How to send SNMP trap to alert when a BGP neighbor connection goes up/down

How to send SNMP trap to alert when a BGP neighbor connection goes up/down

2239
Created On 08/24/20 18:35 PM - Last Modified 09/24/25 22:48 PM


Objective


To show how to monitor the BGP neighbor state connections during flap.



Environment


  • Palo Alto Firewall
  • Supported PAN-OS
  • BGP
  • SNMP


Procedure


If you want to monitor the up/down state you can forward the specific System log entries to an SNMP trap.
Use the procedure below 

 

  1. In Device -> Log Settings -> System -> Add
    •  In Filter click on 'Filter Builder'
    • For 'Connector' select 'and'.
    • For 'Attribute' select 'Description'.
    • For 'Operator' select 'contains'.
    • In the 'Value' field type 'BGP'.
    • Click 'Add'

 

  1. Now add a second Filter for the same
    • For 'Connector' select 'and'
    • For 'Attribute' select 'Severity'.
    • For 'Operator' select 'equal'.
    • For the 'Value' select the severity you want to monitor (e.g. high)
    • Click 'Add'
  1. Now Select the SNMP Server these logs should be forwarded to
  2. Click OK.
  3. Commit the configuration.
  4. Now the System logs with description having "BGP" and severity as "high"  are sent to the SNMP trap server.
  5. Repeat the same process for "critical" and other severity to be monitored.
  6. Screenshot of the "high" severity filter below.

 Filter builder 

SNMP Config  



Additional Information


NameOIDMIB NAMEDescription
panROUTINGRoutedBGPPeerEnterEstablishedTrap.1.3.6.1.4.1.25461.2.1.3.2.0.1531MIB PAN-TRAPSBGP peer session enters established state
panROUTINGRoutedBGPPeerLeftEstablishedTrap1.3.6.1.4.1.25461.2.1.3.2.0.1532MIB PAN-TRAPSBGP peer session left established state.
panROUTINGRoutedBGPPeerFailedTrap1.3.6.1.4.1.25461.2.1.3.2.0.1533MIB PAN-TRAPSBGP peer session has failed and may restart.
panROUTINGRoutedBGPPeerRestartedTrap1.3.6.1.4.1.25461.2.1.3.2.0.1534MIB PAN-TRAPSInitiated graceful-restart with a BGP peer.
panROUTINGRoutedBGPPeerRestartFailedTrap.1.3.6.1.4.1.25461.2.1.3.2.0.1535MIB PAN-TRAPSGraceful-restart with a BGP peer failed.
panROUTINGRoutedBGPRefreshSentTrap1.3.6.1.4.1.25461.2.1.3.2.0.1536MIB PAN-TRAPSROUTE REFRESH message sent to a BGP pee
panROUTINGRoutedBGPRibinRecalcTrap1.3.6.1.4.1.25461.2.1.3.2.0.1537MIB PAN-TRAPSAn RIB-In is being recalculated as a result of changed import policy.

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAUCCA4&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language