[j-nsp] Strange OSPF Issue over MPLS VPN with PE-CE as OSPF !

[Ivan Ivanov]

Hi,

Yes, this is because the 'domain-vpn-tag 0'. The other thing that it is
doing is to zeroes the tag.

What type of routing-instance you are using on the CE? To not have the
check on the CE you can use 'routing-instance type virtual-router' instead
of 'routing-instance type vrf'

Then you will not need 'domain-vpn-tag 0'.

HTH,
Ivan,

On Wed, Jul 25, 2012 at 10:14 AM, vaibhava varma <svaibhava at gmail.com>wrote:

> Hi Ivan
>
> I could not get the manual loop prevention thing working as whenever I
> tried to set any tag while redistributing mp-ibgp to OSPF and then
> match the same on other PE while importing into OSPF it did not work.
> I was not able to see any tag being set.
>
> However I have found a fix for this solution by increasing the OSPF
> protocol preference value to higher than BGP on the PEs under the
> ROuting-Instance.
>
> Regards
> Varma
>
> On Mon, Jul 23, 2012 at 4:35 PM, Ivan Ivanov <ivanov.ivan at gmail.com>
> wrote:
> > Hi,
> >
> > You can prevent this by implementing manual loop prevention. You can use
> the
> > tag field in the external LSA to tag the routes and based on that to
> filter
> > them on the other PE.
> >
> > Regards,
> > Ivan,
> >
> >
> > On Mon, Jul 23, 2012 at 1:08 PM, vaibhava varma <svaibhava at gmail.com>
> wrote:
> >>
> >> Hi Ivan
> >>
> >> I finally got the routes on the VRF-Lite CE by using two commands on the
> >> PE
> >>
> >> domain-id disable
> >> domain-vpn-tag 0
> >>
> >>
> >> I have a dual homed setup with two PE and 2 VRF-Lite CE. Will this not
> >> cause routing loop because the CEs will share the route and will send
> >> the routes back to other PE which will have an MP-iBGP route with
> >> preference 170 and OSPF route with preference 10/150.
> >>
> >> Regards
> >> Varma
> >>
> >> On Fri, Jul 13, 2012 at 4:16 PM, Ivan Ivanov <ivanov.ivan at gmail.com>
> >> wrote:
> >> > Hi,
> >> >
> >> > Yes, this could be the case.
> >> >
> >> > domain-vpn-tag 0
> >> >
> >> > This will delete the DN bit option in Junos. (This works only on Type
> 5
> >> > and
> >> > Type 7 LSAs)
> >> >
> >> > HTH,
> >> > Ivan,
> >> >
> >> > On Fri, Jul 13, 2012 at 1:29 PM, Arun Kumar <narain.arun at gmail.com>
> >> > wrote:
> >> >>
> >> >> Hi,
> >> >>
> >> >> If its a VRF lite CE with OSPF running, then the same loop prevention
> >> >> mechanism is applied i.e. if Downbit or Domain tag is set, then VRF
> >> >> lite CE
> >> >> do not accept it. In case of Cisco as CE, there is a command to
> disable
> >> >> this
> >> >> "capability vrf-lite". But with Juniper as CE, I am not aware but if
> >> >> there
> >> >> is a CLI to disable this Down bit check that should do.
> >> >>
> >> >> thanks,
> >> >> Arun
> >> >>
> >> >>
> >> >
> >>
> >>
> >>
> >> --
> >> Regards
> >> Vaibhava Varma
> >
> >
> >
> >
> > --
> > Best Regards!
> >
> > Ivan Ivanov
>
>
>
> --
> Regards
> Vaibhava Varma
>



-- 
Best Regards!

Ivan Ivanov