[c-nsp] VRF-lite configuration - BGP and Local Routes

Bruce Pinsky bep at whack.org
Tue Jul 26 01:30:46 EDT 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joseph Hardeman wrote:
> Hi Everyone,
> 
> I am hoping that someone can give me some guidance with how to setup
> VRF-Lite and routing with BGP and intra-vrf routing.  I have been playing
> with this for about a week now and figured out how to setup vrf-lite to a
> certain point.  I know if I apply the ip vrf xx to an interface such as
> physical, loopback, or vlan I can pass traffic up or down it on the same
> vrf, including if I set the vrf on an interface going outbound to a BGP
> peering neighbor I can pull in their bgp announcements to that vrf, but what
> I am having problems with is can this be done via the Global BGP routing
> table?  Or can I somehow do a Global Leak so that the VRF can communicate
> out of its area to the remote peer?
> 
> I hope I am clear here, if not I will be happy to share my testing
> configuration.  Basically we are wanting to separate 2 networks so that they
> have their own BGP Routing tables so they have different routes out but at
> the same time be able to communicate between all of the local networks the
> router has installed on it.
> 

Leaking between VRFs is done via import/export statements indicating which
route targets are put into the global VPNv4 table and which should be
brought into a particular VRF.

Leaking routes between into/out of the global routing table is typically
accomplished via static routes.

There are examples of both types of leaking here
http://www.cisco.com/en/US/tech/tk436/tk832/technologies_configuration_example09186a0080231a3e.shtml


- --
=========
bep

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4uUQUACgkQE1XcgMgrtya7WwCg/oSEzUQndQTjcBSb0mrijOEj
MOoAni2RS1Xv0NdBG26Z3qMpLgiH+7Eu
=IlzE
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list