[c-nsp] VRF-Lite between PE

[James Bensley]

> From: Maile Halatuituia
> Sent: Thursday, October 20, 2016 9:35 AM
> To: cisco-nsp at puck.nether.net
> Subject: VRF-Lite between PE
>
>
> Hi
>
>
> I have this scenario.
>
>
> CUSTOMER -------- PE1 ----------- PE2 --------CUSTOMER
>                                     |                    |
>
>
>                                     |                    |
>                             Primary                Secondary
>                                 LINK                    LINK
>
> My situation is that my PE L3 Switch router does not support MPLS.
>
> I also want to use VRF to differentiate my customer departments.
>
> The main goal is that if Primary link to internet fails, internet traffic goes automatically to Secondary Link.
>
> OSPF with in VRF on both PE1 to get the default route from the two Internet router then distribute that to the two Primary and Secondary VRF so that it can import to departments VRF. Therefore they can reach internet.
>
> I have two issues
>
>
> 1. I want to connect the two LINK router to both the PE for redundancy if any PE and a LINK Router fails. I assume i will include the second link to my ospf at the moment but not sure how i will use cost or set it up so that it will fail over.
>
>
> 2. Secondary is it possible if  VRF A on PE2 recieves routes from VRF A on PE1 after create it with same  rd on both PE. Or maybe that's the function for mpls but i dont have that in my PE.

Your set-up is not ideal.

One option ('m not saying it’s the best) is that you can run layer 2
VLANs between your PEs for each VRF and run OSPF instances inside each
VRF. If you use different RDs on your PEs and use RTs to manage route
imports/exports you can have multiple customer VRFs and export the
default route from your upstream Internet providers into your customer
VRFs (route leaking).

You would end up with lots of VLANs stretched around but it would “work”.


Cheers,
James.