VPN subnets advertise into BGP

[ashafran]

Hi,

I have a VPN tunnel from my NSX Edge to a remote firewall. I need the subnets that are learned from the other end of the tunnel (remote subnets) to be redistributed into BGP but those routes aren't in the routing table so I can't redistribute them. Does anyone know how to get those routes into the routing table so that I can set this up?

[RShankar22]

If default Gateway is configured on your EDGE's , then you wont be able to see the IPSEC auto plumbed routes in your routing table.

Under VPN configuration you have to add IP under extension.

[RShankar22]

There are 2 workaround for this issue as below:

1. Remove the Default Gateway configuration from EDGE and add static default route and extension "securelocaltrafficbyip=0" under VPN.

2. Remove Default Gateway from EDGE and connected subnet one EDGE's as Local/Remote subnet for IPSEC VPN.

[RoelH]

Hi Ashafan,

Did you manage to get this working?

Thanks in advance.