Hello all,
I have two border routers running the latest routeros v7. Each connects to a different upstream provider (let's name them A and B) and gets the full internet routing table from its peer provider via eBGP. The two routers are also interconeccted to each other and they also exchange the full table via iBGP, for failover purposes. Therefore, each border router has two routes for each prefix in its main routing table: one directly via its upstream provider and via the other upstream provider which uses the other border router as nexthop.
On top of this, I also get (on both border routers) a summarized 0.0.0.0/0 route, also via eBGP, from a DDOS protection service provider, lets name it Z.
I want each router to prefer routing the outgoing traffic via Z AND the internet to prefer routing the incoming traffic to my AS via Z too. In case the DDOS provider is down, I want traffic to flow through A or B.
Since the summary default route from Z had the same distance as the more specific routes from A and B, the more specific ones were preferred over the generic one. To change this, I added a routing filter which chages the distance of the default Z route from the default 20 to 10. The problem is that the routers still send outgoing traffic via A and B instead of the shorted distance Z. What am I doing wrong?
See the attached images of the top of each router's routing table. Why are the iBGP-obtained routes shown as "unreachable" on the first router (top image)?
Thank you for any help, it will be greatly appreciated!