Hi Guys, we are migration the Cisco CISCO7606-S to the acx5096. But we have 1 customer with VRF and VRRP on the same port.
after migration to the ACX has customer no connection from the VRF. if we switch back to cisco, everything works fine. this is a full redundant vrf. other side is still cisco and all locations are now running on the backup vrf. if we lower the priotry of the vrrp on the backup vrf we see that the primary location becomes master. so the vrrp does work. after switching the vrrp has customer still one way traffic from the acx. maybe vrf+vrrp doesnt work on a ACX. see below for the config. CISCO config vlan 3021 mtu 1600 ! interface Vlan3021 mtu 1600 ip vrf forwarding CUST_APPIE ip address 172.21.1.251 255.255.255.0 vrrp 1 description CUST_APPIE-DC-centraal-pri vrrp 1 ip 172.21.1.250 vrrp 1 preempt delay minimum 10 vrrp 1 priority 110 ! interface Te3/4 switchport trunk allowed vlan add 3021 ip vrf CUST_APPIE rd 10.31.0.61:10006 route-target export 65001:10006 route-target import 65001:10006 router bgp 65001 address-family ipv4 vrf CUST_APPIE no synchronization redistribute static redistribute connected default-information originate exit-address-family ip route vrf CUST_APPIE 0.0.0.0 0.0.0.0 172.21.1.1 JUNIPER CONFIG ACX Model: acx5096_ Junos: 15.1X54-D61.6 set interfaces xe-0/0/88 description "*** CUST_APPIE***" set interfaces xe-0/0/88 flexible-vlan-tagging set interfaces xe-0/0/88 speed 10g set interfaces xe-0/0/88 mtu 1622 set interfaces xe-0/0/88 encapsulation flexible-ethernet-services set interfaces xe-0/0/88 ether-options no-auto-negotiation set interfaces xe-0/0/88 unit 3021 vlan-id 3021 set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24 vrrp-group 1 virtual-address 172.21.1.250 set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24 vrrp-group 1 priority 110 set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24 vrrp-group 1 preempt hold-time 10 set interfaces xe-0/0/88 unit 3021 family inet address 172.21.1.251/24 vrrp-group 1 accept-data set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1 from protocol direct set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1 from protocol static set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-export term 1 then accept set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1 from protocol bgp set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1 from route-filter 0.0.0.0/0 exact set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1 then local-preference 150 set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 1 then accept set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2 from protocol direct set policy-options policy-statement ipvpn-CUST_APPIE-ebgp-import term 2 then accept set routing-instances CUST_APPIE instance-type vrf set routing-instances CUST_APPIE interface xe-0/0/88.3021 set routing-instances CUST_APPIE route-distinguisher 10.32.0.43:10006 set routing-instances CUST_APPIE vrf-target import target:65001:10006 set routing-instances CUST_APPIE vrf-target export target:65001:10006 set routing-instances CUST_APPIE vrf-table-label set routing-instances CUST_APPIE routing-options static route 0.0.0.0/0 next-hop 172.21.1.1 set routing-instances CUST_APPIE forwarding-options dhcp-relay server-group CUST_APPIE 172.21.1.1 set routing-instances CUST_APPIE forwarding-options dhcp-relay active-server-group CUST_APPIE set routing-instances CUST_APPIE forwarding-options dhcp-relay group CUST_APPIE interface xe-0/0/88.3021 set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE import ipvpn-CUST_APPIE-ebgp-import set routing-instances CUST_APPIE protocols bgp group ebgp-CUST_APPIE export ipvpn-CUST_APPIE-ebgp-export set firewall family inet filter re-protect-v4 term accept-customer-vrrp from protocol vrrp set firewall family inet filter re-protect-v4 term accept-customer-vrrp then count accept-vrrp-customer set firewall family inet filter re-protect-v4 term accept-customer-vrrp then accept set firewall family inet filter routing-engine-traffic term mark-vrrp from protocol vrrp set firewall family inet filter routing-engine-traffic term mark-vrrp then count mark-vrrp set firewall family inet filter routing-engine-traffic term mark-vrrp then forwarding-class NC1 set firewall family inet filter routing-engine-traffic term mark-vrrp then accept i would really appreciate any help regards abdullah _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp