Palo's behaviour as a Route reflector

[pahee87]

We have Nexus 9k routers "R1 and R2" connected to a silverpeak device which is learning routes from the remote sites. The R1 and R2 are also connected to a Palo Alto firewall which is acting a Router reflector for R1 and R2. We are doing BGP in this setup. R1 and R2 are distributing the routes(Learnt via the Silverpeak device) to the Palo Firewall(ECMP is turned on). And the Palo is redistributing the routes back the routes to R1 and R2( Which is not good). I see some routes are only redistributing back to R2 and some routes are redistributing back to R1 and R2. What is the reason for this odd behavior? What are the rules on the Palo for acting as a route reflector?

[reaper]

that completely depends on how you set your export and redistribution rules, and how you set the reflector client in the peering group

you could filter the AS path in your export rules and maintain specific exports for each peer group

[pahee87]

Thanks for the explanation.