Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 27 subscribers
  • Views 2564 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AWS tunnels and bgp

Jack Burghardt

I wonder if anyone help me setup ipsec  routing to aws. I setup 4 vpn tunnels to 2 searate aws instance my lab and I have two groups for ipsec tunnels. Connection is established  but I cant route traffic over vpn to aws. I also setup bgp and all neighbors is there a guide that will help me setup bgp to aws ? 



This thread was automatically locked due to age.
Parents
  • 0 in reply to Keyur

    Looks like two devices cant connect

     

    20/01/25 22:27:26 BGP: 169.254.247.153 [FSM] Timer (connect timer expire)
    2020/01/25 22:27:26 BGP: 169.254.247.153 [FSM] ConnectRetry_timer_expired (Active->Connect)
    2020/01/25 22:27:26 BGP: 169.254.247.153 [Event] Connect start to 169.254.247.153 fd 11
    2020/01/25 22:27:26 BGP: 169.254.247.153 [FSM] Non blocking connect waiting result
    2020/01/25 22:27:26 BGP: 169.254.247.153 went from Active to Connect
    2020/01/25 22:27:26 BGP: 169.254.247.153 [Event] Connect failed (Operation now in progress)
    2020/01/25 22:27:26 BGP: 169.254.247.153 [FSM] TCP_connection_open_failed (Connect->Active)
    2020/01/25 22:27:26 BGP: 169.254.247.153 went from Connect to Active
    2020/01/25 22:27:34 BGP: Import timer expired.
    2020/01/25 22:27:49 BGP: Import timer expired.
    2020/01/25 22:27:57 BGP: 169.254.152.181 [FSM] Timer (connect timer expire)
    2020/01/25 22:27:57 BGP: 169.254.152.181 [FSM] ConnectRetry_timer_expired (Active->Connect)
    2020/01/25 22:27:57 BGP: 169.254.152.181 [Event] Connect start to 169.254.152.181 fd 11
    2020/01/25 22:27:57 BGP: 169.254.152.181 [FSM] Non blocking connect waiting result
    2020/01/25 22:27:57 BGP: 169.254.152.181 went from Active to Connect
    2020/01/25 22:27:57 BGP: 169.254.152.181 [Event] Connect failed (Operation now in progress)
    2020/01/25 22:27:57 BGP: 169.254.152.181 [FSM] TCP_connection_open_failed (Connect->Active)
    2020/01/25 22:27:57 BGP: 169.254.152.181 went from Connect to Active
    2020/01/25 22:28:04 BGP: Import timer expired.
    2020/01/25 22:28:16 BGP: Performing BGP general scanning
    2020/01/25 22:28:16 BGP: scanning IPv4 Unicast routing tables
    2020/01/25 22:28:19 BGP: Import timer expired.
    2020/01/25 22:28:27 BGP: 169.254.118.153 [FSM] Timer (connect timer expire)
    2020/01/25 22:28:27 BGP: 169.254.118.153 [FSM] ConnectRetry_timer_expired (Active->Connect)
    2020/01/25 22:28:27 BGP: 169.254.118.153 [Event] Connect start to 169.254.118.153 fd 11
    2020/01/25 22:28:27 BGP: 169.254.118.153 [FSM] Non blocking connect waiting result
    2020/01/25 22:28:27 BGP: 169.254.118.153 went from Active to Connect
    2020/01/25 22:28:27 BGP: 169.254.118.153 [Event] Connect failed (Operation now in progress)
    2020/01/25 22:28:27 BGP: 169.254.118.153 [FSM] TCP_connection_open_failed (Connect->Active)
    2020/01/25 22:28:27 BGP: 169.254.118.153 went from Connect to Active
    2020/01/25 22:28:34 BGP: Import timer expired.

  • 0 in reply to Jack Burghardt

    My configuration file what am I missing ?

    bgp multiple-instance
    !
    router bgp 65000
    bgp router-id XX.XX.XX.XX 
    network 169.254.118.152/30
    network 169.254.152.180/30
    network 169.254.247.152/30
    network 169.254.253.44/30
    network 172.16.0.0/24
    network 172.16.30.0/24
    network 192.168.0.0/24
    network 192.168.1.0/24
    timers bgp 10 30
    neighbor 169.254.118.153 remote-as 64512
    neighbor 169.254.118.153 update-source XX.XX.XX.XX
    neighbor 169.254.118.153 advertisement-interval 60
    neighbor 169.254.118.153 timers 10 30
    neighbor 169.254.118.153 default-originate
    neighbor 169.254.152.181 remote-as 64512
    neighbor 169.254.152.181 update-source XX.XX.XX.XX
    neighbor 169.254.152.181 advertisement-interval 60
    neighbor 169.254.152.181 timers 10 30
    neighbor 169.254.152.181 default-originate
    neighbor 169.254.247.153 remote-as 64512
    neighbor 169.254.247.153 update-source XX.XX.XX.XX
    neighbor 169.254.247.153 advertisement-interval 60
    neighbor 169.254.247.153 timers 10 30
    neighbor 169.254.247.153 default-originate
    neighbor 169.254.253.45 remote-as 64512
    neighbor 169.254.253.45 update-source XX.XX.XX.XX
    neighbor 169.254.253.45 advertisement-interval 60
    neighbor 169.254.253.45 timers 10 30
    neighbor 169.254.253.45 default-originate
    maximum-paths 4
    !
    route-map aws permit 10
    !
    line vty
    no login
    !
    end

Reply
  • 0 in reply to Jack Burghardt

    My configuration file what am I missing ?

    bgp multiple-instance
    !
    router bgp 65000
    bgp router-id XX.XX.XX.XX 
    network 169.254.118.152/30
    network 169.254.152.180/30
    network 169.254.247.152/30
    network 169.254.253.44/30
    network 172.16.0.0/24
    network 172.16.30.0/24
    network 192.168.0.0/24
    network 192.168.1.0/24
    timers bgp 10 30
    neighbor 169.254.118.153 remote-as 64512
    neighbor 169.254.118.153 update-source XX.XX.XX.XX
    neighbor 169.254.118.153 advertisement-interval 60
    neighbor 169.254.118.153 timers 10 30
    neighbor 169.254.118.153 default-originate
    neighbor 169.254.152.181 remote-as 64512
    neighbor 169.254.152.181 update-source XX.XX.XX.XX
    neighbor 169.254.152.181 advertisement-interval 60
    neighbor 169.254.152.181 timers 10 30
    neighbor 169.254.152.181 default-originate
    neighbor 169.254.247.153 remote-as 64512
    neighbor 169.254.247.153 update-source XX.XX.XX.XX
    neighbor 169.254.247.153 advertisement-interval 60
    neighbor 169.254.247.153 timers 10 30
    neighbor 169.254.247.153 default-originate
    neighbor 169.254.253.45 remote-as 64512
    neighbor 169.254.253.45 update-source XX.XX.XX.XX
    neighbor 169.254.253.45 advertisement-interval 60
    neighbor 169.254.253.45 timers 10 30
    neighbor 169.254.253.45 default-originate
    maximum-paths 4
    !
    route-map aws permit 10
    !
    line vty
    no login
    !
    end

Children