Migration BGP from SRX

TST.Support — Thu, 20 Aug 2020 08:09:20 GMT

I have to migration BGP configure from Juniper SRX to Paloalto but I don't know parameter meaning.

How I config it on Paloalto

Configure on Juniper is.

Policy

On BL JJJ egress mark BGP community for XXX-NEP and YYY-NEP.

Match condition by IP prefix:

IP from XXX-SEC set community = 65349:21120

IP from YYY-SEC set community = 65349:21020

Import Policy

IMPORT-FROM-NEP-DBUDC term XXX-NEP from protocol bgp

IMPORT-FROM-NEP-DBUDC term XXX-NEP from community commu-nep-xxx-dbudc

IMPORT-FROM-NEP-DBUDC term XXX-NEP then accept

IMPORT-FROM-NEP-DBUDC term YYY-NEP from protocol bgp

IMPORT-FROM-NEP-DBUDC term YYY-NEP from community commu-nep-yyy-dbudc

IMPORT-FROM-NEP-DBUDC term YYY-NEP then as-path-prepend 65349

IMPORT-FROM-NEP-DBUDC term YYY-NEP then accept

IMPORT-FROM-NEP-DBUDC term default then reject

Export Policy

EXPORT-TO-NEP-DBUDC term direct from protocol direct

EXPORT-TO-NEP-DBUDC term direct then accept

EXPORT-TO-NEP-DBUDC term 1 from protocol bgp

EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-xxx

EXPORT-TO-NEP-DBUDC term 1 then reject

EXPORT-TO-NEP-DBUDC term 2 from protocol bgp

EXPORT-TO-NEP-DBUDC term 2 from community commu-sec-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 2 then as-path-prepend 64645

EXPORT-TO-NEP-DBUDC term 3 from protocol bgp

EXPORT-TO-NEP-DBUDC term 3 from community commu-pe-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 3 then accept

Re: Migration BGP from SRX

azuniga — Thu, 20 Aug 2020 15:20:13 GMT

Hello @TST.Support

The Expedition migration tool does not migrate routing protocols due to the complexity of doing so, we will only migrate over static routes. If you would like to migrate over BGP during your cut over I would suggest you ask your questions in another part of our forum ( https://live.paloaltonetworks.com/t5/general-topics/bd-p/members_discuss ). But I can tell you everything you would like to migrate over from BGP can be done and is probably easier to do it from within the GUI section within the PAN. Good luck and I hope this helps.

topic Migration BGP from SRX in Expedition Discussions

Migration BGP from SRX

Re: Migration BGP from SRX