Re: BGP & IPSec questions

Scratch that, just need to find out why I'm not broadcasting routes *to* Azure, I can see Azure's routes and can confirm that my local machines can route to them:

ryanb@ubnt:~$ show ip bgp
BGP table version is 4, local router ID is 10.0.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, l - labeled
              S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
    Network          Next Hop            Metric    LocPrf       Weight Path
*>  10.0.1.1/32      10.1.255.254         0                     0       65515 i
*>  10.1.0.0/16      10.1.255.254         0                     0       65515 i
*>  10.2.0.0/16      10.1.255.254         0                     0       65515 i

TCPDump on the vti0 interface, you can see packets go out, none return. Microsoft doesn't see any routes for me:

14:10:06.724959 IP 10-0-1-3-static.midco.net > 10-1-255-254-static.midco.net: ICMP echo request, id 10, seq 55980, length 40
14:10:11.722474 IP 10-0-1-3-static.midco.net > 10-1-255-254-static.midco.net: ICMP echo request, id 10, seq 55981, length 40
14:10:16.721608 IP 10-0-1-3-static.midco.net > 10-1-255-254-static.midco.net: ICMP echo request, id 10, seq 55982, length 40
14:10:21.722488 IP 10-0-1-3-static.midco.net > 10-1-255-254-static.midco.net: ICMP echo request, id 10, seq 55983, length 40

Here are my relevant configs now:

ryanb@ubnt# show policy
 prefix-list EXPORT-AS65501 {
     rule 10 {
         action permit
         description "Announce All Routes"
         prefix 0.0.0.0/0
     }
 }

ryanb@ubnt# show protocols bgp
 bgp 65501 {
     neighbor 10.1.255.254 {
         ebgp-multihop 4
         prefix-list {
             export EXPORT-AS65501
         }
         remote-as 65515
         soft-reconfiguration {
             inbound
         }
         update-source 10.0.1.1
     }
     parameters {
         no-fast-external-failover
         router-id 10.0.1.1
     }
     timers {
         holdtime 180
         keepalive 60
     }
 }