A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. What command could…

The correct answer is B. show routing protocol bgp peer. To troubleshoot a BGP peer relationship that is not establishing on a PAN-OS firewall, the correct CLI command is 'show routing protocol bgp peer'. This command displays the current state of each configured BGP peer, including the BGP FSM (Finite State Machine) state (e.g…

Submitted by joshua94· Apr 18, 2026Configuration Troubleshooting

Question

A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. What command could the engineer run to see the current state of the BGP state between the two devices?

Options

Ashow routing protocol bgp state
Bshow routing protocol bgp peer
Cshow routing protocol bgp summary
Dshow routing protocol bgp rib-out

How the community answered

(21 responses)

B
86% (18)
C
10% (2)
D
5% (1)

Explanation

To troubleshoot a BGP peer relationship that is not establishing on a PAN-OS firewall, the correct CLI command is 'show routing protocol bgp peer'. This command displays the current state of each configured BGP peer, including the BGP FSM (Finite State Machine) state (e.g., Idle, Connect, Active, OpenSent, OpenConfirm, Established), the peer IP, AS number, and session statistics. This allows the engineer to quickly determine whether the session is stuck in a particular state and narrow down the root cause. 'show routing protocol bgp summary' shows aggregate statistics, 'bgp rib-out' shows advertised routes, and 'bgp state' is not a valid PAN-OS command.

Topics

#BGP#Troubleshooting#CLI Commands#Routing Protocols

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice