Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
10-17-2022 01:56 PM
We have Nexus 9k routers "R1 and R2" connected to a silverpeak device which is learning routes from the remote sites. The R1 and R2 are also connected to a Palo Alto firewall which is acting a Router reflector for R1 and R2. We are doing BGP in this setup. R1 and R2 are distributing the routes(Learnt via the Silverpeak device) to the Palo Firewall(ECMP is turned on). And the Palo is redistributing the routes back the routes to R1 and R2( Which is not good). I see some routes are only redistributing back to R2 and some routes are redistributing back to R1 and R2. What is the reason for this odd behavior? What are the rules on the Palo for acting as a route reflector?
11-30-2022 01:03 AM
that completely depends on how you set your export and redistribution rules, and how you set the reflector client in the peering group
you could filter the AS path in your export rules and maintain specific exports for each peer group
11-30-2022 04:27 AM
Thanks for the explanation.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
