static global routes (internet access from a VPN)

From: Koen Zeilstra (koen@koenzeilstra.com)
Date: Thu Mar 22 2007 - 06:30:18 ART


Hi group,

I am having trouble grasping some parts of the global route topic.

On a PE which connects to a internet router I have configured the
following

PE1
ip vrf INTERNETACCESS
  rd 11:1
  route-target export 11:1
  route-target import <all other customers>
!
int f0/0
  descr *** to internet
  ip address 150.100.1.1 255.255.255.0
!
ip route vrf INTERNETACCESS 0.0.0.0 0.0.0.0 150.100.1.254 f0/0 global
!

The static gets advertised in the BGP ipv4 vrf INTERNETACCESSaddress
family and is visble via vpnv4 advertisements in all VPN's that need
internet access.

My question is: how does the return traffic go back into a VRF?

I see the traffic hit the internet host and the traffic is returned on the
ethernet link (which is in the global table). However the PE1 device
cannot route the traffic back into the VRF. What am I missing here?

See also:
http://www.cisco.com/warp/public/105/internet_access_mpls_vpn.html#table2

thanks in advance for your help!

Cheers,

Koen
-----------------------
USER, n.:
         The word computer professionals use when they mean "idiot."
                 -- Dave Barry, "Claw Your Way to the Top"



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART