topic Prisma SDWAN BGP route redistribution in Prisma SD-WAN Discussions

Prisma SDWAN BGP route redistribution

KenFullarton — Wed, 30 Oct 2024 14:25:10 GMT

I have a datacenter ION9k that is connected via standard VPN to AWS. On another connection I have a PA-1400 series firewall. The connections look something like this:

PA-1400 (AS 65002) -- DC ION (AS 65003) -- AWS VPN (AS 65417)

The ION receives routes from from AWS and from the PA-1400. The problem I'm having is that the ION is not advertising the routes it learns from AWS to the PA-1400 and vice versa. Any ideas on what's causing this is appreciated.

Re: Prisma SDWAN BGP route redistribution

CC1234 — Thu, 05 Dec 2024 16:39:32 GMT

Do you have them set as Global?

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-branch-and-data-center-routing/configure-dynamic-routing/configure-bgp-global-parameters

Branch ION devices can learn or advertise prefixes based on the scope configured. A branch ION device does not advertise routes learned on one BGP peer to another BGP peer. The device advertises only LAN networks, static routes, and interface addresses. To advertise any of these prefixes, set the Scope to Global when configuring a BGP peer.

Re: Prisma SDWAN BGP route redistribution

KenFullarton — Thu, 05 Dec 2024 16:43:49 GMT

This issue has been resolved and was caused by the default, auto-generated route map on the ION9k. Once that was updated with a custom route map, prefixes started getting exchanged between the devices in question.