How I spent last summer: Converting MAX to 2547 VPNs Converting NGIX/DC atm to gige Dan Magorian Director, Engineering and Operations magorian@maxgigapop.net

What Juniper doesn’t tell you about 2547

•They’re called Routing Instances (VRFs), but they AREN’T virtual routers. JunOs has virtual routers in 6.1 •2547 vpns have only one iBGP. What happens is that a Route Identifier and Target bgp communities are added, putting routes into separate tables. IGP remains same. •The catch is that interfaces need to be in one VRF or another. They can’t be in multiples. There are tricky workarounds with next-table policies, but they didn’t work well in our situation. Customers don’t know about 2547. •So since we ebgp with everyone, we establish second peerings with ISP customers. A nuisance but it works.