Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Paul,Thank you for your explanation. That makes sense. I understand that the subnet used to establish the BGP session or the tunnel endpoint should not be learned over the same tunnel, as it could lead to recursive routing.In my scenario, the loop...
@CHISHIUNG Thank you for the clarification.I agree that, since the loopback is used only as the IPsec tunnel source, advertising the loopback alone is sufficient for tunnel establishment. However, if R1 and R2 must provide LAN-side failover, advertis...
Yes. There is a networking issue in the scenarioThe behaviour is expected and is related to ECMP/CEF forwarding and source address selection.When two equal-cost default routes exist, CEF performs a hash calculation and selects one of the next hops. H...
In general, you should advertise only the prefixes that need to be reachable across the BGP domain.The IPsec endpoint (loopback) should definitely be advertised so remote peers can establish and maintain the tunnel.The LAN prefix (10.1.1.0/24) should...
