cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1867
Views
2
Helpful
5
Replies

Clarification of VRF Route Leaking

AvidPontoon1
Level 1
Level 1


After confirming MPLS L3VPNs and doing some internet breakout tasks. I wanted to have a look at leaking routes between VRFs away from L3VPNs.

 

I have been able to use a import map within the VRF to import specific routes using a route-map and prefix lists. However want to import routes based on their RT Value within BGP. As these are already on the routes it negates extra complexity with a second route-map so would like to do it that way. Also means less admin overhead on updating prefix lists rather than adding an RT.

I have routes in the IPv4 BGP RIB on a router with ‘RT:1:1’. Having set the ‘route-target import 1:1’ command within the VRF for IPv4 unicast. None of the routes are being imported imported using this method.

I had a feeling that this is because the routes are in the IPv4 Unicast BGP RIB and not the VPNv4 BGP RIB.

 

Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?

 

The routes I’m wanting to import into the VRF aren’t coming from within a VRF on the other side. I’m using a route map to set the extended community RT to 1:1 on export from a BGP neighbour command. However, looking at the routes in the BGP IPv4 RIB do have the RT set to 1:1.

 

I’m using standard Cisco IOS.

5 Replies 5

Harold Ritter
Spotlight
Spotlight

Hi @AvidPontoon1 ,

 

Happy New Year!

 

> Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?

 

That is correct. A route in address family ipv4 unicast will not be imported into a VRF, even though it has the proper RT set. The route leaking feature is the only way to do this.

 

Regards,

 

Thanks Harold,


Happy New Year to you too!

 

How would I go about getting this working then? Do I just have to use an import route-map? Or is it better to get the routes into the VPNv4 table and do it that way using the RTs? Not sure what best practice is here?

Hi @AvidPontoon1 ,

 

If the goal is to mutually leak the routes from global to vrf and vice versa, you can do something like this.

 

vrf definition test

 rd 2:1

 !

 address-family ipv4

  import ipv4 unicast map Global2VRF

  export ipv4 unicast map VRF2Global

 

Regards,

Deepak Kumar
VIP Alumni
VIP Alumni

Could you share configuration and bgp output here? A few questions are not clear.

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
Review Cisco Networking for a $25 gift card