Re: static global routes (internet access from a VPN)

From: Koen Zeilstra (koen@koenzeilstra.com)
Date: Thu Mar 22 2007 - 10:14:55 ART


Marius,

After posting my question I have tried that. The return traffic now gets
dropped one hop further at the next PE.

IGW----PE1----PE2----CE----

There's no way to get it back into the VRF's. I guess the return traffic
needs to go via the global table.

thanks,

Koen

-----------------------
Watson's Law:
        The reliability of machinery is inversely proportional to the
number and significance of any persons watching it.

On Thu, 22 Mar 2007, Marius PREDOIU wrote:

| Hi,
|
| > From that link you mentioned you can see that you need a static route in
| global routing table for the CE network:
|
| http://www.cisco.com/warp/public/105/internet_access_mpls_vpn.html#table2
|
| ip route 11.11.11.0 255.255.255.0 Serial8/0 192.168.10.1
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
| You need the equiv of this, for your config!
|
|
| --
| Marius PREDOIU
| CCIE #17592 (R&S)
| --
|
| On Thu, 22 Mar 2007, Koen Zeilstra wrote:
|
| > Hi group,
| >
| > I am having trouble grasping some parts of the global route topic.
| >
| > On a PE which connects to a internet router I have configured the following
| >
| > PE1
| > ip vrf INTERNETACCESS
| > rd 11:1
| > route-target export 11:1
| > route-target import <all other customers>
| > !
| > int f0/0
| > descr *** to internet
| > ip address 150.100.1.1 255.255.255.0
| > !
| > ip route vrf INTERNETACCESS 0.0.0.0 0.0.0.0 150.100.1.254 f0/0 global
| > !
| >
| > The static gets advertised in the BGP ipv4 vrf INTERNETACCESSaddress family
| > and is visble via vpnv4 advertisements in all VPN's that need internet
| > access.
| >
| > My question is: how does the return traffic go back into a VRF?
| >
| > I see the traffic hit the internet host and the traffic is returned on the
| > ethernet link (which is in the global table). However the PE1 device cannot
| > route the traffic back into the VRF. What am I missing here?
| >
| > See also:
| > http://www.cisco.com/warp/public/105/internet_access_mpls_vpn.html#table2
| >
| > thanks in advance for your help!
| >
| > Cheers,
| >
| > Koen
| > -----------------------
| > USER, n.:
| > The word computer professionals use when they mean "idiot."
| > -- Dave Barry, "Claw Your Way to the Top"
| >
| > _______________________________________________________________________
| > Subscription information may be found at:
| > http://www.groupstudy.com/list/CCIELab.html
|
| _______________________________________________________________________
| Subscription information may be found at:
| http://www.groupstudy.com/list/CCIELab.html
|



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART