Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Silver

Exporting RRI VPN routes into other VRFs

Hi,

I have an issue where I am using VRF-aware IPsec to building L2L VPN tunnels into a VRF. This is working fine, but I am now trying to export the VPN route into other VRFs (in effect creating a Management VRF with a single L2L tunnel, which can route into other VRFs).

The issue I am having is with exporting this static route.

I am labelling the route with an additional RT (576:1001) and this gets imported into other VRFs (similarly the other VRFs connected routes are imported into the Management VRF through another RT.

The RRI route injected into the Management VRF (CUST-10.97.90.0-23) is 172.29.240.0/20:

ASR1#sh ip route vrf CUST-10.97.90.0-23 | b Gate

Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks

B        10.97.14.0/23

           is directly connected, 04:41:25, GigabitEthernet0/0/2.538

B        10.97.88.0/23 is directly connected, 2w5d, GigabitEthernet0/0/2.575

C        10.97.90.0/23 is directly connected, GigabitEthernet0/0/2.576

L        10.97.90.5/32 is directly connected, GigabitEthernet0/0/2.576

      172.29.0.0/20 is subnetted, 1 subnets

S        172.29.240.0 [1/0] via 109.X.X.1, GigabitEthernet0/0/0

The route makes it into the BGP table with the correct RTs (as per the tested export-maps):

ASR1#sh ip bgp vpnv4 vrf CUST-10.97.90.0-23 172.29.240.0/20

BGP routing table entry for 1:576:172.29.240.0/20, version 554

Paths: (1 available, best #1, table CUST-10.97.90.0-23)

  Not advertised to any peer

  Local

    0.0.0.0 from 0.0.0.0 (10.160.0.4)

      Origin incomplete, metric 0, localpref 100, weight 32768, valid, sourced, best

      Extended Community: RT:1:576 RT:576:1001

If I check another VRF (where the 576:1001 RT is imported), and the route has been imported correctly (and is valid/best):

ASR1#sh ip bgp vpnv4 vrf CUST-10.97.14.0-23

BGP table version is 562, local router ID is 10.160.0.4

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, x best-external

Origin codes: i - IGP, e - EGP, ? - incomplete

   Network          Next Hop            Metric LocPrf Weight Path

Route Distinguisher: 1:538 (default for vrf CUST-10.97.14.0-23)

*> 10.97.14.0/23    0.0.0.0                  0         32768 ?

*> 172.29.240.0/20  0.0.0.0                  0         32768 ?

ASR1#sh ip bgp vpnv4 vrf CUST-10.97.14.0-23 172.29.240.0/20

BGP routing table entry for 1:538:172.29.240.0/20, version 555

Paths: (1 available, best #1, table CUST-10.97.14.0-23)

  Not advertised to any peer

  Local, imported path from 1:576:172.29.240.0/20

    0.0.0.0 (via CUST-10.97.90.0-23) from 0.0.0.0 (10.160.0.4)

      Origin incomplete, metric 0, localpref 100, weight 32768, valid, external, best

      Extended Community: RT:1:576 RT:576:1001

But the route doesn't make it into the routing table....

ASR1#sh ip route vrf CUST-10.97.14.0-23 | b Gate

Gateway of last resort is 10.97.14.1 to network 0.0.0.0

S*    0.0.0.0/0 [1/0] via 10.97.14.1

      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks

C        10.97.14.0/23 is directly connected, GigabitEthernet0/0/2.538

L        10.97.14.5/32 is directly connected, GigabitEthernet0/0/2.538

Is there anything special about a RRI route (it's just a static route?) which would prevent it being imported into the RIB of another VRF?

Cheers,

Matt

416
Views
0
Helpful
0
Replies
CreatePlease login to create content