[c-nsp] Problem with ip vrf receive command

[adam vitkovsky]

Does the VTC vrf has a route for your ping source please?

adam
-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luca Tortiglione
Sent: Thursday, August 09, 2012 10:39 AM
To: cisco-nsp
Subject: [c-nsp] Problem with ip vrf receive command

Good morning,
I need to insert a route in the general routing table and in a VRF.

Reading on Internet,
I thought to use ip vrf receive command on the interface.



this is CS router :

hostname CS
!
boot-start-marker
boot-end-marker
!
ip cef
!
!
!
!
ip vrf VTC
!
interface Loopback1021030
 ip vrf receive VTC
 ip address 10.210.3.1 255.255.255.255
 ip policy route-map PC_TO_VTC
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip vrf receive VTC
 ip address 10.210.0.6 255.255.255.252
 ip policy route-map PC_TO_VTC
 speed auto
 full-duplex
!
!

!
ip forward-protocol nd
ip route vrf VTC 10.208.0.0 255.255.255.0 10.210.0.5 !
!
no ip http server
no ip http secure-server
!
access-list 100 permit ip 10.210.3.0 0.0.0.255 10.208.0.0 0.0.0.255
access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.3.0 0.0.0.255
access-list 100 permit ip 10.210.0.0 0.0.0.255 10.208.0.0 0.0.0.255
access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.0.0 0.0.0.255 !
route-map PC_TO_VTC permit 1
 match ip address 100
 set vrf VTC

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


and this is border router :


hostname Border_VTC
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model

ip cef

ip vrf VTC

interface Loopback1
 ip vrf forwarding VTC
 ip address 10.208.0.1 255.255.255.255
!
interface FastEthernet0/0
 ip vrf forwarding VTC
 ip address 10.210.0.2 255.255.255.252
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip vrf forwarding VTC
 ip address 10.210.0.5 255.255.255.252
 speed auto
 full-duplex

ip forward-protocol nd
ip route vrf VTC 10.210.3.0 255.255.255.0 10.210.0.6

!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Trying to ping I have

CS#ping vrf VTC 10.208.0.1 source fastEthernet 0/1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.210.0.6 !!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 56/100/189 ms
CS# *Mar  1 00:08:13.404: ICMP: echo reply rcvd, src 10.208.0.1, dst
10.210.0.6 *Mar  1 00:08:13.593: ICMP: echo reply rcvd, src 10.208.0.1, dst
10.210.0.6 *Mar  1 00:08:13.673: ICMP: echo reply rcvd, src 10.208.0.1, dst
10.210.0.6 *Mar  1 00:08:13.749: ICMP: echo reply rcvd, src 10.208.0.1, dst
10.210.0.6 *Mar  1 00:08:13.813: ICMP: echo reply rcvd, src 10.208.0.1, dst
10.210.0.6 CS#ping vrf VTC 10.208.0.1 source Loopback1021030

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.210.3.1 .....

On this failed ping i get

Border_VTC#
*Mar  1 00:08:33.810: ICMP: echo reply sent, src 10.208.0.1, dst 10.210.3.1
*Mar  1 00:08:35.757: ICMP: echo reply sent, src 10.208.0.1, dst 10.210.3.1
*Mar  1 00:08:37.764: ICMP: echo reply sent, src 10.208.0.1, dst 10.210.3.1
*Mar  1 00:08:39.752: ICMP: echo reply sent, src 10.208.0.1, dst 10.210.3.1
*Mar  1 00:08:41.767: ICMP: echo reply sent, src 10.208.0.1, dst 10.210.3.1


Trying ping on other router i get


Border_VTC#ping vrf VTC 10.210.3.1 source fastEthernet 0/1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
Packet sent with a source address of 10.210.0.5 .....
Success rate is 0 percent (0/5)
Border_VTC#ping vrf VTC 10.210.3.1 source loopback 1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
Packet sent with a source address of 10.208.0.1 .....
Success rate is 0 percent (0/5)
Border_VTC#


Any suggestion ?

-- 




L.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/