Migration BGP from SRX

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Migration BGP from SRX

L1 Bithead

I have to migration BGP configure from Juniper SRX to Paloalto but I don't know parameter meaning. 

 

How I config it on Paloalto

 

Configure on Juniper is. 

 

Policy

On BL JJJ egress mark BGP community for XXX-NEP and YYY-NEP. 

Match condition by IP prefix:

IP from XXX-SEC set community = 65349:21120

IP from YYY-SEC set community = 65349:21020

 

Import Policy 

IMPORT-FROM-NEP-DBUDC term XXX-NEP from protocol bgp          

IMPORT-FROM-NEP-DBUDC term XXX-NEP from community commu-nep-xxx-dbudc

IMPORT-FROM-NEP-DBUDC term XXX-NEP then accept                

IMPORT-FROM-NEP-DBUDC term YYY-NEP from protocol bgp          

IMPORT-FROM-NEP-DBUDC term YYY-NEP from community commu-nep-yyy-dbudc

IMPORT-FROM-NEP-DBUDC term YYY-NEP then as-path-prepend 65349 

IMPORT-FROM-NEP-DBUDC term YYY-NEP then accept                

IMPORT-FROM-NEP-DBUDC term default then reject

 

Export Policy

EXPORT-TO-NEP-DBUDC term direct from protocol direct

EXPORT-TO-NEP-DBUDC term direct then accept                

EXPORT-TO-NEP-DBUDC term 1 from protocol bgp             

EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-xxx

EXPORT-TO-NEP-DBUDC term 1 then reject                   

EXPORT-TO-NEP-DBUDC term 2 from protocol bgp            

EXPORT-TO-NEP-DBUDC term 2 from community commu-sec-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 2 then as-path-prepend 64645

EXPORT-TO-NEP-DBUDC term 3 from protocol bgp 

EXPORT-TO-NEP-DBUDC term 3 from community commu-pe-dbudc-yyy

EXPORT-TO-NEP-DBUDC term 3 then accept

 

 

1 REPLY 1

L4 Transporter

Hello @TST.Support 

 

The Expedition migration tool does not migrate routing protocols due to the complexity of doing so, we will only migrate over static routes. If you would like to migrate over BGP during your cut over I would suggest you ask your questions in another part of our forum ( https://live.paloaltonetworks.com/t5/general-topics/bd-p/members_discuss ). But I can tell you everything you would like to migrate over from BGP can be done and is probably easier to do it from within the GUI section within the PAN. Good luck and I hope this helps.

  • 2629 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!