10-01-2020 02:19 AM - edited 10-01-2020 06:40 AM
Hi All,
I'm playing with following scenario and I faced some problem:
R3 - R4 iBGP
R9 to R3 and R4 eBGP
R9#sh ip bgp summary BGP router identifier 9.9.9.9, local AS number 9 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 3.3.3.3 4 1 31 28 1 0 0 00:18:34 0 4.4.4.4 4 1 32 28 1 0 0 00:19:06 0
Ping inside VRF A from left to right is working, the same for VRF B.
R6#sh ip route Gateway of last resort is not set 6.0.0.0/32 is subnetted, 1 subnets C 6.6.6.6 is directly connected, Loopback0 7.0.0.0/32 is subnetted, 1 subnets O IA 7.7.7.7 [110/21] via 172.16.1.1, 00:11:10, Ethernet0/3 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks C 172.16.1.0/24 is directly connected, Ethernet0/3 L 172.16.1.2/32 is directly connected, Ethernet0/3 O IA 172.16.2.0/24 [110/11] via 172.16.1.1, 00:11:10, Ethernet0/3 R6#ping 7.7.7.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/6 ms R6#traceroute 7.7.7.7 numeric VRF info: (vrf in name/id, vrf out name/id) 1 172.16.1.1 5 msec 4 msec 5 msec 2 10.10.13.1 [MPLS: Labels 16/25 Exp 0] 5 msec 5 msec 5 msec 3 172.16.2.1 [MPLS: Label 25 Exp 0] 5 msec 6 msec 5 msec 4 172.16.2.2 5 msec * 1 msec
I added 3rd VRF AB on R9. I would like to ping from R9 - lo99 (vrf AB ) ping R7 - lo0 but it fail. Route is injected:
R9#ping vrf AB 7.7.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R9#sh ip route vrf AB Gateway of last resort is not set 7.0.0.0/32 is subnetted, 1 subnets B 7.7.7.7 [20/10] via 4.4.4.4, 00:02:52 44.0.0.0/32 is subnetted, 1 subnets B 44.44.44.44 [20/0] via 4.4.4.4, 00:26:40 99.0.0.0/32 is subnetted, 1 subnets C 99.99.99.99 is directly connected, Loopback99 172.16.0.0/24 is subnetted, 1 subnets B 172.16.2.0 [20/0] via 4.4.4.4, 00:26:40
Route back from R7 to R9 lo99
R7#sh ip route Gateway of last resort is not set 6.0.0.0/32 is subnetted, 1 subnets O IA 6.6.6.6 [110/21] via 172.16.2.1, 00:27:22, Ethernet0/3 7.0.0.0/32 is subnetted, 1 subnets C 7.7.7.7 is directly connected, Loopback0 44.0.0.0/32 is subnetted, 1 subnets O E2 44.44.44.44 [110/1] via 172.16.2.1, 00:27:29, Ethernet0/3 99.0.0.0/32 is subnetted, 1 subnets O E2 99.99.99.99 [110/1] via 172.16.2.1, 00:27:22, Ethernet0/3 172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks O IA 172.16.1.0/24 [110/11] via 172.16.2.1, 00:27:22, Ethernet0/3 C 172.16.2.0/24 is directly connected, Ethernet0/3 L 172.16.2.2/32 is directly connected, Ethernet0/3
I attach the configuration of R4
R4: ! ip vrf A rd 100:2 route-target export 100:2 route-target import 100:1 ! ip vrf AB rd 300:1 route-target export 300:1 route-target import 300:1 route-target import 200:2 ! ip vrf B rd 200:2 route-target export 200:2 route-target import 200:1 route-target import 300:1 ! interface Loopback0 ip address 4.4.4.4 255.255.255.255 ip ospf 1 area 0 ! interface Loopback44 ip vrf forwarding AB ip address 44.44.44.44 255.255.255.255 ! interface Ethernet0/0 ip address 10.10.14.2 255.255.255.252 ip ospf 1 area 0 ! interface Ethernet0/1 ip address 10.10.24.2 255.255.255.252 ip ospf 1 area 0 ! interface Ethernet0/2 ip vrf forwarding A ip address 192.168.2.1 255.255.255.0 ip ospf 3 area 3 ! interface Ethernet0/3 ip vrf forwarding B ip address 172.16.2.1 255.255.255.0 ip ospf 3467 area 3467 ! router ospf 3 vrf A redistribute bgp 1 subnets ! router ospf 3467 vrf B redistribute bgp 1 subnets ! router ospf 1 mpls ldp autoconfig router-id 4.4.4.4 ! router bgp 1 bgp router-id 4.4.4.4 bgp log-neighbor-changes neighbor 3.3.3.3 remote-as 1 neighbor 3.3.3.3 update-source Loopback0 neighbor 9.9.9.9 remote-as 9 neighbor 9.9.9.9 ebgp-multihop 5 neighbor 9.9.9.9 update-source Loopback0 neighbor 9.9.9.9 next-hop-self ! address-family vpnv4 neighbor 3.3.3.3 activate neighbor 3.3.3.3 send-community extended neighbor 9.9.9.9 activate neighbor 9.9.9.9 send-community extended neighbor 9.9.9.9 route-map R7 out exit-address-family ! address-family ipv4 vrf A redistribute ospf 3 exit-address-family ! address-family ipv4 vrf AB redistribute connected exit-address-family ! address-family ipv4 vrf B redistribute ospf 3467 exit-address-family ! route-map R7 permit 10 match ip address 1 set metric 10 ! route-map R7 permit 20 ! ! access-list 1 permit 7.7.7.7
R9:
R9: ip vrf AB rd 300:1 route-target export 300:1 route-target import 300:1 route-target import 200:2 ! interface Loopback0 ip address 9.9.9.9 255.255.255.255 ! interface Loopback99 ip vrf forwarding AB ip address 99.99.99.99 255.255.255.255 ! interface Ethernet0/0 no ip address shutdown ! interface Ethernet0/1 no ip address shutdown ! interface Ethernet0/2 no ip address shutdown ! interface Ethernet0/3 ip address 192.168.9.2 255.255.255.0 ! router bgp 9 bgp router-id 9.9.9.9 bgp log-neighbor-changes neighbor 3.3.3.3 remote-as 1 neighbor 3.3.3.3 ebgp-multihop 5 neighbor 3.3.3.3 update-source Loopback0 neighbor 4.4.4.4 remote-as 1 neighbor 4.4.4.4 ebgp-multihop 5 neighbor 4.4.4.4 update-source Loopback0 neighbor 4.4.4.4 next-hop-self ! address-family vpnv4 neighbor 3.3.3.3 activate neighbor 3.3.3.3 send-community extended neighbor 4.4.4.4 activate neighbor 4.4.4.4 send-community extended exit-address-family ! address-family ipv4 vrf AB redistribute connected exit-address-family ! ip route 0.0.0.0 0.0.0.0 Ethernet0/3 ! R9#sh ip bgp all For address family: IPv4 Unicast Network Next Hop Metric LocPrf Weight Path Route Distinguisher: 200:2 * 7.7.7.7/32 3.3.3.3 100 0 1 ? *> 4.4.4.4 10 0 1 ? * 172.16.2.0/24 3.3.3.3 0 1 ? *> 4.4.4.4 0 0 1 ? Route Distinguisher: 300:1 (default for vrf AB) *> 7.7.7.7/32 4.4.4.4 10 0 1 ? *> 44.44.44.44/32 4.4.4.4 0 0 1 ? *> 99.99.99.99/32 0.0.0.0 0 32768 ? *> 172.16.2.0/24 4.4.4.4 0 0 1 ?
Can somebody help me with this ? I'm pretty sure I miss something. If any other outputs needed please let me know.
Thanks
10-06-2020 08:50 AM
Hello @K3ra ,
try to put R9 in BGP AS number 1
you are mixing an extranet with inter AS VPN it may be too much together.
First try the extranet concepts using a single ISP AS number 1 on all PE nodes.
Later you can try to test inter AS VPN options.
Hope to help
Giuseppe
10-07-2020 12:39 AM
Hi Giuseppe,
thank you for reply. I'll try it out today and give feedback later.
KR
k3ra
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide