[j-nsp] Merging routes from VRF to inet.0
Tom Eichhorn
tom at wirkbetrieb.net
Wed Jan 14 10:01:50 EST 2015
Hi Dave & j-nsp,
I tried your example,
but it does not work - and I am a little bit helpless:
http://0bin.net/paste/lpH6zV8Pk2EXnI9L#F5xzmKZTpl9hA5QjZipHfz83-xdG6qexK4MGyM6SSCU
I also tried having an "accept all" import policy, but that doesn't
changed anything.
Thanks for your help,
Tom
PS: This is a MX running 12.3R5.7
Am 14/01/15 um 11:37 schrieb Dave Bell:
> rib-groups is indeed the simplest way to do this. Something like this
> should work for you:
>
> routing-options {
> rib-groups {
> import_inet0 {
> import-rib inet.0;
> import-policy my_pol;
> }
> }
>
> policy-options {
> policy-statement my_pol {
> term 10 {
> from {
> route-filter a.b.c.d/32 exact;
> }
> then accept;
> }
> term 30 {
> then reject;
> }
> }
> }
> routing-instances {
> my_instance {
> routing-options {
> static {
> route 0.0.0.0/0 next-table inet.0;
> }
> auto-export {
> family inet {
> unicast {
> rib-group import_inet0;
> }
> }
> }
> }
> }
>
> On 14 January 2015 at 09:31, Tom Eichhorn <tom at wirkbetrieb.net> wrote:
>> Hi Guys,
>>
>> I am currently facing a problem,
>> to which I do not have currently a clean solution:
>>
>> I have routes in some L3 VPN vrf, and I need to merge some of them to
>> inet.0,
>> but I have no real clue how to do that.
>>
>> RIB-groups would only merge all, and tbh, I never understood rib-groups and
>> the
>> documentation is a little bit unclear how they work.
>>
>> My current solution is having a lt-interface between the inet.0 and
>> vrf.inet.0 and speaking BGP,
>> but that limits the traffic volume to one PFE (yes, I could have
>> lt-interfaces on each PFE and do ECMP, but
>> that would be that dirty...)
>>
>> I tried also instance-import under routing-options, but that doesn't work
>> for some reason, instance-export
>> in the vrf is not supported - this only works for virtual routers, but not
>> VRFs...
>>
>> I also tried some bad hacks on the bgp configuration, e.g. deleting the
>> vrf-community before importing etc,
>> but all of that also did not work :(
>>
>> Any hint or idea?
>>
>> Thanks,
>> Tom
>>
>> PS: For the other way round, getting the default route to the VRF, I simply
>> use a next-table inet.0 route in the vrf.
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
More information about the juniper-nsp
mailing list