Clarification of VRF Route Leaking

[AvidPontoon1]

After confirming MPLS L3VPNs and doing some internet breakout tasks. I wanted to have a look at leaking routes between VRFs away from L3VPNs.

I have been able to use a import map within the VRF to import specific routes using a route-map and prefix lists. However want to import routes based on their RT Value within BGP. As these are already on the routes it negates extra complexity with a second route-map so would like to do it that way. Also means less admin overhead on updating prefix lists rather than adding an RT.

I have routes in the IPv4 BGP RIB on a router with ‘RT:1:1’. Having set the ‘route-target import 1:1’ command within the VRF for IPv4 unicast. None of the routes are being imported imported using this method.

I had a feeling that this is because the routes are in the IPv4 Unicast BGP RIB and not the VPNv4 BGP RIB.

Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?

The routes I’m wanting to import into the VRF aren’t coming from within a VRF on the other side. I’m using a route map to set the extended community RT to 1:1 on export from a BGP neighbour command. However, looking at the routes in the BGP IPv4 RIB do have the RT set to 1:1.

I’m using standard Cisco IOS.

[Harold Ritter]

Hi @AvidPontoon1 ,

Happy New Year!

> Is that a correct assumption? Or should what I’m doing work and I’m doing something wrong?

That is correct. A route in address family ipv4 unicast will not be imported into a VRF, even though it has the proper RT set. The route leaking feature is the only way to do this.

Regards,

[AvidPontoon1]

Thanks Harold,

Happy New Year to you too!

How would I go about getting this working then? Do I just have to use an import route-map? Or is it better to get the routes into the VPNv4 table and do it that way using the RTs? Not sure what best practice is here?

[Harold Ritter]

Hi @AvidPontoon1 ,

If the goal is to mutually leak the routes from global to vrf and vice versa, you can do something like this.

vrf definition test

 rd 2:1

 !

 address-family ipv4

  import ipv4 unicast map Global2VRF

  export ipv4 unicast map VRF2Global

Regards,

[MHM Cisco World]

VRF leaking 
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200158-Configure-Route-Leaking-between-Global-a.html

leaking VRF and global.

[Deepak Kumar]

Could you share configuration and bgp output here? A few questions are not clear.