BGP with AWS transit gateway
This is a follow up from: https://community.fortinet.com/t5/Support-Forum/AWS-IPSEC-on-BGP-routing-how-to-control-traffic-preference-for/td-p/279609
And now my issue is that I have connected the BGP with the VPCs but the routes in between are not being accepted by AWS TGW.
This is my situation, from Brazil and Virginia, I need to pass on their routes to Desarrollo. I have the prefix list, the route maps, all the jazz.
But for the life of me, I cannot find WHY Desarrollo does NOT show those routes.
- I can see the routes that set in the "Networks" section being propagated and see them also on the TGW route table.
- I can see the routes from BOTH, Brazil and Virginia being propagated, but they are NOT on the TGW.
I thought it was the prefix list, set it to Permit ANY, still nothing.
The team I work for had the idea of enabling back the static routes on the firewall and use the Redistribute: Static. And ONLY then, the routes appeared on Desarrollo.
Yes, already raised a ticket with support. I know, maybe it is just some dumb thing I don´t see, no expert, I still call myself a newbie on this.
After sleepless nights found this while troubleshooting: https://community.fortinet.com/t5/FortiGate/Technical-Tip-BGP-with-AWS-transit-gateway/ta-p/287684
Now, my question, that tech tip above does not mention that all devices on the BGP group should have the same AS number, so my question is, and with the graphic above, does that mean that my firewall AS has to match the AWS TGW AS? Is that all the issue???
I say it because I was introduced to the concept of iBGP and eBGP. Apparently I´m doing eBGP but for what I have read, I´m supposed to do iBGP?
I´m lost and confused, please help.
