vrf GRE tunnel

[fast5658659]

Hi all,

I have a ipsec tunnel towards a remote office. there is a default route on main office router to route internet traffic directly towards ISP

I want to have one GRE tunnel isolated from global routing table 

interface FastEthernet1/0

description to ISP
ip address 103.38.xx.xx 255.255.255.248
duplex auto
speed auto
crypto map VPN1

ip route 0.0.0.0 0.0.0.0 103.38.xx.xx name towards_ISP

interface Loopback100
ip address 10.192.254.114 255.255.255.255

int tunnel 100

ip vrf forwarding VRF1
ip address 10.192.1.166 255.255.255.252
ip tcp adjust-mss 1360
tunnel source Loopback100
tunnel destination 10.192.10.12
tunnel vrf VRF1

though IPsec is up but tunnel line protocol is showing down

What else do I need to do to get GRE tunnel working for vrf VRF1

I am new to VRF 

Regards

[Rolf Fischer · Accepted solution]

Hello,

does the VRF1 routing table have a routing entry to reach the other tunnel endpoint?

• show ip route vrf VRF1 [10.192.10.12]

Can you ping the the other tunnel endpoint?

• ping vrf VRF1 10.192.10.12 source loopback 100

I'm not sure but perhaps you want only the tunnel interface to be part of the VRF and leave the tunnel source and -destination in the global routing table? In this case you'll need to remove the 'tunnel vrf VRF1' line under the tunnel interface ("transport VRF", must be routable through the ISP network).

HTH
Rolf

[fast5658659]

Thanks Rolf that worked like a treat :)

[fast5658659]

Also one more thing I am running bgp under VRF1. I have some static routes in the global routing table which I want to redistribute to VRF1 routing table how can I do that

Thanks much