Configure Routing for Multiple Hubs in a Route-based VPN

Step 1

Configure dynamic routing for the hub using BGP.

1. Choose Device > Device Management > Routing.

2. On the left pane, choose General Settings > BGP.

3. Check the Enable BGP check box and enter the AS number.

   You can configure the other fields as per your requirement.

4. Click Save.

5. On the left pane, choose BGP > IPv4.

6. Check the Enable IPv4 check box.

7. Click the Neighbor tab, click Add and configure the parameters.

   1. IP Address: Enter the tunnel interface IP address of Spoke 1.

   2. Remote AS: AS number of Spoke 1.

   3. Check the Enabled Address check box.

   4. Click OK.

   Repeat the above steps to add Spoke 2 as a neighbor.

8. Click Save.

9. Click the Networks tab and click Add to advertise the network behind the hub to the peers.

Step 2

Configure dynamic routing for the spokes using BGP.

Step 3

Configure Policy Based Routing on the spokes.

1. On the left pane, choose Policy Based Routing and click Add.

2. Choose the Ingress Interface from the drop-down list.

3. Click Add to configure a Match ACL.

   For example, for spoke 1, source network is 192.168.20.0/24 and destination network is 192.168.10.0/24.

4. Choose Egress Interfaces from the Send to drop-down list.

5. Choose Order from the Interface Ordering drop-down list.

6. Select the SVTI-1 and SVTI-2 interfaces as the egress interfaces.

7. Click Save.

Step 4

Deploy the configurations on the hub and spokes.