[c-nsp] vrf newby question

[David Freedman]

You also dont want to be carrying full internet routes inside a VRF
if you just want a main "internet" eigrp process, dispose of the 
"address-family ipv4 vrf internet" and "internet" vrf configuration and 
just build the config for both the interface and eigrp process as you 
would normally.

Unless of course you are carrying an "internet" view for a customer VPN 
(like, reachability to a default route for split routing purposes / vrf 
lite) in which case this is OK :)


Dave.


Ahmad Cheikh-Moussa wrote:
> Hi!
> 
> I try to find out how to configure vrf.
> I have two routers connected via a crossover cable on
> the Gigethernet ports.
> I have configured two vrf instances on both,  I can ping
> each other, but eigrp doesn't work.
> 
> Any ideas ?
> 
> 
> 
> Here the config of both router:
> 
> Router1
> 
>  ip vrf VPN
>  rd 200:10
>  route-target export 200:10
>  route-target import 200:10
> !
> ip vrf internet
>  rd 100:10
>  route-target export 100:10
>  route-target import 100:10
> !
> !
> !
> !
> interface GigabitEthernet0
>  no ip address
>  duplex auto
>  speed auto
>  media-type rj45
>  no negotiation auto
>  no clns route-cache
> !
> interface GigabitEthernet0.10
>  encapsulation dot1Q 10
>  ip vrf forwarding internet
>  ip address 10.0.0.1 255.255.255.0
> !
> interface GigabitEthernet0.20
>  encapsulation dot1Q 20
>  ip vrf forwarding VPN
>  ip address 10.0.1.1 255.255.255.0
> !
> router eigrp 200
>  no auto-summary
>  !
>  address-family ipv4 vrf VPN
>  redistribute connected
>  network 10.0.1.0 0.0.0.255
>  no auto-summary
>  exit-address-family
> !
> router eigrp 100
>  no auto-summary
>  !
>  address-family ipv4 vrf internet
>  redistribute connected
>  network 10.0.0.0 0.0.0.255
>  no auto-summary
>  exit-address-family
> 
> 
> 
> 
> router 2
> 
> 
>  ip vrf VPN
>  rd 200:10
>  route-target export 200:10
>  route-target import 200:10
> !
> ip vrf internet
>  rd 100:10
>  route-target export 100:10
>  route-target import 100:10
> !
> !
> !
> !
> interface GigabitEthernet0
>  no ip address
>  duplex auto
>  speed auto
>  media-type rj45
>  no negotiation auto
>  no clns route-cache
> !
> interface GigabitEthernet0.10
>  encapsulation dot1Q 10
>  ip vrf forwarding internet
>  ip address 10.0.0.2 255.255.255.0
> !
> interface GigabitEthernet0.20
>  encapsulation dot1Q 20
>  ip vrf forwarding VPN
>  ip address 10.0.1.2 255.255.255.0
> !
> router eigrp 200
>  no auto-summary
>  !
>  address-family ipv4 vrf VPN
>  redistribute connected
>  network 10.0.1.0 0.0.0.255
>  no auto-summary
>  exit-address-family
> !
> router eigrp 100
>  no auto-summary
>  !
>  address-family ipv4 vrf internet
>  redistribute connected
>  network 10.0.0.0 0.0.0.255
>  no auto-summary
>  exit-address-family
> 
> 
> mpls01#ping vrf VPN 10.0.1.2
> 
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.0.1.2, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
> mpls01#
> 
> Regards,
>  Ahmad
> 
> 
> 
>