topic BGP peering over virtual-wire interface in Next-Generation Firewall Discussions

BGP peering over virtual-wire interface

Memmed — Wed, 06 Sep 2023 10:32:47 GMT

Hello,

I have existing eBGP connection between 2 routers, layer3 connectivity is done with vlan going customer side and with /30 IP address they are peering.

My question is that if i pass this BGP peering on Palo-Alto firewall with Virtual-Wire interfaces. Will I be able to see the prefix customer side of peer announcing or will I only see the traffic originating from peering IP address.

Re: BGP peering over virtual-wire interface

PavelK — Thu, 07 Sep 2023 02:54:30 GMT

Hello @Memmed

thanks for posting.

You should be able to see prefixes advertised by customer. As long as BGP peer is established and there is no prefix filter in place vwire should not play any role in terms of how prefixes are advertised and received.

Kind Regards

Pavel

Re: BGP peering over virtual-wire interface

Memmed — Thu, 07 Sep 2023 04:16:56 GMT

@PavelK Thank you for the insight. Appreciate.