cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3171
Views
15
Helpful
2
Replies

bgp routes not getting redistributed in ospf vrf in mpls vpn environment

kaustav.gupta
Level 1
Level 1

HI,

I have a secnario where CE1 - PE1  - VPNV4 cloud  - PE2 - CE2

CE1 has vrf A ospf process id 102  and vrf B process id 201.

CE2 has vrf A ospf process id 102  and vrf B process id 401.

I can see that PE1 has CE2 routes in the vrf A table and Pe2 has CE 1 routes in the respective VRF tables and in the genral vpnv4 table. Therefore I can conclude that OSPF to bgp redistribution configured in respective vrfs are working but bgp to ospf redistrbution is not.

I may be missing something . Any help is appreciated.

I have uploaded the configurations and out put for reference.

Regards

Kas

1 Accepted Solution

Accepted Solutions

Marwan ALshawi
VIP Alumni
VIP Alumni

This is a Multi VRF CE, Have you tried OSPF capability vrf-lite ?

The OSPF Support for Multi-VRF on CE Routers feature provides the capability of suppressing provider edge (PE) checks that are needed to prevent loops when the PE is performing a mutual redistribution of packets between the OSPF and BGP protocols. When VPN routing and forward (VRF) is used on a router that is not a PE (that is, one that is not running BGP), the checks can be turned off to allow for correct population of the VRF routing table with routes to IP prefixes.

capability vrf-lite enables VRF-Lite on the Multi-VRF CE router running OSPF.

With Multi-VRF CE, the CE router acts as a PE router and performs the checks for down bits and domain tags.

try to add it in the CEs OSPF

router ospf 102 vrf A

capability vrf-lite

router ospf 201 vrf B

capability vrf-lite

View solution in original post

2 Replies 2

Marwan ALshawi
VIP Alumni
VIP Alumni

This is a Multi VRF CE, Have you tried OSPF capability vrf-lite ?

The OSPF Support for Multi-VRF on CE Routers feature provides the capability of suppressing provider edge (PE) checks that are needed to prevent loops when the PE is performing a mutual redistribution of packets between the OSPF and BGP protocols. When VPN routing and forward (VRF) is used on a router that is not a PE (that is, one that is not running BGP), the checks can be turned off to allow for correct population of the VRF routing table with routes to IP prefixes.

capability vrf-lite enables VRF-Lite on the Multi-VRF CE router running OSPF.

With Multi-VRF CE, the CE router acts as a PE router and performs the checks for down bits and domain tags.

try to add it in the CEs OSPF

router ospf 102 vrf A

capability vrf-lite

router ospf 201 vrf B

capability vrf-lite

kaustav.gupta
Level 1
Level 1

HI,

I apologize that I could not uodate my query earlier as i had tested with capability vrf-lite and it was working. I was tied up to analyse what was actually going on with the cpapability vrf-lite. I was not satisifed with cisco doc. So analysed it further to check that the CE ospf shows connected to mpls vpn super backbone which meant that it was acting as a PE. SO therefore it was dropping the LSA coming this way      CE2 --> PE2 -- > PE1 -- > CE1 . Now as CE1 was acting aPE so the DN bit set LSA were dropping there abd vis a vis at CE2. so apply cap vrf-llite solved the isse .

aNYWAYS THANKS mARWANSHAWI