Hey all! Newcomer to the EdgeRouter party, and I'm attempting to set up a dynamic-routing tunnel to Microsoft Azure while implementing BGP. See documentation here from Microsoft. I have the IPSec tunnel working with a vti, which is great, now I'm moving to implement BGP to automatically update routes when I add subnets in Azure, etc.
BGP gets all the way to OpenConfirm (connection is established but the BGP session isn't quite up yet), and that's as much as it goes. Routes never populate, either side can't see the other, etc.
Please let me know what I'm doing wrong here, and if you need anything else, please let me know!
Details of the connection (identifying information obfuscated for obvious reasons):
Local IP: 1.1.1.1
Azure IP: 2.2.2.2
Local AS: 65501
Azure AS: 65515
Local Subnet: 10.0.1.0/24
Azure Subnet 10.1.0.0/16
Local BGP Address: 10.0.0.1 (vti0)
Azure BGP Address 10.1.255.254
ryanb@ubnt# show vpn
ipsec {
auto-firewall-nat-exclude enable
disable-uniqreqids
esp-group esp-azure {
compression disable
lifetime 3600
mode tunnel
pfs disable
proposal 1 {
encryption aes256
hash sha1
}
}
ike-group ike-azure {
ikev2-reauth no
key-exchange ikev2
lifetime 28800
proposal 1 {
dh-group 2
encryption aes256
hash sha1
}
}
ipsec-interfaces {
interface vti0
}
nat-traversal enable
site-to-site {
peer 2.2.2.2 {
authentication {
mode pre-shared-secret
pre-shared-secret [key]
}
connection-type respond
default-esp-group esp-azure
ike-group ike-azure
ikev2-reauth inherit
local-address 1.1.1.1
vti {
bind vti0
esp-group esp-azure
}
}
}
}
ryanb@ubnt# show interfaces vti
vti vti0 {
address 10.0.0.1/32
description "Azure VPN Tunnel"
mtu 1436
}
ryanb@ubnt# show policy prefix-list EXPORT-AS65501
rule 10 {
action permit
description "Announce 10.0.1.0/24"
prefix 10.0.1.0/24
}
ryanb@ubnt# show protocols bgp
bgp 65501 {
neighbor 10.1.255.254 {
prefix-list {
export EXPORT-AS65501
}
remote-as 65515
soft-reconfiguration {
inbound
}
update-source 10.0.0.1
}
parameters {
router-id 10.0.0.1
}
}
ryanb@ubnt:~$ show ip bgp summary
BGP router identifier 10.0.0.1, local AS number 65501
BGP table version is 1
0 BGP AS-PATH entries
0 BGP community entries
Neighbor V AS MsgRcv MsgSen TblVer InQ OutQ Up/Down State/PfxRcd
10.1.255.254 4 65515 681 1433 0 0 0 never OpenConfirm
Total number of neighbors 1
Total number of Established sessions 0