Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-29 Thread Richard A Steenbergen
On Thu, Sep 27, 2012 at 08:28:46PM -0400, Jeff Wheeler wrote: > On Thu, Sep 27, 2012 at 1:49 PM, Jo Rhett wrote: > > I don't know when Juniper broke this > > Hey, Jo, I remember Junos working like this since forever. I'm 100% > sure it has worked like this since way before MX80 existed. I dunno

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Jeff Wheeler
On Thu, Sep 27, 2012 at 1:49 PM, Jo Rhett wrote: > I don't know when Juniper broke this Hey, Jo, I remember Junos working like this since forever. I'm 100% sure it has worked like this since way before MX80 existed. -- Jeff S Wheeler Sr Network Operator / Innovative Network Concepts ___

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Jo Rhett
On Sep 27, 2012, at 1:21 PM, Kevin Wormington wrote: > I haven't tested this but I think: > > term term1 { >from { >protocol [ direct static ]; >interface fxp0.0; >} >then reject; > } Nice, thanks. > In our policies we explicitly allow prefixes we want in BGP and deny

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Jo Rhett
without > having to modify (thanks Harry for confirming): > > term block-fxp { > from interface fxp0.0; > then reject; > } > > From: Jo Rhett > Date: Thu, 27 Sep 2012 13:06:30 -0700 > To: Harry Reynolds , dhanks > Cc: "juniper-nsp@puck.nether.ne

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Kevin Wormington
I haven't tested this but I think: term term1 { from { protocol [ direct static ]; interface fxp0.0; } then reject; } in your export policy would be a "generic" way to prevent any routes from the fxp interface from being injected into BGP. In our policies we explic

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Doug Hanks
Thu, 27 Sep 2012 13:06:30 -0700 To: Harry Reynolds mailto:ha...@juniper.net>>, dhanks mailto:dha...@juniper.net>> Cc: "juniper-nsp@puck.nether.net<mailto:juniper-nsp@puck.nether.net>" mailto:juniper-nsp@puck.nether.net>> Subject: Re: [j-nsp] mx-class units now a

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Harry Reynolds
...@netconsonance.com] Sent: Thursday, September 27, 2012 1:07 PM To: Harry Reynolds; Doug Hanks Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] mx-class units now advertisement management interface networks in BGP Reply to Harry and Doug both since you mostly asked the same question. On Sep 27

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Jo Rhett
Reply to Harry and Doug both since you mostly asked the same question. On Sep 27, 2012, at 12:13 PM, Harry Reynolds wrote: > It might help if you posted your BGP export policy. IIRC, there is a > no-readvertise flag available for a static but not aware of any inherent > blocking of the advertise

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Doug Hanks
So I guess the million dollar question is what does your BGP export policy look like? Reply-all with: - show protocols bgp - show policy-options policy-statement On 9/27/12 10:49 AM, "Jo Rhett" wrote: >I don't know when Juniper broke this, but I was chasing down a different >problem earlier

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Harry Reynolds
ber 27, 2012 10:50 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] mx-class units now advertisement management interface networks in BGP I don't know when Juniper broke this, but I was chasing down a different problem earlier this week and discovered that our Juniper MX80s are adverti

[j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-27 Thread Jo Rhett
I don't know when Juniper broke this, but I was chasing down a different problem earlier this week and discovered that our Juniper MX80s are advertising the fxp0 interface's network in BGP announcements. My testing seems to indicate that it still won't accept packets on other interfaces for this