https://live.paloaltonetworks.com/t5/prisma-access-discussions/prisma-access-service-infrastructure/m-p/516386#M412 <P>What happen if&nbsp; i use default BGP AS number 65534&nbsp; which will be use within Prisma Access infrastructure.</P> Thu, 29 Sep 2022 17:19:24 GMT Vishal_Mandliya 2022-09-29T17:19:24Z https://live.paloaltonetworks.com/t5/prisma-access-discussions/prisma-access-service-infrastructure/m-p/516386#M412 <P>What happen if&nbsp; i use default BGP AS number 65534&nbsp; which will be use within Prisma Access infrastructure.</P> Thu, 29 Sep 2022 17:19:24 GMT https://live.paloaltonetworks.com/t5/prisma-access-discussions/prisma-access-service-infrastructure/m-p/516386#M412 Vishal_Mandliya 2022-09-29T17:19:24Z https://live.paloaltonetworks.com/t5/prisma-access-discussions/prisma-access-service-infrastructure/m-p/517593#M414 <P>Magic happens <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> This private ASN for peering nothing more. Better read&nbsp; <A href="https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/prisma-access-service-infrastructure/set-up-the-prisma-access-service-infrastructure" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/prisma-access-service-infrastructure/set-up-the-prisma-access-service-infrastructure</A> as prisma access can use only private ASN even if it is not the default but for maybe complex designs multiple ASN can be used but I have not seen this.</P> <P>&nbsp;</P> <P>-------------------</P> <P>&nbsp;</P> <P>&nbsp;</P> <UL> <LI class="li step"> <DIV style="display: inline;"> <DIV style="display: inline;">Enter the <DIV style="display: inline;">Infrastructure BGP AS</DIV> you want to use within the Prisma Access infrastructure.</DIV> <DIV class="itemgroup info" data-label="ADDITIONAL INFORMATION"> <DIV style="display: inline;"> <DIV class="p"> <DIV style="display: inline;">If you want to enable dynamic routing so that Prisma Access can dynamically discover routes to resources in your remote networks and HQ or data center locations, you must use the Border Gateway Protocol (BGP). The <DIV style="display: inline;">Infrastructure BGP AS</DIV> is the autonomous system (AS) number that identifies the routes through which BGP can send traffic. If you do not supply an AS number, Prisma Access uses the default AS number (65534).</DIV> </DIV> <DIV class="p"> <DIV style="display: inline;">If you want to specify your own AS number, you must use an RFC 6996-compliant private AS number. Accepted formats are 4-Byte AS Plain [64512-65534],[4200000000-4294967294] or AS Dot [0.64512-0.65534], [64086.59904-65535.65534] notation.</DIV> </DIV> </DIV> </DIV> </DIV> </LI> </UL> <P>&nbsp;</P> <P>Maybe also if you already use this ASN on your systems for internal BGP you can change the default.</P> <P>&nbsp;</P> <P>Better also see this video for prima routing: <A href="https://www.youtube.com/watch?v=OqX_FiqIr2Y&amp;t=1310s" target="_blank" rel="noopener">https://www.youtube.com/watch?v=OqX_FiqIr2Y&amp;t=1310s</A> .</P> Wed, 12 Oct 2022 10:27:47 GMT https://live.paloaltonetworks.com/t5/prisma-access-discussions/prisma-access-service-infrastructure/m-p/517593#M414 nikoolayy1 2022-10-12T10:27:47Z