explicitly configuring node protection

I'm wondering what functionality this command gives?
tunnel mpls traffic-eng fast-reroute "node-protect"

FRR local protection can be either link or node, node is preferred by default. I created a topology with only a link protection bypass tunnel available and set the primary tunnel explicitly with the "node protection" keyword. I was expecting after protected interface failed, the tunnel would go down, wasn't the case, its rerouted using link protection.
Anyone know what exactly the "node-protect" knob does?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

d4nz1g

Im not a pro on TE, but i have ran into this doc (which is not clear enough):

MPLS Traffic Engineering (TE)--Fast Reroute (FRR) Link and Node Protection - Cisco

As far as i understood, it keeps track of the next hop (the other one after the tunnel termination) and manages to have a backup tunnel towards it, in case of a failure on the intermediate router.

daveyb

Node protect will keep a backup path that doesn't go via the same node as the primary path.

Link protect will just make sure there is a backup path.