topic Re: BGP on two virtual routers on same firewall? in General Topics

BGP on two virtual routers on same firewall?

StuartS — Tue, 08 Sep 2020 08:47:19 GMT

Hi all,

We have two HA pairs of Palo's BGP across two diverse datacentres BGP peering with 3rd parties using our private AS numbers. We now have a new 3rd party who require us to use a registered AS number. I am told that Palo doesn't have the ability to use a different AS number (like local-as in the Cisco world). Is it possible to set up a second virtual router on the same firewall and BGP peer between those virtual routers (as well as the new 3rd party?)

Re: BGP on two virtual routers on same firewall?

Abdul-Fattah — Tue, 08 Sep 2020 10:15:14 GMT

Hi,

Ive used BGP-Peering for "a different Scenario" between two VRs before.

you can run one BGP Instance on each VR.

check this out
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIpCAK

let me know if this works for your design.

Re: BGP on two virtual routers on same firewall?

StuartS — Tue, 08 Sep 2020 10:33:00 GMT

Thanks Abdul-Fattah,

Did you use different AS numbers per virtual router?

Re: BGP on two virtual routers on same firewall?

Kamlin_Reddy — Thu, 31 Mar 2022 11:22:01 GMT

Require the Same information please

Re: BGP on two virtual routers on same firewall?

Kamlin_Reddy — Mon, 20 Jun 2022 12:38:11 GMT

So i tried this our with different VR on the same device , i did not had to use private AS numbers for ibgp. Everything worked fine.

However you do require Static routing to next VR followed by security policies.

Re: BGP on two virtual routers on same firewall?

sirfnahi — Mon, 20 Jun 2022 12:51:47 GMT

Did you use different AS numbers per virtual router?

Re: BGP on two virtual routers on same firewall?

Kamlin_Reddy — Mon, 20 Jun 2022 12:54:24 GMT

Hi @sirfnahi

No i did not use AS numbers. What PANOS Version you are using

Regards

Kamlin