- Products
- Learn
- Local User Groups
- Partners
- More
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Introduction to Lakera:
Securing the AI Frontier!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hi all,
We are trying to configure BGP 4-Byte AS with "aspath-prepend-count" parameter, but it does not seem to work.
I have read another BGP-4-Byte-AS post (BGP 4-Byte AS in routemap community), looks like CheckPoint also do not support 4-Byte-AS in AS-Prepend configuration.
Can someone please comment on this? Thank you!
Tried a number of experiments:
Please open a task if you still cannot get it to work. It will just be easier and faster to resolve it through the task.
We introduced 4-byte AS support starting in R80.10 from memory.
Though versions earlier than R80.30 will be End of Support in September hence requiring an upgrade.
Check this. Will get back to you soon.
It works and is supported. Here is the output from R&D setup:
On my R80.30 machine, that ultimately receives the routes, “show route bgp aspath” gives:
Prefix Nexthop AsPath
1.0.0.0/8 10.1.1.14 (4194368),917518,917518,917518,851981,IGP.(Id-6)
2.0.0.0/8 10.1.1.14 (4194368),917518,917518,917518,851981,IGP.(Id-6)
Configuration on machine, which sends the routes:
set as 14.14
set bgp external remote-as 1 on
set bgp external remote-as 1 export-routemap "eb" preference 1 on
set bgp external remote-as 1 peer 10.1.1.1 on
set bgp external remote-as 1 peer 10.1.1.1 aspath-prepend-count 5
set bgp external remote-as 13.13 on
set bgp external remote-as 13.13 import-routemap "ia" preference 1 on
set bgp external remote-as 13.13 peer 10.1.1.13 on
set bgp external remote-as 64.64 on
set bgp external remote-as 64.64 export-routemap "eb" preference 1 on
set bgp external remote-as 64.64 peer 10.1.1.64 on
set routemap eb id 1 on
set routemap eb id 1 allow
set routemap eb id 1 match protocol bgp
set routemap eb id 1 action aspath-prepend-count 3
set routemap ia id 1 on
set routemap ia id 1 allow
We tried both of the following ways to configure aspath-prepend-count, with peers that do and do not support 4-byte AS numbers, and the result was right in each:
set bgp external remote-as VALUE peer VALUE aspath-prepend-count VALUE
set routemap VALUE id VALUE action aspath-prepend-count VALUE
Thanks Sundeep!
Would you please try if this works with a long BGP 4-Byte AS number like 4200001201 (private BGP 4-Byte AS number)?
And if possible can you please also check the configuration on R80.30 and before-R80.30 machine?
Thank you!
Hi Sundeep,
Thanks for your reply!
Can you please also try with private BGP 4-Byte AS number (the long one) like 4200001201 to see if AS-Prepend really works?
And can you confirm if this would work with earlier version (before R80.30) machine as well?
Thank you!
Tried a number of experiments:
Please open a task if you still cannot get it to work. It will just be easier and faster to resolve it through the task.
Thanks Sundeep for your prompt help, I will contact Support Team for this!
We introduced 4-byte AS support starting in R80.10 from memory.
Though versions earlier than R80.30 will be End of Support in September hence requiring an upgrade.
Thanks Chris!
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
18 | |
12 | |
6 | |
6 | |
6 | |
5 | |
4 | |
4 | |
3 | |
3 |
Tue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Thu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY