topic Re: Firewall Palo can advertise aggregate route... in General Topics

Firewall Palo can advertise aggregate route...

Stephen24 — Wed, 01 Apr 2020 12:18:58 GMT

Hello,

In our lab, we made a set up about peering BGP between Palo and a third part device.

According to this kb from Palo : "The Palo Alto Networks firewall does not advertise an aggregated route to its peer when it receives a prefix falling within the aggregated route range from the same peer" but in our case it's working

Does it mean the KB is wrong?

Thks!

Re: Firewall Palo can advertise aggregate route...

Stephen24 — Wed, 01 Apr 2020 13:32:25 GMT

To clarify my request, I would like to know if in some cases the Palo can advertise an agregate even if it receives a prefix falling within this same aggregated route range

Re: Firewall Palo can advertise aggregate route...

kiwi — Wed, 01 Apr 2020 13:45:25 GMT

Hi @Stephen24 ,

Is this what you're looking for ?

How to Aggregate Routes and Advertise via BGP

Cheers,

-Kiwi.

Re: Firewall Palo can advertise aggregate route...

Stephen24 — Wed, 01 Apr 2020 14:31:00 GMT

Hi @kiwi ,

I had already checked this KB

in my set up, the Palo is able to send the aggregate to the peer even if it receives a prefix falling within the aggregated route range from the same peer

Re: Firewall Palo can advertise aggregate route...

ice-quake — Fri, 22 Jan 2021 23:39:15 GMT

I experienced the same behavior on 9.1. Is it a bug or did the default behavior change? May be worth a TAC case.