cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
537
Views
5
Helpful
3
Replies

Border node route issue

techno.it
Level 1
Level 1

Hello,

I'm having trouble wrapping my head around a weird issue. I have two borders and one single fusion switch and they only have B1F1 and B2F1 connections. I have imported a route on the Fusion router so that I can leak into the fabric but the border node giving surprising results upon checking the routing table,  FB1 learning routes via LISP instead of BGP, and  CEF entry display the next-hop using the LISP tunnel!!

As an end result, the host inside the fabric cannot reach this subnet located outside the fabric.

I have checked border nodes have no static routes configured for this route.

 

Appreciate any suggestions

 

Here are some output;

 

FB1#sh ip route vrf PROD | in 10.1.20.28/30
l 10.1.20.28/30 [250/1], 2d01h, Null0

 

FB1#sh ip cef vrf PROD | in 10.1.20.28
10.1.20.28/30 10.1.25.10 LISP0.4099

 

FB1#sh ip bgp vpnv4 vrf PROD

*> 10.1.20.28/30     0.0.0.0 10 32768 ?

 

FB1#sh ip lisp map-cache detail eid-table vrf PROD

10.1.20.28/30, uptime: 2d01h, expires: 22:16:44, via map-reply, complete
Sources: map-reply, site-registration
State: complete, last modified: 2d01h, map-source: 10.1.25.10
Exempt, Packets out: 17924(10063175 bytes) (~ 00:00:03 ago)
Configured as EID address space
Locator Uptime State Pri/Wgt Encap-IID
10.1.25.10 2d01h up 10/10 -
Last up-down state change: 2d01h, state change count: 1
Last route reachability change: 2w6d, state change count: 11
Last priority / weight change: never/never
RLOC-probing loc-status algorithm:
Last RLOC-probe sent: never

1 Accepted Solution

Accepted Solutions
3 Replies 3

Jonathan Cuthbert
Cisco Employee
Cisco Employee

Do you have a diagram you could share along with the type of border nodes you are using (external or anywhere)?

markus.forrer
Level 4
Level 4

Maybe have a look at https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/213525-sda-steps-to-configure-fusion-router.html#anc12
Inside the section of Fusion VRF Leaking.
BGP allowas-in and route filtering is needed

Issue has been resolved. There was no community tags configured thus causing the LISP and BGP redistribution loop.

 

@markus.forrer 

Thanks for sharing the link