RE: static global routes (internet access from a VPN)

From: laidlaw@consecro.com
Date: Thu Mar 22 2007 - 18:06:23 ART


you need a route in the global routing table for the CE subnet so the
traffic can go into the vrf.

something like

ip route 150.100.1.0 255.255.255.0 int f 0/0
or
ip route 150.100.2.0 255.255.255.0 150.100.1.2

> -------- Original Message --------
> Subject: static global routes (internet access from a VPN)
> From: Koen Zeilstra <koen@koenzeilstra.com>
> Date: Thu, March 22, 2007 4:30 am
> To: ccielab@groupstudy.com
>
> Hi group,
>
> I am having trouble grasping some parts of the global route topic.
>
> On a PE which connects to a internet router I have configured the
> following
>
> PE1
> ip vrf INTERNETACCESS
> rd 11:1
> route-target export 11:1
> route-target import <all other customers>
> !
> int f0/0
> descr *** to internet
> ip address 150.100.1.1 255.255.255.0
> !
> ip route vrf INTERNETACCESS 0.0.0.0 0.0.0.0 150.100.1.254 f0/0 global
> !
>
> The static gets advertised in the BGP ipv4 vrf INTERNETACCESSaddress
> family and is visble via vpnv4 advertisements in all VPN's that need
> internet access.
>
> My question is: how does the return traffic go back into a VRF?
>
> I see the traffic hit the internet host and the traffic is returned on the
> ethernet link (which is in the global table). However the PE1 device
> cannot route the traffic back into the VRF. What am I missing here?
>
> See also:
> http://www.cisco.com/warp/public/105/internet_access_mpls_vpn.html#table2
>
> thanks in advance for your help!
>
> Cheers,
>
> Koen
> -----------------------
> USER, n.:
> The word computer professionals use when they mean "idiot."
> -- Dave Barry, "Claw Your Way to the Top"
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART