Question

An on-premises Cisco IOS XE router terminates a route-based IPsec VTI tunnel to an Azure VPN Gateway. BGP is running across the tunnel. The network team wants all Azure-hosted VMs to reach the internet through the on-premises perimeter firewall by learning a default route dynamically from the IOS XE router, without adding any static routes on the Azure side. Which IOS XE BGP configuration achieves this?

Accepted Answer

Configure 'neighbor <azure-ip> default-originate' under the BGP address-family so the router advertises 0.0.0.0/0 to the Azure VPN Gateway

Answer

Add a 'network 0.0.0.0 mask 0.0.0.0' statement and expect the Azure Gateway to accept it as a summary

Answer

Redistribute a static route to Null0 for 0.0.0.0/0 into BGP without any route-map filtering

Answer

Configure 'neighbor <azure-ip> next-hop-self' so Azure installs the tunnel endpoint as its default gateway