- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-22-2022 08:30 AM
Hi All,
I have followed a few guides but cannot manage to get a /30 RIPE subnet advertised to our ISP. I have followed the following guide for route distribution, however, i cannot see them in the Local RIB and RIB out tables. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm2ICAS
Any help is greatly appreciated. Our ISP is peering okay but as mentioned when trying to advertise the /30 (as 4 * /32s - not sure if that is possible - i would have thought so, this is ISP/BGP is relatively new to me). I need 4 public IPs to allow DNAT into our site on this connection.
Thanks in advance.
11-22-2022 01:46 PM
Hello @DForde
thanks for the post in LIVEcommunity!
Even if you manage to inject /30 routes into routing table and advertise this from PA to your ISP, ISP will typically not allow longer prefix than /24 for IPV4 and /48 for IPv6. /30 should be filtered out by your ISP you are peering with. This is part of the effort of all governing body to conserve number of prefixes in global routing table.
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!