topic BGP Routing Question in General Topics

BGP Routing Question

a.jones — Mon, 29 Apr 2019 15:00:42 GMT

Hi All,

I have BGP routing advertising from the Palo with eBGP advertising internally and externally for 4 vSYSs.

How do I advertise a particular vSYS with public IP a.a.a.a to advertise it as a route for public IP b.b.b.b/27.

Regards

Adrian

Re: BGP Routing Question

El-ahrairah — Mon, 29 Apr 2019 23:02:34 GMT

Need a bit more detail here. But it sounds like you need a redistribution profile.

I'm assuming b.b.b.b/27 is going to be used for NAT on your public facing zone? If b.b.b.b/27 is connected or learned via another routing protocol (eg static, ospf), you can configure a Redistribution profile to advertise them to your eBGP public peer.

If b.b.b.b/27 does not exist, then you can manually redistribute it without tieing it to any other interface or routing protocol. This just means your firewall with redistribute it not matter what.

Secondly you need to make sure the route filters are in place on your end to allow the redistribution and on the peers end to allow for the learning and further distribution of the b.b.b.b/27 network.

Re: BGP Routing Question

a.jones — Tue, 30 Apr 2019 14:08:51 GMT

Thanks. I managed to find the issue. As well as adding the subnet into the public facing export rule I needed to add it into the redistribution area. I had a redistribution entry of 0.0.0.0/0 and though that covered it but alas it didn't.

Now onto my next issue 🙂

Regards

Adrian