05-08-2003 02:24 AM
We have an MPLS VPN based network based on leased lines. One of the VPN's connects to a banking service , a number of the other VPN's would also like to make use of this service. I would like to export the specific route from the "Banking VPN" into the other VPN's but this route only. I have tried to apply an export map to the VRF but this does not seem to work , the only other way to control this would be to apply an import map to every one of the VRF's where I would like to import this route to but that does not seem to be the most effciennt way to do it.
What are the criteria for an export map to work ? I might be doing something incorrectly. Here is an example of the config I have done.
1) Created an ACL matching the ip of the route
ip access-list extended ABC
permit ip x.x.x.x 0.0.0.15 any
2) Created route-map to apply to VRF
route-map DEF permit 10
match ip address ABC
3) Applied the export map to the vrf
ip vrf XYZ
RD65000:999
export map DEF
route-target export 65000:999
When I do a show of the route-map I do not get any matches and a show vrf detail does indicate the export map to be applied. The destination addresses of the route is reachable from the VRF in question.
Any help would be appreciated.
Solved! Go to Solution.
05-09-2003 03:27 AM
Hi,
The operation of a export map is different from an import map. In an export map you do the following:
* You tag the selected router (trough ACL or prefix list), and add an additional route-target to it.
* In the other VPN's you should then import that new route target.
ip vrf test
export map TEST
RD 65000:1
route-target both 65000:1
ip vrf TEST2
RD 65000:2
route-target both 65000:2
route-target import 65000:999
ip access-list ACL1 extended
permit X.X.X.X Y.Y.Y.Y.Y
route-map TEST
match ip address ACL1
set extcommunity RT 65000:999 additive
Hope this helps,
-Ives-
05-09-2003 03:27 AM
Hi,
The operation of a export map is different from an import map. In an export map you do the following:
* You tag the selected router (trough ACL or prefix list), and add an additional route-target to it.
* In the other VPN's you should then import that new route target.
ip vrf test
export map TEST
RD 65000:1
route-target both 65000:1
ip vrf TEST2
RD 65000:2
route-target both 65000:2
route-target import 65000:999
ip access-list ACL1 extended
permit X.X.X.X Y.Y.Y.Y.Y
route-map TEST
match ip address ACL1
set extcommunity RT 65000:999 additive
Hope this helps,
-Ives-
05-09-2003 04:31 AM
Yep , this works perfectly . Thank You.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide