Hi,
I have a serious problem bringing up an GRE Tunnel combined wir vrf-lite funktion. A 2951 Version 15.0(1)M3 with fixed internet uplink has a tunnel to a 2811 12.4(13r)T with PPPoE session (fixed IP).
without VFR everything seems to be ok:
| C2951 | C2811
|
|---|
interface Tunnel12
description Tunnel_PPPoE_nach_Buchhandlung
bandwidth 2000
ip address 10.1.12.17 255.255.255.240
keepalive 10 2
tunnel source A.A.A.A
tunnel destination B.B.B.B
tunnel path-mtu-discovery
interface FastEthernet0/1/0
description Anschluss DMZ Telekom-Router
bandwidth 34000
ip address A.A.A.A z.z.z.z
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1400
duplex auto
speed auto
ip route B.B.B.B 255.255.255.255 A.A.A.GW | interface Tunnel2
bandwidth 2000
ip address 10.1.12.18 255.255.255.240
keepalive 10 2
tunnel source B.B.B.B
tunnel destination A.A.A.A
tunnel path-mtu-discovery interface FastEthernet0/0/0
bandwidth 2000
no ip address
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 10 interface Dialer2
ip address negotiated (get fixed B.B.B.B)
ip mtu 1456
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 10
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname xxx
ppp chap password xxx
ppp pap sent-username xxxx ip route 0.0.0.0 0.0.0.0 Dialer2 200 |
status of int tu12: UP | status of int tu1 2:UP |
OK, this looks good.
no I try to bring in VRF:
| Header 1 | Header 2 |
|---|
ip vrf INTERNET
description Public-IP-Traffic
rd 1:1
route-target export 1:1
route-target import 1:1
interface Tunnel12
description Tunnel_PPPoE_nach_Buchhandlung
bandwidth 2000
ip address 10.1.12.17 255.255.255.240
keepalive 10 2
tunnel source A.A.A.A
tunnel destination B.B.B.B
tunnel path-mtu-discovery
tunnel vrf INTERNET
interface FastEthernet0/1/0
description Anschluss DMZ Telekom-Router
bandwidth 34000
ip vrf forwarding INTERNET
ip address A.A.A.A z.z.z.z
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1400
duplex auto
speed auto
ip route vrf INTERNET 0.0.0.0 0.0.0.0 A.A.A.GW | interface Tunnel2
bandwidth 2000
ip address 10.1.12.18 255.255.255.240
keepalive 10 2
tunnel source B.B.B.B
tunnel destination A.A.A.A
tunnel path-mtu-discovery interface FastEthernet0/0/0
bandwidth 2000
no ip address
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 10 interface Dialer2
ip address negotiated (get fixed B.B.B.B)
ip mtu 1456
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 10
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname xxx
ppp chap password xxx
ppp pap sent-username xxxx ip route 0.0.0.0 0.0.0.0 Dialer2 200 |
| status of int tu12: UP | status of int tu2: DOWN |
It should work but...
I try to bring ing VRF to be able to externally ping A.A.A.A
Does anybody have a idea?
/br
Thomas
