topic Re: Leak a specific route from BGP summarization in General Topics

Leak a specific route from BGP summarization

a-techie — Tue, 05 Apr 2022 15:18:35 GMT

Hello All,

I have a question related to BGP summarization in a PAN firewall. We currently have summary aggregate advertised to the upstream device. But now we need a leak /32 route to the upstream along with the original summary route. What is the best method to achieve this goal? I have seen an option for 'Advertise filter' in BGP summary. If I add the /32 there, will it result in /32 and the /16 route(summary) being sent to upstream?

Re: Leak a specific route from BGP summarization

aleksandar.astardzhiev — Tue, 05 Apr 2022 15:49:10 GMT

Hi @a-techie ,

The summarized route is originating from PAN firewall (to receive specific routes and advertise summarized route) or you receive the summarized route from neighbour device?

What about the /32 host route - do you want to originate from PAN firewall, or you receive it from somewhere else along the summary route?

Re: Leak a specific route from BGP summarization

a-techie — Tue, 05 Apr 2022 17:11:18 GMT

@aleksandar.astardzhiev PAN is originating the the summarized /16 route(contributing routes coming from neighbours for this /16) and PAN receives /32 route from a neighbour. That /32 falls in the range of the /16 the PAN is originating and thus it get masked.

Re: Leak a specific route from BGP summarization

a-techie — Wed, 06 Apr 2022 12:21:45 GMT

Any help on this would be appreciated!

Re: Leak a specific route from BGP summarization

rmfalconer — Wed, 06 Apr 2022 18:17:56 GMT

Just to make sure we understand, do you have the /16 configured in the aggregate tab?

Have you tried adding the /32 to a redist rule? You would probably need to add that to your export rules unless you don't have an exact match on the /16.