How to find out whether BGP status is established or not in ngaf

How to find out whether BGP status is established or not in ngaf

To determine whether the BGP (Border Gateway Protocol) status is established or not in the Next-Generation Application Firewall (NGAF), you can use the following steps:

Log in to NGAF Console: Access the NGAF management console using your preferred web browser or terminal emulator.

Navigate to BGP Configuration: Locate the BGP configuration section within the NGAF management interface. This may be found under the networking or routing configuration settings.

Check BGP Status: Look for a section or status indicator that provides information about the BGP peer connections. It should indicate whether the BGP status is established or not.

CLI Command: If you have access to the command-line interface (CLI) of NGAF, you can use BGP-specific commands to check the status. For example, you can use the "show ip bgp summary" command to display the status of BGP connections.

Consult NGAF Documentation: Refer to the NGAF documentation or user manual for specific instructions on checking the BGP status. The documentation may provide detailed steps and commands for verifying the BGP status within NGAF.

Below are 2 ways to  verify whether or not BGP status is established in Sangfor NGAF

1. Login to the device
- Access the Sangfor NGAF Management interface (thru GUI or CLI)
- login using the default IP address of the management interface (eth0)

2. configure both external or internal interfaces
- configure the external network interface (ex: eth2)
     - set the network interface as external
     - assign an IP address
     - specify the next hop address
- configure the internal network interface (ex: eth3)
     - set the network interface as internal
     - assign an IP address
3. Routing setup
- configure the default route to 0.0.0.0/0 pointing to the front router
- create static routes for each network segments to the layer 3 switch for internal network segments across layer 3
4. configure NAT policies
- Source NAT:  convert intranet zone source address to the outgoing interface address
- Destination Zone: custom external network zone
- Destination address: all
- Services: Any
5. Application Control Policy
- allow traffic from internal to external
     - Source zone:  custom internal network zone
     - Source Address: custom internal network
     - Destination zone: Custom external zone
     - Destination address: All
     - Services: Any
     - Applications: All

Check the BGP neighbor ship status after these configurations and make sure that the status shows "Established" to confirm that it is operational

Here are two methods to determine the BGP status in Sangfor NGAF:

Method 1: Using the Web Management Console:

    Access the Sangfor NGAF web management console.
    Navigate to the Network section.
    Click on BGP.
    The displayed information will include the BGP status for each peering connection. This will indicate whether the connection is "Established" or not.

Method 2: Using the CLI:

    Access the Sangfor NGAF command-line interface (CLI).
    Enter the following command:

show bgp neighbors

    The output will display details about BGP neighbors, including their BGP state. Look for the state associated with your specific peering connection. If it shows "Established," the BGP session is up and running.

Please follow below steps to find out whether BGP status is established or not in NGAF

Access the NGAF Web UI --> Navigate to the BGP Status --> Check BGP Status --> View BGP Peer Details --> Verify BGP Configuration

In the NGAF Platform dashboard click Network then select Routes on the right side and choose BGP. From there you can check the status of it.

If the route was received from a peer, run the display bgp vpnv4 all peer command to check whether the BGP peer relationship is in the Established state.

Hi,

You can go to Network > Routes >  BGP.

To determine whether the BGP (Border Gateway Protocol) status is established in NGAF (Next-Generation Firewall), you can typically check the BGP neighborship status through the firewall's management interface or command-line interface. In most NGAF platforms, you would execute commands like "show bgp summary" or "show ip bgp summary" depending on the vendor's syntax. Look for the status of BGP peers; if it shows "Established," then the BGP session is up and functioning correctly, indicating successful communication and route exchange between BGP peers. If the status is anything else, such as "Idle" or "Active," further investigation is needed to troubleshoot and resolve the connectivity issue.

Hi, you can see the estabilished status through Ngaf web ui on Network -> BGP -> Neighbors.

Hi,

Pls refer the attachment file - 1.1.3 Test Process(P.14) for Ref.

Network Secure_8.0.85_Best Practice_BGP over GRE over IPsec.pdf (1.83 MB, Downloads: 107)

27 Feb 2024 12:02 Upload

Click file name to download attachment