HP VPN Firewall Appliances Network Management Configuration Guide

520
10.220.2.16/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
172.17.100.0/24 Direct 0 0 172.17.100.2 GE0/2
172.17.100.2/32 Direct 0 0 127.0.0.1 InLoop0
192.168.64.0/18 BGP 130 0 127.0.0.1 NULL0
192.168.64.0/24 O_ASE 150 1 172.17.100.1 GE0/2
192.168.74.0/24 O_ASE 150 1 172.17.100.1 GE0/2
192.168.99.0/24 O_ASE 150 1 172.17.100.1 GE0/2
The output shows that Firewall has a summary route 192.168.64.0/18 with the output interface
Null0.
# Display the IP routing table information on Router C.
[RouterC] display ip routing-table
Routing Tables: Public
Destinations : 6 Routes : 6
Destination/Mask Proto Pre Cost NextHop Interface
4.4.4.4/32 Direct 0 0 127.0.0.1 InLoop0
10.220.2.0/24 Direct 0 0 10.220.2.217 GE0/1
10.220.2.217/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
192.168.64.0/18 BGP 255 0 10.220.2.16 GE0/1
The output shows that Router C has only one route 192.168.64.0/18 to AS 65106.
After the above configurations, ping the hosts on subnets 192.168.64.0/24, 192.168.74.0/24
and 192.168.99.0/24 from Router C. The ping operations succeed.
BGP community configuration example
Network requirements
As shown in Figure 301, EBGP runs between Router B and Firewall, and between Router B and Router A.
Configure NO_EXPORT community attribute on Firewall to make routes from AS 10 not advertised by AS
20 to any other AS.
Figure 301 Network diagram