Verify on the Gateway

Verify BGP configuration, peer status, route advertisements, and failover behavior on the active cluster member.

On a cluster, run the verification commands on the active member.

Verify on the Gateway

  1. Run:
    show configuration bgp
                                                show configuration routemaps

    Confirm that the import route maps contain the primary and secondary preference values, both peers reference their export route maps, and the secondary export route map contains action aspath-prepend-count.

  2. Run:
    show bgp peers

    Confirm that both peers have the Established state. The secondary peer shows ActRts 0. Its routes are received but not selected because the import route map prefers the primary.

  3. Run:
    show bgp peers adj-rib-out aspath

    Confirm that the LAN prefix shows a longer AS path to the secondary peer than to the primary peer. For example, with aspath-prepend-count 3, the primary receives the prefix with a single AS hop and the secondary receives it with the AS repeated three times.

  4. Send bidirectional site-to-site traffic.

    Confirm that traffic is symmetric on the primary region. The response returns on the same tunnel on which the request arrived, and intermittent drops are gone.

  5. Test failover.

    Disable the primary tunnel and confirm that traffic moves to the secondary region. Restore the primary tunnel and confirm that traffic returns to the primary region.