topic Palo's behaviour as a Route reflector in General Topics

Palo's behaviour as a Route reflector

pahee87 — Mon, 17 Oct 2022 20:56:09 GMT

We have Nexus 9k routers "R1 and R2" connected to a silverpeak device which is learning routes from the remote sites. The R1 and R2 are also connected to a Palo Alto firewall which is acting a Router reflector for R1 and R2. We are doing BGP in this setup. R1 and R2 are distributing the routes(Learnt via the Silverpeak device) to the Palo Firewall(ECMP is turned on). And the Palo is redistributing the routes back the routes to R1 and R2( Which is not good). I see some routes are only redistributing back to R2 and some routes are redistributing back to R1 and R2. What is the reason for this odd behavior? What are the rules on the Palo for acting as a route reflector?

Re: Palo's behaviour as a Route reflector

reaper — Wed, 30 Nov 2022 09:03:36 GMT

that completely depends on how you set your export and redistribution rules, and how you set the reflector client in the peering group

you could filter the AS path in your export rules and maintain specific exports for each peer group

Re: Palo's behaviour as a Route reflector

pahee87 — Wed, 30 Nov 2022 12:27:52 GMT

Thanks for the explanation.