Dmitri --
I don't think site of origin (SOO) is what you are looking for if the PE-CE
connections are all OSPF. SOO is an extended community type that
is used for a corner case where PE-CEs are talking BGP, CE's are interconnected
as well as being dual-homed, other CEs are connected to other PEs and all
of the CEs are using the same AS number. You would need SOO in this
corner case scenario because you would be overriding the AS loop detection
mechanisms by using AS-override or AS loops, and need some other tag
to use in filtering out the routes sourced by your site (by another CE) so you
don't inadvertently accept them.
I think what you might be looking for is OSPF domain ID. Here is a link
describing what that does ...
http://www.juniper.net/techpubs/software/junos51/swconfig51-vpns/html/vpn-config19.html#1015372
-rich
At 04:47 PM 12/6/2001, Dmitri Kalintsev wrote:
>Hi good people,
>
>Picture 2 PEs, both in the same POP. Now picture two CEs, both connected to
>both PEs with p-t-p links, say, GigE x-over with /30 or /31 mask. Both CEs are
>part of the same say VRF#10 on both PEs. Now picture that CEs talk OSPF to
>VRF#10 inside PEs and tell them about customer networks behind them. Now PE1
>imports these OSPF routes into VPN_IPv4.rib and then advertises them to PE2
>(and to the rest of iBGP mesh members).
>
>Now question: what configuration is required on PE1/PE2 to prevent PE2 from
>importing these routes back into VRF#10 OSPF domain? I know about SOO
>attribute, is it "the" silver bullet for this case? If yes, could you please
>show me relevant commands required to configure this, for both PE1 and PE2,
>please? (I understand that SOO is optional, and thus is not used by default).
>
>Thanks,
>--
> CCNP, CCDP (R&S) Dmitri E. Kalintsev
> CDPlayer@irc Network Architect @ connect.com.au
> dek @ connect.com.au phone: +61 3 9674 3913 fax: 9251 3666
> http://-UNAVAIL- UIN:7150410 mobile: +61 414 821 382
This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:38 EDT