BGP Behavior

PAN-OS specific behavior for the openconfig-bgp model.
Review the deviation file before using the openconfig-bgp model to familiarize yourself with supported paths.
When using the BGP model with PAN-OS firewalls:
  • You can enable multipath configuration by setting ECMP globally at the virtual router level.
  • Setting /bgp/global/graceful-restart requires the use of an integer, but the Get request response returns a string.
For neighbors:
  • The peer-type field is set at the peer-group level, it returns the same value if the neighbor value is identical.
  • Setting an auth password on a set request creates an auth profile. On the Get request, the response comes back as an encrypted value string.
  • Using a local-interface requires you to have an already configured interface. To set the local-address, you must use the transport child container in a Set request.
  • Setting /bgp/neighbors/neighbor/timers requires the use of an integer, but the Get request response returns a string.
  • Descriptions support hyphens, underscores, and periods.

RIB

For the RIB Model, PAN-OS OpenConfig:
  • only supports peers with valid IPv6 addresses as names or hyphen format such as 2001-98-98-98--1 for the corresponding IPv6 address is 2001:98:98:98::1.
  • Extended-communities returns as binary while the hex value is returned by the XML-API.
  • /bgp/rib/attr-sets and /bgp/rib/afi-safis/afi-safi/ipv4-unicast/loc-rib/routes can’t be filtered.

Recommended For You