BGP advertise and prefix-list

[melcu]

Hi Mates,

Struggling with BGP and route advertise using routemaps and prefix lists.

Config:

set bgp external remote-as 123 on
set bgp external remote-as 123 local-address 10.200.0.1 on
set bgp external remote-as 123 export-routemap "dist_bgp" preference 1 on
set bgp external remote-as 123 peer 172.25.42.1 on
set bgp external remote-as 123 peer 172.25.42.1 multihop on
set bgp external remote-as 123 peer 172.25.42.1 holdtime 180
set bgp external remote-as 123 peer 172.25.42.1 keepalive 60
set bgp external remote-as 123 peer 172.25.42.1 ping on
set bgp external remote-as 123 peer 172.25.42.1 export-routemap "dist_bgp" preference 1 on
set bgp external remote-as 123 peer 172.25.42.3 on
set bgp external remote-as 123 peer 172.25.42.3 multihop on
set bgp external remote-as 123 peer 172.25.42.3 holdtime 180
set bgp external remote-as 123 peer 172.25.42.3 keepalive 60
set bgp external remote-as 123 peer 172.25.42.3 ping on
set bgp external remote-as 123 peer 172.25.42.3 export-routemap "dist_bgp" preference 1 on

set prefix-list bgp-nets sequence-number 5 prefix 83.166.213.32/32 exact
set prefix-list bgp-nets sequence-number 10 prefix 83.166.213.102/32 exact
set prefix-list bgp-nets sequence-number 15 prefix 83.166.213.103/32 exact
set prefix-list bgp-nets sequence-number 20 prefix 83.166.213.99/32 exact
set prefix-list bgp-nets sequence-number 25 prefix 83.166.213.200/32 exact
set prefix-list bgp-nets sequence-number 30 prefix 83.166.234.84/32 exact

set routemap redist_to_bgp id 10 on
set routemap redist_to_bgp id 10 allow
set routemap redist_to_bgp id 10 match prefix-list bgp-nets preference 1 on
set routemap redist_to_bgp id 10 match protocol bgp

 set bgp external remote-as 123 export-routemap redist_to_bgp preference 1 o
 set bgp external remote-as 123 peer 172.25.42.1 export-routemap redist_to_bgp preference 1 on
 set bgp external remote-as 123 peer 172.25.42.3 export-routemap redist_to_bgp preference 1 on

Frankly I'm not sure why is not working 😞 but It doesn't advertise nothing to the peer member

[Local SGM] demo-clu-ch01-01:1> show bgp peer 172.25.42.1 advertise

[Local SGM] demo=clu-ch01-01:1>

What am I missing from this ?! 😞 

Many thanks

[the_rock]

Maybe this is wrong?

set routemap redist_to_bgp id 10 match protocol bgp

Keep in mind, protocol has to be ORIGINATING one, not protocol supposed to be advertised.

Andy

[melcu · Accepted solution]

I was playing with it.

set routemap redist_to_bgp id 10 on
set routemap redist_to_bgp id 10 allow
set routemap redist_to_bgp id 10 match prefix-list bgp-nets preference 1 on

Deleted but still nothing 😞

[the_rock]

You leave line there, just make sure protocol is originating one, NOT one supposed to be advertised.

Andy

[melcu]

But it's originating from a prefix list. They are not connected nor received from BGP or any other protocol.

[the_rock]

OK, so deleting line makes sense then 🙂

Andy

[Chris_Atkinson · Accepted solution]

To clarify you are trying to advertise routes that arent in the local routing table / what are those IPs?

Need a little more info about this but sounds almost like a use case for the NAT Pools feature, don't let the name confuse.

[the_rock]

Hey Chris,

Since you mentioned nat pools, I thought that was related to routing, but only within VPN community. Or am I mistaken?

Andy

[Chris_Atkinson]

They are called NAT pools because that is a common use case (to advertise the NAT or VPN range) but it's not their exclusive purpose.

More generally in the absence of a route existing they provide an anchor mechanism for that network/subnet which can then be used in route advertisements / redistribution via route-maps etc.

Refer: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_Advanced_Routing_AdminGuide/T... 

[the_rock]

Got it, thank you!

[melcu]

Hmm I thought it will work like Cisco but indeed NAT-Pool may be the solution for this! 
I'll keep you posted. 

[melcu]

Indeed nat-pool was the solution.

Thank you Chris! Awesome as always! 

[the_rock]

Amazing! Always learn something new from @Chris_Atkinson  🙌

Andy

[Chris_Atkinson]

Can't speak for what it's like on an FTD but usually for Cisco you need a network statement / anchor route (Null0) at least. Glad it's working for you now!

[the_rock]

I will ask one of my colleagues who is really good with Cisco, Im super curious now.

Andy

[the_rock]

Silly me...I totally confused this with IP pool nat feature in global properties in smart console. Im thinking, wait, this can NOT be the same thing haha

Andy