Cisco BGP neighbor x.x.x.x local-as yyyy feature on Palo Alto

[banksants]

Hi,

Does Palo Alto support Cisco BGP neighbor x.x.x.x local-as yyyy feature? or there is any way to achieve the same (Palo Alto FW has a local ASN, but it uses another local ASN just for a specific neighbor)

Thanks!

[MP18]

@banksants 

Are you looking for some CLI command like below ?

t network virtual-router NetGear protocol bgp 

+ allow-redist-default-route   allow redistribute default route to BGP

+ ecmp-multi-as                Support multiple AS in ECMP

+ enable                       enable 

+ enforce-first-as             Enforce First AS for EBGP

+ install-route                Populate BGP learned route to global route table

+ local-as                     local AS number

+ reject-default-route         do not learn default route from BGP

+ router-id                    router id of this BGP instance

> auth-profile                 BGP authentication profiles

> dampening-profile            route flap dampening profiles

> peer-group                   peer group configuration

> policy                       BGP routing policy configuration

> redist-rules                 redistribution rules for export through BGP

> routing-options              routing instance options

  <Enter>                      Finish input

Regards

[banksants]

Hi MP18,

thanks for the message.

No, I was looking for a feature support, but I have done a workaround as it seems unsupported.

Thanks.

Banksants

[fatboy1607]

Could you suggest what workaround you did  on palo alto firewall to achieve local as thing.

[mithunmurali2]

anyone who was able to achieve this local-as config through panorama

[TomYoung]

Hi all,

This feature is available with the Advanced Routing Engine, but that is a big change to make.

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-networking-admin/advanced-routing/configure-bgp...

Thanks,

Tom

[TomYoung]

By the way,

You should be able to have multiple local ASNs with virtual routers (VRs).  You can then enable BGP between the VRs.  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIpCAK

I am going to do this with a customer and report back.

Thanks,

Tom