureexport id 21 allow&lt;BR /&gt;set routemap BOYAzureexport id 21 match protocol static&lt;/P&gt;&lt;P&gt;But I don't want to advertise the static route table to Azure.&lt;/P&gt;&lt;P&gt;Any help would be appreciated.&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Jeff&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 25 Jul 2023 14:58:30 GMT</pubDate>
    <dc:creator>Jeff_Post</dc:creator>
    <dc:date>2023-07-25T14:58:30Z</dc:date>
    <item>
      <title>BGP routemap</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/BGP-routemap/m-p/187544#M34582</link>
      <description>&lt;P&gt;Hi Everyone,&lt;/P&gt;&lt;P&gt;&amp;nbsp; I was hoping to get some help on advertising specific BGP routes via a routemap.&amp;nbsp; We have a VPN between our Checkpoint 5000 series gateway cluster running R81.10 and an Azure Virtual network gateway with BGP routing.&amp;nbsp; I am looking to advertise only the following routes:&lt;/P&gt;&lt;P&gt;10.100.16.0/24, 10.150.30.0/24, 10.150.40.0/24, and 10.70.75.0/24.&amp;nbsp; I have a routemap&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 20 on&lt;BR /&gt;set routemap BOYAzureexport id 20 allow&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.100.16.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.150.30.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.150.40.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 match network 10.70.75.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 20 action aspath-prepend-count 1&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;To apply the routemap I used:&lt;/P&gt;&lt;P&gt;set bgp external remote-as 65512 export-routemap BOYAzureexport preference 10 on&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I thought perhaps since I have an action in the routemap with id 20, I needed to duplicate that with id 21 without an action, but that didn't work either.&amp;nbsp;&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 21 on&lt;BR /&gt;set routemap BOYAzureexport id 21 allow&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.60.16.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.200.50.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.200.60.0/24 all&lt;BR /&gt;set routemap BOYAzureexport id 21 match network 10.60.65.0/24 all&lt;/P&gt;&lt;P&gt;I can get BGP to advertise all my static routes by adding&lt;/P&gt;&lt;P&gt;set routemap BOYAzureexport id 21 on&lt;BR /&gt;set routemap BOYAzureexport id 21 allow&lt;BR /&gt;set routemap BOYAzureexport id 21 match protocol static&lt;/P&gt;&lt;P&gt;But I don't want to advertise the static route table to Azure.&lt;/P&gt;&lt;P&gt;Any help would be appreciated.&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Jeff&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 25 Jul 2023 14:58:30 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/BGP-routemap/m-p/187544#M34582</guid>
      <dc:creator>Jeff_Post</dc:creator>
      <dc:date>2023-07-25T14:58:30Z</dc:date>
    </item>
  </channel>
</rss>

