[j-nsp] Sending iBGP prefixes to another iBGP neighbour

Saku Ytti saku at ytti.fi
Thu May 5 21:03:49 EDT 2016


On 6 May 2016 at 03:49, Chris Kawchuk <juniperdude at gmail.com> wrote:
> If you put the Linux session into a VRF on the MX104, then run L2VPN between the MX104 and MX80, (may have to enable the independent-domain knob int he vrf), you can solve it that way too..

Independent domain is essentially BGP tunnel, it tunnels ~all
attributes under attribute 128, which can be useful, like you
explained. Unfortunately it won't work over public Internet ever I
fear, because there was bug in code, and people hurried to kill of
attribute 128. There were also some JNPR specific annoying limitations
in it, but I can't recall.
Anyhow, more canonical case is indeed to connect two iBGP domains to
each domain, without telling them that there is eBGP hop in between.
OP's use-case seems more apt for full-mesh or reflection. Solid
suggestion anyhow (And you were fast enough to fix the L3VPN thing
already:).

-- 
  ++ytti


More information about the juniper-nsp mailing list