Routing

It's a quite simple topology. CE1--PE1--P--PE2--CE2. CE1 is running OSPF wiht PE1 and CE2 is running EBGP with PE2 VPN instance. After implement the import/export policies, I can see correct routes in both VPN routing table . However CE1 just can not ping CE5 loopback IP address. Thanks for your information, if you know how come. You can refert to file attached for configuration file.

Attachment(s)

config.txt   9 KB 1 version

Hi,

I just had a quick look. If the routing is correct, I can think of one possibility.

Please configure "vrf-table-label" under both routing instances. That could be the reason for not being able to ping.

<edit routing-instances vpn2CE2>

set vrf-table-label

<edit routing-instances vpn2CE1>

set vrf-table-label

Regards

Moses N

Hi Moses

     Thanks for your suggestion, I did it. The result is the same. I can ping 1.1.1.1 from CE2, and still can't ping 5.5.5.5 from CE1. 

Hi,

I am not sure this may the main cause of your problem but I in R2 export policy you are using from protocol OSPF only while it supposed to be from protocol direct also to advertise subnet (100.100.100.0/30) to R4

            policy-statement export-vpn-route {
                term 1 {
                    from protocol  [ ospf direct ];
                    then {
                        community add im199;
                        accept;
                    }
                }
                term 2 {
                    then reject;
                }
            }

Hi mhariry 

     You are the man, it works. I guess VPN on PE2 just don't know how to return packet from R1 becoz I have not export the route to remote VPN site.