Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-08 Thread Jeff Haas via juniper-nsp
--- Begin Message --- Mostly in the interest of having better information circulating on this topic: While the idea below is in the right idea, it's wrong in details. The key detail here is that anything that causes a peer to not share the same rib-out with peers in the same group will cause a

Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-08 Thread Tom Beecher via juniper-nsp
What this is saying: If you have a GROUP level policy, and make any MODIFICATIONS to INDIVIDUAL neighbor policies, that individual neighbor will reset. This means adding OR removing the peer level policy will trigger the reset. As I recall, it is because there is normally a single BGP Update IO

Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-07 Thread Andrey Kostin via juniper-nsp
I agree, there is no clarity for all possible situations and from my experience a) and c) should be correct and take special care. Changing existing policy doesn't drop a session (usually ;) and I saw when adding a new policy in the existing policy chain didn't drop BGP, but might be not

Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-05 Thread Raph Tello via juniper-nsp
Hey, not really clear to me what that KB is exactly saying. Does it say: a) Peer will be reset when it previously hadn’t an individual import/export policy statement but the group one and then an individual one is configured b) Peer will be reset each time it‘s individual policy is touched

Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-04 Thread Andrey Kostin via juniper-nsp
Hi, this KB article just came in: https://kb.juniper.net/InfoCenter/index?page=content=KB12008=SUBSCRIPTION Symptoms: Why does modifying a policy on a BGP neighbor in a group cause that particular peer to be reset, when another policy is applied for the whole peer group? Solution: Changing the

Re: [j-nsp] BGP export policy, group vs neighbor level

2022-02-04 Thread Raph Tello via juniper-nsp
I would also like to hear opinions about having ipv4 and ipv6 ebgp peer sessions in the same group and using the same policy instead of having two separate groups and two policies (I saw this kind policy at https://bgpfilterguide.nlnog.net/guides/small_prefixes/#junos). It would nicely pack

[j-nsp] BGP export policy, group vs neighbor level

2022-02-03 Thread Raph Tello via juniper-nsp
Hi list, I wonder what kind of bgp group configuration would allow me to change the import/export policy of a single neighbor without resetting the session of this neighbor nor any other session of other neighbors. Similar to enabling/disabling features on a single session without resetting the