explain this Config VPN with DLCI

[mohammad saeed]

Hi guys,

I have this VPN configuration for my netowor and I want to understand what does it mean! is there any redundancy? becaus I have two DLCIs in two serial interface!

interface Serial0/0/0
no ip address
encapsulation frame-relay IETF
frame-relay lmi-type q933a
!
interface Serial0/0/0.16 point-to-point
ip address
frame-relay interface-dlci 16
!
interface Serial0/0/0.17 point-to-point
ip address
frame-relay interface-dlci 17
!
interface Serial0/0/1
no ip address
encapsulation frame-relay IETF
frame-relay lmi-type q933a
!
interface Serial0/0/1.16 point-to-point
ip vrf forwarding VPN
ip address
frame-relay interface-dlci 16
!
interface Serial0/0/1.17 point-to-point
ip address
frame-relay interface-dlci 17
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Serial0/0/0.16
ip route vrf VPN 0.0.0.0 0.0.0.0

Thanks for all

Mohammad

[Georg Pauwen]

Hello Mohammad,

it looks like your router is configured for route leaking between the global routing table and the VRF (which is accomplished by two static routes as in your case). This indeed means redundancy (provided that the full static route for the VRF looks something like this):

ip route vrf VPN 0.0.0.0 0.0.0.0 x.x.x.x global

where x.x.x.x is the next hop IP address.

[mohammad saeed]

One question is about the static route :ip route 0.0.0.0 0.0.0.0 Serial0/0/0.16 and why for serial0/0/0.16

and why two dlci is that mean two lines for redundancy!

Thanks for your information about vrf vpn i wasn't know it :) 

[Georg Pauwen]

Hello Mohammad,

is DLCI 17 actually active ? It looks like a hub and spoke configuration. Can you post the output of 'show frame-relay pvc' ?