ISIS and VRF Lite?

[lowinger42]

Hello.

I've tried to configure vrf lite with two ISIS processes between two IOS-XRv 6.6.2.

Is there anyone that successfully done this, or has more information?

Release notes for 6.3.2 say:

The feature adds the possibility to run an Integrated Intermediate System-to-Intermediate System (IS-IS) process in the context of a non-default VPN routing and forwarding (VRF). Both IPv4 and IPv6 are supported. The implementation is more suitable for VRF-lite scenarios. For more information, see the Routing Configuration Guide for Cisco NCS 5000 Series Routers, IOS XR Release 6.3.x.

I cannot find any information about VRF lite in the above config guide. I've googled after "vrf-context" related to ISIS but found nothing.

Only difference I can see is that the "router isis" context has a "vrf-context <vrf name>".

ISIS neighbor for VRF T newer comes up. If I do "debug isis adjacencies detail internal" I see each xrv sending IIHs, but none for the VRF packet is received.

Tested config

router xrv1

vrf T
  rd 1:1

interface GigabitEthernet0/0/0/0
  ipv4 address 172.16.1.2 255.255.255.0

interface GigabitEthernet0/0/0/1
  vrf T
  ipv4 address 172.16.2.2 255.255.255.0

router isis 1
  is-type level-2-only
  net 49.0000.0000.0002.00
  address-family ipv4 unicast
    metric-style wide
  interface GigabitEthernet0/0/0/0
    circuit-type level-2-only
    point-to-point
    address-family ipv4 unicast

router isis T
  vrf-context T
  is-type level-2-only
  net 49.2222.2222.2222.00
  address-family ipv4 unicast
  metric-style wide
  interface GigabitEthernet0/0/0/1
    circuit-type level-2-only
    point-to-point
    address-family ipv4 unicast

router xrv2

vrf T
  rd 1:1

interface GigabitEthernet0/0/0/0
  ipv4 address 172.16.1.3 255.255.255.0

interface GigabitEthernet0/0/0/1
  vrf T
  ipv4 address 172.16.2.3 255.255.255.0

router isis 1
  is-type level-2-only
  net 49.0000.0000.0003.00
  address-family ipv4 unicast
    metric-style wide
  interface GigabitEthernet0/0/0/0
    circuit-type level-2-only
    point-to-point
    address-family ipv4 unicast

router isis T
  vrf-context T
  is-type level-2-only
  net 49.3333.3333.3333.00
  address-family ipv4 unicast
    metric-style wide
  interface GigabitEthernet0/0/0/1
    circuit-type level-2-only
    point-to-point
    address-family ipv4 unicast

Regards

Anders Lowinger

[smilstea · Accepted solution]

This was found by development recently and is being worked on.

CSCvu74130 - ISIS in non-def vrf is not working in XRv9k

I suggest logging a TAC case to monitor the process and possibly getting a SMU if this is impacting your production roll-out.

Sam

[lowinger42]

Thanks for the response, and pointer to the bug!

Regards

Anders Lowinger