CheckPoint BGP Route received

useraz — Wed, 01 Apr 2020 10:44:49 GMT

Hi all,

I have established the eBGP in LAB, but I can not see the received route in routing table?
Did I miss something?

Best regards, Ales
----------------------------------------------------------------------------------
fwMb> show version all
Product version Check Point Gaia R80.30
OS build 300
OS kernel version 3.10.0-693cpx86_64
OS edition 64-bit
----------------------------------------------------------------------------------
fwMb> show route all
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA),
A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
U - Unreachable, i - Inactive

S 0.0.0.0/0 via 178.172.86.41, eth0, cost 0, age 686254
C 127.0.0.0/8 is directly connected, lo
C 178.172.86.40/29 is directly connected, eth0
C 178.172.86.56/29 is directly connected, eth1
----------------------------------------------------------------------------------
fwMb> show bgp peer 178.172.86.57 received

IPv4 Route MED LocalPref Nexthop Communities
153.5.63.4/30 None N/A(EBGP) 178.172.86.58
178.172.86.56/29 None N/A(EBGP) 178.172.86.58
----------------------------------------------------------------------------------
fwMb> show bgp peer 178.172.86.57 detailed

----- Peer 178.172.86.57 -----
State Established (Uptime: 00:08:54)
Peer Type eBGP Peer
Remote AS 65251
Local AS 64690
Peer Capabilities InetUnicast,RouteRefresh,CiscoRouteRefresh,GracefulRestart,4-Byte AS Extension
Our Capabilities InetUnicast,4-Byte AS Extension
Authentication None
Multihop Off
Reachability Detection Off
Graceful Restart Off
Keepalives
Last Received 0s
Last Sent 0s
Interval 3s
Holdtime 9s
Received
IPv4 Routes 0 (0 active)
IPv6 Routes 0 (0 active)
Sent
IPv4 Routes 0
IPv6 Routes 0
----------------------------------------------------------------------------------
fwMb> show configuration
...
set as 64690
set router-id 178.172.86.58
...
set interface eth1 link-speed 1000M/full
set interface eth1 state on
set interface eth1 ipv4-address 178.172.86.58 mask-length 29
...
set bgp external remote-as 65251 on
set bgp external remote-as 65251 local-address 178.172.86.58 on
set bgp external remote-as 65251 import-routemap "bgp-in" preference 10 on
set bgp external remote-as 65251 peer 178.172.86.57 on
...
set routemap bgp-in id 10 on
set routemap bgp-in id 10 allow
## The following items are listed under their respective command sets
## (e.g. "set bgp") and are displayed here for informational purposes:
# set bgp external remote-as 65251 import-routemap bgp-in preference 10 on
----------------------------------------------------------------------------------

Re: CheckPoint BGP Route received

PhoneBoy — Thu, 02 Apr 2020 23:42:11 GMT

Pretty sure you have to have a routemap or similar configured to accept these routes.
Will admit, the intricacies of dynamic routing are not one of my strong suits. 😬

Re: CheckPoint BGP Route received

useraz — Tue, 21 Apr 2020 08:17:32 GMT

Hi,

Finaly, I have found the typo.
---------------------------------------
fwMb> show configuration
...
set interface eth1 ipv4-address 178.172.86.58 mask-length 29

show bgp peer 178.172.86.57 received

IPv4 Route         MED    LocalPref   Nexthop       Communities
153.5.63.4/30      None   N/A(EBGP)   178.172.86.58
178.172.86.56/29   None   N/A(EBGP)   178.172.86.58
---------------------------------------

Next hop for received routes were referred to FW himself. "Wrong" routes are not accepted into BGP and main routing table.

Thanks, Ales

topic CheckPoint BGP Route received in Firewall and Security Management

CheckPoint BGP Route received

Re: CheckPoint BGP Route received

Re: CheckPoint BGP Route received