To enable external connectivity, you can configure the IP prefix list and route map attributes in ingress or egress direction when you create or update BGP peer group.
efa tenant service bgp peer-group create --name <bgp-pg-name> --tenant <tenant-name> --pg-name <device-ip:pg-name> --pg-asn <device-ip,pg-name:remote-asn> --pg-bfd-enable <device-ip,pg-name:true|false> --pg-ipv4-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction> --pg-ipv4-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction> --pg-ipv6-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction> --pg-ipv6-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>
The following example configures IP prefix list and route map:
efa tenant service bgp peer-group create --name ten1bgppg1 --tenant ten1 --pg-name 10.20.246.15:pg1 --pg-asn 10.20.246.15,pg1:55001 --pg-bfd-enable 10.20.246.15,pg1:true --pg-ipv4-uc-nbr-prefix-list 10.20.246.15,pg1:ipPrefixList1,in --pg-ipv6-uc-nbr-prefix-list 10.20.246.15,pg1:ipPrefixList2,out --pg-ipv4-uc-nbr-route-map 10.20.246.15,pg1:routeMap2,in --pg-ipv6-uc-nbr-route-map 10.20.246.15,pg1:routeMap1,in --pg-name 10.20.246.16:pg1 --pg-asn 10.20.246.16,pg1:55001 --pg-bfd-enable 10.20.246.16,pg1:true --pg-ipv4-uc-nbr-prefix-list 10.20.246.16,pg1:ipPrefixList1,in --pg-ipv6-uc-nbr-prefix-list 10.20.246.16,pg1:ipPrefixList1,out --pg-ipv4-uc-nbr-route-map 10.20.246.16,pg1:routeMap1,in --pg-ipv6-uc-nbr-route-map 10.20.246.16,pg1:routeMap1,out
efa tenant service bgp peer-group update --name <bgp-pg-name> --tenant <tenant-name> --operation peer-group-add --pg-name <device-ip:pg-name> --pg-asn <device-ip,pg-name:remote-asn> --pg-bfd-enable <device-ip,pg-name:true|false> --pg-ipv4-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction> --pg-ipv4-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction> --pg-ipv6-uc-nbr-prefix-list <device-ip,pg-name:prefix-list-name,direction> --pg-ipv6-uc-nbr-route-map <device-ip,pg-name:route-map-name,direction>
The following example configures IP prefix list and route map:
efa tenant service bgp peer-group update --name ten1bgppg1 --tenant ten1 --operation peer-group-add --pg-name 10.20.246.15:pg2 --pg-asn 10.20.246.15,pg2:55002 --pg-bfd-enable 10.20.246.15,pg2:true --pg-ipv6-uc-nbr-prefix-list 10.20.246.15,pg2:ipPrefixList2,out --pg-ipv4-uc-nbr-route-map 10.20.246.15,pg2:routeMap2,in --pg-name 10.20.246.16:pg2 --pg-asn 10.20.246.16,pg2:55002 --pg-bfd-enable 10.20.246.16,pg2:true --pg-ipv6-uc-nbr-prefix-list 10.20.246.16,pg2:ipPrefixList1,out --pg-ipv4-uc-nbr-route-map 10.20.246.16,pg2:routeMap1,in
efa tenant service bgp peer-group show --detail =========================================== Name : ten1bgppg1 Tenant : ten1 State : bgp-pg-created Description : Peer Group ---------- Device IP : 10.20.246.16 Peer Group : pg1 Remote ASN : 65002 Next Hop Self : true Update Source IP : 10.20.30.40 BFD Enabled : true BFD Interval : 100 BFD Rx : 300 BFD Multiplier : 5 MD5 Password : $9$QxCvD7N6a0P96eT3BvnQfQ== Remove Private AS : true Prefix List In : Name (afi) ipPrefixList1 (ipv4) Prefix List Out : Name (afi) ipPrefixList1 (ipv6) Route Map In : Name (afi) routeMap1 (ipv4) Route Map Out : Name (afi) routeMap1 (ipv6) Send Community : both (ipv4) Dev State : provisioned App State : cfg-in-sync Device IP : 10.20.246.16 Peer Group : pg2 Remote ASN : 65002 Next Hop Self : true Update Source IP : 10.20.30.50 BFD Enabled : true BFD Interval : 100 BFD Rx : 300 BFD Multiplier : 5 MD5 Password : $9$QxCvD7N6a0P96eT3BvnQfQ== Remove Private AS : true Prefix List In : Prefix List Out : Name (afi) ipPrefixList1 (ipv6) Route Map In : Name (afi) routeMap1 (ipv4) Route Map Out : Send Community : both (ipv4) Dev State : provisioned App State : cfg-in-sync ====================================== |
======================================================== Device IP : 10.20.246.15 Peer Group : pg1 Remote ASN : 65002 Next Hop Self : true Update Source IP : 10.20.30.40 BFD Enabled : true BFD Interval : 100 BFD Rx : 300 BFD Multiplier : 5 MD5 Password : $9$QxCvD7N6a0P96eT3BvnQfQ== Remove Private AS : true Prefix List In : Name (afi) ipPrefixList1 (ipv4) Prefix List Out : Name (afi) ipPrefixList1 (ipv6) Route Map In : Name (afi) routeMap1 (ipv6) routeMap2 (ipv4) Send Community : both (ipv4) Dev State : provisioned App State : cfg-in-sync Device IP : 10.20.246.15 Peer Group : pg2 Remote ASN : 65002 Next Hop Self : true Update Source IP : 10.20.30.50 BFD Enabled : true BFD Interval : 100 BFD Rx : 300 BFD Multiplier : 5 MD5 Password : $9$QxCvD7N6a0P96eT3BvnQfQ== Remove Private AS : true Prefix List In : Prefix List Out : Name (afi) ipPrefixList1 (ipv6) Route Map In : Name (afi) routeMap1 (ipv4) Route Map Out : Send Community : both (ipv4) Dev State : provisioned App State : cfg-in-sync =============================================== |
Rack1-Device1# show running-config router bgp router bgp local-as 4200000000 capability as4-enable fast-external-fallover neighbor pg1 peer-group neighbor pg1 remote-as 65002 neighbor pg1 update-source 10.20.30.40 neighbor pg1 next-hop-self neighbor pg1 password $9$QxCvD7N6a0P96eT3BvnQfQ== neighbor pg1 remove-private-as neighbor pg1 bfd neighbor pg1 bfd interval 100 min-rx 300 multiplier 5 neighbor pg2 peer-group neighbor pg2 remote-as 65002 neighbor pg2 update-source 10.20.30.50 neighbor pg2 next-hop-self neighbor pg2 password $9$QxCvD7N6a0P96eT3BvnQfQ== neighbor pg2 remove-private-as neighbor pg2 bfd neighbor pg2 bfd interval 100 min-rx 300 multiplier 5 neighbor 10.20.20.4 remote-as 4200000000 neighbor 10.20.20.4 next-hop-self address-family ipv4 unicast network 172.31.254.214/32 network 172.31.254.228/32 neighbor pg2 route-map in routeMap2 neighbor pg1 prefix-list ipPrefixList1 in neighbor pg1 route-map in routeMap2 maximum-paths 8 graceful-restart ! address-family ipv6 unicast neighbor pg2 prefix-list ipPrefixList2 out neighbor pg1 prefix-list ipPrefixList2 out neighbor pg1 route-map in routeMap1 ! address-family l2vpn evpn graceful-restart ! ! |
Rack1-Device2# show running-config router bgp router bgp local-as 4200000000 capability as4-enable fast-external-fallover neighbor pg1 peer-group neighbor pg1 remote-as 65002 neighbor pg1 update-source 10.20.30.40 neighbor pg1 next-hop-self neighbor pg1 password $9$QxCvD7N6a0P96eT3BvnQfQ== neighbor pg1 remove-private-as neighbor pg1 bfd neighbor pg1 bfd interval 100 min-rx 300 multiplier 5 neighbor pg2 peer-group neighbor pg2 remote-as 65002 neighbor pg2 update-source 10.20.30.50 neighbor pg2 next-hop-self neighbor pg2 password $9$QxCvD7N6a0P96eT3BvnQfQ== neighbor pg2 remove-private-as neighbor pg2 bfd neighbor pg2 bfd interval 100 min-rx 300 multiplier 5 neighbor 10.20.20.5 remote-as 4200000000 neighbor 10.20.20.5 next-hop-self address-family ipv4 unicast network 172.31.254.214/32 network 172.31.254.246/32 neighbor pg2 route-map in routeMap1 neighbor pg1 prefix-list ipPrefixList1 in neighbor pg1 route-map in routeMap1 maximum-paths 8 graceful-restart ! address-family ipv6 unicast neighbor pg2 prefix-list ipPrefixList1 out neighbor pg1 prefix-list ipPrefixList1 out neighbor pg1 route-map out routeMap1 ! address-family l2vpn evpn graceful-restart ! ! |