CLI command "show routing protocol bgp loc-rib-detail" does not display all local rib detail entries.
1638
Created On 04/03/23 06:59 AM - Last Modified 04/15/25 21:39 PM
Symptom
- CLI command "show routing protocol bgp loc-rib-detail" is not showing all local rib detail entries.
- Only 1024 detailed routes are displayed even when the firewall has 1024 or more routes.
- The exact number of entries are displayed by using the command "show routing protocol bgp loc-rib".
Environment
- Palo Alto Firewall
- PAN-OS 9.1 and above
- BGP
Cause
- When using "show routing protocol bgp loc-rib", it is a single table fetch query to get the all the prefixes in the local-RIB, so the response is quick.
- When using the "show routing protocol bgp loc-rib-detail" command, For each prefix entry firewall performs a unique callback to fetch prefix entry details and so each query needs time.
- Waiting for long time causes management server to to think the CLI command is not responding.
- Thus the output is limited to the display that can be captured for 30 seconds. The attribute "total routes shown:" only reflects the number of entry details we were able to fetch in 30 seconds.
Note: The "total routes shown:" is the number of entries that were displayed, and NOT how many entries are available in the system.
Resolution
- Use "show routing protocol bgp loc-rib" to get the exact number of entries available in the local-RIB.
- Use filter criteria (next-hop, peer etc) to get the desired output.
admin@Lab> show routing protocol bgp rib-out-detail
+ afi Show BGP routes per afi
+ count Show up to the specified number of entries. Default: 262144
+ nexthop filter result by nexthop
+ peer Show for given BGP peer
+ prefix filter result by prefix
+ safi Show BGP routes per safi
+ virtual-router filter result by virtual-router
Additional Information
There is also a Feature request to increase the number of detailed entries.
FR ID: 20616