BGP Routing

BGP routing is a singleton configuration that controls backbone routing behavior for SASE deployments. The scm CLI provides commands to configure, view, and reset BGP routing settings.

Overview

The bgp-routing commands allow you to:

• Configure backbone routing mode (symmetric or asymmetric)
• Set routing preferences and outbound route policies
• Enable route acceptance over service connections
• Reset BGP routing configuration to defaults

Set BGP Routing

Create or update the BGP routing configuration.

Syntax

scm set sase bgp-routing [OPTIONS]

Options

Option	Description	Required
--backbone-routing TEXT	Backbone routing mode (no-asymmetric-routing, asymmetric-routing-only, asymmetric-routing-with-load-share)	Yes
--routing-preference TEXT	Routing preference (default, hot_potato_routing)	No
--accept-route-over-sc	Accept routes over service connections	No
--outbound-routes TEXT	Comma-separated outbound routes for services	No
--add-host-route-to-ike-peer	Add host route to IKE peer	No
--withdraw-static-route	Withdraw static routes	No

Examples

Configure Basic BGP Routing

$ scm set sase bgp-routing \
    --backbone-routing no-asymmetric-routing \
    --routing-preference default
---> 100%
Updated BGP routing configuration

Configure BGP Routing with Service Connection Routes

$ scm set sase bgp-routing \
    --backbone-routing no-asymmetric-routing \
    --routing-preference default \
    --accept-route-over-sc \
    --add-host-route-to-ike-peer
---> 100%
Updated BGP routing configuration

Configure Asymmetric Routing with Outbound Routes

$ scm set sase bgp-routing \
    --backbone-routing asymmetric-routing-only \
    --outbound-routes "10.0.0.0/8,172.16.0.0/12" \
    --withdraw-static-route
---> 100%
Updated BGP routing configuration

Delete BGP Routing

Reset BGP routing configuration to defaults.

Syntax

scm delete sase bgp-routing [OPTIONS]

Options

Option	Description	Required
--force	Skip confirmation prompt	No

Example

$ scm delete sase bgp-routing --force
---> 100%
Reset BGP routing configuration to defaults

Show BGP Routing

Display the current BGP routing configuration.

Syntax

scm show sase bgp-routing [OPTIONS]

Options

Option	Description	Required
--output, -o [table|json|yaml]	Output format (default: table)	No

Example

$ scm show sase bgp-routing
---> 100%
BGP Routing Configuration:
  Backbone Routing: no-asymmetric-routing
  Routing Preference: default
  Accept Route Over SC: true
  Add Host Route to IKE Peer: true
  Withdraw Static Route: false

Best Practices

1. Use Symmetric Routing by Default: Start with no-asymmetric-routing to ensure predictable traffic paths and simplify troubleshooting.
2. Enable Service Connection Routes Carefully: Only enable --accept-route-over-sc when you need dynamic route exchange over service connections.
3. Plan Outbound Routes: Document all outbound routes before configuring them to avoid unintended traffic flows through the SASE backbone.
4. Test Before Production: Use scm show sase bgp-routing to verify configuration changes before committing them to production.