Re: Internet Access

Hey Andy, I hope you are well.

Perhaps I will lab this up and play with some stuff ... however ... here are
some thoughts for now.

Not sure this is the best method, however within BGP and for that particular
ipv4 vrf family, you can create a default route via the default-info
command, and propagate that to all PE routers with that VPN.

This way, all remote PE routers would get a default route via iBGP.

A real challenge is on the PE that originates this default route, how will
this PE route traffic to the internet? You did it right with the global
keyword. At least in a lab this is a fairly easy way to direct traffic.

Are there better ways? I would love to hear others thoughts on this as my
SP experience is related to private MPLS networks ...

Questions Andy ... just to make sure we are understanding the end to end
path.

What about return global traffic to this PE? How will the internet know to
route back to this VPN network? You need NAT or some advertising.

When the return global traffic gets to the originating PE, what will the PE
router do with this returning global traffic?

In my lab and in the past, I have added the vpn routes to my global table so
that the other routers in my lab would know how to get back to the VPNs.

On the PE router, I then add some static routes to the VPN interfaces.

It works in my lab, but as mentioned I would love to hear others thoughts.
I have a suspicion that my configs are more of a hack job and not the
graceful solution that is more likely to be employed.

HTH,

Andrew Lee Lissitz

On Mon, Nov 16, 2009 at 7:17 AM, andy thomas <thomasandy32_at_gmail.com> wrote:

> Hey Experts,
>
>
>
> A------B--------C-------------Customer D (MPLS VPN)
> |
> |
> E---------------(Customer F remote site)
>
> B is the internet gateway originating a default route via
> OSPF(default-information originate) pointing a static default route to A
> which is providing a internet access to router B ,C,and E. I want to
> provide
> a internet access to customer VRF D and am pointing to global route table
> for the route of B interface,Everything is working fine customer D is able
> to go on internet.
>
> Customer D & F is exchanging same RT and they are able to exchange private
> routes amoung themselves but when the default static route for the
> internet is redistributed in VRF on router C it is not advertised to Router
> E for customer F,why??? any specific reason.???? Added a defualt static
> route on E same what i did on C pointing to global route table of Interface
> B to let customer F go on the internet.
>
> Configs:
>
> Router C:
>
> ip route vrf customer D 0.0.0.0 0.0.0.0 (router B Interface) global
>
> address-family ipv4 vrf cutomer D
> redistribute connected
> redistribute static
> no synchronization
> exit-address-family
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Andrew Lee Lissitz
all.from.nj_at_gmail.com
Blogs and organic groups at http://www.ccie.net