Question

A network engineer has built two IPsec VTI tunnels from an on-premises Cisco IOS XE router to a single Azure VPN Gateway (active-active) and established eBGP over both tunnels. The on-premises router advertises the same on-prem prefix 10.10.0.0/16 over both tunnels. Azure is load-balancing return traffic across both tunnels, but the engineer wants Azure to prefer Tunnel 1 for all return traffic to 10.10.0.0/16, keeping Tunnel 2 purely as backup. Which action on the IOS XE router achieves this influence over Azure's inbound path selection?

Accepted Answer

Apply an outbound route-map on the Tunnel 2 BGP neighbor that sets a higher MED (metric) for 10.10.0.0/16

Answer

Apply an outbound route-map on the Tunnel 1 BGP neighbor that sets a higher local-preference for 10.10.0.0/16

Answer

Configure a higher BGP weight for the Tunnel 1 neighbor on the IOS XE router

Answer

Increase the OSPF cost on Tunnel 2 and redistribute the prefix into BGP