[c-nsp] Problem with ip vrf receive command

Thu Aug 9 10:27:06 EDT 2012

I know RD and route-target are used only by BGP.

2012/8/9 Aaron <aaron1 at gvtc.com>:
> Doesn't a vrf require an rd to even be functional?
>
> Aaron
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luca Tortiglione
> Sent: Thursday, August 09, 2012 4:05 AM
> To: adam vitkovsky
> Cc: cisco-nsp
> Subject: Re: [c-nsp] Problem with ip vrf receive command
>
> I have
>
> ip route vrf VTC 10.208.0.0 255.255.255.0 10.210.0.5 and ip route vrf VTC
> 10.210.3.0 255.255.255.0 10.210.0.6
>
>
> and the other sources are directly connected networks, so no need to add any
> other routes.
>
>
> 2012/8/9 adam vitkovsky <adam.vitkovsky at swan.sk>:
>> Does the VTC vrf has a route for your ping source please?
>>
>> adam
>> -----Original Message-----
>> From: cisco-nsp-bounces at puck.nether.net
>> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luca
>> Tortiglione
>> Sent: Thursday, August 09, 2012 10:39 AM
>> To: cisco-nsp
>> Subject: [c-nsp] Problem with ip vrf receive command
>>
>> Good morning,
>> I need to insert a route in the general routing table and in a VRF.
>>
>> Reading on Internet,
>> I thought to use ip vrf receive command on the interface.
>>
>>
>>
>> this is CS router :
>>
>> hostname CS
>> !
>> boot-start-marker
>> boot-end-marker
>> !
>> ip cef
>> !
>> !
>> !
>> !
>> ip vrf VTC
>> !
>> interface Loopback1021030
>>  ip vrf receive VTC
>>  ip address 10.210.3.1 255.255.255.255  ip policy route-map PC_TO_VTC
>> !
>> interface FastEthernet0/0
>>  no ip address
>>  duplex auto
>>  speed auto
>> !
>> interface FastEthernet0/1
>>  ip vrf receive VTC
>>  ip address 10.210.0.6 255.255.255.252  ip policy route-map PC_TO_VTC
>> speed auto  full-duplex !
>> !
>>
>> !
>> ip forward-protocol nd
>> ip route vrf VTC 10.208.0.0 255.255.255.0 10.210.0.5 !
>> !
>> no ip http server
>> no ip http secure-server
>> !
>> access-list 100 permit ip 10.210.3.0 0.0.0.255 10.208.0.0 0.0.0.255
>> access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.3.0 0.0.0.255
>> access-list 100 permit ip 10.210.0.0 0.0.0.255 10.208.0.0 0.0.0.255
>> access-list 100 permit ip 10.208.0.0 0.0.0.255 10.210.0.0 0.0.0.255 !
>> route-map PC_TO_VTC permit 1
>>  match ip address 100
>>  set vrf VTC
>>
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>>
>>
>> and this is border router :
>>
>>
>> hostname Border_VTC
>> !
>> boot-start-marker
>> boot-end-marker
>> !
>> !
>> no aaa new-model
>>
>> ip cef
>>
>> ip vrf VTC
>>
>> interface Loopback1
>>  ip vrf forwarding VTC
>>  ip address 10.208.0.1 255.255.255.255 !
>> interface FastEthernet0/0
>>  ip vrf forwarding VTC
>>  ip address 10.210.0.2 255.255.255.252  duplex auto  speed auto !
>> interface FastEthernet0/1
>>  ip vrf forwarding VTC
>>  ip address 10.210.0.5 255.255.255.252  speed auto  full-duplex
>>
>> ip forward-protocol nd
>> ip route vrf VTC 10.210.3.0 255.255.255.0 10.210.0.6
>>
>> !
>>
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>>
>> Trying to ping I have
>>
>> CS#ping vrf VTC 10.208.0.1 source fastEthernet 0/1
>>
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
>> Packet sent with a source address of 10.210.0.6 !!!!!
>> Success rate is 100 percent (5/5), round-trip min/avg/max = 56/100/189
>> ms CS# *Mar  1 00:08:13.404: ICMP: echo reply rcvd, src 10.208.0.1,
>> dst
>> 10.210.0.6 *Mar  1 00:08:13.593: ICMP: echo reply rcvd, src
>> 10.208.0.1, dst
>> 10.210.0.6 *Mar  1 00:08:13.673: ICMP: echo reply rcvd, src
>> 10.208.0.1, dst
>> 10.210.0.6 *Mar  1 00:08:13.749: ICMP: echo reply rcvd, src
>> 10.208.0.1, dst
>> 10.210.0.6 *Mar  1 00:08:13.813: ICMP: echo reply rcvd, src
>> 10.208.0.1, dst
>> 10.210.0.6 CS#ping vrf VTC 10.208.0.1 source Loopback1021030
>>
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 10.208.0.1, timeout is 2 seconds:
>> Packet sent with a source address of 10.210.3.1 .....
>>
>> On this failed ping i get
>>
>> Border_VTC#
>> *Mar  1 00:08:33.810: ICMP: echo reply sent, src 10.208.0.1, dst
>> 10.210.3.1 *Mar  1 00:08:35.757: ICMP: echo reply sent, src
>> 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:37.764: ICMP: echo reply
>> sent, src 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:39.752: ICMP: echo
>> reply sent, src 10.208.0.1, dst 10.210.3.1 *Mar  1 00:08:41.767: ICMP:
>> echo reply sent, src 10.208.0.1, dst 10.210.3.1
>>
>>
>> Trying ping on other router i get
>>
>>
>> Border_VTC#ping vrf VTC 10.210.3.1 source fastEthernet 0/1
>>
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
>> Packet sent with a source address of 10.210.0.5 .....
>> Success rate is 0 percent (0/5)
>> Border_VTC#ping vrf VTC 10.210.3.1 source loopback 1
>>
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 10.210.3.1, timeout is 2 seconds:
>> Packet sent with a source address of 10.208.0.1 .....
>> Success rate is 0 percent (0/5)
>> Border_VTC#
>>
>>
>> Any suggestion ?
>>
>> --
>>
>>
>>
>>
>> L.
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
>
>
> --
>
>
>
>
> L.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>

-- 

L.