System log generation when Maximum Prefixes limit is reached for BGP peers
403
Created On 03/18/26 23:06 PM - Last Modified 04/20/26 07:21 AM
Symptom
- Maximum prefix limit in BGP hits the configured threshold.
Environment
- PAN-OS running Legacy routing engine
- PAN-OS running Advanced routing engine (Starting PAN-OS 10.2)
Cause
- In PAN-OS running Legacy Routing Engine mode, when the Maximum number of Prefix Limit learnt from a BGP peer is reached, the management-plane based routed.log will have a log related to this, however, the System Log (accessed via Monitor tab of the firewall) will not log any information for this.
- However, when the PAN-OS is running Advanced Routing Engine which was introduced starting 10.2 PAN-OS, there is an option to display a log in the SYstem log alongwith the routed.log when the maximum number of prefixes learnt hits a limit.
Both above are expected behavours.
Resolution
- Information on the System log generation option in Advanced Routing Engine is mentioned in the Point 16 of Step 3 in https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-bgp-routing-profiles.