Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-29 Thread Adam Vitkovsky
Hey Saku, > Saku Ytti [mailto:s...@ytti.fi] > Sent: Thursday, September 29, 2016 12:30 PM > > On 29 September 2016 at 10:09, Adam Vitkovsky > wrote: > > Since Junos can't generate update msg based on commonalities in egress > policies (i.e. "dynamic update peer-groups"), I believe it will put eac

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-29 Thread Saku Ytti
On 29 September 2016 at 10:09, Adam Vitkovsky wrote: > Since Junos can't generate update msg based on commonalities in egress > policies (i.e. "dynamic update peer-groups"), I believe it will put each > neighbour in its own update-group and generate update message for each peer > independently,

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-29 Thread Adam Vitkovsky
> Of Johan Borch > Sent: Wednesday, September 28, 2016 5:50 PM > > Hi > > I don't have a route-reflector, this is a full iBGP mesh, will family > route-target > still work? > > Yes it will, But be aware that the BGP session(s) will flap when this new AF is added as a result of new capability nego

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Olivier Benghozi
It just does. > On 28 sept. 2016 at 18:49, Johan Borch wrote : > > I don't have a route-reflector, this is a full iBGP mesh, will family > route-target still work? > > On Wed, Sep 28, 2016 at 4:27 PM, Dragan Jovicic wrote: > >> By default route-reflector will reflect/refresh all vpn routes to

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Hi I don't have a route-reflector, this is a full iBGP mesh, will family route-target still work? On Wed, Sep 28, 2016 at 4:27 PM, Dragan Jovicic wrote: > Hi, > > By default route-reflector will reflect/refresh all vpn routes to a PE > router, even if PE doesn't need those routes (doesn't imp

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Dragan Jovicic
Hi, By default route-reflector will reflect/refresh all vpn routes to a PE router, even if PE doesn't need those routes (doesn't import target community). Route-target family allows PE to give route-reflector a permission to send only those routes for which import target exists. The fact that this

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 17:05, Dan Peachey wrote: > I may be missing something, but shouldn't the default behaviour be to > drop all VPN routes that are not locally imported into a VRF? Unless > you configure "keep all" or the PE is also configured as an RR. Yes. But you'll still load them. If y

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Dan Peachey
On 28 September 2016 at 14:47, Saku Ytti wrote: > On 28 September 2016 at 16:38, Johan Borch wrote: > >> Will router-target-family work even if it is cisco in one end? > > Yes, IOS supports route-target SAFI. > > -- > ++ytti Hi, I may be missing something, but shouldn't the default behaviour

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 16:38, Johan Borch wrote: > Will router-target-family work even if it is cisco in one end? Yes, IOS supports route-target SAFI. -- ++ytti ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailm

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Will router-target-family work even if it is cisco in one end? On Wed, Sep 28, 2016 at 2:02 PM, Saku Ytti wrote: > On 28 September 2016 at 14:18, Adam Vitkovsky > wrote: > > BGP has plethora of options with regards to route filtering and MP-BGP > is no exception. > > Easiest way is to just filt

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Saku Ytti
On 28 September 2016 at 14:18, Adam Vitkovsky wrote: > BGP has plethora of options with regards to route filtering and MP-BGP is no > exception. > Easiest way is to just filter updates based on vrf-target and apply the > policy on router1 as export on session to router2. I'm with Ivan here, I b

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Adam Vitkovsky
> Johan Borch > Sent: Wednesday, September 28, 2016 11:02 AM > > Hi > > Lets say i have two PE-routers, router1 and router2. > > They run MP-BGP, MPLS and so on, the usual stuff. I have one VRF with a lot > of routes in (DFZ). Router2 is not importing the vrf-target for this VRF. > My problem is th

Re: [j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Ivan Ivanov
Hi, This is a solution to your problem: http://www.juniper.net/documentation/en_US/junos15.1/topics/reference/configuration-statement/family-edit-protocols-bgp-route-target-vp.html Give it a try first in a lab test first. If you use RR you should copy its loopback address to inet.3 on all PEs.

[j-nsp] Limit content of bgp.l3vpn.0

2016-09-28 Thread Johan Borch
Hi Lets say i have two PE-routers, router1 and router2. They run MP-BGP, MPLS and so on, the usual stuff. I have one VRF with a lot of routes in (DFZ). Router2 is not importing the vrf-target for this VRF. My problem is that router2 is dead slow and even if I'm not importing this perticual vrf-ta