So I noticed something interesting about NSR, apparently it doesn't support BGP sessions with flowspec SAFIs enabled. Here is a sh bgp sum from the backup RE of a router trying to do NSR, note the number of flaps:
[email protected]> show bgp summary Groups: 53 Peers: 74 Down peers: 24 Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 394198 250825 0 0 0 0 inetflow.0 0 0 0 0 0 0 inet6.0 3288 2418 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... x.x.x.x xxxx 0 0 0 142650 6 Idle x.x.x.x xxxx 0 0 0 137608 3 Idle x.x.x.x xxxx 0 0 0 130645 5 Idle x.x.x.x xxxx 0 0 0 138745 1 Idle etc etc etc [email protected]> show bgp neighbor x.x.x.x | match "Last flap" Last flap event: NsrNotsupported It just sits and spins forever trying to bring up the BGP sync session between the master and backup RE, and turning off inetflow negotiation makes things work properly again. This was under 9.5 and 9.6, but I haven't seen anything in any release notes about support for it in any later software versions. Does anybody know if this is actually on the roadmap to get supported, or has flowspec just completely fallen off the radar since Pedro and Raszuk left Juniper? :) -- Richard A Steenbergen <[email protected]> http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
