cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
816
Views
0
Helpful
3
Replies

IOS XR VRF LITE Leaking

uni1389
Level 1
Level 1

Hi, 

Am trying to use VRF-Lite Route leaking , but am able to import/export routes between two vrfs.  Ping is working within VRF to/from hosts , but am not able ping between two nodes.(Server/Host). Configuration/toplogy is mentioned below for feedback.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
RP/0/RP0/CPU0:ASR9K#show running-config vrf
vrf BLUE
rd 172:16
address-family ipv4 unicast
import route-target
168:11
172:16
!
export route-target
168:11
172:16
!
!
!
vrf WHITE
rd 168:11
address-family ipv4 unicast
import route-target
168:11
172:16
!
export route-target
168:11
172:16

RP/0/RP0/CPU0:ASR9K#show run interface gigabitEthernet 0/0/0/0
interface GigabitEthernet0/0/0/0
cdp
vrf BLUE
ipv4 address 172.16.20.1 255.255.255.0

RP/0/RP0/CPU0:ASR9K#show run interface gigabitEthernet 0/0/0/1

interface GigabitEthernet0/0/0/1
cdp
vrf WHITE
ipv4 address 192.168.11.1 255.255.255.0
!

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
RP/0/RP0/CPU0:ASR9K#ping vrf BLUE 172.16.20.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.20.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
RP/0/RP0/CPU0:ASR9K#ping vrf BLUE 172.16.20.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.20.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 33/41/45 ms

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

RP/0/RP0/CPU0:ASR9K#show route vrf ALL

VRF: BLUE


Codes: C - connected, S - static, R - RIP, B - BGP, (>) - Diversion path
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - ISIS, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, su - IS-IS summary null, * - candidate default
U - per-user static route, o - ODR, L - local, G - DAGR, l - LISP
A - access/subscriber, a - Application route
M - mobile route, r - RPL, t - Traffic Engineering, (!) - FRR Backup path

Gateway of last resort is not set

C 172.16.20.0/24 is directly connected, 06:24:07, GigabitEthernet0/0/0/0
L 172.16.20.1/32 is directly connected, 06:24:07, GigabitEthernet0/0/0/0

VRF: WHITE


Codes: C - connected, S - static, R - RIP, B - BGP, (>) - Diversion path
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - ISIS, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, su - IS-IS summary null, * - candidate default
U - per-user static route, o - ODR, L - local, G - DAGR, l - LISP
A - access/subscriber, a - Application route
M - mobile route, r - RPL, t - Traffic Engineering, (!) - FRR Backup path

Gateway of last resort is not set

C 192.168.11.0/24 is directly connected, 05:41:26, GigabitEthernet0/0/0/1
L 192.168.11.1/32 is directly connected, 05:41:26, GigabitEthernet0/0/0/1

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

vrf lite.png

3 Replies 3

Harold Ritter
Spotlight
Spotlight

Hi @uni1389 ,

You need to configure BGP for the import/export to work. Here's a simple configuration of how it should be configured:

router bgp 111

address-family vpnv4 unicast

!

vrf WHITE

address-family ipv4 unicast

redistribute connected

vrf BLUE

address-family ipv4 unicast

redistribute connected

Regards,

Regards,
Harold Ritter, CCIE #4168 (EI, SP)

Thanks Harold, 

can we do it without BGP instance, like with static route.

Regards

 

Hi @uni1389 ,

Yes, it is certainly possible to use static routes to achieve the same:

router static
vrf BLUE
address-family ipv4 unicast
192.168.11.0/24 vrf WHITE GigabitEthernet0/0/0/1
!
!
vrf WHITE
address-family ipv4 unicast
172.16.20.0/24 vrf BLUE GigabitEthernet0/0/0/0
!
!
!

Regards,

Regards,
Harold Ritter, CCIE #4168 (EI, SP)