Advertising a non-existent route to BGP in PAN

Normally if you want to advertise a route to your BGP neighbor, the route you want to announce must be available in your routing table but in Palo Alto Networks there is a nice trick which is quite handy. Where can it be really handy? For example you have a subnet which you only use in your NAT pool which doesn’t really need any next hop. In this case this config plays a nice role.

For example you want to announce your route 144.122.122.0/24 add this under the menu as screenshot and make sure your “Export” rules don’t really block this subnet being advertised otherwise you won’t see it in your RIB-OUT.

With the help of this handy config, your peer router will receive your nat-pool subnet although you haven’t really added this in your routing table (PAN does this dummy route automatically as far as I can see)

About: rtoodtoo

Worked for more than 10 years as a Network/Support Engineer and also interested in Python, Linux, Security and SD-WAN, currently living in the Netherlands and works as a Network Support Engineer. // JNCIE-SEC #223 / RHCE / PCNSE


You have a feedback?

This site uses Akismet to reduce spam. Learn how your comment data is processed.