Clarification of VRF Route Leaking
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 08:11 AM - edited 01-02-2022 08:11 AM
After confirming MPLS L3VPNs and doing some internet breakout tasks. I wanted to have a look at leaking routes between VRFs away from L3VPNs.
I have been able to use a import map within the VRF to import specific routes using a route-map and prefix lists. However want to import routes based on their RT Value within BGP. As these are already on the routes it negates extra complexity with a second route-map so would like to do it that way. Also means less admin overhead on updating prefix lists rather than adding an RT.
I have routes in the IPv4 BGP RIB on a router with ‘RT:1:1’. Having set the ‘route-target import 1:1’ command within the VRF for IPv4 unicast. None of the routes are being imported imported using this method.
I had a feeling that this is because the routes are in the IPv4 Unicast BGP RIB and not the VPNv4 BGP RIB.
Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?
The routes I’m wanting to import into the VRF aren’t coming from within a VRF on the other side. I’m using a route map to set the extended community RT to 1:1 on export from a BGP neighbour command. However, looking at the routes in the BGP IPv4 RIB do have the RT set to 1:1.
I’m using standard Cisco IOS.
- Labels:
-
Other Routing
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 08:33 AM
Hi @AvidPontoon1 ,
Happy New Year!
> Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?
That is correct. A route in address family ipv4 unicast will not be imported into a VRF, even though it has the proper RT set. The route leaking feature is the only way to do this.
Regards,
Harold Ritter, CCIE #4168 (EI, SP)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 08:36 AM
Thanks Harold,
Happy New Year to you too!
How would I go about getting this working then? Do I just have to use an import route-map? Or is it better to get the routes into the VPNv4 table and do it that way using the RTs? Not sure what best practice is here?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 10:33 AM - edited 01-02-2022 10:44 AM
Hi @AvidPontoon1 ,
If the goal is to mutually leak the routes from global to vrf and vice versa, you can do something like this.
vrf definition test
rd 2:1
!
address-family ipv4
import ipv4 unicast map Global2VRF
export ipv4 unicast map VRF2Global
Regards,
Harold Ritter, CCIE #4168 (EI, SP)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 01:19 PM
VRF leaking
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200158-Configure-Route-Leaking-between-Global-a.html
leaking VRF and global.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-02-2022 11:36 PM
Could you share configuration and bgp output here? A few questions are not clear.
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
