Hi All...

I'm sure I'm just dense, which is the reason I need to ask. I'm trying to configure some route filters for BGP, specifically the output chain. I got a BGP session up between my two routers, and they are advertising routes between the two of them. I want to put some filters in place that make sure only the routes I want are advertised on the output... However, once I select my output filter, my second router no longer sees the routes from the first router. What am I doing wrong?

I've tried a couple different things, and they both have the same results:
However, once I select this filter under BGP Connection, I select under "Output Filter" my "bgp-out" the routes are no longer advertised. What am I doing wrong? Thanks!

maybe unintuitive.

for BGP the default is to accept all routes, but for filters the default is to reject all routes.
when you did not set a filter yet for the BGP connection, it will by default receive and send everything, but as soon as you set a filter it will by default reject everything.
if you want to accept all even with a filter set, create that filter with rule="accept"

Did you select output-network in the BGP connection?

maybe unintuitive.

for BGP the default is to accept all routes, but for filters the default is to reject all routes.
when you did not set a filter yet for the BGP connection, it will by default receive and send everything, but as soon as you set a filter it will by default reject everything.
if you want to accept all even with a filter set, create that filter with rule="accept"

Doesn't this rule say to accept?
add chain=bgp-out comment="Management Network" disabled=no rule="if ( dst==172.16.0.0/22) { accept }"

Did you select output-network in the BGP connection?

I tried that and it didn't seem to make a difference...

What you have there would only accept one specific route: to the network 172.16.0.0/22
Any routes for subnets of that network would not be accepted, and due to the fact that the default is reject, will not pass through.

Probably you meant something like: if (dst in 172.16.0.0/22)