Hi
We have the requirement to setup a public wifi access point for customers.
To setup the public wifi network and ensure it is completely separated form our corporate network we have chosen to use a VRF at both the data center side and branch office side. Between the data center and the branch office we are going to run a GRE tunnel within our WAN.
So far we have configured the VRF, public interface and the tunnel - from the branch office and data center we can ping both ends of the tunnel and on the data center side we can ping our upstream however once we setup the default route on the branch VRF we cannot ping any network aside from the VRF network 172.12.1.0
Any help or suggestions greatly appreciated
Extracted configuration below;
Router 2 (Branch)
---------------------------------
interface Tunnel0
ip vrf forwarding PublicNet
ip address 172.16.1.2 255.255.255.252
ip tcp adjust-mss 1436
tunnel source 192.168.53.1
tunnel destination 192.168.50.4
end
!
ip route vrf PublicNet 0.0.0.0 0.0.0.0 Tunnel0 172.16.1.1
!
ip vrf PublicNet
description Public Netwrk
!
Router 1 (Datacenter)
--------------------------------------------
interface FastEthernet0/1.903
encapsulation dot1Q 903
ip vrf forwarding PublicNet
ip address 202.xxx.xxx.xxx 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
no cdp enable
!
interface Tunnel0
ip vrf forwarding PublicNet
ip address 172.16.1.1 255.255.255.252
ip virtual-reassembly
ip tcp adjust-mss 1436
tunnel source 192.168.50.4
tunnel destination 192.168.53.1
!
ip route vrf PublicNet 0.0.0.0 0.0.0.0 202.xxx.xxx.xxx (upstream)
