! PermitANY — Palo Alto BGP Configuration
! BGP configuration under a PAN-OS virtual router with eBGP/iBGP peers, import/export policy, prefix filtering, and route-map equivalents via PAN-OS route filters.
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
# Palo Alto BGP — PA-FW-01 — VR: default
#
set network virtual-router default protocol bgp enable yes
set network virtual-router default protocol bgp local-as 65001
set network virtual-router default protocol bgp router-id 1.1.1.1
set network virtual-router default protocol bgp install-route yes
#
# BGP Peers

set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS type ebgp
set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 peer-address ip 203.0.113.1
set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 local-address ip 203.0.113.2
set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 connection-options keep-alive-interval 10
set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 connection-options hold-time 30
set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 subsequent-address-families unicast


set network virtual-router {{../virtual_router}} protocol bgp peer-group eBGP-PEERS peer ISP1 import-nexthop-resolve yes


#
# Redistribution

set network virtual-router {{../virtual_router}} protocol bgp redist-rules connected enable yes

set network virtual-router {{../virtual_router}} protocol bgp redist-rules connected address-family-identifier unicast


#
commit