cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
486
Views
1
Helpful
4
Replies

Problem with route leaking in the vxlan/evpn multisite fabric.

bgpripe
Level 1
Level 1

Hello everyone! I have a vxlan/evpn multisite fabric, two data centers 65502 - DC-2, 65503 - DC-3 and two vrfs: vrf_2 and vrf_3. I'm trying to route leaking between them  DC-2-BGW-1-1/1-2 (anycast bgw) and everything is correct on the routes in two vrfs, everything is correct on DC-3 on bgw in vrf_2, but there are not enough routes in vrf_3. Tell me where the error is.

 

config:

DC-2 bgw:

 

 

vrf context vrf_2

  vni 4000502

  rd auto

  address-family ipv4 unicast

    route-target both auto

    route-target both auto evpn

    route-target import 65502:5000502

    route-target import 65502:5000502 evpn

    route-target export 65502:5000502

    route-target export 65502:5000502 evpn

    import map import_vrf_2

    import vrf advertise-vpn

    export vrf allow-vpn

vrf context vrf_3

  vni 5000502

  rd auto

  address-family ipv4 unicast

    route-target both auto

    route-target both auto evpn

    route-target import 65502:4000502

    route-target import 65502:4000502 evpn

    route-target export 65502:4000502

    route-target export 65502:4000502 evpn

    import map import_vrf_1

    import vrf advertise-vpn

    export vrf allow-vpn

 

 

dc-2-bgw-1-1# sh ip ro su vrf vrf_2

IP Route Table for VRF "vrf_2"

Total number of routes: 5391

Total number of paths:  5391

 

Unicast paths:

Best paths per protocol:      Backup paths per protocol:

  bgp-65502      : 5366         None

  broadcast      : 13

  direct         : 5

  local          : 5

  urib_internal  : 2

 

Number of routes per mask-length:

  /0 : 1       /8 : 2       /12: 1       /16: 3       /22: 3

  /23: 7       /24: 985     /26: 1148    /27: 1734    /28: 519

  /29: 520     /30: 7       /31: 10      /32: 451

 

 

dc-2-bgw-1-1# sh ip ro su vrf vrf_3

IP Route Table for VRF "vrf_3"

Total number of routes: 5387

Total number of paths:  5388

 

Unicast paths:

Best paths per protocol:      Backup paths per protocol:

  bgp-65502      : 5369         None

  broadcast      : 5

  direct         : 2

  local          : 2

  urib_internal  : 10

 

Number of routes per mask-length:

  /0 : 1       /8 : 2       /12: 1       /16: 3       /22: 3

  /23: 7       /24: 985     /26: 1148    /27: 1734    /28: 519

  /29: 520     /30: 7       /31: 10      /32: 447

 

 

 

DC-3 bgw:

 

 

vrf context vrf_2

  vni 4000502

  rd auto

  address-family ipv4 unicast

    route-target both auto

    route-target both auto evpn

 

vrf context vrf_3

  vni 5000502

  rd auto

  address-family ipv4 unicast

    route-target both auto

    route-target both auto evpn

 

 

 

dc-3-bgw-1-1# sh ip ro su vrf vrf_2

IP Route Table for VRF "vrf_2"

Total number of routes: 5057

Total number of paths:  5058

 

Unicast paths:

Best paths per protocol:      Backup paths per protocol:

  bgp-65503      : 5027         None

  broadcast      : 15

  direct         : 8

  local          : 8

 

Number of routes per mask-length:

  /0 : 1       /8 : 2       /12: 1       /16: 3       /22: 3

  /23: 7       /24: 972     /26: 1124    /27: 1703    /28: 519

  /29: 520     /30: 7       /31: 10      /32: 185

 

 

dc-3-bgw-1-1# sh ip ro su vrf vrf_3

IP Route Table for VRF "vrf_3"

Total number of routes: 38

Total number of paths:  38

 

Unicast paths:

Best paths per protocol:      Backup paths per protocol:

  bgp-65503      : 35           None

  broadcast      : 3

 

Number of routes per mask-length:

  /0 : 1       /8 : 1       /24: 17      /31: 4       /32: 15

 

4 Replies 4

What plat you have NXOS/XE/XR?

MHM

My Platform N9k - NXOS.

Show vrf <> detail <<- shar this for both vrf

MHM

 

Stefan Mihajlov
Level 1
Level 1

@bgpripe 

Your config on DC-2 shows leaking between vrf_2 and vrf_3 using route-targets, but on DC-3 the BGWs only have the default both auto RTs. That’s why vrf_3 on DC-3 only learns a handful of routes — it isn’t importing the leaked RTs coming from DC-2.

For inter-VRF leaking to work across sites you need:

  • Matching import/export RTs on both VRFs in both sites.

  • The import vrf advertise-vpn and export vrf allow-vpn knobs set on the leaking side.

add the same explicit import/export route-targets for vrf_3 on DC-3 that you used on DC-2, otherwise those leaked routes will never be imported.

Best regards,
Stefan Mihajlov

Mark this post as Helpful if it helped you, and Accept as Solution if it resolved your question.

Review Cisco Networking for a $25 gift card