BGP route is not present on the other region

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

BGP route is not present on the other region

L2 Linker

This is the representation of the connectivity of my setup.

KhairulNizam_0-1704683652019.png

Inside each region have Palo Alto firewall and Silverpeak appliance. 

On each region, between Palo Alto and Silverpeak there is ibgp that been configured. AS number is the same.

On the firewall itself, each AS number is different. 

 


Currently from China, it only have the route to Singapore, but no to Ireland. Why is that ? is it due to Multihop? 

 

 

6 REPLIES 6

L4 Transporter

Hi there,

If the peer state between Singapore and Ireland is 'established' then the lack of BGP prefixes is not down to eBGP multihop settings.

Do the BGP RIBs at both sites show prefixes that are being advertised to the other site?

Do BGP prefixes from Singapore appear in the Ireland BGP RIB (not the main routing table) and vice-versa?

 

cheers,

Seb.

Route from SG -> IRE and IRE -> is no issues. Both Internal LAN can communicate each other. 
The issues here now are from CN LAN, it's not able to reach IRE.

In the China routing table, there is no route to IRE.

L4 Transporter

Hello again,

On the Singaport firewall under the runtime stats for the Virtual Router which holds the BGP process, what does the BGP RIB Out look like? Does it show IRE prefixes being advertised to the Singapore peer?

Also on the China firewall, what does the BGP Local RIB look like? Does it show any of the IRE prefixes?

 

cheers,

Seb.

L2 Linker

In the SG Firewall RIB Out - there is no IRE prefixes

 

In CN Firewall Local RIB 0 - there is no IRE specific prefix but there is bigger 10.0.0.0/8 prefix 

L4 Transporter

Hi there,

Do you have a BGP export policy configured on the SG firewall? Can you share any details on the BGP router configuration?

 

cheers,

Seb.

L2 Linker

Yes there is a Export policy on SG. 
I can see one entry that allow the big subnet

KhairulNizam_1-1704941358678.png

 

  • 512 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!