Apparently, the IOS XR "mpls ip-ttl-propagate disable" command is unable to hide the IP address / MPLS label of the PE egress router:
CPE1#traceroute 1.1.1.1 probe 1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 2.1.0.1 [AS 65000] 1 msec <- PE ingress - address of the link to CPE1 (ok)
2 172.16.1.1 [AS 6500] 1 msec <- PE egress - address of internal MPLS link to core (bad)
3 2.3.1.2 [AS 65001] 1 msec <- CE/Internet transit node (ok)
4 1.1.1.1 [AS 65002] 1 msec <- CE/Internet destination node (ok)
CPE2#trace 1.2.1.1 probe 1
Type escape sequence to abort.
Tracing the route to 1.2.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 2.2.1.1 [AS 65005] 1 msec 1 msec 1 msec <- PE ingress - address of the link to CPE2 (ok)
2 2.3.2.1 [AS 65005] [MPLS: Label 17020 Exp 0] 1 msec 1 msec 0 msec <- PE egress - address of (public) link to other CE/Internet (ok) but MPLS label being shown (bad)
3 1.2.1.1 [AS 65002] 2 msec * 1 msec <- CE/Internet destination node (ok)
Depending on the PE router used to reach the destination, we are having different behaviours (even though they have similar configurations) but both are bad: one is showing the private address of the MPLS link to the P router, and the other is showing a public address of the public link towards the destination but MPLS label information is displayed.
Has anyone faced a similar problem with IOS XR?
Thanks in advance,
Rui Antunes
