How to redistribute OSPF BGP Vrf?

[JustTakeTheFirstStep]

BGP ↔ OSPF redistribution is not possible.
We are not advertising BGP globally, so we are trying to redistribute it in VRF.
How do I redistribute?
I have attached the config and routing information as attachments.

router ospf 100
router-id 10.40.98.1
redistribute bgp 65000
network 10.40.98.0 0.0.0.3 area 0
network 10.40.98.4 0.0.0.3 area 0
default-information originate

!

Fusion(config)#router bgp 65000

Fusion(config-router)# address-family ipv4 vrf OFFICE_VN

Fusion(config-router-af)#redistribute ospf 100

%VRF specified does not match this router

[MHM Cisco World · Accepted solution]

Becuase the opsf is not vrf aware and you redistreibte it under ipv4 bgp (bgp vrf aware) this config is wrong.

You need to config opsf with vrf aware 

Ip router opsf vrf x

Then you can redistrubte it under bgp address family.

[JustTakeTheFirstStep]

router ospf 100 vrf OSPF_vrf
router-id 10.40.98.1
redistribute bgp 65000
network 10.40.98.0 0.0.0.3 area 0
network 10.40.98.4 0.0.0.3 area 0
default-information originate
!
router bgp 65000
bgp router-id 10.200.35.1
address-family ipv4 vrf OSPF_vrf
bgp aggregate-timer 0
network 10.40.98.4 mask 255.255.255.252
redistribute ospf 100
exit-address-family
!
ip route vrf OSPF_vrf 0.0.0.0 0.0.0.0 10.40.98.6
!
vrf definition OFFICE_VN
rd 1:4099
!
address-family ipv4
route-target export 1:4099
route-target import 1:4099
route-target import 65000:3
route-target import 65000:1
route-target import 65000:2
route-target import 100:100
route-target import 65000:4
exit-address-family
!
vrf definition OSPF_vrf
rd 65000:4
! 
address-family ipv4
route-target export 65000:4
route-target import 65000:4
route-target import 1:4099
exit-address-family

[Giuseppe Larosa]

Hello @JustTakeTheFirstStep ,

as noted by @MHM Cisco World you need to have an OSPF processed associated to the VRF and the VRF needs to be defined on the node otherwise you get the error message:

>>%VRF specified does not match this router

I understand this is the Fusion router of an SD access solution and it is the "ASBR" or exit point from the SD Access campus fabric to outer world. In any case the ospf process needs to be manually configured and mapped in the VRF.

You have:

vrf definition OFFICE_VN
rd 1:4099
!
address-family ipv4
route-target export 1:4099
route-target import 1:4099
route-target import 65000:3
route-target import 65000:1
route-target import 65000:2
route-target import 100:100
exit-address-family
!
vrf definition OSPF_vrf
rd 65000:4
route-target export 65000:4
route-target import 65000:4
!

You may need an OSPF process for each VRF   ( VN in SD access terms or macro-segmentation ) you need to think of the Fusion router as a multi VRF CE in MPLS L3 VPN context.

Be aware that the DN bit is set for VRF aware LSAs.

Hope to help

Giuseppe