[c-nsp] Problem with ip vrf receive command

Thu Aug 9 10:06:57 EDT 2012

Doesn't a vrf require an rd to even be functional?

Aaron

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luca Tortiglione
Sent: Thursday, August 09, 2012 4:05 AM
To: adam vitkovsky
Cc: cisco-nsp
Subject: Re: [c-nsp] Problem with ip vrf receive command

I have

ip route vrf VTC 10.208.0.0 255.255.255.0 10.210.0.5 and ip route vrf VTC
10.210.3.0 255.255.255.0 10.210.0.6

and the other sources are directly connected networks, so no need to add any
other routes.

2012/8/9 adam vitkovsky <adam.vitkovsky at swan.sk>:
> Does the VTC vrf has a route for your ping source please?
>
> adam
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net 
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luca 
> Tortiglione
> Sent: Thursday, August 09, 2012 10:39 AM
> To: cisco-nsp
> Subject: [c-nsp] Problem with ip vrf receive command
>
> Good morning,
> I need to insert a route in the general routing table and in a VRF.
>
> Reading on Internet,
> I thought to use ip vrf receive command on the interface.
>
>
>
> this is CS router :
>
> hostname CS
> !
> boot-start-marker
> boot-end-marker
> !
> ip cef
> !
> !
> !
> !
> ip vrf VTC
> !
> interface Loopback1021030
>  ip vrf receive VTC
>  ip address 10.210.3.1 255.255.255.255  ip policy route-map PC_TO_VTC 
> !
> interface FastEthernet0/0
>  no ip address
>  duplex auto
>  speed auto
> !
> interface FastEthernet0/1
>  ip vrf receive VTC
>  ip address 10.210.0.6 255.255.255.252  ip policy route-map PC_TO_VTC  
> speed auto  full-duplex !
> !
>
> !
> ip forward-protocol nd
> ip route vrf VTC 10.208.0.0 255.255.255.0 10.210.0.5 !
> !
> no ip http server
> no ip http secure-server
> !
> access-list 100 permit ip 10.210.3.0 0.0.0.255 10.208.0.0 0.0.0.255 
> access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.3.0 0.0.0.255 
> access-list 100 permit ip 10.210.0.0 0.0.0.255 10.208.0.0 0.0.0.255 
> access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.0.0 0.0.0.255 !
> route-map PC_TO_VTC permit 1
>  match ip address 100
>  set vrf VTC
>
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>
>
> and this is border router :
>
>
> hostname Border_VTC
> !
> boot-start-marker
> boot-end-marker
> !
> !
> no aaa new-model
>
> ip cef
>
> ip vrf VTC
>
> interface Loopback1
>  ip vrf forwarding VTC
>  ip address 10.208.0.1 255.255.255.255 !
> interface FastEthernet0/0
>  ip vrf forwarding VTC
>  ip address 10.210.0.2 255.255.255.252  duplex auto  speed auto !
> interface FastEthernet0/1
>  ip vrf forwarding VTC
>  ip address 10.210.0.5 255.255.255.252  speed auto  full-duplex
>
> ip forward-protocol nd
> ip route vrf VTC 10.210.3.0 255.255.255.0 10.210.0.6
>
> !
>
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>
> Trying to ping I have
>
> CS#ping vrf VTC 10.208.0.1 source fastEthernet 0/1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
> Packet sent with a source address of 10.210.0.6 !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 56/100/189 
> ms CS# *Mar  1 00:08:13.404: ICMP: echo reply rcvd, src 10.208.0.1, 
> dst
> 10.210.0.6 *Mar  1 00:08:13.593: ICMP: echo reply rcvd, src 
> 10.208.0.1, dst
> 10.210.0.6 *Mar  1 00:08:13.673: ICMP: echo reply rcvd, src 
> 10.208.0.1, dst
> 10.210.0.6 *Mar  1 00:08:13.749: ICMP: echo reply rcvd, src 
> 10.208.0.1, dst
> 10.210.0.6 *Mar  1 00:08:13.813: ICMP: echo reply rcvd, src 
> 10.208.0.1, dst
> 10.210.0.6 CS#ping vrf VTC 10.208.0.1 source Loopback1021030
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
> Packet sent with a source address of 10.210.3.1 .....
>
> On this failed ping i get
>
> Border_VTC#
> *Mar  1 00:08:33.810: ICMP: echo reply sent, src 10.208.0.1, dst 
> 10.210.3.1 *Mar  1 00:08:35.757: ICMP: echo reply sent, src 
> 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:37.764: ICMP: echo reply 
> sent, src 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:39.752: ICMP: echo 
> reply sent, src 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:41.767: ICMP: 
> echo reply sent, src 10.208.0.1, dst 10.210.3.1
>
>
> Trying ping on other router i get
>
>
> Border_VTC#ping vrf VTC 10.210.3.1 source fastEthernet 0/1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
> Packet sent with a source address of 10.210.0.5 .....
> Success rate is 0 percent (0/5)
> Border_VTC#ping vrf VTC 10.210.3.1 source loopback 1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
> Packet sent with a source address of 10.208.0.1 .....
> Success rate is 0 percent (0/5)
> Border_VTC#
>
>
> Any suggestion ?
>
> --
>
>
>
>
> L.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>

-- 

L.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/