topic Re: CheckPoint BGP Route advertisement in API / CLI Discussion

CheckPoint BGP Route advertisement

Dhruvkumar_Pate — Mon, 03 Dec 2018 11:40:35 GMT

Hello All,

Yesterday i face strange problem in my checkpoint device CP15400 version R77.30 .

I have configured BGP and BGP neighbor was establish. i was able to receive routes from neighbor but i was not able to advertise my Public Pool to my neighbor .

in route redistribution option i have selected interface where i have configured my public pool and i was redistributing it into my BGP routing protocol .

Does anyone has come across that situation ?

Re: CheckPoint BGP Route advertisement

Mike_A — Mon, 03 Dec 2018 12:31:04 GMT

If I am reading this correctly you have established BGP with your peer but are unable to advertise from your Check Point 15400 to the peer.

1.) Do you have a static route on your peer, for the network you are trying to advertise, which is would take a higher priority (admin distance) over the BGP route?

2.) Do you have a route-map/prefix-list on your peer which is only accepting specific networks in?

3.) If your peer is a Cisco, have you run the command 'show ip bgp neighbor <Check Point IP> received-routes'

4.) You can also run on your 15400 'show bgp peer (peer IP) advertise' which will show you if the route is even being advertised out of your 15400.

Just a few things I can think of with limited information about your config, peers, etc.

Re: CheckPoint BGP Route advertisement

Petr_Hantak — Mon, 03 Dec 2018 13:38:55 GMT

One more additional question to those which are here already... How did you take whole configuration? Was it via WebUI or via CLI?

Re: CheckPoint BGP Route advertisement

Dhruvkumar_Pate — Mon, 03 Dec 2018 14:11:06 GMT

1) The setup is working fine With my Old Nokia hardware.

2) Problem is when i do show bgp peer x.x.x.x. advertise in CP i dont see anything even though i have redistributed my Interface IP Network into BGP.

Re: CheckPoint BGP Route advertisement

Dhruvkumar_Pate — Mon, 03 Dec 2018 14:22:11 GMT

Via WebUI.

Re: CheckPoint BGP Route advertisement

Mike_A — Mon, 03 Dec 2018 14:29:32 GMT

Ok, so lets get into some more details.

1.) What is the AS of your 15400?

2.) What is the AS of your peer?

3.) If you can show a screen shot of your WebUI for the Route Redistribution section?

Re: CheckPoint BGP Route advertisement

Ricardo_Gros — Tue, 04 Dec 2018 08:28:34 GMT

Hi,

Make sure that your route is on the Routing table, only routes on the routing table are distributed.

To be able to help please further please share:

Routing table of both members, bgp configuration and redistribution options.

Re: CheckPoint BGP Route advertisement

Petr_Hantak — Tue, 04 Dec 2018 14:04:48 GMT

Good, are you sure that all the configuration related BGP has been taken via WebUI? Because in case if you do for example routemap in CLI, the following rule could be aplicated.

Routemaps
Control which routes are accepted and announced. Used to configure inbound route filters, outbound route filters, and to redistribute routes from one protocol to another.
Route maps offer more configuration options than the Portal options. However, they are not functionally equivalent.
If one or more route maps are assigned to a protocol (for import or export), any corresponding Portal configuration is ignored.
Gaia Clish

It is not probably your case but it is good to check this as well.

Re: CheckPoint BGP Route advertisement

smismi — Fri, 20 Jan 2023 16:03:11 GMT

Hello, I have the same problem that the routes are not advertised. Did you solve the problem in the end?

Best Regards

Stefan

Re: CheckPoint BGP Route advertisement

Austin_Ponten — Wed, 14 Jun 2023 11:39:23 GMT

Same!

Ive tried:

set route-redistribution to bgp-as (AS number) from interface all on

set route-redistribution to bgp-as (AS number) from static-route all-ipv4-routes on

I've been reading about route maps and double and triple checking but it doesn't want to work.

-A