[j-nsp] NSR, multicast, and VRFs?

Dave Diller dave at maxgigapop.net
Mon May 5 14:26:00 EDT 2008


>
On May 5, 2008, at 1:14 PM, Pekka Savola wrote:

>> Now, 9.1 says:
>>
>> Border Gateway Protocol (BGP), for unicast IPv4 and IPv6 address
>> families only. If you configure any other address family, the BGP
>> session will not come up on the backup router.
>
> This text is probably inaccurate.  At least previously if you have  
> MP-BGP w/ multicast enabled, when doing NSR manually (mastership  
> switch) the BGP sessions would reset similarly as if NSR wasn't  
> enabled at all (which is something different from "will not come up").

Yes, that's precisely the behavior I ran into with 9.0R2.10 when  
testing in the lab, sessions were just resetting on me when I flipped  
REs.

Tracing the BGP/NSR interactions, the backup RE shows this in the logs:

May  5 10:57:29.661446 bgp_standby_check_nsr_support: xxx.xxx.xxx.xx  
(Internal AS xxxxx) NSR not supported for all negotiated adress  
families (bgp_nlri 0x0007)

but I wasn't clear on WHICH famil(y was|ies were) the problem since I  
have both on that peer:

    NLRI for this session: inet-unicast inet-multicast inet-vpn-unicast

and the docs didn't help clarify what was and was not supported ;-)    
Thanks for the clarification that multicast will definitely cause this  
behavior.

----

On May 5, 2008, at 1:48 PM, Stefan Fouant wrote:


> IMHO, I would read that to say that L3 VPN VRFs are still not
> supported as you wouldn't be able to configure the inet-vpn address
> family.

Hmm, now THAT's an interesting point I'd not considered.  Even inet- 
vpn is unicast, so that's what I was keying in on, but I can certainly  
"unicast IPv4 and IPv6 address families" meaning "family inet" and  
"family inet6" only.

PROBABLY the case since 9.1 only claims L2 and VPLS support for NSR...  
but disappointing.


So, in other words, I've got TWO reasons I can't use NSR... and  
thereby ISSU.  Boo.

-dd


More information about the juniper-nsp mailing list