topic Re: BGP - PA2020 - utilization in General Topics

BGP - PA2020 - utilization

LCMember2683 — Fri, 04 Nov 2011 07:41:09 GMT

I am looking to deploy a new router for switching from a single provider to a multihomed setup including some peering. I have PA-2020 for that purpose and wondering whether it will handle full BGP for a few years considering growth of routing tables ? Do you have any experience with BGP on PA-2020 ? How is processor load looks ?
I have 20 Mbit of traffic.
What do you think generally about BGP on NGF ?

Re: BGP - PA2020 - utilization

ncampagna — Mon, 07 Nov 2011 21:35:03 GMT

Hello,

Are you interested in working with the full internet routing table?

Thanks,

Nick

Re: BGP - PA2020 - utilization

LCMember2683 — Thu, 10 Nov 2011 09:39:10 GMT

Yes,

I tried setup BGP only with one peer on PA2020 but Management CPU was permanently 100%. I didn't add BGP routes to the routing table.

Regards

Re: BGP - PA2020 - utilization

ncampagna — Thu, 10 Nov 2011 16:11:25 GMT

The firewall doesn't support the full internet routing table. Is there any way you can receive a filtered set of routes?

Thanks,

Nick

Re: BGP - PA2020 - utilization

Retired Member — Fri, 11 Nov 2011 06:30:28 GMT

Given that full BGP route table is over 300K routes, PA-2020 cannot handle that many routes. The max for PA-2020 is around 2500 entries in the forwarding table. Refer to PA-2000 series specsheets.

http://www.paloaltonetworks.com/literature/datasheets/PA2000_Specsheet.pdf

Better to have routes filtered coming to the PA device or have another router which is more dedicated for the task to handle the full BGP feed.

Regards

-Richard