RE: Strange VPN reachability issue

+ 1

Was just about to say it looks like a Label issue. Can you post your MPLS configs as well as BGP ?

Thanks

CCIE#23962

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Rick Mur
Sent: Thursday, June 04, 2009 10:35 PM
To: Bryan Bartik
Cc: Splinter; Cisco certification
Subject: Re: Strange VPN reachability issue

Splinter,

It looks like an issue with exchanging inter-AS labels. Or the path
that is taken on the routers. Are the BGP next-hop's loopback
addresses? If not you could run into some PHP issues. Do you have an
end-to-end LSP for this prefix?
I find it quite difficult to get an overview of your topology. Could
you make a simple drawing?

Rick Mur
CCIE2 #21946 (R&S / SP)
rick_at_rickmur.com

On 4 jun 2009, at 22:21, Bryan Bartik wrote:

> Splinter,
>
> It's hard to decipher what your topology is.
>
> Is this an Inter-AS MPLS VPN or single AS?
>
> One thing I often run into, is that I am not advertising the PE-CE
> link into
> the VPN and so my pings fail unless I source them from an interface
> that is
> actually being advertised into the VPN.
>
> Bryan Bartik
> CCIE #23707 (R&S), CCNP
> Sr. Support Engineer - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
>
> On Thu, Jun 4, 2009 at 12:29 PM, Splinter <splinter330_at_gmail.com>
> wrote:
>
>> Hi All,
>>
>> I seem to have a strange reachability issue within my MPLS VPN.
>>
>> here is my setup:
>>
>> I have BGP VPN4 setup between R2,R8,R7,R9, R9 is my route-reflector
>>
>> there is a EBGP VPNV4 between R2 and R4 and R9 and R6
>>
>> I have VRF Site ABC configure on R2, R7, R8 and R6
>>
>> i am advertising 10.10.66.0/24 on R6 and i can see this route on
>> all the
>> routers vpn table.
>>
>> R2:
>> Route Distinguisher: 1010:10
>> * i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
>> *> 10.10.24.4 0 1010 i
>>
>> R9:
>> Route Distinguisher: 1010:10
>> *> 10.10.66.0/24 10.10.69.6 0 0 1010 i
>> * i 172.10.0.2 0 100 0 1010 i
>>
>> R7:
>> Route Distinguisher: 1010:10
>> *>i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
>>
>> R8:
>> Route Distinguisher: 1010:10
>> *>i10.10.66.0/24 172.10.0.9 0 100 0 1010 i
>>
>> I also see the route on my CE routes. I can only ping the
>> 10.10.66.6 route
>> from R2's vrf ABC.
>>
>> Why i cannot ping from any other vrf Site ABC except R2. i am
>> importing all
>> the vrf rd between the sites as well.
>>
>> Splinter
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Jun 05 2009 - 09:57:43 ART