I have two 3845 routers having 6M WAN links towards the MPLS cloud. Both these routers are running EBGP with the service provider. We have taken 2 VRFs for our Internal DMZ 1 & DMZ 2 traffic. And all other corporate applications run on the Corp VRF.
As per the diagram, the DMZ 1and DMZ 2 VRF subnets are routed between the Routers and the FW through the MPLS switches. MPLS switches are being used in this environment for deploying Multi VRFs.
1) From the router, there are static routes pointing to the DMZ subnets through the FWs on DMZ 1 and DMZ 2 VRFs. There is a sub-interface created on the routers for VLAN 10 and vlan 20 for routing to happen. These DMZ 1 and DMZ 2 VRFs go into the MPLS cloud and to other branches.
2) There is Eigrp between the core switches and the Routers for advertising the corporate block (let's say 126.96.36.199/24 in this scenario).
Now, the problem is on the Tools/Server zone, there are certain servers which are given IPs from the global corporate block of my company (for ex 188.8.131.52/16). These servers need to access the corporate applications which are on 1.x.x.x subnet.
But all the routes inside to DMZ and Tools subnet from the routers is via the DMZ 1 and DMZ 2 VRF. This means, these routes will stay in that VRF all the way upto the MPLS cloud.
I need these Tools subnets to get into the Corp VRF on my routers. How do i advertise them?
I hope the setup makes sense to you guys. Please ask me for clarifications if any.
Appreciate your quick help