[c-nsp] 7600 - Tunnel in VRF not working over MPLS

[Peter Rathlev]

On Tue, 2014-03-18 at 13:01 +0100, redscorpion69 wrote:
> Could anyone explain why the following setup is not working, maybe
> there is a limitation on 7600 for this?
> 
> 
> PE1-------[MPLS]----------PE2----tun99------CE
> 
> Basically, Tunnel 99 is in VRF. All routes including tunnel are
> visible in VRF. Ping sourced from tunnel99 to CE works (directly
> connected), but when I ping from PE1 tunnel99 on CE, or any other
> route behind tunnel99 on CE, it doesn't work.

What's your configuration? What does a trace from PE1 show? Do VPN
labels match between PE1 and PE2?

We have something similar working fine on 6500 SXJ3:

 interface Tunnel2433
  description GRE-tunnel to xxx
  vrf forwarding SomeCustomer
  ip address 192.168.255.254 255.255.255.252
  ip flow ingress
  tunnel source Loopback2433
  tunnel destination 10.45.176.4
  tunnel vrf SomeCustomer
 !
 interface Loopback2433
  description Source for Tu2433
  vrf forwarding SomeCustomer
  ip address 10.43.144.5 255.255.255.255
 !

> I have mls mpls tunnel-recir configured on PE routers.

That shouldn't be relevant here. It's only if the packets need both GRE
and MPLS header you need this, though it does no harm except for
performance wise.

-- 
Peter