BGP

[CCA-BANK]

My paloalto can't announce the routes learned via the bgp protocol. I need support assistance to check the configuration 

[aleksandar.astardzhiev]

Hi @CCA-BANK,

Most common reason preventing FW to advertise learned prefixes to other BGP peers is the loop prevention. Firewall will not advertise prefix if it peer AS is in the AS-path.

But without knowing you configuration it is shooting in the dark...

- Can you share high level topology of your BGP setup?

- Do you see the problematic routes in your bgp local-rib?

- Do you see the problematic routes in your bgp rib-out?

You can obfuscate any sensitive information (actual IP addresses, hostnames, etc)