ISR 4331 with OSPF troubles in VRF Lite

[GTC Hubgrade]

Hello,

 i've a MPLS network, and i'm configuring a ISR 4331 with Cisco IOS XE Software, Version 03.13.02.S, my connection with the WAN is through a Ethernet connection, and i'm using OSPF for WAN connection and the OSPF receive all the routes in databsae but not all the routes passes to the routing table, i don't have any filter on OSPF.

If i do the same configuration on same interface without vrf lite works normally.

Do you have any idea of the cause of this problem?

My ospf database:

          OSPF Router with ID (10.200.100.74) (Process ID 999)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
10.200.100.74   10.200.100.74   1225        0x80000010 0x005BAB 1
10.200.100.94   10.200.100.94   1243        0x800000C3 0x00CB4B 1

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
10.200.100.94   10.200.100.94   1243        0x80000009 0x0018F6

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
10.200.0.1      10.200.100.94   988         0x8000000A 0x00CB14 3489725440
10.200.0.2      10.200.100.94   988         0x8000000A 0x00C11D 3489725440
10.200.0.3      10.200.100.94   988         0x8000000A 0x00B726 3489725440
10.200.0.4      10.200.100.94   988         0x8000000A 0x00AD2F 3489725440
10.200.0.5      10.200.100.94   1243        0x80000009 0x002407 0
10.200.0.6      10.200.100.94   988         0x8000000A 0x009941 3489725440
10.200.0.7      10.200.100.94   988         0x8000000A 0x008F4A 3489725440
10.200.0.12     10.200.100.94   988         0x8000000A 0x005D77 3489725440
10.200.0.13     10.200.100.94   988         0x8000000A 0x005380 3489725440
10.200.0.19     10.200.100.94   988         0x8000000A 0x0017B6 3489725440
10.200.0.20     10.200.100.94   988         0x8000000A 0x000DBF 3489725440
10.200.103.96   10.200.100.94   988         0x80000008 0x00E950 3489725440
10.200.150.0    10.200.100.94   988         0x8000000A 0x00A2C6 3489725440
10.200.253.20   10.200.100.74   1225        0x80000009 0x001C16 0
192.168.65.0    10.200.100.94   1243        0x80000009 0x00C295 0

My routing table:

      10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O E2     10.200.0.5/32 
           [110/20] via 10.200.100.94, 00:14:56, GigabitEthernet0/0/0.999
C        10.200.100.64/27 is directly connected, GigabitEthernet0/0/0.999
L        10.200.100.74/32 is directly connected, GigabitEthernet0/0/0.999
C        10.200.253.20/32 is directly connected, Loopback999
O E2  192.168.65.0/24 
           [110/20] via 10.200.100.94, 00:14:56, GigabitEthernet0/0/0.999

My OSPF configuration:

router ospf 999 vrf GESTAO_EMACOM
 router-id 10.200.100.74
 redistribute connected subnets
 passive-interface default
 no passive-interface GigabitEthernet0/0/0.999
 network 10.200.100.64 0.0.0.31 area 0

[Vasilii Mikhailovskii · Accepted solution]

Hello.

If this is a CE (not PE) you need "capability vrf-lite" for the OSPF process.

[Ruben Cocheno · Accepted solution]

"The OSPF Support for Multi-VRF on CE Routers feature provides the capability of suppressing provider edge (PE) checks that are needed to prevent loops when the PE is performing a mutual redistribution of packets between the OSPF and BGP protocols. When VPN routing and forward (VRF) is used on a router that is not a PE (that is, one that is not running BGP), the checks can be turned off to allow for correct population of the VRF routing table with routes to IP prefixes. "

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/12-4t/iro-12-4t-book/iro-sup-vrf.html

So you need add "capability vrf-lite" under OSPF process