On Tue, 2014-03-18 at 13:01 +0100, redscorpion69 wrote: > Could anyone explain why the following setup is not working, maybe > there is a limitation on 7600 for this? > > > PE1-------[MPLS]----------PE2----tun99------CE > > Basically, Tunnel 99 is in VRF. All routes including tunnel are > visible in VRF. Ping sourced from tunnel99 to CE works (directly > connected), but when I ping from PE1 tunnel99 on CE, or any other > route behind tunnel99 on CE, it doesn't work.
What's your configuration? What does a trace from PE1 show? Do VPN labels match between PE1 and PE2? We have something similar working fine on 6500 SXJ3: interface Tunnel2433 description GRE-tunnel to xxx vrf forwarding SomeCustomer ip address 192.168.255.254 255.255.255.252 ip flow ingress tunnel source Loopback2433 tunnel destination 10.45.176.4 tunnel vrf SomeCustomer ! interface Loopback2433 description Source for Tu2433 vrf forwarding SomeCustomer ip address 10.43.144.5 255.255.255.255 ! > I have mls mpls tunnel-recir configured on PE routers. That shouldn't be relevant here. It's only if the packets need both GRE and MPLS header you need this, though it does no harm except for performance wise. -- Peter _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/