Can't advertise static route over ebgp

cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
We are conducting regularly scheduled maintenance over the weekend, which could cause some downtime on LIVEcommunity. We apologize for any inconvenience.

Can't advertise static route over ebgp

L0 Member

Hi all,

 

i'm not having much joy getting this working.

I have created a static route for a subnet which I am trying to advertise to an eBGP peer.

I then created a redistribution profile with only static enabled

I then added that profile under bgp Redist Rules.

The BGP peering is definitely established and I am able to redistribute a Connected route no problem.

I tried it with and without export rules and that made no difference.

I tried all the steps in this page https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNt2CAG

I've been beating away at it all day and have ran out of ideas. Any thoughts on what I might be missing?

 

2 ACCEPTED SOLUTIONS

Accepted Solutions

L4 Transporter

As a test, did you try without a redistribution profile? In redist rules, you can just free type the prefix you're trying to redistribute, x.x.x.x/m, and click enable. 

View solution in original post

Cyber Elite
Cyber Elite

Hi @Mushussu 

- Are you trying to redistribute default route or specific route? If it is default, don't forget to enable  default route redistribution

Astardzhiev_0-1652861414652.png

- Do you see the static route in the local rib?

> show routing protocol bgp loc-rib

 

- Stupid question, but actually a common mistake - When you created the redistribution profile, did you set the action to "redistribute", because the default is "no redist"

Astardzhiev_1-1652861605008.png

 

- BGP Redistribution Rules allows you to redistribute prefix, without needing to create Redist. Profile. The catch is that FW will create "dummy" router for that prefix and use it for redistribution. Main purpose of this approach is if you want to redistribute prefix that is not actually in FW routing table (for example additional public range used for NAT). It is not recommended to use it for static or directly connected routes - with redist profile, BGP will stop advertising the prefix if route is removed from routing table (without redist profile, the dummy route will always be there).  However just for the test you can try what @rmfalconer suggested and put the prefix directly in the bgp redist rule.

View solution in original post

3 REPLIES 3

L4 Transporter

As a test, did you try without a redistribution profile? In redist rules, you can just free type the prefix you're trying to redistribute, x.x.x.x/m, and click enable. 

Cyber Elite
Cyber Elite

Hi @Mushussu 

- Are you trying to redistribute default route or specific route? If it is default, don't forget to enable  default route redistribution

Astardzhiev_0-1652861414652.png

- Do you see the static route in the local rib?

> show routing protocol bgp loc-rib

 

- Stupid question, but actually a common mistake - When you created the redistribution profile, did you set the action to "redistribute", because the default is "no redist"

Astardzhiev_1-1652861605008.png

 

- BGP Redistribution Rules allows you to redistribute prefix, without needing to create Redist. Profile. The catch is that FW will create "dummy" router for that prefix and use it for redistribution. Main purpose of this approach is if you want to redistribute prefix that is not actually in FW routing table (for example additional public range used for NAT). It is not recommended to use it for static or directly connected routes - with redist profile, BGP will stop advertising the prefix if route is removed from routing table (without redist profile, the dummy route will always be there).  However just for the test you can try what @rmfalconer suggested and put the prefix directly in the bgp redist rule.

L0 Member

Thanks @rmfalconer that seems to have done the trick.

@Astardzhiev advertising a public NAT range is exactly what I'm trying to do and many thanks for the explanation as to why it needs to be done this way for such cases.

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!