topic Re: BGP Multiple Local AS in Firewall and Security Management

BGP Multiple Local AS

Ricki_Juntak — Tue, 24 Jun 2025 12:49:39 GMT

Hi all Checkmates,

Can we Create BGP Multiple Local as on Checkpoint Cluster VSX. like on competitor brand ?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-BGP-multiple-local-AS-configuration-and/ta-p/194776

I have POC to proof this feature on Checkpoint, please help..

Re: BGP Multiple Local AS

G_W_Albrecht — Tue, 24 Jun 2025 13:10:46 GMT

Did you study these already ?

https://support.checkpoint.com/results/sk/sk111000

https://support.checkpoint.com/results/sk/sk95967

https://support.checkpoint.com/results/sk/sk103047

Re: BGP Multiple Local AS

Chris_Atkinson — Tue, 24 Jun 2025 14:18:59 GMT

VRFs are VSX in Check Point.

peer-local-as configuration is possible, refer:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Gaia_Advanced_Routing_AdminGuide/Content/Topics-GARG/BGP-Configuring-in-Gaia-Clish-BGP-Remote-Peers.htm?Highlight=local%20as

Re: BGP Multiple Local AS

Ricki_Juntak — Wed, 25 Jun 2025 04:04:15 GMT

Thank you Albrecht,

Let me read first.

Re: BGP Multiple Local AS

Ricki_Juntak — Wed, 25 Jun 2025 04:11:45 GMT

Thank you Chris, I have try on my lab

GW1:1> show as

Autonomous System Number
300

GW1:1> show configuration bgp
set bgp external remote-as 301 on
set bgp external remote-as 301 peer 10.0.7.1 on
set bgp external remote-as 301 peer 10.0.7.1 peer-local-as as 13000 on