topic Re: Monitoring BGP stats from Palo Alto/Panorama in General Topics

Monitoring BGP stats from Palo Alto/Panorama

tstores — Fri, 14 Nov 2014 20:44:26 GMT

Can Palo Alto monitor BGP stats?

Re: Monitoring BGP stats from Palo Alto/Panorama

ssharma — Fri, 14 Nov 2014 20:50:04 GMT

@tstores,

You can monitor BGP on Palo Alto device at following location :

You can click on More Runtime Stats and navigate around available option.

You can also look under Monitor -> System log and look for BGP events. Thank you.

Re: Monitoring BGP stats from Palo Alto/Panorama

hshah — Fri, 14 Nov 2014 20:51:32 GMT

Hi Tstores,

You can have majority of stats from CLI and Webgui of The Firewall. You can load firewall in panorama and than view BGP stats.

WebGUI:

From CLI:

admin@132-PA-200> show routing protocol bgp

> loc-rib show BGP local-rib

> loc-rib-detail show BGP local-rib

> peer show BGP peer status

> peer-group show BGP peer group status

> policy show BGP route-map status

> rib-out show BGP routes sent to BGP peer

> rib-out-detail show BGP routes sent to BGP peer

> summary show BGP summary information

Regards,

Hardik Shah

Re: Monitoring BGP stats from Palo Alto/Panorama

tstores — Fri, 14 Nov 2014 20:54:25 GMT

Is there a supported MIB for snmp of BGP stats? I hope that makes some sense.

Re: Monitoring BGP stats from Palo Alto/Panorama

ssharma — Fri, 14 Nov 2014 21:03:15 GMT

Yes there are few traps available :

panROUTINGRoutedBGPPeerEnterEstablishedTrap NOTIFICATION-TYPE

OBJECTS {

panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription

}

STATUS current

DESCRIPTION

"BGP peer session enters established state."

::={panCommonEventEventsV2 1531}

panROUTINGRoutedBGPPeerLeftEstablishedTrap NOTIFICATION-TYPE

OBJECTS {

panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription

}

STATUS current

DESCRIPTION

"BGP peer session left established state."

::={panCommonEventEventsV2 1532}

You can look at following MIB file for detailed information :

https://live.paloaltonetworks.com/docs/DOC-6587

Hope this helps. Thank you.