[j-nsp] migration from cisco VRF+Vrrp to the juniper ACX

[A. Camci]

> Hi Guys,
>
> we are migration the Cisco CISCO7606-S to the  acx5096.
> But we have 1 customer with VRF and VRRP on the same port.
>
> after migration to the ACX has customer no connection from the VRF.
> if we switch back to cisco, everything works fine.
>
> this is a full redundant vrf.
> other side is still cisco and all locations are now running on the backup
> vrf.
>
> if we lower the priotry of the vrrp on the backup vrf we see that the
> primary location becomes master. so the vrrp does work.  after switching
> the vrrp has customer still one way traffic from the acx.  maybe vrf+vrrp
> doesnt work on a ACX.
>
> see below for the config.
>
> CISCO config
>
> vlan 3021
> mtu 1600
> !
> interface Vlan3021
>  mtu 1600
>  ip vrf forwarding CUST_APPIE
>  ip address 172.21.1.251 255.255.255.0
>  vrrp 1 description CUST_APPIE-DC-centraal-pri
>  vrrp 1 ip 172.21.1.250
>  vrrp 1 preempt delay minimum 10
>  vrrp 1 priority 110
> !
>
> interface Te3/4
> switchport trunk allowed vlan add 3021
>
> ip vrf CUST_APPIE
>  rd 10.31.0.61:10006
>  route-target export 65001:10006
>  route-target import 65001:10006
>
>
>  router bgp 65001
>  address-family ipv4 vrf CUST_APPIE
>  no synchronization
>  redistribute static
>  redistribute connected
>  default-information originate
>  exit-address-family
>
> ip route vrf CUST_APPIE 0.0.0.0 0.0.0.0 172.21.1.1
>
>
> JUNIPER CONFIG
> ACX Model: acx5096_ Junos: 15.1X54-D61.6
>
> set interfaces xe-0/0/88 description "*** CUST_APPIE***"
> set interfaces xe-0/0/88 flexible-vlan-tagging
> set interfaces xe-0/0/88 speed 10g
> set interfaces xe-0/0/88 mtu 1622
> set interfaces xe-0/0/88 encapsulation flexible-ethernet-services
> set interfaces xe-0/0/88 ether-options no-auto-negotiation
>
> set interfaces xe-0/0/88 unit 3021 vlan-id 3021
> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
> vrrp-group 1 virtual-address 172.21.1.250
> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
> vrrp-group 1 priority 110
> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
> vrrp-group 1 preempt hold-time 10
> set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24
> vrrp-group 1 accept-data
>
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
> from protocol direct
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
> from protocol static
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1
> then accept
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
> from protocol bgp
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
> from route-filter 0.0.0.0/0 exact
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
> then local-preference 150
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1
> then accept
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2
> from protocol direct
> set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2
> then accept
>
> set routing-instances CUST_APPIE instance-type vrf
> set routing-instances CUST_APPIE interface xe-0/0/88.3021
> set routing-instances CUST_APPIE route-distinguisher 10.32.0.43:10006
> set routing-instances CUST_APPIE vrf-target import target:65001:10006
> set routing-instances CUST_APPIE vrf-target export target:65001:10006
> set routing-instances CUST_APPIE vrf-table-label
>
> set routing-instances CUST_APPIE routing-options static route 0.0.0.0/0
> next-hop 172.21.1.1
>
> set routing-instances CUST_APPIE forwarding-options dhcp-relay
> server-group CUST_APPIE 172.21.1.1
> set routing-instances CUST_APPIE forwarding-options dhcp-relay
> active-server-group CUST_APPIE
> set routing-instances CUST_APPIE forwarding-options dhcp-relay group
> CUST_APPIE interface xe-0/0/88.3021
> set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE
> import ipvpn-CUST_APPIE-ebgp-import
> set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE
> export ipvpn-CUST_APPIE-ebgp-export
>
> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
> from protocol vrrp
> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
> then count accept-vrrp-customer
> set firewall family inet filter re-protect-v4 term accept-customer-vrrp
> then accept
> set firewall family inet filter routing-engine-traffic term mark-vrrp from
> protocol vrrp
> set firewall family inet filter routing-engine-traffic term mark-vrrp then
> count mark-vrrp
> set firewall family inet filter routing-engine-traffic term mark-vrrp then
> forwarding-class NC1
> set firewall family inet filter routing-engine-traffic term mark-vrrp then
> accept
>
> i would really appreciate any help
>
> regards
>
> abdullah
>
>