VRF lite and shared service

[Massimiliano Tognon]

Hi to all, i'm triyng to use VRF-Lite with shared service.I tried to configure two different VRF (blue and red for example) and then i configured another vrf (for example server). I tried to export with route-target both vrf blue and green to vrf server and to import vrf server into vrf blue and green to give rechability, this is part of my configuration :

ip vrf green

rd 65001:100

route-target export 65001:100

route-target import 65001:100

route-target import 65001:300

ip vrf red

rd 65001:200

route-target export 65001:200

route-target import 65001:200

route-target import 65001:300

ip vrf server

rd 65001:300

route-target export 65001:300

route-target import 65001:300

route-target import 65001:100

route-target import 65001:200

but it doesn't work.

Any help appreciated

Max

p.s. is it possible to merge two vrf in VRF-Lite ?

[richard.gu]

I did a test in a dynamips environment. You don't need to an export to 65001:100 to allow import 65001:200.

The router just checks the route-tag in the MBGP route and grab the route that has route-tag match the import setting.

[mohammedmahmoud]

Hi,

Import and export under the same VRF are independent, in simple VPNs the best practice is that we import and export with the same RT (Route Target), while in complex VPNs we do import and export according the VPN design.

export RT --> attached to the routes when exported from the VRF (VPN identifier).

import RT --> Used to select which routes to be imported into the VRF from the routes received via MP-BGP (Import route filter)

HTH, please do rate all helpful replies

Mohammed Mahmoud.