BGP routemaps and match statements

[H2-F1]

Hello Everyone,

I've been working on a small project and have come across an issue with I thought I'd share with the community to get some assistance.

I have attached a simplified topology of the setup

Essentially, I have 2 sites, each with an ISP connection to a CP VSX cluster running in VSX mode, one VS at Site 2 (BFW) is has a BGP Peering with a Juniper SRX appliance. There is also a connection between the 2 sites VSs through a L2 MPLS link.

I have BGP established where I receive a default route from the ISP at each site, I also have local networks connected on the Checkpoint firewalls. I am currently learning the local subnets connected to the SRX and I am sending it a default route as well as specific subnets connected to BFW.

BGP state

BGP Config

Routemap Config

Import/Export routemap

While setting up BGP between the 2 vs, and configuring routemaps, I only want to advertise one local subnet from each vs,  to do this I specifically used the match neighbor statement.

BFW should advertise subnet 10.254.132.160/27 only to AFW

AFW should advertise subnet 10.255.132.160/27 only to BFW

The idea is that the designated neighbor will receive the route, and all other neighbors will not. However, looking at the advertised routes sent from BFW to AFW it appears that it is applying the routemap destined for the SRX.

The below is the route learnt on AFW (not imported yet, hence the i)

B H i 10.254.131.128/26 via 10.255.132.198,

Can anyone please shed some light if this is expected behaviour, or point out if I've missed something?

Thanks

[Sundeep_Mudgal · Accepted solution]

sk110477 specifies how to configure routemaps per peer. Export routemap per IBGP peer is not supported. You will need to configure routemaps on SRX to not accept routes that are not relevant. Would it be possible to use EBGP instead and configure routemaps as per sk110477?

[H2-F1]

Thanks Sundeep.

That answers my question. I will have to change my SRX routemaps.