[j-nsp] cgnat on service module - interesting bgp advertisements

Aaron aaron1 at gvtc.com
Tue Apr 19 20:18:09 EDT 2016


Sure Tim, …where in the world are those statics coming from ??

 

agould at eng-lab-mx104-cgn> show route table one.inet.0 | grep 1.2.3.

1.2.3.129/32    *[Static/1] 02:57:02

1.2.3.130/31    *[Static/1] 02:57:02

1.2.3.132/30    *[Static/1] 02:57:02

1.2.3.136/29    *[Static/1] 02:57:02

1.2.3.144/28    *[Static/1] 02:57:02

1.2.3.160/27    *[Static/1] 02:57:02

1.2.3.192/27    *[Static/1] 02:57:02

1.2.3.224/28    *[Static/1] 02:57:02

1.2.3.240/29    *[Static/1] 02:57:02

1.2.3.248/30    *[Static/1] 02:57:02

1.2.3.252/31    *[Static/1] 02:57:02

1.2.3.254/32    *[Static/1] 02:57:02

 

agould at eng-lab-mx104-cgn>

 

agould at eng-lab-mx104-cgn> show route table one.inet.0 protocol bgp | grep 1.2.3.

 

agould at eng-lab-mx104-cgn>

 

agould at eng-lab-mx104-cgn>

 

agould at eng-lab-mx104-cgn> show configuration routing-instances one | display set

set routing-instances one instance-type vrf

set routing-instances one interface ms-1/0/0.2

set routing-instances one route-distinguisher 10.101.12.243:1

set routing-instances one vrf-target import target:1:1

set routing-instances one vrf-target export target:1:1

set routing-instances one vrf-table-label

 

agould at eng-lab-mx104-cgn>

 

agould at eng-lab-mx104-cgn> show configuration protocols bgp | display set

set protocols bgp group my-ibgp type internal

set protocols bgp group my-ibgp local-address 10.101.12.243

set protocols bgp group my-ibgp neighbor 10.101.0.2 family inet-vpn unicast

 

agould at eng-lab-mx104-cgn>

 

agould at eng-lab-mx104-cgn> show configuration policy-options

 

agould at eng-lab-mx104-cgn>

 

 

From: Tim Jackson [mailto:jackson.tim at gmail.com] 
Sent: Tuesday, April 19, 2016 7:01 PM
To: Aaron <aaron1 at gvtc.com>
Cc: jnsp <juniper-nsp at puck.nether.net>
Subject: Re: [j-nsp] cgnat on service module - interesting bgp advertisements

 

Mind pasting your show route for those routes and your export policy?

On Apr 19, 2016 6:48 PM, "Aaron" <aaron1 at gvtc.com <mailto:aaron1 at gvtc.com> > wrote:

Very interesting. anyone know why this is happening ?  Is this documented ?
I put a /25 as the public nat pool, but look what this mx104 is advertising
via bgp.. It appears to chop up that /25 into a bunch of smaller subnets and
advertise those out





agould at eng-lab-mx104-cgn> show configuration | grep 1.2.3. | display set

set services nat pool nat1 address 1.2.3.128/25 <http://1.2.3.128/25> 





agould at eng-lab-mx104-cgn> show route advertising-protocol bgp 10.101.0.2
table one.inet.0



one.inet.0: 782 destinations, 970 routes (782 active, 0 holddown, 0 hidden)

  Prefix                  Nexthop              MED     Lclpref    AS path

* 10.144.2.4/30 <http://10.144.2.4/30>            Self                         100        I

* 1.2.3.129/32 <http://1.2.3.129/32>          Self                         100        I

* 1.2.3.130/31 <http://1.2.3.130/31>          Self                         100        I

* 1.2.3.132/30 <http://1.2.3.132/30>          Self                         100        I

* 1.2.3.136/29 <http://1.2.3.136/29>          Self                         100        I

* 1.2.3.144/28 <http://1.2.3.144/28>          Self                         100        I

* 1.2.3.160/27 <http://1.2.3.160/27>          Self                         100        I

* 1.2.3.192/27 <http://1.2.3.192/27>          Self                         100        I

* 1.2.3.224/28 <http://1.2.3.224/28>          Self                         100        I

* 1.2.3.240/29 <http://1.2.3.240/29>          Self                         100        I

* 1.2.3.248/30 <http://1.2.3.248/30>          Self                         100        I

* 1.2.3.252/31 <http://1.2.3.252/31>          Self                         100        I

* 1.2.3.254/32 <http://1.2.3.254/32>          Self                         100        I





Aaron



_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net <mailto:juniper-nsp at puck.nether.net> 
https://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list