A BGP aggregate for a cloud range is installed and works. One subnet inside that range fails. A more specific static route points that subnet at a tunnel that is down. What is overriding BGP?
Select an answer to reveal the explanation.
Short Explanation
The big map is right, and a sticky note for one street sends you into a closed tunnel. You remove that more specific static route so the subnet follows the BGP aggregate. The aggregate is working, which is why every other subnet in the range succeeds.
Full Explanation
Longest-match routing prefers the more specific static over the BGP aggregate, whatever the administrative distance of the aggregate. This static points at a down tunnel, so only that subnet fails. Remove it, or point it at a live tunnel if the subnet truly needs a different path. The BGP aggregate is less specific, so it cannot override the static. The virtual private gateway is not injecting an OSPF route for the subnet. The IKE lifetime does not create static routes. Exam caveat: if the static was meant to steer that subnet somewhere better, give it a live next hop instead of deleting the only path you still need. Operational check: show ip route for the failing subnet should follow the BGP aggregate, and a host in that subnet should answer.