Routing

last person joined: 2 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
  • 1.  VPN need help!!

    Posted 07-12-2011 22:03
      |   view attached

    Hi, I'm trying to config L3VPN MPLS but I get stuck. Could you please check the configuration for me?

    just few questions I put it into attached file,Thank you so much 

     

    Attachment(s)

    docx
    L3VPN.docx   81 KB 1 version


  • 2.  RE: VPN need help!!

    Posted 07-12-2011 23:07

    Hi, 

    Some answers to your questions:

    1. local-as 100; (Do I have to set this again in BGP? already done in routing option)

    You can skip this as you already aded it at routing-options stanza

    2. Should I put  fe-0/0/1in? and Do I need OSPF export policy?

    No

    3.  instance type vrf  (Not virtual router right?)

    Yes. You forget to add interface fe-0/0/1 into VRF, just add it and it will work!

     

    L3VPN-1

    {    instance type vrf;

         interface fe-0/0/1.0;

         route distinguisher 100:1

         vrf-import import_L3VPN-1;

         vrf-export export_L3VPN-1;

         vrf-table -label;

    }

     

    We also use vrf-export/import in order to be more flexible on prefix export and import :


    policy-statement export_L3VPN-1 {

        term 10 {

            from protocol direct;

            then {

                community add L3VPN-1;

                accept;

            }

        }

     

            }

     

     

    policy-statement import_L3VPN-1{

        term 10 {

            from {

                community L3VPN-1;

            }

            then accept;

    }

    }



  • 3.  RE: VPN need help!!

    Posted 07-12-2011 23:20

    Thank you dpapana but I got an error

     

    interface fe-0/0/1.0

        interface not configured in this instance 

     

    What should I do?



  • 4.  RE: VPN need help!!

    Posted 07-12-2011 23:23

    Post the full configuration

    It looks you've used this interface somewhere in your configuration.

    Have you set this interface unde OSPF instance? You shouldn't.



  • 5.  RE: VPN need help!!

    Posted 07-12-2011 23:52

    Dear dpapana,

                                 I have erased fe-0/0/1 in ospf

     

    ***********OSPF*************

    traffice eng

    area 0.0.0.0

    interface se-0/0/2

    interface lo.0

    *****************************

                              now the problem is 

                             Policy options:

                                      policy error: L3VPN-1 community referred (in term 1) but not defined 

                       

                              and from your configuration I don't have to use vrf-target anymore?



  • 6.  RE: VPN need help!!
    Best Answer

    Posted 07-12-2011 23:58

    You have to create this community under policy-options stanza:

    community L3VPN-1 members target:100:1;



  • 7.  RE: VPN need help!!

    Posted 07-13-2011 01:01

    I got it!! Thank you so much You've just save my life 😄