[j-nsp] leaking into a VRF from inet.0?

Dave Diller dave at maxgigapop.net
Tue Apr 17 09:37:49 EDT 2007


Well, that was quick.  Nope, not supported:

[edit routing-instances TEST routing-options]
   'instance-import'
     instance-import not allowed on VPN instance
error: configuration check-out failed

Ah well, worth a shot.  Back to playing with rib-groups :)

-dd


> In all honesty, I have only done this with non-forwarding  
> instances, so you should probably test this thoroughly with VRFs.
>
> Nick
> On Apr 16, 2007, at 7:32 PM, Dave Diller wrote:
>
>> Hmm, I can use that with VRF instances?  I skipped that section of  
>> the doc as it was referring to nonforwarding instances.  I'm not  
>> sure how those differ from a VRF, but hadn't played with that  
>> particular type at all.
>>
>> I'll play with it tomorrow :)
>>
>> -dd
>>
>>
>> On Apr 16, 2007, at 6:28 PM, Nick Slabakov wrote:
>>
>>> Dave,
>>>
>>> On the odd chance you don't like RIB-groups :-) you may want to  
>>> try another mechanism, which does not use them - it is policy- 
>>> based export between routing instances:  http://tinyurl.com/35xtrk
>>>
>>> When you reference inet.0 you need to use the keyword "master".   
>>> Using this method you can export routes between the master  
>>> instance and a VRF, bi-directionally.
>>>
>>> Nick
>>> On Apr 16, 2007, at 1:53 PM, Dave Diller wrote:
>>>
>>>> In the lab,  I've found that I can get  specific BGP routes into  
>>>> inet.
>>>> 0 from a VRF using rib-groups and auto-export to create a granular
>>>> "leak policy". Works great.
>>>>
>>>> Is it possible to do the converse - leak selected BGP routes from
>>>> inet.0 into a VRF?  I've had no luck so far.
>>>>
>>>> -dd
>>>>
>>>>
>>>> _______________________________________________
>>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>



More information about the juniper-nsp mailing list