How to configure basic BGP peering using the Advanced Routing Engine
2826
Created On 07/04/24 07:21 AM - Last Modified 09/26/25 19:37 PM
Objective
- The configuration of BGP peering with Advanced Routing Engine (ARE) is explained under Enable Advanced Routing.
- This article provides an example of BGP configuration using the topology below.
Environment
- Palo Alto Next Gen Firewalls (NGFW)
- Supported PAN-OS
- BGP
- Advanced Routing Engine
- Logical Router
Procedure
-
Basic Network Setup
-
Create a Logical Router
- Navigate to Network > Routing > Logical Router > Add
- Assign a name as shown in the figure below:
- save the config by clicking OK
-
-
Assign the Logical Router to Interfaces
-
Navigate to Network > Interfaces > Ethernet
- Ensure the relevant interfaces have the newly created logical router as shown in the figure below
-
-
Configure BGP peering
- Navigate to Network > Routing > Logical Router > click ENT > BGP > General
- Ensure the following fields are as below:
- Enabled: Checked
- Router ID: 172.16.1.2
- Local AS: 64540
- Install Route: Checked
- Navigate to Peer Group | configure the parameters as shown in the figure below:
- Name: ISPs
- IPv4 Address Family: defaultNOTE: IPv4 Address Family is the only Routing Profile needed for peering, if you don't have the default option, create a new one by clicking on the drop down option then New AFI Profile, use the following parameters. Otherwise, skip this portion:
- Name: MyIPv4AddFamily
- Enable: check
- OK: to save
- Attach the profile MyIPv4AddFamily to IPv4 Address Family
- To configure the BGP peers, click Add as highlighted above
- Use the following parameters for the ISP1 peering:
- Name: ISP1
- Peer AS: 64512
- Local Address > Interface: ethernet1/1
- Peer Address: 172.16.1.1
- Click OK to save the configuration for ISP1
- Repeat previous step (3.c.iv) for ISP 2 using the following parameters:
- Name: ISP1
- Peer AS: 64513
- Local Address > Interface: ethernet1/2
- Peer Address: 172.16.2.1
- Save changes using OK
- Commit changes
-
Verification of Functionality
- BGP peering can be confirmed from Network > Routing > Logical Router > More Runtime Stats > BGP > Peer as shown in the figure below:
- BGP RIB routes learned from the peer can be verified from Network > Routing > Logical Router > More Runtime Stats > BGP > Route as shown in the figure below:
- BGP routes installed into the routing table can be examined from Network > Routing > Logical Router > More Runtime Stats > Routing as shown in the figure below:
- BGP peering can be confirmed from Network > Routing > Logical Router > More Runtime Stats > BGP > Peer as shown in the figure below: