AWS CLI version 2, the latest major version of AWS CLI, is now stable and recommended for general use. To view this page for the AWS CLI version 2, click here. For more information see the AWS CLI version 2 installation instructions and migration guide.
[ aws . directconnect ]
Creates a BGP peer on the specified virtual interface.
You must create a BGP peer for the corresponding address family (IPv4/IPv6) in order to access Amazon Web Services resources that also use that address family.
If logical redundancy is not supported by the connection, interconnect, or LAG, the BGP peer cannot be in the same address family as an existing BGP peer on the virtual interface.
When creating a IPv6 BGP peer, omit the Amazon address and customer address. IPv6 addresses are automatically assigned from the Amazon pool of IPv6 addresses; you cannot specify custom IPv6 addresses.
For a public virtual interface, the Autonomous System Number (ASN) must be private or already on the allow list for the virtual interface.
See also: AWS API Documentation
create-bgp-peer
[--virtual-interface-id <value>]
[--new-bgp-peer <value>]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]
[--debug]
[--endpoint-url <value>]
[--no-verify-ssl]
[--no-paginate]
[--output <value>]
[--query <value>]
[--profile <value>]
[--region <value>]
[--version <value>]
[--color <value>]
[--no-sign-request]
[--ca-bundle <value>]
[--cli-read-timeout <value>]
[--cli-connect-timeout <value>]
--virtual-interface-id
(string)
The ID of the virtual interface.
--new-bgp-peer
(structure)
Information about the BGP peer.
asn -> (integer)
The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration.authKey -> (string)
The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximun lenth of 80 characters.addressFamily -> (string)
The address family for the BGP peer.amazonAddress -> (string)
The IP address assigned to the Amazon interface.customerAddress -> (string)
The IP address assigned to the customer interface.
Shorthand Syntax:
asn=integer,authKey=string,addressFamily=string,amazonAddress=string,customerAddress=string
JSON Syntax:
{
"asn": integer,
"authKey": "string",
"addressFamily": "ipv4"|"ipv6",
"amazonAddress": "string",
"customerAddress": "string"
}
--cli-input-json
(string)
Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
--debug
(boolean)
Turn on debug logging.
--endpoint-url
(string)
Override command's default URL with the given URL.
--no-verify-ssl
(boolean)
By default, the AWS CLI uses SSL when communicating with AWS services. For each SSL connection, the AWS CLI will verify SSL certificates. This option overrides the default behavior of verifying SSL certificates.
--no-paginate
(boolean)
Disable automatic pagination. If automatic pagination is disabled, the AWS CLI will only make one call, for the first page of results.
--output
(string)
The formatting style for command output.
--query
(string)
A JMESPath query to use in filtering the response data.
--profile
(string)
Use a specific profile from your credential file.
--region
(string)
The region to use. Overrides config/env settings.
--version
(string)
Display the version of this tool.
--color
(string)
Turn on/off color output.
--no-sign-request
(boolean)
Do not sign requests. Credentials will not be loaded if this argument is provided.
--ca-bundle
(string)
The CA certificate bundle to use when verifying SSL certificates. Overrides config/env settings.
--cli-read-timeout
(int)
The maximum socket read time in seconds. If the value is set to 0, the socket read will be blocking and not timeout. The default value is 60 seconds.
--cli-connect-timeout
(int)
The maximum socket connect time in seconds. If the value is set to 0, the socket connect will be blocking and not timeout. The default value is 60 seconds.
To use the following examples, you must have the AWS CLI installed and configured. See the Getting started guide in the AWS CLI User Guide for more information.
Unless otherwise stated, all examples have unix-like quotation rules. These examples will need to be adapted to your terminal's quoting rules. See Using quotation marks with strings in the AWS CLI User Guide .
To create an IPv6 BGP peering session
The following example creates an IPv6 BGP peering session on private virtual interface dxvif-fg1vuj3d
. The peer IPv6 addresses are automatically allocated by Amazon.
Command:
aws directconnect create-bgp-peer --virtual-interface-id dxvif-fg1vuj3d --new-bgp-peer asn=64600,addressFamily=ipv6
Output:
{
"virtualInterface": {
"virtualInterfaceState": "available",
"asn": 65000,
"vlan": 125,
"customerAddress": "169.254.255.2/30",
"ownerAccount": "123456789012",
"connectionId": "dxcon-fguhmqlc",
"addressFamily": "ipv4",
"virtualGatewayId": "vgw-f9eb0c90",
"virtualInterfaceId": "dxvif-fg1vuj3d",
"authKey": "0xC_ukbCerl6EYA0example",
"routeFilterPrefixes": [],
"location": "EqDC2",
"bgpPeers": [
{
"bgpStatus": "down",
"customerAddress": "169.254.255.2/30",
"addressFamily": "ipv4",
"authKey": "0xC_ukbCerl6EYA0uexample",
"bgpPeerState": "available",
"amazonAddress": "169.254.255.1/30",
"asn": 65000
},
{
"bgpStatus": "down",
"customerAddress": "2001:db8:1100:2f0:0:1:9cb4:4216/125",
"addressFamily": "ipv6",
"authKey": "0xS27kAIU_VHPjjAexample",
"bgpPeerState": "pending",
"amazonAddress": "2001:db8:1100:2f0:0:1:9cb4:4211/125",
"asn": 64600
}
],
"customerRouterConfig": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<logical_connection id=\"dxvif-fg1vuj3d\">\n <vlan>125</vlan>\n <customer_address>169.254.255.2/30</customer_address>\n <amazon_address>169.254.255.1/30</amazon_address>\n <bgp_asn>65000</bgp_asn>\n <bgp_auth_key>0xC_ukbCerl6EYA0uexample</bgp_auth_key>\n <ipv6_customer_address>2001:db8:1100:2f0:0:1:9cb4:4216/125</ipv6_customer_address>\n <ipv6_amazon_address>2001:db8:1100:2f0:0:1:9cb4:4211/125</ipv6_amazon_address>\n <ipv6_bgp_asn>64600</ipv6_bgp_asn>\n <ipv6_bgp_auth_key>0xS27kAIU_VHPjjAexample</ipv6_bgp_auth_key>\n <amazon_bgp_asn>7224</amazon_bgp_asn>\n <connection_type>private</connection_type>\n</logical_connection>\n",
"amazonAddress": "169.254.255.1/30",
"virtualInterfaceType": "private",
"virtualInterfaceName": "Test"
}
}
virtualInterface -> (structure)
The virtual interface.
ownerAccount -> (string)
The ID of the Amazon Web Services account that owns the virtual interface.virtualInterfaceId -> (string)
The ID of the virtual interface.location -> (string)
The location of the connection.connectionId -> (string)
The ID of the connection.virtualInterfaceType -> (string)
The type of virtual interface. The possible values areprivate
,public
andtransit
.virtualInterfaceName -> (string)
The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-).vlan -> (integer)
The ID of the VLAN.asn -> (integer)
The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration.
The valid values are 1-2147483647.
amazonSideAsn -> (long)
The autonomous system number (ASN) for the Amazon side of the connection.authKey -> (string)
The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximun lenth of 80 characters.amazonAddress -> (string)
The IP address assigned to the Amazon interface.customerAddress -> (string)
The IP address assigned to the customer interface.addressFamily -> (string)
The address family for the BGP peer.virtualInterfaceState -> (string)
The state of the virtual interface. The following are the possible values:
confirming
: The creation of the virtual interface is pending confirmation from the virtual interface owner. If the owner of the virtual interface is different from the owner of the connection on which it is provisioned, then the virtual interface will remain in this state until it is confirmed by the virtual interface owner.verifying
: This state only applies to public virtual interfaces. Each public virtual interface needs validation before the virtual interface can be created.pending
: A virtual interface is in this state from the time that it is created until the virtual interface is ready to forward traffic.available
: A virtual interface that is able to forward traffic.down
: A virtual interface that is BGP down.deleting
: A virtual interface is in this state immediately after calling DeleteVirtualInterface until it can no longer forward traffic.deleted
: A virtual interface that cannot forward traffic.rejected
: The virtual interface owner has declined creation of the virtual interface. If a virtual interface in theConfirming
state is deleted by the virtual interface owner, the virtual interface enters theRejected
state.unknown
: The state of the virtual interface is not available.customerRouterConfig -> (string)
The customer router configuration.mtu -> (integer)
The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 8500. The default value is 1500jumboFrameCapable -> (boolean)
Indicates whether jumbo frames are supported.virtualGatewayId -> (string)
The ID of the virtual private gateway. Applies only to private virtual interfaces.directConnectGatewayId -> (string)
The ID of the Direct Connect gateway.routeFilterPrefixes -> (list)
The routes to be advertised to the Amazon Web Services network in this Region. Applies to public virtual interfaces.
(structure)
Information about a route filter prefix that a customer can advertise through Border Gateway Protocol (BGP) over a public virtual interface.
cidr -> (string)
The CIDR block for the advertised route. Separate multiple routes using commas. An IPv6 CIDR must use /64 or shorter.bgpPeers -> (list)
The BGP peers configured on this virtual interface.
(structure)
Information about a BGP peer.
bgpPeerId -> (string)
The ID of the BGP peer.asn -> (integer)
The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration.authKey -> (string)
The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximun lenth of 80 characters.addressFamily -> (string)
The address family for the BGP peer.amazonAddress -> (string)
The IP address assigned to the Amazon interface.customerAddress -> (string)
The IP address assigned to the customer interface.bgpPeerState -> (string)
The state of the BGP peer. The following are the possible values:
verifying
: The BGP peering addresses or ASN require validation before the BGP peer can be created. This state applies only to public virtual interfaces.pending
: The BGP peer is created, and remains in this state until it is ready to be established.available
: The BGP peer is ready to be established.deleting
: The BGP peer is being deleted.deleted
: The BGP peer is deleted and cannot be established.bgpStatus -> (string)
The status of the BGP peer. The following are the possible values:
up
: The BGP peer is established. This state does not indicate the state of the routing function. Ensure that you are receiving routes over the BGP session.down
: The BGP peer is down.unknown
: The BGP peer status is not available.awsDeviceV2 -> (string)
The Direct Connect endpoint that terminates the BGP peer.awsLogicalDeviceId -> (string)
The Direct Connect endpoint that terminates the logical connection. This device might be different than the device that terminates the physical connection.region -> (string)
The Amazon Web Services Region where the virtual interface is located.awsDeviceV2 -> (string)
The Direct Connect endpoint that terminates the physical connection.awsLogicalDeviceId -> (string)
The Direct Connect endpoint that terminates the logical connection. This device might be different than the device that terminates the physical connection.tags -> (list)
The tags associated with the virtual interface.
(structure)
Information about a tag.
key -> (string)
The key.value -> (string)
The value.siteLinkEnabled -> (boolean)
Indicates whether SiteLink is enabled.