topic Route exchange logs - BGP Dynamic routing in Firewall and Security Management

Route exchange logs - BGP Dynamic routing

Arunkumar — Tue, 08 Mar 2022 11:48:35 GMT

Hi Team,

We had an issue where one of the route prefix advertisement was suddenly stopped from AWS Transit Gateway to Checkpoint Firewalls and we are investigating the root cause. Can any one help me where we can see the logs for the advertised and received route prefixes to/from a specific BGP peers. We have verified in routed.log and routed_messages files but we cannot find it.

Re: Route exchange logs - BGP Dynamic routing

Chris_Atkinson — Tue, 08 Mar 2022 14:26:17 GMT

Are trace options enabled in the BGP config?

Otherwise I doubt that such things are logged in a non debug state (see sk101399), rather such information is usually visible (point in time) by the applicable CLI commands.

Re: Route exchange logs - BGP Dynamic routing

Arunkumar — Tue, 08 Mar 2022 14:52:46 GMT

There were no trace options enabled. So without BGP debug we cannot have this kind of logs, correct?. Will the debug procedure described in sk101399 help to get the logs during the issue time?.

Re: Route exchange logs - BGP Dynamic routing

Chris_Atkinson — Wed, 09 Mar 2022 00:07:16 GMT

Recommend working with TAC on an action plan to capture relevant information should the issue reoccur.