cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1461
Views
0
Helpful
13
Replies

VRF to VRF: static routing with SVI

iores
Level 1
Level 1

Hi,

I am doing some labs, and I have connected three switches:

iores_0-1676841932569.png

The link between SW1 and SW2 is in VRF A, and link between SW2 and SW3 is in VRF B. I want to be able to ping SW3 from SW1 and vice-versa but somehow it doesn't work. 

What is the problem?

Here are my configs.

SW1:

interface GigabitEthernet0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
 negotiation auto
!
interface Vlan10
 ip vrf forwarding A
 ip address 10.10.10.10 255.255.255.0
!
ip route vrf A 0.0.0.0 0.0.0.0 10.10.10.11

SW2:

interface GigabitEthernet0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
 negotiation auto
!
interface GigabitEthernet0/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 negotiation auto
!
interface Vlan10
 ip vrf forwarding A
 ip address 10.10.10.11 255.255.255.0
!
interface Vlan20
 ip vrf forwarding B
 ip address 20.20.20.21 255.255.255.0
!
ip route 10.10.10.11 255.255.255.255 Vlan10
ip route 20.20.20.21 255.255.255.255 Vlan20
ip route vrf A 20.20.20.0 255.255.255.0 20.20.20.21 global
ip route vrf B 10.10.10.0 255.255.255.0 10.10.10.11 global

SW3:

interface GigabitEthernet0/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 negotiation auto
!
interface Vlan20
 ip vrf forwarding B
 ip address 20.20.20.20 255.255.255.0
!
ip route vrf B 0.0.0.0 0.0.0.0 20.20.20.21

 

 

 

2 Accepted Solutions

Accepted Solutions

 

ip route 10.10.10.10 255.255.255.255 Vlan10
ip route 20.20.20.20 255.255.255.255 Vlan20
ip route vrf A 20.20.20.0 255.255.255.0 20.20.20.20 global
ip route vrf B 10.10.10.0 255.255.255.0 10.10.10.10 global

 

I make check and double check, I was thing that SW not support leaking with static route, 
but I stop 
what is the next-hop we use, 
I check and find issue 
we use next-hop which is SVI in same SW, that wrong 
correct as above and check again 
thanks 

View solution in original post

Joseph W. Doherty
Hall of Fame
Hall of Fame

Routing leaking, eh?  Long, long time since I've touched, and then, very infrequently.

So, possibly (? - i.e. crossed fingers):

 

ip route 10.10.10.11 255.255.255.255 Vlan10
ip route 20.20.20.21 255.255.255.255 Vlan20
ip route vrf A 20.20.20.0 255.255.255.0 20.20.20.20 global
ip route vrf B 10.10.10.0 255.255.255.0 10.10.10.10 global

View solution in original post

13 Replies 13

I followed the similar example for VRF-to-VRF with static routing from here http://routeleak.com/route-leaking-global-vrf-routing-table/ but I want to use SVI instead routers.

check below comment

But 10.10.10.0 and 20.20.20.0 are in VLAN10 and VLAN20, respectively. What will I achieve with this?

what we try is add

 static route in show ip route vrf a/b for prefix of VLAN10/20

ip route vrf VRF-B 10.10.10.0 255.255.255.0 VLAN10 



ip route vrf VRF-A 20.20.20.0 255.255.255.0 VLAN20 

 

I cannot do that because I need to specify next-hop IP address not vlan interface. What is wrong with my configs?

in SW2


ip route vrf VRF-B 10.10.10.0 255.255.255.0 10.10.10.11  global 



ip route vrf VRF-A 20.20.20.0 255.255.255.0 20.20.20.21 global


 

 

 

interface Vlan10
 ip vrf forwarding A <<- remove this 
 ip address 10.10.10.11 255.255.255.0
!
interface Vlan20
 ip vrf forwarding B <<- remove this 
 ip address 20.20.20.21 255.255.255.0

 

 

 

I am trying to do VRF-to-VRF leak. 

SW1(VRF-A)-(global)SW2(global)-(VRF-B)SW3



so we do static route in SW2 for leaking from VRF to VRF. 
am I right ?

SW1(VRF-A)-(VRF-A)SW2(VRF-B)-(VRF-B)SW3. 

 

I want to do a route leak on SW2 from VRF to VRF.

I found issue here 

 

ip route 10.10.10.10 255.255.255.255 Vlan10
ip route 20.20.20.20 255.255.255.255 Vlan20
ip route vrf A 20.20.20.0 255.255.255.0 20.20.20.20 global
ip route vrf B 10.10.10.0 255.255.255.0 10.10.10.10 global

 

I make check and double check, I was thing that SW not support leaking with static route, 
but I stop 
what is the next-hop we use, 
I check and find issue 
we use next-hop which is SVI in same SW, that wrong 
correct as above and check again 
thanks 

Joseph W. Doherty
Hall of Fame
Hall of Fame

Routing leaking, eh?  Long, long time since I've touched, and then, very infrequently.

So, possibly (? - i.e. crossed fingers):

 

ip route 10.10.10.11 255.255.255.255 Vlan10
ip route 20.20.20.21 255.255.255.255 Vlan20
ip route vrf A 20.20.20.0 255.255.255.0 20.20.20.20 global
ip route vrf B 10.10.10.0 255.255.255.0 10.10.10.10 global
Review Cisco Networking for a $25 gift card