09-08-2020 01:47 AM
We have two HA pairs of Palo's BGP across two diverse datacentres BGP peering with 3rd parties using our private AS numbers. We now have a new 3rd party who require us to use a registered AS number. I am told that Palo doesn't have the ability to use a different AS number (like local-as in the Cisco world). Is it possible to set up a second virtual router on the same firewall and BGP peer between those virtual routers (as well as the new 3rd party?)
09-08-2020 02:37 AM - edited 09-08-2020 03:15 AM
Ive used BGP-Peering for "a different Scenario" between two VRs before.
you can run one BGP Instance on each VR.
check this out
let me know if this works for your design.
09-08-2020 03:33 AM
Did you use different AS numbers per virtual router?
03-31-2022 04:22 AM
Require the Same information please
06-20-2022 05:38 AM
So i tried this our with different VR on the same device , i did not had to use private AS numbers for ibgp. Everything worked fine.
However you do require Static routing to next VR followed by security policies.
06-20-2022 05:54 AM
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!