BGP on two virtual routers on same firewall?

[StuartS]

Hi all,

We have two HA pairs of Palo's BGP across two diverse datacentres BGP peering with 3rd parties using our private AS numbers. We now have a new 3rd party who require us to use a registered AS number. I am told that Palo doesn't have the ability to use a different AS number (like local-as in the Cisco world). Is it possible to set up a second virtual router on the same firewall and BGP peer between those virtual routers (as well as the new 3rd party?)

[Abdul-Fattah]

Hi,

Ive used BGP-Peering for "a different Scenario" between two VRs before.

you can run one BGP Instance on each VR.

check this out
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIpCAK

let me know if this works for your design.

[StuartS]

Thanks Abdul-Fattah,

Did you use different AS numbers per virtual router?

[Kamlin_Reddy]

Require the Same information please

[Kamlin_Reddy]

So i tried this our with different VR on the same device , i did not had to use private AS numbers for ibgp. Everything worked fine.

However you do require Static routing to next VR followed by security policies.

[sirfnahi]

Did you use different AS numbers per virtual router?

[Kamlin_Reddy]

Hi @sirfnahi 

No i did not use AS numbers. What PANOS Version you are using

Regards

Kamlin