topic 8.1.5 BGP question in General Topics

8.1.5 BGP question

Alex_Samad — Sat, 16 Mar 2019 20:45:17 GMT

I have some inserted routes into my BGP for redistribution.

firstly I have a NAT address associated with a loopback. I had a redis rule saying connected and added in the interface.

That didn't add the ip address into the BGP tables, tried just the /32 that didn't work either !

so I went into the router and bgp and redist rules an added in /32 prefix - that worked

now I went to change the orign attribute from incomplete to ibgp

firstly panoram didn't recognise that as a change ! I had to add in a new line << guessing thats a bug, just checked on the end PA and the rules are there with ibgp, so it just panorama that has the issue

secondly it still shows up on my bgp peers as a incomplete

Something wierd going on here ? more interested in the second bit why the prefix is being sent with incomplete instead of ibgp

Re: 8.1.5 BGP question

rmfalconer — Sat, 16 Mar 2019 21:46:49 GMT

Did you set the origin to IGP on the matching BGP export rule?

One thing I'll mention is that I had problems with BGP configurations in earlier PANOS versions. The GUI wouldn't match with the CLI output. You could make sure the necessary config is present in the CLI. But I think that was fixed in 7.1 so it shouldn't be a problem on 8.1.

Re: 8.1.5 BGP question

Alex_Samad — Sun, 17 Mar 2019 00:54:05 GMT

No.. strange i would have thought it have flowed through, so there is no way to filter with out having 3 filters

so match for incomplete and then set incomplete etc etc..

Re: 8.1.5 BGP question

rmfalconer — Mon, 18 Mar 2019 15:20:21 GMT

Where did you set IGP before?

Re: 8.1.5 BGP question

Alex_Samad — Mon, 18 Mar 2019 21:22:29 GMT

In the redistribution rule