Support Support Downloads Knowledge Base Service Request Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Routing issue when RIP is used in the hub and spoke VPN



Article ID: KB26647 KB Last Updated: 11 Feb 2013Version: 1.0
This article describes the issue of the routes being populated between the hub and spokes, but now between the spokes, when RIP is used for dynamic routing in a hub and spoke VPN scenario with a single tunnel interface.
Routes are populated between the hub and the spokes, but not between the spokes, when RIP is used for dynamic routing in a hub and spoke VPN scenario with a single tunnel interface.
This issue occurs when either of the following options are selected on the tunnel interface that is bound to the VPN:

  • Split horizon with poison reverse.

  • Split horizon without poison reverse.

When Split horizon is enabled, the routes that are received on one interface are not re-advertised via the same interface. This prevents the routes from one spoke to be populated on another spoke.
For this to work, you have to disable split horizon on the tunnel interface that is being shared by the VPNs.

The command for this is:
unset interface <tunnel interface name> protocol RIP split-horizon
Alternatively, via the WebUI, go to Network > Interfaces, edit the tunnel interface, go to RIP, and select the Disabled radio button for the Split Horizon section:

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Security Alerts and Vulnerabilities

Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search