Configuring IPv4 Route Redistribution to BGP in Gaia Clish

Important - In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

You can configure IPv4 route redistribution in Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

To see the available "set" commands for IPv4 Route Redistribution to a BGP Peer AS, enter in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Clish:

set route-redistribution to bgp-as[Esc][Esc]

To see the configured IPv4 Route Redistribution to a BGP Peer AS, enter in Gaia Clish:

show configuration route-redistribution[Esc][Esc]

These commands let you configure a policy for exporting routes to a BGP Peer AS.

Syntax to add redistribution to BGP Peer AS from - Kernel

set route-redistribution to bgp-as <BGP Group AS> from kernel

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 or IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - RIP

set route-redistribution to bgp-as <BGP Group AS> from rip

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - OSPFv2

set route-redistribution to bgp-as <BGP Group AS> from ospf2 [instance <OSPF Instance>]

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - OSPFv2 External

set route-redistribution to bgp-as <BGP Group AS> from ospf2ase [instance <OSPF Instance>]

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - BGP Based on AS-Path

set route-redistribution to bgp-as <BGP Group AS> from bgp-as-path <Regular Expression>

origin {any | IGP | EGP | incomplete}

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 or IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - BGP Based on AS

set route-redistribution to bgp-as <BGP Group AS> from bgp-as-number <AS Number 1-65535>

all-ipv4-routes

[metric {<0-4294967295> | default}] on

off

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv4 or IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type range between <Start Mask Length> and <End Mask Length> on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - RIPng

set route-redistribution to bgp-as <BGP Group AS> from ripng

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - OSPFv3

set route-redistribution to bgp-as <BGP Group AS> from ospf3 [instance <OSPF Instance>]

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type refines on

off

Syntax to add redistribution to BGP Peer AS from - OSPFv3 External

set route-redistribution to bgp-as <BGP Group AS> from ospf3ase [instance <OSPF Instance>]

all-ipv6-routes

[metric {<0-4294967295> | default}] on

off

network <IPv6 Address>/<Mask Length> on

[metric {<0-4294967295> | default}] on

action {accept | restrict}

match-type exact on

match-type normal on

match-type refines on

off

Parameters

The parameters are sorted alphabetically.

Parameter	Description
`[metric {<0-4294967295> \| default}] on`	Enables redistribution of routes into BGP.
`action {accept \| restrict}`	Configures whether to accept or reject (`restrict`) this route.
`all-ipv6-routes off`	Disables the redistribution of all IPv6 routes from this protocol.
`all-ipv6-routes on`	Enables the redistribution of all IPv6 routes from this protocol.
`all-ipv4-routes off`	Disables the redistribution of all IPv4 routes from this protocol.
`all-ipv4-routes on`	Enables the redistribution of all IPv4 routes from this protocol.
`community-append <Community ID 1-65535> as <AS Number 1-65535> {off \| on}`	Appends a BGP Community to routes exported through this rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session..
`community-match <Community ID 1-65535> as <AS Number 1-65535> {off \| on}`	Applies this redistribution rule only to BGP routes, whose BGP Community attribute contains a specified Community.
`from aggregate {...} off`	Disables redistribution of this aggregate route into BGP.
`from aggregate {all-ipv4-routes \| <IPv4 Address>/<Mask Length>}`	Configures the IPv4 aggregate route to redistribute into BGP. `all-ipv4-routes` - Causes all aggregate routes to match the rule and be redistributed into BGP. `<IPv4 Address>/<Mask Length>` - Causes only the specified route to match the rule and be redistributed into BGP. Range: Dotted-quad ([0-255].[0-255].[0-255].[0-255] / [0-32]) Default: None
`from bgp-as-number <AS Number 1-65535>`	Configures the redistribution of BGP routes based on the AS Number.
`from bgp-as-path <Regular Expression>`	Configures the redistribution of BGP routes based on the AS-Path attribute. A valid AS_PATH regular expression contains only digits and these special characters: . - The period character matches any single character. \ - The backslash character matches the character right after the backslash. For pattern recall, match the pattern indicated by the digit following the backslash. To enter the backslash character, enter two backslash characters `\\` (the first backslash character escapes the second backslash character). ^ - The circumflex character matches the characters or null string at the beginning of the AS path. $ - The dollar character matches the characters or null string at the end of the AS path. ? - The question mark matches zero or one occurrence of the pattern before "`?`". To enter the question mark, press the CTRL V keys and then press the Shift ? keys. * - The asterisk character matches zero or more occurrences of the pattern before "``". + - The plus character matches one or more occurrences of the pattern before "`+`". \| - The pipeline (vertical line) character matches one of the patterns on either side of the "`\|`" character. _ - The underscore character matches comma (`,`), left brace (`{`), right brace (`}`), beginning of ASPath (`^`), end of ASPath (`$`), or a whitespace (space or tabulation). [ ]* - The square brackets match the set of characters or range of characters separated by a hyphen (`-`) within the brackets. ( ) - The round brackets group one or more patterns into a single pattern. {m n} - Matches at least "`m`" and at most "`n`" repetitions of the pattern before "`{m,n}`". Both "`m`" and "`n`" are positive integers, and "`m`" is less than or equal to "`n`". {m} - Matches exactly "`m`" repetitions of the pattern before "`{m}`". The "`m`" is a positive integer. {m,} - Matches "`m`" or more repetitions of the pattern before "`{m}`". The "`m`" is a positive integer.
`from default-origin`	Configures the redistribution of all IPv4 routes into BGP.
`from interface <Name of Interface>`	Configures the redistribution of all directly connected routes from the specified interface to the given BGP AS.
`from interface <Name of Interface> off`	Disables redistribution of routes from this interface into BGP.
`from kernel`	Configures the redistribution of OS kernel routes.
`from ospf2 [instance <OSPF Instance>]`	Configures the redistribution of IPv4 OSPFv2 routes (from the specified OSPF instance).
`from ospf2ase [instance <OSPF Instance>]`	Configures the redistribution of IPv4 OSPFv2 External routes (from the specified OSPF instance).
`from rip`	Configures the redistribution of IPv4 RIP routes.
`from ripng`	Configures the redistribution of IPv6 RIPng routes.
`from static-route {...} off`	Disables redistribution of this static route into BGP.
`from static-route {all-ipv4-routes \| all-ipv6-routes \| default \| default6}`	Configures the redistribution of static routes to the given BGP AS: `all-ipv4-routes` - Matches all IPv4 static routes. `all-ipv6-routes` - Matches all IPv6 static routes. `default` - Matches the default IPv4 static route. `default6` - Matches the default IPv6 static route.
`from nat-pool {all-ipv4-routes \| all-ipv6-routes \| <IP Address>/<Mask Length>}`	Configures the redistribution of NAT Pools. See NAT Pools. `all-ipv4-routes` - Matches all IPv4 NAT Pools. `all-ipv6-routes` - Matches all IPv6 NAT Pools `<IP Address>/<Mask Length>` - Matches only the specified NAT Pool.
`localpref {0-4294967295 \| default}`	Configures the local BGP route preference value, when routes are redistributed into BGP. The greater the local preference, the more preferred is the route.
`match-type exact on`	Matches only routes with prefix and mask length exactly equal to the specified network.
`match-type normal on`	Matches any route contained within the specified network.
`match-type range between <Start Mask Length> and <End Mask Length> on`	Matches any route with prefix equal to the specified network, whose mask length falls within a particular range.
`match-type refines on`	Matches only routes that are contained within, but more specific than, the specified network. For example, with a greater mask length.
`med {0-4294967295 \| default}`	Configures the cost (Multi-Exit Discriminator) of using this route.
`metric {<0-4294967295> \| default}`	Optional. Assigns the BGP metric to be added to routes redistributed through this rule. The metric in BGP is the Multi-Exit Discriminator (MED), used to break ties between routes with equal preference from the same neighboring Autonomous System. Lower MED values are preferred, and routes with no MED tie with a MED value of 0 for most preferred. Range: 0-4294967295, or default Default: No metric
`network <IPv4 or IPv6 Address>/<Mask Length> off`	Disables redistribution of the specified network routes into BGP.
`network <IPv4 or IPv6 Address>/<Mask Length> on`	Enables redistribution of the specified network routes into BGP.
`origin {any \| IGP \| EGP \| incomplete}`	Configures the route origin: `any` - A route was learned from any protocol and the path is probably complete. `IGP` - A route was learned from an interior routing protocol and the path is probably complete. `EGP` - A route was learned from an exterior routing protocol that does not support AS-PATH, and the path is probably incomplete. `incomplete` - The route path information is incomplete.
`set route-redistribution to bgp-as <BGP Group AS>`	Configures the Autonomous System of the BGP Group.
`set route-redistribution to bgp-as <BGP Group AS> off`	Disables all route redistribution to this protocol.

Examples

Redistribute all IPv4 default routes into BGP AS 100, and assign the cost of 10 to them.

set route-redistribution to bgp-as 100 from default-origin all-ipv4-routes metric 10 on

Redistribute all the static routes into the BGP AS 100:

set route-redistribution to bgp-as 100 from static-route all-ipv4-routes on

Redistribute all IPv4 static routes into BGP AS 100, and assign the cost of 1 to them.

set route-redistribution to bgp-as 100 from static-route all metric 1 on

Assign the BGP local preference of 100 to routes redistributed into BGP AS 100:

set route-redistribution to bgp-as 100 localpref 100