[c-nsp] Sanely leaking a locally sourced default route from one VRF into another

Jason Lixfeld jason at lixfeld.ca
Wed Dec 12 07:30:42 EST 2012


On 2012-12-12, at 4:36 AM, Adam Vitkovsky <adam.vitkovsky at swan.sk> wrote:

>> I've leaked the default from inet into resi using a combination of 'import
>> route-target' statements and 'import map' statements on the PEs as required.

> I believe the easiest solution is as follows.  
> On the RR PE that originates the default route configure vrf resi. 

This is already the case.  I guess that wasn't clear from my original post?

> Than create a static default route in that vrf resi and for the next hop,
> use the interface that points to internet and IP of the eBGP neighbor (you
> can use tracking next-hop and floating static backup default route). 
> Than advertise the static via MP-BGP to all other PEs with vrf resi. 

Except I have 4 upstream connections on that router and statically routing to any one of them is a potential risk for blackholing traffic if said upstream goes down.

> There should be a mechanism to accomplish extranet vpn on destination PEs as
> well -but I'm not sure how would I accomplish that. 
> We should be looking for some articles regarding extranet vrfs
> I'd love to hear any ideas. 



More information about the cisco-nsp mailing list