BGP route map

yannick.ferry — Fri, 27 Oct 2023 08:41:29 GMT

Hello

Here is a simple use case.

I have 3 palo, on 3 DC, and for each DC i have a router from on ISP with one single /28 public IP network.

One computer can move from one DC to one DC. For exposed server, behind a NAT, i am trying to advertise using BGP the ISP to use PADC1, PADC2 or PADC3 as the next hope router.

My problem is BGP prefixes for exposed servers received in my Palo alto infrastructure are private /32 ip.

Based on this documentation (https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-networking-admin/advanced-routing/create-filters-for-the-advanced-routing-engine) i can set the public /32 ip for each private /32 ip in my prefixes with a BGP route-map, but it is not working. ISP receive the private /32 prefixes.

any advice on how to achive this ?

Thank you so much in advance.

Yannick

topic BGP route map in Next-Generation Firewall Discussions

BGP route map