Could MPLS L3 VPN forward packet which CE configure VRF Lite?

[ปลาวาฬทราย RMUTT CPE IX]

Or does anyone have a lab for my test? Please share.

Diagram:

vrf lite - mplsl3 vpn - vrf lite

Will it have any change on mpls l3vpn configuration?

Thank you very much.

[Nagendra Kumar Nainar]

From L3VPN point of  view, you dont need any changes. VRF-Lite is nearly local to a box and other neighbors will not have a need to change anything.

[Jon Marshall]

As Nagendra said you shouldn't need to change anything on your MPLS VPN setup but it depends on how many VRFs you are using with VRF-Lite as to how you configure the connections to the PE device.

So for example lets say you had -

L3 switch -> CE1 -> PE1 -> MPLS -> PE2 -> CE2 -> L3 switch  and your L3 switches are using SVIs for vlan routing.

You want to extend two VRFs across the MPLS network.

1) on the L3 switches place the SVIs into the VRF.

2) the CE devices would need subinterfaces on their interfaces connecting to the L3 switches which are placed into the corresponding VRF

3) the CEs and PEs also need subinterfaces on their connections to each other and these are also placed into the corresponding VRF.

The PEs then just treat it as a different VPN.

If this is a lab obviously you can just create it. If it is a production network then you obviously need to talk to the SP because the PE device needs to be able to distinguish between VRFs.

An alternative is to use GRE tunnels on your CE device. So you still do steps 1) and 2) but then you create a GRE tunnel per VRF to the remote CE.

Using GRE tunnels would mean you didn't have to involve the SP.

Jon

[ปลาวาฬทราย RMUTT CPE IX]

I test lab follow to this document is work. I test with static route and OSPF is work. Now, I’m testing with BGP route. I found the PE doesn’t send the BGP routes from the other sites to the CE. How should I do?

Topology:
BGP vrf lite (vrf v11) CE1 - BGP - MPLS L3VPN (vrf v1) PE1 - PE2 (vrf v1) MPLS L3VPN - BGP - CE2 (vrf v11) vrf lite BGP

PE1#sho ip rou vrf v1

Gateway of last resort is not set

B    10.0.252.1/32 [200/0] via 10.0.0.11 (nexthop in vrf default), 1d22h

B    10.0.252.2/32 [200/0] via 10.0.0.14 (nexthop in vrf default), 1d22h

L    10.0.252.3/32 is directly connected, 1d22h, Loopback101

B    38.0.0.0/24 [200/0] via 10.0.0.11 (nexthop in vrf default), 1d04h

B    39.0.0.0/24 [200/0] via 10.0.0.14 (nexthop in vrf default), 05:13:07

B    40.0.0.0/24 [200/0] via 10.0.0.11 (nexthop in vrf default), 1d04h

C    41.0.0.0/24 is directly connected, 1d22h, GigabitEthernet0/0/1/2.14

L    41.0.0.3/32 is directly connected, 1d22h, GigabitEthernet0/0/1/2.14

B    208.0.0.0/24 [200/0] via 10.0.0.11 (nexthop in vrf default), 00:06:55

B    209.0.0.0/24 [200/0] via 10.0.0.14 (nexthop in vrf default), 00:08:14

B    210.0.0.0/24 [20/0] via 41.0.0.8, 00:11:17

CE1#sho ip bgp vpnv4 vrf v11

BGP table version is 23, local router ID is 172.16.30.5

   Network          Next Hop            Metric LocPrf Weight Path

Route Distinguisher: 800:1 (default for vrf v11)

*> 10.0.252.1/32    41.0.0.3                               0 18252 ?

*> 10.0.252.2/32    41.0.0.3                               0 18252 ?

*> 10.0.252.3/32    41.0.0.3                 0             0 18252 ?

*> 38.0.0.0/24      41.0.0.3                               0 18252 ?

*> 39.0.0.0/24      41.0.0.3                               0 18252 ?

*> 40.0.0.0/24      41.0.0.3                               0 18252 ?

r> 41.0.0.0/24      41.0.0.3                 0             0 18252 ?

*> 210.0.0.0        0.0.0.0                  0         32768 i

CE1#

[ปลาวาฬทราย RMUTT CPE IX]

Could I implement 1 vrf on PE per 2 vrf-lite from CE?