- I have one Cisco 1841 router with one interface on the private side using subinterfaces using tagging, public side just has a public ip on it. This is terminating the DMVPN tunnel (host). The DMVPN tunnel is up, I can get acrross it no problem without any VRF applied.
- I have one Cisco 871 DMVPN spoke, tunnel is up I can pass traffic so my VPN logic is good, no VRF applied.
So what I am trying to achieve by applying VRF.
- I want to use multiple VRF's to deal with overlapping remote DMVPN networks terminated on this one Cisco 1841 router
- I only want to introduce one host ip to reserve network space to both the global routing tables and the VRF (not the whole interface)
I was able to add a VRF group and ping across my tunnel sourcing it from the VRF group in the 1841. The problem becomes being able to introduce one host ip into VRF and keep it in the global routing table (as connected).
I don't want to apply the VFR to the interface on the LAN simply because I want to be able to put multiple host ip's in multiple VRF's anyone know if this is possible or how do I introduce a host ip without introducing the local interface into the VRF but also keep it in the global routing tables?
Let me provide some more info
On the 1841
ip vrf blue
description to 871
ip vrf forwarding blue
ip address 172.31.255.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication ECL-DR1
ip nhrp map multicast dynamic
ip nhrp network-id 992
ip nhrp holdtime 450
ip route-cache flow
ip tcp adjust-mss 1360
no ip mroute-cache
tunnel source x.y.z
tunnel mode gre multipoint
tunnel key 1000005
tunnel protection ipsec profile multi shared
ip route vrf blue 10.0.0.0 255.255.255.0 172.31.255.2 name CustomerVRF
Router1841#ping vrf blue 172.31.255.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.31.255.2, timeout is 2 seconds:
Router1841#ping vrf blue 10.0.0.31
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.0.0.31, timeout is 2 seconds: !!!!!
Router1841# sh ip vrf detail blue
VRF blue; default RD 1:1; default VPNID <not set>
Connected addresses are not in global routing table
No Export VPN route-target communities
No Import VPN route-target communities
No import route-map
No export route-map
VRF label distribution protocol: not configured
So I am able to ping accross from my group to my remote, now how do I introduce the host LAN ip of the server 10.4.0.216? I don't want to apply the forwarding instance to the local interface because I want to put multiple groups in this subnet unless I can put multiple VRFs on the same interface? I guess I am asking how do I keep it in the global tables as well as at it to a VRF
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...