how to implement half-duplex vrf for a hub-spoke mpls vpn

[hetao]

I'd like to establish a hub-spoke mpls vpn on a provider's network. The requirements are:

All spoke use the same vrf instance, including on a PE with two CE;

Most spoke site cannot communicate with each other, but can communicate with hub site;

Some specific spoke sites can communicate with each other and Hub site;

How to implement this result? I have found some documents about half-duplex vrf, which seem be the solution, but how to configure it?

Anyone can give some solution and configuration sample?

Thanks

[mheusinger]

Hello,

I am not so sure that half duplex VRF will support all of your requirements. Lets assume you want to have spoke1 and spoke2 comunicating with each other and hub1. And let spoke3 communicate to hub1 and not to spoke1 and spoke2. An example config could look like this:

ip vrf spoke1

rd 65000:1

route-target import 65000:101

route-target export 65000:102

route-target import 65000:103

route-target export 65000:103

ip vrf spoke2

rd 65000:2

route-target import 65000:101

route-target export 65000:102

route-target import 65000:103

route-target export 65000:103

ip vrf spoke3

rd 65000:3

route-target import 65000:101

route-target export 65000:102

ip vrf hub1

rd 65000:100

route-target export 65000:101

route-target import 65000:102

Here route-target 65000:103 enables communication between spoke1 and spoke2, whereas 65000:101 and 65000:102 enable the spoke-hub communication WITHOUT spoke-spoke communication.

You could place the different VRFs in the example on the same or on different PE routers. Just make sure that the spoke access interfaces are connected to the proper VRF. As far as I understand your requirements this should meet them. Make sure however to adjust this to your AS number and naming conventions.

Hope this helps! Please rate all posts.

Regards, Martin

[hetao]

Thanks for your configuration, Martin.

But what I need is all or most spokes are on the same vrf instance, since more vrfs on a PE will comsume more memories. Cisco have post the duplex vrf at:

http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_feature_guide09186a00801f9a02.html

Seem half duplex vrf is the solution, but I don't know whether it can only applied within PPPoE, or can be applied within any scenarios.

By the way, I heard Cisco have the solution for hub-spoke mpls vpn as the hub Pe should have two vrf to Hub CE, but why?

Thanks

[deepak.vyas.ccip]

whereever the communication is required u have to import the route targets otherwise u dont have to import.