Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

FlexVPN using eBGP

I am trying to configure FlexVPN using eBGP. The only way I can get it to work is to use the remote AS of one of the spokes. Is there a workaround for this? Or do I need to remove the address pool and number each tunnel myself?

router bgp 65511

bgp listen range peer-group SPOKES

neighbor SPOKES peer-group

neighbor SPOKES remote-as 65432

neighbor SPOKES update-source Loopback100

neighbor SPOKES next-hop-self all

neighbor SPOKES timers 5 15

neighbor SPOKES soft-reconfiguration inbound

Everyone's tags (3)
Cisco Employee

HiI might be missing the


I might be missing the question, so sorry to answer with a question.

Are all spokes going to be in the same AS?

I believe that your config will allow everything in to peer with AS 65432, but if you need a different AS then you could change the list range.

If i've missed the point, please feel free to PM me.




Community Member

Hello, and thank you for the

Hello, and thank you for the response. Each spoke is in a different AS. But in the mean time I found the "local-as" and "remote-as" will solve the problem. So at this point, I have one last problem to solve, routing. Do you have any experience with BGP in FlexVPN?

Cisco Employee

Hi What's the routing issue


What's the routing issue that you have?



Community Member

We have a MPLS network with a

We have a MPLS network with a Internet tunnel network for backup. There are times we want to force some traffic over the tunnels instead of MPLS. So I want to force a route between two spokes.

Cisco Employee

HiSo if i read you correctly


So if i read you correctly - you want this spoke-spoke tunnel to only come up at certain times?

You have the options of

1. run NHRP - so basically implement DMVPN style for the 'interesting' traffic. (i'm not sure if this is what you need as you can't base this on time)

2. use flexvpn client feature, tie this to an SLA or similar using the connect track command.


check this for more info on the tracking feature;



CreatePlease to create content