MPLS VPN Hub & Spoke

[aretsu]

Hello,

I am deploying an MPLS/VPN using a Hub&Spoke topology, but I am not sure about specific things:

1. Do I need to (sub)interfaces on the Hub Site, one for Hub Routes and another for Spokes routes? I think this is the way it has to be done, but I have read that it is not a must.

2. If the last point is true. What are the route targets going to be at both VRFs at the hub site? I am thinking of something like this:

HUB SITE

vrf-hub - import X:1

export X:2

vrf spoke - import X:2

export X:1

SPOKES

vrf - import X:2

export X:1

Does it works?

What is the best practices for doing this?

Thanks!

[rwiesmann · Accepted solution]

Hi

To question 1 it depends, if you do not have a default route in the hub&spoke vpn you don't have to

create subinterfaces. But as soon as you have a default route you can't get arround subinterfaces.

without default route:

ip vrf hub

rt export 601

tr import 602

ip vrf spoke

rt export 602

rt import 601

So the rt have to be vice versa.

With default route:

HUB:

ip vrf hub incoming

rt export 602

ip vrf hub outgoing

rt import 601

SPOKE:

ip vrf spoke

rt export 601

rt import 602

You also need different RD for each spoke vrf but you probably know that. Hope that helps you.

Regards

Roger