[c-nsp] Multi-VRF using PBR not working, vrf+vlan configuration.

luismi asturluismi at gmail.com
Sat Jul 12 15:47:45 EDT 2008


Hi there,

I have this schema in a lab:

R6(1.1.1.1)<no tag>(1.1.1.254)R0(10.10.10.1)<vlan 10>(10.10.10.2)R1

The idea is to receive the traffic from R6 in plain mode, that is,
without mpls tag or vlan tag, just ip.

As soon as the traffice reaches 1.1.1.254 (R6) it would be inserted in a
VRF associated to a vlan for the rest of the network.
But, for some reason I am not able to do ping from R6 to any other IP
than 10.10.10.254, neither I can't do ping from any VRF address to
1.1.1.1, it is not working.

I don't know why it is not working at all.
I reviewed it several times, I read a lot of papers but I still don't
have any clue yet why it is not working.
So here I am, I hope someone here can't give me a hand with this.
I am not planning to use OSPF or BGP, since I don't consider I need it
at all for the final deployment, at least not in the nearest future.
Any other way to do this sceneario will be appreciated too.

R6 is a 1700
R0 is a 7600 (so "MPLS VPN - VRF Selection based on Source IP Address"
is not going to work since as far as I know is not supported ye)
R1 is a 7600

My configs are ...

!R6
interface FastEthernet1/0
 ip address 1.1.1.1 255.255.255.0
 duplex auto
 speed auto
 no clns route-cache

!R0
ip vrf R6
 description R6
 rd 1:6
!
interface FastEthernet0/0
 ip vrf receive R6
 ip address 1.1.1.254 255.255.255.0
 no ip proxy-arp
 ip policy route-map VRF
 duplex auto
 speed auto
 no cdp enable
 no clns route-cache
!
interface FastEthernet1/0.1
 encapsulation dot1Q 10
 ip vrf forwarding R6
 ip address 10.10.10.1 255.255.255.252
!
interface Loopback6
 description Just for tests 
 ip vrf forwarding R6
 ip address 2.2.2.2 255.255.255.255
 no clns route-cache
!
access-list 10 permit 1.1.1.1
!
route-map VRF permit 10
 match ip address 10
 set vrf R6

!R1
ip vrf R6
 description R6
 rd 1:6
!         
interface FastEthernet0/0.1
 encapsulation dot1Q 10
 ip vrf forwarding R6
 ip address 10.10.10.2 255.255.255.252








More information about the cisco-nsp mailing list