- Products
- Learn
- Local User Groups
- Partners
- More
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
Hi all,
We are trying to configure BGP 4-Byte AS with "aspath-prepend-count" parameter, but it does not seem to work.
I have read another BGP-4-Byte-AS post (BGP 4-Byte AS in routemap community), looks like CheckPoint also do not support 4-Byte-AS in AS-Prepend configuration.
Can someone please comment on this? Thank you!
Tried a number of experiments:
Please open a task if you still cannot get it to work. It will just be easier and faster to resolve it through the task.
We introduced 4-byte AS support starting in R80.10 from memory.
Though versions earlier than R80.30 will be End of Support in September hence requiring an upgrade.
Check this. Will get back to you soon.
It works and is supported. Here is the output from R&D setup:
On my R80.30 machine, that ultimately receives the routes, “show route bgp aspath” gives:
Prefix Nexthop AsPath
1.0.0.0/8 10.1.1.14 (4194368),917518,917518,917518,851981,IGP.(Id-6)
2.0.0.0/8 10.1.1.14 (4194368),917518,917518,917518,851981,IGP.(Id-6)
Configuration on machine, which sends the routes:
set as 14.14
set bgp external remote-as 1 on
set bgp external remote-as 1 export-routemap "eb" preference 1 on
set bgp external remote-as 1 peer 10.1.1.1 on
set bgp external remote-as 1 peer 10.1.1.1 aspath-prepend-count 5
set bgp external remote-as 13.13 on
set bgp external remote-as 13.13 import-routemap "ia" preference 1 on
set bgp external remote-as 13.13 peer 10.1.1.13 on
set bgp external remote-as 64.64 on
set bgp external remote-as 64.64 export-routemap "eb" preference 1 on
set bgp external remote-as 64.64 peer 10.1.1.64 on
set routemap eb id 1 on
set routemap eb id 1 allow
set routemap eb id 1 match protocol bgp
set routemap eb id 1 action aspath-prepend-count 3
set routemap ia id 1 on
set routemap ia id 1 allow
We tried both of the following ways to configure aspath-prepend-count, with peers that do and do not support 4-byte AS numbers, and the result was right in each:
set bgp external remote-as VALUE peer VALUE aspath-prepend-count VALUE
set routemap VALUE id VALUE action aspath-prepend-count VALUE
Thanks Sundeep!
Would you please try if this works with a long BGP 4-Byte AS number like 4200001201 (private BGP 4-Byte AS number)?
And if possible can you please also check the configuration on R80.30 and before-R80.30 machine?
Thank you!
Hi Sundeep,
Thanks for your reply!
Can you please also try with private BGP 4-Byte AS number (the long one) like 4200001201 to see if AS-Prepend really works?
And can you confirm if this would work with earlier version (before R80.30) machine as well?
Thank you!
Tried a number of experiments:
Please open a task if you still cannot get it to work. It will just be easier and faster to resolve it through the task.
Thanks Sundeep for your prompt help, I will contact Support Team for this!
We introduced 4-byte AS support starting in R80.10 from memory.
Though versions earlier than R80.30 will be End of Support in September hence requiring an upgrade.
Thanks Chris!
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 67 | |
| 26 | |
| 13 | |
| 12 | |
| 12 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 |
Tue 21 Apr 2026 @ 05:00 PM (IDT)
AI Security Masters E7: How CPR Broke ChatGPT's Isolation and What It Means for YouTue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFTue 21 Apr 2026 @ 05:00 PM (IDT)
AI Security Masters E7: How CPR Broke ChatGPT's Isolation and What It Means for YouTue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFTue 12 May 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point Cloud Firewall delivered as a serviceThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY