VRF default route leak

[Tokai20012]

Hi,

In our core router we have 20 VRFs and it also receives full bgp tables from two ISPs for the Internet.

So far, we have provided Internet to only one VRF, but we are planning to make Internet available to all VRFs in the future.

We do not have enough memory and CPU to leak all routes to the VRFs (20*800000 route ).

BGP default-originate feature could be utilized, but I don't think there is a way to share it between VRFs.

Please let me know if there is another solution.

Thanks 

[Harold Ritter · Accepted solution]

Hi @Tokai20012 ,

Several things can be done. If you receive the default route from your ISPs, you could leak it from the global to the specific VRFs. You also want to leak in the other direction as well, so that the global knows how to reach prefixes from each VRF.

Another solution that I have deployed in the past is to configure two sub interfaces between the PE and the CE. One is for the the L3VPN bound traffic and belongs to the VRF. The other one is for the Internet bound traffic and belongs to the global VRF. I find this approach more flexible and it isolates the Internet and the L3VPN traffic. This solution also simplifies the NAT configuration, as only the Internet sub interfaces is configured as a NAT interface.

Regards,

[Tokai20012]

Hi Harold,

Thanks for assisting.

Consider the second option.

Thank you very much.