- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-07-2024 07:17 PM
This is the representation of the connectivity of my setup.
Inside each region have Palo Alto firewall and Silverpeak appliance.
On each region, between Palo Alto and Silverpeak there is ibgp that been configured. AS number is the same.
On the firewall itself, each AS number is different.
Currently from China, it only have the route to Singapore, but no to Ireland. Why is that ? is it due to Multihop?
01-08-2024 01:20 AM
Hi there,
If the peer state between Singapore and Ireland is 'established' then the lack of BGP prefixes is not down to eBGP multihop settings.
Do the BGP RIBs at both sites show prefixes that are being advertised to the other site?
Do BGP prefixes from Singapore appear in the Ireland BGP RIB (not the main routing table) and vice-versa?
cheers,
Seb.
01-08-2024 11:42 PM
Route from SG -> IRE and IRE -> is no issues. Both Internal LAN can communicate each other.
The issues here now are from CN LAN, it's not able to reach IRE.
In the China routing table, there is no route to IRE.
01-09-2024 07:35 AM
Hello again,
On the Singaport firewall under the runtime stats for the Virtual Router which holds the BGP process, what does the BGP RIB Out look like? Does it show IRE prefixes being advertised to the Singapore peer?
Also on the China firewall, what does the BGP Local RIB look like? Does it show any of the IRE prefixes?
cheers,
Seb.
01-09-2024 11:47 PM
In the SG Firewall RIB Out - there is no IRE prefixes
In CN Firewall Local RIB 0 - there is no IRE specific prefix but there is bigger 10.0.0.0/8 prefix
01-10-2024 06:49 PM
Yes there is a Export policy on SG.
I can see one entry that allow the big subnet
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!