https://live.paloaltonetworks.com/t5/general-topics/downtime-for-migration-from-mpls-to-vpn-with-bgp-with-bgp/m-p/317747#M81663 <P>Hello community!</P><P>&nbsp;</P><P>I have currently two sites connected through MPLS and I plan to configure a VPN with bgp routing to migrate traffic.</P><P>&nbsp;</P><P>I am calculating the downtime that may require the migration from MPLS with static routing to the VPN with bgp routing.</P><P>&nbsp;</P><P>I´m considering the following:</P><P><SPAN>- Routes learned from IBGP has default AD = 200 and static route has default AD = 10</SPAN><BR /><SPAN>- After configuring BGP to route traffic over the VPN I should have the routes learned from BGP installed on the RIB but not on the FIB because the static route AD is lower</SPAN><BR /><SPAN>- To make the firewall placing the BGP routes into the FIB I will give the AD of the static route a bigger value than the bgp route.&nbsp;</SPAN><BR /><SPAN>- After the switch between static-dynamic routing to bring the traffic into the VPN I´m gonna clear all the existing sessions to avoid performance issues.</SPAN></P><P><BR /><SPAN>I think the effective downtime could be not even 5 minutes. What do you think?</SPAN></P><P>&nbsp;</P><P><SPAN>Thank you in advance!</SPAN></P> Fri, 20 Mar 2020 19:57:26 GMT Carracido 2020-03-20T19:57:26Z https://live.paloaltonetworks.com/t5/general-topics/downtime-for-migration-from-mpls-to-vpn-with-bgp-with-bgp/m-p/317747#M81663 <P>Hello community!</P><P>&nbsp;</P><P>I have currently two sites connected through MPLS and I plan to configure a VPN with bgp routing to migrate traffic.</P><P>&nbsp;</P><P>I am calculating the downtime that may require the migration from MPLS with static routing to the VPN with bgp routing.</P><P>&nbsp;</P><P>I´m considering the following:</P><P><SPAN>- Routes learned from IBGP has default AD = 200 and static route has default AD = 10</SPAN><BR /><SPAN>- After configuring BGP to route traffic over the VPN I should have the routes learned from BGP installed on the RIB but not on the FIB because the static route AD is lower</SPAN><BR /><SPAN>- To make the firewall placing the BGP routes into the FIB I will give the AD of the static route a bigger value than the bgp route.&nbsp;</SPAN><BR /><SPAN>- After the switch between static-dynamic routing to bring the traffic into the VPN I´m gonna clear all the existing sessions to avoid performance issues.</SPAN></P><P><BR /><SPAN>I think the effective downtime could be not even 5 minutes. What do you think?</SPAN></P><P>&nbsp;</P><P><SPAN>Thank you in advance!</SPAN></P> Fri, 20 Mar 2020 19:57:26 GMT https://live.paloaltonetworks.com/t5/general-topics/downtime-for-migration-from-mpls-to-vpn-with-bgp-with-bgp/m-p/317747#M81663 Carracido 2020-03-20T19:57:26Z https://live.paloaltonetworks.com/t5/general-topics/downtime-for-migration-from-mpls-to-vpn-with-bgp-with-bgp/m-p/317828#M81672 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/24977">@Carracido</a></P><P>&nbsp;</P><P>If you are all good with configuration then yes there should be minimal downtime. But as a best practice, you should have Maintenance Window of an hour or two. This is just in case of disaster situation.</P><P>&nbsp;</P><P>Mayur</P> Sat, 21 Mar 2020 13:11:19 GMT https://live.paloaltonetworks.com/t5/general-topics/downtime-for-migration-from-mpls-to-vpn-with-bgp-with-bgp/m-p/317828#M81672 SutareMayur 2020-03-21T13:11:19Z