[j-nsp] Strange OSPF Issue over MPLS VPN with PE-CE as OSPF !

[vaibhava varma]

Hi Ivan

I could not get the manual loop prevention thing working as whenever I
tried to set any tag while redistributing mp-ibgp to OSPF and then
match the same on other PE while importing into OSPF it did not work.
I was not able to see any tag being set.

However I have found a fix for this solution by increasing the OSPF
protocol preference value to higher than BGP on the PEs under the
ROuting-Instance.

Regards
Varma

On Mon, Jul 23, 2012 at 4:35 PM, Ivan Ivanov <ivanov.ivan at gmail.com> wrote:
> Hi,
>
> You can prevent this by implementing manual loop prevention. You can use the
> tag field in the external LSA to tag the routes and based on that to filter
> them on the other PE.
>
> Regards,
> Ivan,
>
>
> On Mon, Jul 23, 2012 at 1:08 PM, vaibhava varma <svaibhava at gmail.com> wrote:
>>
>> Hi Ivan
>>
>> I finally got the routes on the VRF-Lite CE by using two commands on the
>> PE
>>
>> domain-id disable
>> domain-vpn-tag 0
>>
>>
>> I have a dual homed setup with two PE and 2 VRF-Lite CE. Will this not
>> cause routing loop because the CEs will share the route and will send
>> the routes back to other PE which will have an MP-iBGP route with
>> preference 170 and OSPF route with preference 10/150.
>>
>> Regards
>> Varma
>>
>> On Fri, Jul 13, 2012 at 4:16 PM, Ivan Ivanov <ivanov.ivan at gmail.com>
>> wrote:
>> > Hi,
>> >
>> > Yes, this could be the case.
>> >
>> > domain-vpn-tag 0
>> >
>> > This will delete the DN bit option in Junos. (This works only on Type 5
>> > and
>> > Type 7 LSAs)
>> >
>> > HTH,
>> > Ivan,
>> >
>> > On Fri, Jul 13, 2012 at 1:29 PM, Arun Kumar <narain.arun at gmail.com>
>> > wrote:
>> >>
>> >> Hi,
>> >>
>> >> If its a VRF lite CE with OSPF running, then the same loop prevention
>> >> mechanism is applied i.e. if Downbit or Domain tag is set, then VRF
>> >> lite CE
>> >> do not accept it. In case of Cisco as CE, there is a command to disable
>> >> this
>> >> "capability vrf-lite". But with Juniper as CE, I am not aware but if
>> >> there
>> >> is a CLI to disable this Down bit check that should do.
>> >>
>> >> thanks,
>> >> Arun
>> >>
>> >>
>> >
>>
>>
>>
>> --
>> Regards
>> Vaibhava Varma
>
>
>
>
> --
> Best Regards!
>
> Ivan Ivanov



-- 
Regards
Vaibhava Varma