[j-nsp] l3vpn help needed
Vlad Ion
vlad.thoth at gmail.com
Fri Mar 11 06:45:05 EST 2011
Hi,
I'm trying to simplify as much as possible the config I have for a L3 vpn
over mpls between 2 sites but it seems that I now have some issues: I can't
ping interfaces from the other site even though I see the routes.... so any
help would be greatly appretiated.
*Topology:* (ge0/0/3.110 vpn-a 10.10.1.253) PE1 (ge-0/0/1) - (ge0/0/1) P
(ge0/0/2) - (ge-0/0/1) PE2 (ge0/0/3.210 vpn-a 10.10.2.253)
All the devices are J-series routers.
PE1 config (PE2 conf is identical except for the vpn subinterface which
changes from 3.110 to 3.210 and the vrrp interface IPs which are are from
10.10.2.0/24):
set groups vrrp interfaces ge-0/0/3 unit 110 vlan-id 10
set groups vrrp interfaces ge-0/0/3 unit 110 family inet address
10.10.1.253/24 vrrp-group 10 virtual-address 10.10.1.254
set groups vrrp interfaces ge-0/0/3 unit 110 family inet address
10.10.1.253/24 vrrp-group 10 priority 104
set groups vrrp interfaces ge-0/0/3 unit 110 family inet address
10.10.1.253/24 vrrp-group 10 accept-data
set groups vrrp interfaces ge-0/0/3 unit 110 family inet address
10.10.1.253/24 vrrp-group 10 track interface ge-0/0/1 priority-cost 5
set groups vrrp interfaces ge-0/0/3 unit 110 family inet address
10.10.1.253/24 vrrp-group 10 track interface ge-0/0/2 priority-cost 5
set groups mpls-vpns interfaces ge-0/0/3 unit 110 family inet
set groups mpls-vpns routing-options autonomous-system 65000
set groups mpls-vpns protocols bgp group internal type internal
set groups mpls-vpns protocols bgp group internal local-address 10.1.0.1
set groups mpls-vpns protocols bgp group internal mtu-discovery
set groups mpls-vpns protocols bgp group internal family inet unicast
set groups mpls-vpns protocols bgp group internal family inet-vpn unicast
set groups mpls-vpns protocols bgp group internal family inet-vpn any
set groups mpls-vpns protocols bgp group internal neighbor 10.2.0.1
set groups mpls-vpns policy-options policy-statement vpna-import term 1 from
protocol bgp
set groups mpls-vpns policy-options policy-statement vpna-import term 1 from
community vpna-target
set groups mpls-vpns policy-options policy-statement vpna-import term 1 then
accept
set groups mpls-vpns policy-options policy-statement vpna-import term 2 then
reject
set groups mpls-vpns policy-options policy-statement vpna-export term 1 from
protocol ospf
set groups mpls-vpns policy-options policy-statement vpna-export term 1 from
protocol direct
set groups mpls-vpns policy-options policy-statement vpna-export term 1 then
community add vpna-target
set groups mpls-vpns policy-options policy-statement vpna-export term 1 then
accept
set groups mpls-vpns policy-options policy-statement vpna-export term 2 then
reject
set groups mpls-vpns policy-options policy-statement bgp-to-ospf from
protocol bgp
set groups mpls-vpns policy-options policy-statement bgp-to-ospf then accept
set groups mpls-vpns policy-options community vpna-target members
target:65000:10
set groups mpls-vpns policy-options community vpna-target members
target:65000:20
set groups mpls-vpns routing-instances vpn-a instance-type vrf
set groups mpls-vpns routing-instances vpn-a interface ge-0/0/3.110
set groups mpls-vpns routing-instances vpn-a route-distinguisher 65000:10
set groups mpls-vpns routing-instances vpn-a vrf-import vpna-import
set groups mpls-vpns routing-instances vpn-a vrf-export vpna-export
set groups mpls-vpns routing-instances vpn-a vrf-table-label
set groups mpls-vpns routing-instances vpn-a routing-options router-id
10.1.0.1
set groups mpls-vpns routing-instances vpn-a protocols ospf export
bgp-to-ospf
set groups mpls-vpns routing-instances vpn-a protocols ospf area 0.0.0.0
interface ge-0/0/3.110
set interfaces lo0 unit 0 family inet address 10.1.0.1/32
1> show bgp summary
Groups: 1 Peers: 3 Down peers: 2
Table Tot Paths Act Paths Suppressed History Damp State
Pending
inet.0 0 0 0 0
0 0
bgp.l3vpn.0 2 2 0 0
0 0
bgp.l3vpn.2 0 0 0 0
0 0
Peer AS InPkt OutPkt OutQ Flaps Last
Up/Dwn State|#Active/Received/Accepted/Damped...
10.0.0.2 65000 726 726 0 0
5:26:43 Establ
inet.0: 0/0/0/0
bgp.l3vpn.0: 2/2/2/0
bgp.l3vpn.2: 0/0/0/0
vpn-a.inet.0: 2/2/2/0
> show route table vpn-a.inet.0
vpn-a.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.10.1.0/24 *[Direct/0] 05:29:15
> via ge-0/0/3.110
10.10.1.253/32 *[Local/0] 05:29:18
Local via ge-0/0/3.110
10.10.1.254/32 *[Local/0] 05:29:07
Local via ge-0/0/3.110
10.10.2.0/24 *[BGP/170] 05:27:25, localpref 100, from 10.2.0.1
AS path: I
> to 172.16.150.1 via ge-0/0/1.0, Push 16, Push
299808(top)
224.0.0.5/32 *[OSPF/10] 05:29:43, metric 1
MultiRecv
> ping routing-instance vpn-a 10.10.2.254
PING 10.10.2.254 (10.10.2.254): 56 data bytes
^C
--- 10.10.2.254 ping statistics ---
6 packets transmitted, 0 packets received, 100% packet loss
More information about the juniper-nsp
mailing list