Re: Strange VPN reachability issue

Splinter,

It's hard to decipher what your topology is.

Is this an Inter-AS MPLS VPN or single AS?

One thing I often run into, is that I am not advertising the PE-CE link into
the VPN and so my pings fail unless I source them from an interface that is
actually being advertised into the VPN.

Bryan Bartik
CCIE #23707 (R&S), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com

On Thu, Jun 4, 2009 at 12:29 PM, Splinter <splinter330_at_gmail.com> wrote:

> Hi All,
>
> I seem to have a strange reachability issue within my MPLS VPN.
>
> here is my setup:
>
> I have BGP VPN4 setup between R2,R8,R7,R9, R9 is my route-reflector
>
> there is a EBGP VPNV4 between R2 and R4 and R9 and R6
>
> I have VRF Site ABC configure on R2, R7, R8 and R6
>
> i am advertising 10.10.66.0/24 on R6 and i can see this route on all the
> routers vpn table.
>
> R2:
> Route Distinguisher: 1010:10
> * i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
> *> 10.10.24.4 0 1010 i
>
> R9:
> Route Distinguisher: 1010:10
> *> 10.10.66.0/24 10.10.69.6 0 0 1010 i
> * i 172.10.0.2 0 100 0 1010 i
>
> R7:
> Route Distinguisher: 1010:10
> *>i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
>
> R8:
> Route Distinguisher: 1010:10
> *>i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
>
> I also see the route on my CE routes. I can only ping the 10.10.66.6 route
> from R2's vrf ABC.
>
> Why i cannot ping from any other vrf Site ABC except R2. i am importing all
> the vrf rd between the sites as well.
>
> Splinter
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--
Blogs and organic groups at http://www.ccie.net