1192424 - removing local-pref from all BGP policies on POP firewalls

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps, task)

Description

[Dave Curado :dcurado]

At some time in the past, the local_pref BGP attribute was used to make office firewalls prefer one POP over the other.  Then the as_path BGP attribute was used
instead, but no one ever removed the local_pref configuration.
Having two different BGP attributes configured to do the same thing is redundant and can lead to confusing route preference decisions by BGP speaking routers.

Impact to end users: should be none
Date/Time: some morning EST after the CAB approves this change
Duration: 45 minutes

As always, I will contact the MOC on call prior to starting this work in case 
the changes cause any problems.  And, will follow up with the MOC on call when
the work is complete.

Comment 1

[Linda Ypulong [:unixfairy]]

Reviewed approved conditional to time notification by 8/12/2015 CAB meeting

Comment 2

[Dave Curado :dcurado]

I will do this work early on thursday.  Let's call it 9am EST.

Comment 3

[Dave Curado :dcurado]

modified fw1.tpe1:

primary:node0}
[e-mail]> show configuration | compare rollback 2    
[edit system archival]
-    /* Last configuration change by vle */
+    /* Last configuration change by dcurado */
     apply-macro config { ... }
[edit policy-options policy-statement from-pops-vpn term local-pref]
-     from policy set-local-pref;

{primary:node0}

Comment 4

[Dave Curado :dcurado]

modified fw1.pao1:

[e-mail]> show configuration | compare rollback 2    
[edit policy-options policy-statement to-ipsec-offices-primary term default then]
-      community add pref-120;

Comment 5

[Dave Curado :dcurado]

modified fw1.sjc2:

[e-mail]> show configuration | compare rollback 1 
[edit policy-options policy-statement to-ipsec-offices-secondary term default then]
-      community add pref-110;