Re: [j-nsp] Internet access from VRF issue

2013-06-05 Thread Mihai Gabriel
I don't have the book with me right now to check, but I tried your setup without succes:) A workaround for this would be a generated default route on R4 when 8.8.8.8 exists in customer.inet.0 mihai@mx#run show route table customer.inet.0 0.0.0.0/0 exact customer.inet.0: 8 destinations, 8

Re: [j-nsp] Internet access from VRF issue

2013-06-05 Thread Ivan Ivanov
Hi, Did you try to configure policy matching those routes and use it for * vrf-export*? The other option that I am thinking is to use *auto-export.* Because BGP is advertising only the primary route. With *auto-export* the routes will be looking like not coming from BGP process. But this is not

Re: [j-nsp] Internet access from VRF issue

2013-06-05 Thread Krasimir Avramski
Hi, Make R4 RR for R1 (family inet unicast) and it should work. You will have further intricacy on R3 accepting this route because R4 vpn-inet family will not reset next-hop self automatically. In order to fix this you should apply nhs for this route through explicit vrf-export policy. The

[j-nsp] Internet access from VRF issue

2013-06-04 Thread Alexey
Hi guys, Now I'm preparing for JNCIE-SP certification, and faced with problem providing internet-access for VPN users. I attach my test topology to email. R4 and R3 are PE routers which holds vrf table Customer, R1 router holds ipv4 static route 8.8.8.8/32 to represent Internet routes. Between

Re: [j-nsp] Internet access from VRF issue

2013-06-04 Thread Alexey
topology in txt format, since .jpeg hasn't attached: (R2)--vrf Customer-(R4)-(core)-(R1)-|8.8.8.8/32 static route in inet.0 to emulate Internet routes | | (R3)

Re: [j-nsp] Internet access from VRF issue

2013-06-04 Thread Mihai
Hello, Maybe I am wrong, but as long as R1,R3,R4 are internal bgp neighbors, R4 should be route reflector for R4. Regards, Mihai On 06/04/2013 06:44 PM, Alexey wrote: Hi guys, Now I'm preparing for JNCIE-SP certification, and faced with problem providing internet-access for VPN users. I

Re: [j-nsp] Internet access from VRF issue

2013-06-04 Thread Olivier Benghozi
Hi Alexey, I understand that you receive an iBGP route, place it in another VRF via rib-group, and expect it to be sent to another iBGP peer. Well, basically you expect a received iBGP route to be reflected to another iBGP peer ? regards, Olivier Benghozi Le 4 juin 2013 à 18:12, Alexey