01-02-2022 08:11 AM - edited 01-02-2022 08:11 AM
After confirming MPLS L3VPNs and doing some internet breakout tasks. I wanted to have a look at leaking routes between VRFs away from L3VPNs.
I have been able to use a import map within the VRF to import specific routes using a route-map and prefix lists. However want to import routes based on their RT Value within BGP. As these are already on the routes it negates extra complexity with a second route-map so would like to do it that way. Also means less admin overhead on updating prefix lists rather than adding an RT.
I have routes in the IPv4 BGP RIB on a router with ‘RT:1:1’. Having set the ‘route-target import 1:1’ command within the VRF for IPv4 unicast. None of the routes are being imported imported using this method.
I had a feeling that this is because the routes are in the IPv4 Unicast BGP RIB and not the VPNv4 BGP RIB.
Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?
The routes I’m wanting to import into the VRF aren’t coming from within a VRF on the other side. I’m using a route map to set the extended community RT to 1:1 on export from a BGP neighbour command. However, looking at the routes in the BGP IPv4 RIB do have the RT set to 1:1.
I’m using standard Cisco IOS.
01-02-2022 08:33 AM
Hi @AvidPontoon1 ,
Happy New Year!
> Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?
That is correct. A route in address family ipv4 unicast will not be imported into a VRF, even though it has the proper RT set. The route leaking feature is the only way to do this.
Regards,
01-02-2022 08:36 AM
Thanks Harold,
Happy New Year to you too!
How would I go about getting this working then? Do I just have to use an import route-map? Or is it better to get the routes into the VPNv4 table and do it that way using the RTs? Not sure what best practice is here?
01-02-2022 10:33 AM - edited 01-02-2022 10:44 AM
Hi @AvidPontoon1 ,
If the goal is to mutually leak the routes from global to vrf and vice versa, you can do something like this.
vrf definition test
rd 2:1
!
address-family ipv4
import ipv4 unicast map Global2VRF
export ipv4 unicast map VRF2Global
Regards,
01-02-2022 01:19 PM
VRF leaking
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200158-Configure-Route-Leaking-between-Global-a.html
leaking VRF and global.
01-02-2022 11:36 PM
Could you share configuration and bgp output here? A few questions are not clear.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide