EIGRP Config Migration from Cisco ASA to PaloAlto using Expedition

[nagarjuna.b]

Hi Everyone,

Does anyone able to migrate the EIGRP config in Expedition during migraition from other vendors like Cisco ASA , Checkpoint firewalls?

I have a cisco ASA 5525 configured with EIGRP and when I imported the policy file into expedition for migration it does only showing the static routes and some unrelated information(XML code) about BGP?( I can manually configure the EIGRP on palo alto after config migration but I wonder about the migration tool and making sure I am not missing anything here!)

Does this mean it only migrates the BGP config not any other dynamic routing protocols?

Please let me know what have you done to have this migrated or if know how to do it. any inputs are much appriciated.

Best regards,

Nagarjuna

[Bagheri · Accepted solution]

Unfortunately EIGRP is a Cisco propriotry routing protocol and not available on PANOS.  Only static, OSPF and BGP are available on the PAN appliances.

With that said, Expedition does transfer all your routing information, just not EIGRP.

Hope that helps,

Bob

[nagarjuna.b]

Didn't realize that PAN do not support EIGRP. Thanks for the response. I belive RIP config is also supported along with the list you mentioned. 

Best regards,

Nagarjuna 

[Neil_Xu]

Actually, Cisco has made EIGRP an open standard per RFC7868 since 2016.  

We'd love to see Palo Alto firewalls implement EIGRP as a supported routing protocol where it will be much easier to intergrate with an already established Cisco network topology.  

Currently, we still have Cisco ASA/FirePowers for this sepecific reason (EIGRP)...  Just drop it in and it works, without redoing dynamic routing configuration and involve various other teams.

[Krzysztof1]

Which protocol will be best to choose instead of eigrp for the hub and 100 branches?

BGP, OSPF oraz BFD witch monitoring?