eBGP multihop between Cisco routers and Palo

[davinci]

Hello,

I'm trying to setup eBGP between my on premise routers (RTR A/RTR B) and Firewall (Palo HA) pair hosted in AWS.  On premise devices (RTR A and RTR B) connect to AWS cloud router (RTR C) via Megaport connections (2 /30 point to point networks).    Is the update source command required?

This is what I'm thinking but I need to know if I'm missing something.  You may assume that I have network reachablility to ASN 3 already.

RTR A#

router bgp 1

neighbor x.x.x.x remote-as 3

neighbor x.x.x.x ebgp-multihop 2

RTR B#

router bgp 1

neighbor x.x.x.x remote-as 3

neighbor x.x.xx. ebgp-multihop

[Giuseppe Larosa]

Hello davinci,

are you sure that the Palo alto directly connects to routerC ?

if it is in cloud this can even change over time.

I would suggest you to setup the eBGP sessions using an higher multihop like 10 on both routers and also on the Palo alto devices as well.

Hope to help

Giuseppe

[davinci]

Yes, RTR C and PaloA are in same AWS VPC and they have direct IP connectivity between them  based upon statements by cloud architects.