08-20-2020 01:09 AM
I have to migration BGP configure from Juniper SRX to Paloalto but I don't know parameter meaning.
How I config it on Paloalto
Configure on Juniper is.
On BL JJJ egress mark BGP community for XXX-NEP and YYY-NEP.
Match condition by IP prefix:
IP from XXX-SEC set community = 65349:21120
IP from YYY-SEC set community = 65349:21020
IMPORT-FROM-NEP-DBUDC term XXX-NEP from protocol bgp
IMPORT-FROM-NEP-DBUDC term XXX-NEP from community commu-nep-xxx-dbudc
IMPORT-FROM-NEP-DBUDC term XXX-NEP then accept
IMPORT-FROM-NEP-DBUDC term YYY-NEP from protocol bgp
IMPORT-FROM-NEP-DBUDC term YYY-NEP from community commu-nep-yyy-dbudc
IMPORT-FROM-NEP-DBUDC term YYY-NEP then as-path-prepend 65349
IMPORT-FROM-NEP-DBUDC term YYY-NEP then accept
IMPORT-FROM-NEP-DBUDC term default then reject
EXPORT-TO-NEP-DBUDC term direct from protocol direct
EXPORT-TO-NEP-DBUDC term direct then accept
EXPORT-TO-NEP-DBUDC term 1 from protocol bgp
EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-yyy
EXPORT-TO-NEP-DBUDC term 1 from community commu-nep-dbudc-xxx
EXPORT-TO-NEP-DBUDC term 1 then reject
EXPORT-TO-NEP-DBUDC term 2 from protocol bgp
EXPORT-TO-NEP-DBUDC term 2 from community commu-sec-dbudc-yyy
EXPORT-TO-NEP-DBUDC term 2 then as-path-prepend 64645
EXPORT-TO-NEP-DBUDC term 3 from protocol bgp
EXPORT-TO-NEP-DBUDC term 3 from community commu-pe-dbudc-yyy
EXPORT-TO-NEP-DBUDC term 3 then accept
08-20-2020 08:20 AM
The Expedition migration tool does not migrate routing protocols due to the complexity of doing so, we will only migrate over static routes. If you would like to migrate over BGP during your cut over I would suggest you ask your questions in another part of our forum ( https://live.paloaltonetworks.com/t5/general-topics/bd-p/members_discuss ). But I can tell you everything you would like to migrate over from BGP can be done and is probably easier to do it from within the GUI section within the PAN. Good luck and I hope this helps.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!