- CheckMates
- :
- Products
- :
- Quantum
- :
- SMB Gateways (Spark)
- :
- Re: BGP
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
BGP
So i have a customer that has BGP running on a SMB appliance. It is working on the older version which is R81.10.07 but then the customer wants to upgrade the gw to R81.10.08 so that he can get email notifications when someone tries to login to the gateway. Upgrading it has no issues but BGP does not come up at all.Tried every possible configuration on it. There are zero packets sent or received when i use the show bgp stats command. Tried with route-redistribition-doestn work.. tried it with routemaps also- doesnt work aswell.The working config are as follows :
# Aggregate
# As
set as 65534
# BGP
set bgp external remote-as 2.4594 on
set bgp external remote-as 2.4594 local-address 103.78.111.254 on
set bgp external remote-as 2.4594 import-routemap "import" preference 1 on
set bgp external remote-as 2.4594 peer 103.78.111.253 on
set bgp external remote-as 2.4594 peer 103.78.111.253 local-address 103.78.111.254 on
set bgp external remote-as 2.4594 peer 103.78.111.253 authtype md5 secret already_scrambled_/OeMJECLiZaIu8U73g==_000000000000000000000000000000000000000000
set bgp external remote-as 2.4594 peer 103.78.111.253 graceful-restart on
# IGMP
# Inbound Route Filter
set inbound-route-filter ospf2 instance default accept-all-ipv4
set inbound-route-filter rip accept-all-ipv4
set inbound-route-filter bgp-policy 512 based-on-as as 2.4594 on
set inbound-route-filter bgp-policy 512 accept-all-ipv4
set inbound-route-filter bgp-policy 512 default-localpref 10
set inbound-route-filter bgp-policy 512 default-weight 100
# IPv6 Aggregate
# IPv6 Inbound Route Filter
# IPv6 OSPF3
# IPv6 Route Redistribution
# Kernel Routes
# max-path-splits
set max-path-splits 8
# NAT-Pool
# OSPF
set ospf instance default area backbone on
# PIM
# Protocol Rank
# RIP
set rip update-interval default
set rip expire-interval default
# Route Redistribution
set route-redistribution to bgp-as 2.4594 from interface LAN3 on
set route-redistribution to bgp-as 65534 localpref 10
set route-redistribution to bgp-as 65534 from default-origin all-ipv4-routes metric 100 on
set route-redistribution to bgp-as 65534 from bgp-as-number 65534 network 172.16.248.0/22 action accept
set route-redistribution to bgp-as 65534 from bgp-as-number 65534 network 172.16.248.0/22 match-type delete on
set route-redistribution to bgp-as 65534 from bgp-as-path "135666" origin IGP network 172.16.248.0/22 action accept
set route-redistribution to bgp-as 65534 from bgp-as-path "135666" origin IGP network 172.16.248.0/22 match-type delete on
# Routemaps
set routemap import id 1 on
set routemap import id 1 allow
set routemap import id 1 match neighbor 103.78.111.253 on
set routemap import-bgp id 1 on
set routemap import-bgp id 1 allow
set routemap import-bgp id 1 match neighbor 103.78.111.253 on
set routemap import id 1 on
set routemap import id 1 allow
set routemap import id 1 match neighbor 103.78.111.253 on
## The following items are listed under their respective command sets
## (e.g. "set bgp") and are displayed here for informational purposes:
# set bgp external remote-as 2.4594 import-routemap import preference 1 on
# Router ID
set router-id 1.1.1.1
# Router Options
set router-options multithreading on
# Static Multicast Route
# Trace
# Tracefile
set tracefile maxnum 10
set tracefile size 0
# Static Routes **Please wait, this may take a while**
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for the reply but i managed to establish BGP. Turns out keeping the config as simple as i can solves the issue. which is kinda weird or maybe im just missing something here when i try to configure routemaps with ASN and prefixes.
Tried all sort of configuration on both router and checkpoint but keeping it simple in CP side works.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is a patched version (new build) of R81.10.08 available which addresses several issues including BGP, however you may have to log a ticket with TAC to obtain it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for the reply but i managed to establish BGP. Turns out keeping the config as simple as i can solves the issue. which is kinda weird or maybe im just missing something here when i try to configure routemaps with ASN and prefixes.
Tried all sort of configuration on both router and checkpoint but keeping it simple in CP side works.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you consult https://sc1.checkpoint.com/documents/SMB_R81.10.X/Dynamic_Routing/EN/Content/Topics/BGP-IPv4.htm?toc... ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah i did, tried using routemaps for importing and exporting but i just couldnt get it up with routemaps.in-bound route filter with route-redistribution worked. I think im missing something with routemaps but i couldnt figure it out.