[j-nsp] Strange OSPF Issue over MPLS VPN with PE-CE as OSPF !

[vaibhava varma]

Hi Ivan

Yes I understood the part for the domain-tag and also realized the
issue with instance-type for the routing-instance but unfortunately
since this was an existing network running over there I could not
change it back to virtual-router.

Regards
Varma

On Wed, Jul 25, 2012 at 2:26 PM, Ivan Ivanov <ivanov.ivan at gmail.com> wrote:
> Hi,
>
> Yes, this is because the 'domain-vpn-tag 0'. The other thing that it is
> doing is to zeroes the tag.
>
> What type of routing-instance you are using on the CE? To not have the check
> on the CE you can use 'routing-instance type virtual-router' instead of
> 'routing-instance type vrf'
>
> Then you will not need 'domain-vpn-tag 0'.
>
> HTH,
> Ivan,
>
>
> On Wed, Jul 25, 2012 at 10:14 AM, vaibhava varma <svaibhava at gmail.com>
> wrote:
>>
>> Hi Ivan
>>
>> I could not get the manual loop prevention thing working as whenever I
>> tried to set any tag while redistributing mp-ibgp to OSPF and then
>> match the same on other PE while importing into OSPF it did not work.
>> I was not able to see any tag being set.
>>
>> However I have found a fix for this solution by increasing the OSPF
>> protocol preference value to higher than BGP on the PEs under the
>> ROuting-Instance.
>>
>> Regards
>> Varma
>>
>> On Mon, Jul 23, 2012 at 4:35 PM, Ivan Ivanov <ivanov.ivan at gmail.com>
>> wrote:
>> > Hi,
>> >
>> > You can prevent this by implementing manual loop prevention. You can use
>> > the
>> > tag field in the external LSA to tag the routes and based on that to
>> > filter
>> > them on the other PE.
>> >
>> > Regards,
>> > Ivan,
>> >
>> >
>> > On Mon, Jul 23, 2012 at 1:08 PM, vaibhava varma <svaibhava at gmail.com>
>> > wrote:
>> >>
>> >> Hi Ivan
>> >>
>> >> I finally got the routes on the VRF-Lite CE by using two commands on
>> >> the
>> >> PE
>> >>
>> >> domain-id disable
>> >> domain-vpn-tag 0
>> >>
>> >>
>> >> I have a dual homed setup with two PE and 2 VRF-Lite CE. Will this not
>> >> cause routing loop because the CEs will share the route and will send
>> >> the routes back to other PE which will have an MP-iBGP route with
>> >> preference 170 and OSPF route with preference 10/150.
>> >>
>> >> Regards
>> >> Varma
>> >>
>> >> On Fri, Jul 13, 2012 at 4:16 PM, Ivan Ivanov <ivanov.ivan at gmail.com>
>> >> wrote:
>> >> > Hi,
>> >> >
>> >> > Yes, this could be the case.
>> >> >
>> >> > domain-vpn-tag 0
>> >> >
>> >> > This will delete the DN bit option in Junos. (This works only on Type
>> >> > 5
>> >> > and
>> >> > Type 7 LSAs)
>> >> >
>> >> > HTH,
>> >> > Ivan,
>> >> >
>> >> > On Fri, Jul 13, 2012 at 1:29 PM, Arun Kumar <narain.arun at gmail.com>
>> >> > wrote:
>> >> >>
>> >> >> Hi,
>> >> >>
>> >> >> If its a VRF lite CE with OSPF running, then the same loop
>> >> >> prevention
>> >> >> mechanism is applied i.e. if Downbit or Domain tag is set, then VRF
>> >> >> lite CE
>> >> >> do not accept it. In case of Cisco as CE, there is a command to
>> >> >> disable
>> >> >> this
>> >> >> "capability vrf-lite". But with Juniper as CE, I am not aware but if
>> >> >> there
>> >> >> is a CLI to disable this Down bit check that should do.
>> >> >>
>> >> >> thanks,
>> >> >> Arun
>> >> >>
>> >> >>
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> Regards
>> >> Vaibhava Varma
>> >
>> >
>> >
>> >
>> > --
>> > Best Regards!
>> >
>> > Ivan Ivanov
>>
>>
>>
>> --
>> Regards
>> Vaibhava Varma
>
>
>
>
> --
> Best Regards!
>
> Ivan Ivanov



-- 
Regards
Vaibhava Varma