Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
BGP Traffic Engineering - Knowledge Base - Palo Alto Networks

BGP Traffic Engineering

61311
Created On 09/25/18 17:39 PM - Last Modified 06/07/23 07:50 AM


Resolution


Details

Using the network shown in the example, BGP will be configured to use one link as the primary and another link as backup for inbound and outbound internet traffic.

 

The user has full control over how traffic exits the network, but can only influence how traffic enters the network. By default, BGP hands off a packet at the closest AS exit, though this may not be an optimal route. Local preference can be used to control egress traffic and AS path to influence ingress traffic.

doc-1574-00.png 

 

Please refer to the following prerequisites:

 

Part 1: Configuring BGP

  1. Go to Network > Virtual Routers > BGP > Export to view the BGP Export Rules:

    bgp_1.JPG

  2. Edit ISP2-export, Action tab to change the AS path to prepend the ASN value 4 times:

    bgp_2.JPG

  3. Configure an import filter to change the Local Preference on routes from your primary ISP peer. A higher value in the local preference field will signify that is the preferred path:

    import_rule.JPG

    • Add a BGP Import Rule

      Name: ISP1-import

      Put a checkmark next to ISP1

      Match tab: Leave blank since all routes are matching

      Action tab: Change local preference to 500

  4. Commit the changes

 

Part 2: Verifying the BGP Traffic Engineering Setup

Show Commands

> show routing protocol bgp loc-rib

As shown below, see all routes prefer the primary ISP path due to local preference:

doc-1574-01.png

> show routing route | match B

See all BGP routes are coming from the primary ISP peer, as shown below:



> show routing protocol bgp rib-out

See that the AS PATH is longer when advertising to the backup ISP peer:

Ping and traceroute to various IPs in both ISP networks to verify the correct paths are taken.

 

owner: panagent



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcsArticleDetail?id=kA10g000000ClHj&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcsArticleDetail

Choose Language