[c-nsp] 7600 - Tunnel in VRF not working over MPLS

[Michele Bergonzoni]

> Could anyone explain why the following setup is not working, maybe there is
> a limitation on 7600 for this?
>
>
> PE1-------[MPLS]----------PE2----tun99------CE
>
> Basically, Tunnel 99 is in VRF. All routes including tunnel are visible in
> VRF. Ping sourced from tunnel99 to CE works (directly connected), but when
> I ping from PE1 tunnel99 on CE, or any other route behind tunnel99 on CE,
> it doesn't work.
> I have mls mpls tunnel-recir configured on PE routers.

You should probably take a very close look at the CEF and adjacency 
entries for the routes in Tu99 on PE2, and to the LFIB for the 
corresponding labels with "sh mpls forwarding-table".

If the labels for those routes are the same, and are the aggregate label 
for the VRF, I would try "mls mpls recir-agg", if you can spare some 
switch capacity.

If they aren't, I would try to make PE2 use only the aggregate for that 
VRF (if it is possible in you environment) with "mpls label mode 
<yourvrf> protocol bgp-vpnv4 per-vrf", in addition to "mls mpls recir-agg".

If this doesn't work, try to post your routes, CEF, adjacencies, labels 
and mpls forwarding-table (for PE2).

Best luck,

					Bergonz

-- 
Ing. Michele Bergonzoni - Laboratori Guglielmo Marconi S.p.a.
Phone:+39-051-6781926 e-mail: bergonz at labs.it
alt.advanced.networks.design.configure.operate