[j-nsp] VRF tunnel on juniper?

[tim tiriche]

Hello,

Can i do the following on Juniper router?


CE(1,2,3,etc) - PE1 -- core -- PE2 -- CE2

Currently CE{1,2,3,etc) routes are in PE global table (inet.0).
CE{1,2,3,etc) are internet customers


a) leak CE's prefixes from global to a VRF on PE1
what would be the best way to approach this?
i was thinking of tagging all CE's prefixes with community
and copy it to VRF using rib-groups
or is there a simpler option available?
what kind of vrf instance would this be since there would be no interface
assosiated with it and can routes in this instance be exchanged on VRF in PE2
using iBGP.


b)after prefixes are copied into VRF on PE1.  now CE2 (traffic reinjection)
will send traffic destined to CE1 prefixes via VRF tunnel.

c) Once traffic gets to VRF on PE1, how can it forward it to the appropriate
CE?

is this possible in VRF routing table:

destination <CE1> via inet.0 (CE1-interface).
destination <CE2> via inet.0 (CE2-interface).

i.e traffic is forwarded out to CE1-interface directly without any
route lookup in inet.0.


Regards,
--tim