[j-nsp] l2circuit/xconnect between MX104 and a ME3600X

2016-09-28 Thread Caio
Hello experts, I'm having a strange issue while trying to configure a l2circuit/xconnect interop. between a MX-104 and a ME3600X. One interesting thing is that both equipments (ME3600X and MX104) has l2circuits/xconnects with another devices (other Junipers and Cisco routers like the old 2951 and

Re: [j-nsp] SRX 300 stability and potential issues

2016-09-28 Thread Johannes Resch
I've deployed a number of SRX3xx devices, with good results. Features I've used on that platform include OSPF, IPsec S2S VPN, L2-transparent mode, clustering. Some of the devices are now in production for 3+ months, running stable and no issues seen so far. When migrating from SRX1xx/2xx, you migh

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Olivier Benghozi
It just does. > On 28 sept. 2016 at 18:49, Johan Borch wrote : > > I don't have a route-reflector, this is a full iBGP mesh, will family > route-target still work? > > On Wed, Sep 28, 2016 at 4:27 PM, Dragan Jovicic wrote: > >> By default route-reflector will reflect/refresh all vpn routes to

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Hi I don't have a route-reflector, this is a full iBGP mesh, will family route-target still work? On Wed, Sep 28, 2016 at 4:27 PM, Dragan Jovicic wrote: > Hi, > > By default route-reflector will reflect/refresh all vpn routes to a PE > router, even if PE doesn't need those routes (doesn't imp

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Dragan Jovicic
Hi, By default route-reflector will reflect/refresh all vpn routes to a PE router, even if PE doesn't need those routes (doesn't import target community). Route-target family allows PE to give route-reflector a permission to send only those routes for which import target exists. The fact that this

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 17:05, Dan Peachey wrote: > I may be missing something, but shouldn't the default behaviour be to > drop all VPN routes that are not locally imported into a VRF? Unless > you configure "keep all" or the PE is also configured as an RR. Yes. But you'll still load them. If y

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Dan Peachey
On 28 September 2016 at 14:47, Saku Ytti wrote: > On 28 September 2016 at 16:38, Johan Borch wrote: > >> Will router-target-family work even if it is cisco in one end? > > Yes, IOS supports route-target SAFI. > > -- > ++ytti Hi, I may be missing something, but shouldn't the default behaviour

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 16:38, Johan Borch wrote: > Will router-target-family work even if it is cisco in one end? Yes, IOS supports route-target SAFI. -- ++ytti ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailm

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Will router-target-family work even if it is cisco in one end? On Wed, Sep 28, 2016 at 2:02 PM, Saku Ytti wrote: > On 28 September 2016 at 14:18, Adam Vitkovsky > wrote: > > BGP has plethora of options with regards to route filtering and MP-BGP > is no exception. > > Easiest way is to just filt

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 14:18, Adam Vitkovsky wrote: > BGP has plethora of options with regards to route filtering and MP-BGP is no > exception. > Easiest way is to just filter updates based on vrf-target and apply the > policy on router1 as export on session to router2. I'm with Ivan here, I b

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Adam Vitkovsky
> Johan Borch > Sent: Wednesday, September 28, 2016 11:02 AM > > Hi > > Lets say i have two PE-routers, router1 and router2. > > They run MP-BGP, MPLS and so on, the usual stuff. I have one VRF with a lot > of routes in (DFZ). Router2 is not importing the vrf-target for this VRF. > My problem is th

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Ivan Ivanov
Hi, This is a solution to your problem: http://www.juniper.net/documentation/en_US/junos15.1/topics/reference/configuration-statement/family-edit-protocols-bgp-route-target-vp.html Give it a try first in a lab test first. If you use RR you should copy its loopback address to inet.3 on all PEs.

[j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Hi Lets say i have two PE-routers, router1 and router2. They run MP-BGP, MPLS and so on, the usual stuff. I have one VRF with a lot of routes in (DFZ). Router2 is not importing the vrf-target for this VRF. My problem is that router2 is dead slow and even if I'm not importing this perticual vrf-ta