Hi given this is my first post please excuse any glaring errors,
My problem is I am having issues reaching the internet from our 3845 router using
VRF the setup is as follows
I have a 3845 router with a DS3 Cct connected to my provider. One T3 sub-interface goes to our providers MPLS cloud and then to our other offices. The other subinterface on the T3 is connected to our Providers Internet service, the 3845 has two LAN interfaces G0/0 & G0/1.
G0/0 is connected to our Local LAN and is our office default G/W. G0/1 is currently configured with a temporary Internet Address for testing purposes.
BGP is running between the 3845 and the providers PE router for MPLS cloud connectivity. BGP is also running between our 3845 and PE router for Internet connectivity. I have already implemented filtering on the BGP config that stops updates for the Internet subnet appearing on the MPLS network and the other way round stopping the updates for the MPLS routes appearing on the Internet subnet.
I have implemented VRF to ensure traffic separation between the internal and internet traffic but the Internet traffic does not flow between G0/1 and the internet, any help would be gratefully received.
Router config available as soon as someone requests it
You need to modify your BGP config. For the DIA vrf you need to create an address-family under your BGP config for the Internet Peering. This way you should not need to filter between the 2 BGP peerings although i can't tell from your config how the BGP routes are getting redistributed into your local routing protocol (if at all).
So your BGP config would be something along the lines of
router bgp 64610
network 10.z.z.z mask 255.255.240.0 --> Office LAN subnet
neighbor x.x.x.x remote-as 6745 ï MPLS peering
neighbor x.x.x.x ebgp-multihop 4
neighbor x.x.x.x version 4
neighbor x.x.x.x distribute-list 10 out
address-family ipv4 vrf DIA
neighbor y.y.y.y remote-as 3549 ï Internet peering
neighbor y.y.y.y version 4
network 18.104.22.168 mask 255.255.255.224
Not sure where you want to redistribute static so i have left it in the main BGP config.
The main BGP config is for your internal network. The address-family is for your DIA vrf.