Re: [j-nsp] KB20870 workaround creates problems with Hub and Spoke downstream hubs?

2018-02-15 Thread Olivier Benghozi
Note that our observations (and found workaround) were when using sub-policies applied within export-policies. > On 15 feb 2018 at 10:33, Olivier Benghozi wrote > : > > Now, if you see some VPN routes no longer advertised toward other PEs, it > probably means that your VRF export policies mu

Re: [j-nsp] KB20870 workaround creates problems with Hub and Spoke downstream hubs?

2018-02-15 Thread Olivier Benghozi
Hi Sebastian, This is an old workaround by the way. Simpler workaround: use advertise-from-main-vpn-tables knob available since 12.3 (required if you have NSR anyway): https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/advertise-from-main-vpn-table-edit-pr

[j-nsp] KB20870 workaround creates problems with Hub and Spoke downstream hubs?

2018-02-14 Thread Sebastian Wiesinger
Hi, we configured the workaround mentioned in KB20870 to prevent unwanted VPN BGP session flaps when configuring eBGP/route-reflector clients. A problem we noticed is that when using a Hub&Spoke hub on the affected router and when a downstream hub is used as well, it seems that the downstream hub