topic Advertised static route on BGP over IPSEC. in Next-Generation Firewall Discussions

Advertised static route on BGP over IPSEC.

ariiero — Sun, 07 Jul 2024 14:49:50 GMT

Hi all,

I have established BGP peer.

I've created redistribution profile with interface that i want to advertised to BGP

The subnet directly connected to interface could be reached/ appear in local RIB

My next objectives :

I have point-to-point from Palo interface 1/9 to Firepower ( my stagging room )

PTP 10.165.10.193 (PA) & 10.165.10.194 (Firepower)

I have subnet behind Firepower ( 192.168.1.x/24 want to advertised also to BGP)

I've created static routed destination 192.168.1.0/24 nexthop 10.165.10.194

But still the subnet 192.168.1.x/24 doesnt appear in Local RIB

What could i missed? please need your advice..

Thank you

Re: Advertised static route on BGP over IPSEC.

rmfalconer — Wed, 10 Jul 2024 04:44:37 GMT

Are you saying that 192.168.1.x/24 isn't advertising from the PA to it's BGP nieghbors?

What does your redist profile have configured?

Is the redist profile applied in the redist rules in the BGP configuration?

Do you have next-hop self configured?

Re: Advertised static route on BGP over IPSEC.

RomainSalmon — Thu, 25 Jul 2024 08:39:47 GMT

Hello

If the network 192.168.1.x/24 is located behind the Firepower. Then It should be the BGP peer located on the firepower announcing this network. Can you compare your routing table and your BGP local table on both equipments?

As it was said above my comment : Do you have next-hop self configured