Re: MPLS VPN Related Query

From: Brian Dennis <bdennis_at_ine.com>
Date: Thu, 7 Mar 2013 12:22:16 -0600

By default you do not keep VPNv4 routes if you do not import them unless
you are a route-reflector for VPNv4. The message you showed below "DENIED
due to: extended community not supported" is the router saying that it
received a VPNV4 route but the RT (route target) wasn't one that it's
importing. Ideally it would say "DENIED due to: Route Target Not
Imported". The logic for not keeping the route is: why keep a route if
you aren't using it (not importing it) and can't advertise to anyone
(learned via iBGP and you aren't a RR for VPNv4 or no eBGP VPNv4 peers)?

If you want R3 to keep all VPNv4 routes even if it's not importing them
then use the "no bgp default route-target filter" command. A time when
this command is needed is when you're doing inter-AS VPNv4 and you learn a
route via iBGP but not importing and want to advertise the route to a
VPNv4 eBGP peer (see link below).

http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_connect
_asbr_ps6922_TSD_Products_Configuration_Guide_Chapter.html

-- 
Brian Dennis, CCIEx5 #2210 (R&S/ISP-Dial/Security/SP/Voice)
bdennis_at_ine.com
INE, Inc.
http://www.INE.com
On 3/7/13 2:35 AM, "Kalpesh Chheda" <kalpeshchheda_at_live.com> wrote:
>Ya See this
>
>*Mar  7 07:26:22.653: BGP(4): 2.2.2.2 rcvd 1:1:10.0.7.0/24, label 21 --
>DENIED due to:  extended community not supported;
>
>
>----------------------------------------
>> CC: ccielab_at_groupstudy.com
>> From: mothafungla_at_gmail.com
>> Subject: Re: MPLS VPN Related Query
>> Date: Thu, 7 Mar 2013 07:17:35 +0000
>> To: kalpeshchheda_at_live.com
>>
>> Does the debug ip bgp updates pick this up i.e denied due to
>>
>> --
>> BR
>>
>> Sent from my iPhone on 3
>>
>> On 7 Mar 2013, at 07:09, Kalpesh Chheda <kalpeshchheda_at_live.com> wrote:
>>
>> > Completely got that. p??
>> >
>> >
>> > Thanks Yuri.
>> > _______________________________
>> >> Date: Wed, 6 Mar 2013 23:01:50 -0800
>> >> Subject: Re: MPLS VPN Related Query
>> >> From: yuribank_at_gmail.com
>> >> To: kalpeshchheda_at_live.com
>> >>
>> >> Sorry, meant that I meant 'R2 by its virtue of its RR config'
>> >>
>> >> -Yuri
>> >>
>> >> On Wed, Mar 6, 2013 at 10:57 PM, Yuri Bank
>> >> <yuribank_at_gmail.com<mailto:yuribank_at_gmail.com>> wrote:
>> >> VPNv4 prefixes that do not match import filters for any configured
>>VRF
>> >> will get filtered by default. In certain situations, such as on
>> >> route-reflectors, this will cause issues.
>> >>
>> >> You can disable the behavior with:
>> >>
>> >> 'no bgp default route-target filter'
>> >>
>> >> Try configuring that on R3 (I'm assuming it is disabled by on R1 by
>> >> virtue of its RR configuration).
>> >>
>> >> -Yuri
>> >>
>> >> -
>> >> On Wed, Mar 6, 2013 at 10:34 PM, Kalpesh Chheda
>> >> <kalpeshchheda_at_live.com<mailto:kalpeshchheda_at_live.com>> wrote:
>> >> I have 3 routers connected serially. All three routers are PE.
>> >>
>> >> R1 ---- R2 ---- R3
>> >>
>> >> R1 is exporting some routes and R3 is importing that routes. R2 and
>>R3
>> >> are able to see vpnv4 routes in there vpnv4 table.
>> >>
>> >> But if R3 stops importing routes from R1 in to is VRF table. Routes
>>are
>> >> not even seen in its VPNv4 table. why?
>> >>
>> >> Because R2 have that VPNv4 routes by R1 in its table whether it is
>> >> importing or not. p 5
>> >>
>> >>
>> >> Blogs and organic groups at http://www.ccie.net
>> >>
>> >> 
>>_______________________________________________________________________
>> >> Subscription information may be found at:
>> >> http://www.groupstudy.com/list/CCIELab.html
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > 
>>_______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
>
>Blogs and organic groups at http://www.ccie.net
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Thu Mar 07 2013 - 12:22:16 ART

This archive was generated by hypermail 2.2.0 : Wed Apr 03 2013 - 19:06:19 ART