[j-nsp] KB20870 workaround creates problems with Hub and Spoke downstream hubs?

Olivier Benghozi olivier.benghozi at wifirst.fr
Thu Feb 15 04:54:22 EST 2018


Note that our observations (and found workaround) were when using sub-policies applied within export-policies.


> On 15 feb 2018 at 10:33, Olivier Benghozi <olivier.benghozi at wifirst.fr> wrote :
> 
> Now, if you see some VPN routes no longer advertised toward other PEs, it probably means that your VRF export policies must be modified (and of course the doc is silent about that).
> What we observed is that you can no longer rely on the classic "routing policies accept BGP routes by default", translated here to "(e)BGP routes are exported by default to other i-MP-BGP neighbors", probably since they are now exported to another table bgp.l3vpn.0, not directly to other neighbors.
> So one must instead explicitly "accept" BGP routes in the VRF export policies (in addition to setting RT ext-community).



More information about the juniper-nsp mailing list