Routing
Highlighted
Routing

PE learned routes are showing as unverified

‎06-28-2017 07:39 PM

Hi Guys,

 

I setup a service provider lab in unetlab using vmx version 14.1R1.10 .

 

The IGP for running the RSVP and MPLS between P and PE routers is using OSPF.

 

PE and PE is using Ibgp.

 

Also there is tunnel configured between PE and PE.

 

This seems like simple setup.

 

But the PE can only ping the CE that is connected to it not the remote CE.

 

One CE is connected to PE using static and another is using EBGP.

 

Hope you guys can share some inputs. 

 

Thank you.

 

VMX2 show cmd output.

root> show route table bgp.l3vpn.0

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

65500:1:10.0.31.0/30
*[BGP/170] 01:11:11, localpref 100, from 192.168.16.1
AS path: I, validation-state: unverified
> to 10.0.0.2 via ge-0/0/0.0, label-switched-path RoutervMX2-PE-to-RoutervMX1-PE
65500:1:192.168.14.1/32
*[BGP/170] 01:18:04, localpref 100, from 192.168.16.1
AS path: 65530 I, validation-state: unverified
> to 10.0.0.2 via ge-0/0/0.0, label-switched-path RoutervMX2-PE-to-RoutervMX1-PE

 

root> show bgp summary
Groups: 1 Peers: 1 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
bgp.l3vpn.0
2 2 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
192.168.16.1 65500 224 228 0 0 1:37:21 Establ
bgp.l3vpn.0: 2/2/2/0
VPN2.inet.0: 2/2/2/0

 

root> show mpls lsp
Ingress LSP: 1 sessions
To From State Rt P ActivePath LSPname
192.168.16.1 192.168.19.1 Up 0 * RoutervMX2-PE-to-RoutervMX1-PE
Total 1 displayed, Up 1, Down 0

Egress LSP: 1 sessions
To From State Rt Style Labelin Labelout LSPname
192.168.19.1 192.168.16.1 Up 0 1 FF 3 - RoutervMX3-PE-to-RoutevMX2-PE
Total 1 displayed, Up 1, Down 0

Transit LSP: 0 sessions
Total 0 displayed, Up 0, Down 0

root> show ospf neighbor
Address Interface State ID Pri Dead
10.0.0.2 ge-0/0/0.0 Full 192.168.17.1 128 33

 

Attached is the config of each VMX and show logs as well.

 

Below is the diagram.

 

screen_capture.png

Attachments

6 REPLIES 6
Highlighted
Routing
Solution
Accepted by topic author zannisenhart
‎06-29-2017 08:28 AM

Re: PE learned routes are showing as unverified

‎06-28-2017 10:44 PM

Hello,

You don't need to worry - the BGP route default state is "unverified" because You haven't set up RPKI origin validation

https://www.juniper.net/documentation/en_US/junos12.2/topics/topic-map/bgp-origin-as-validation.html

HTH

Thx

Alex

_____________________________________________________________________

Please ask Your Juniper account team about Juniper Professional Services offerings.
Juniper PS can design, test & build the network/part of the network as per Your requirements

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Highlighted
Routing

Re: PE learned routes are showing as unverified

‎06-29-2017 12:34 AM

Hi

"Unverified"  does not indicate an invalid path, but warns that this path has not been validated by Origin validation configuration.Origin validation helps to prevent the unintentional advertisement of routes.
 
Please refer the below Juniper KB on Unverified validation state.

KB27919 [Junos Platform] What does "validation-state: unverified" mean in show route command during BGP configuration?


To understand the benefits of Origin Validation please refer the below detailed article.

http://www.juniper.net/documentation/en_US/junos/topics/topic-map/bgp-origin-as-validation.html

 

 

Regards,

Rahul

 

Highlighted
Routing

Re: PE learned routes are showing as unverified

[ Edited ]
‎06-29-2017 08:31 AM

Hi Guys,

 

Thanks for your reply.

 

Actually the issue was PE could not ping remote CE,

 

e.g VMX2 can't ping VMX5. VMX3 can't ping VMX6.

 

I managed to make it work now. PE to PE and CE to CE connection is good.

 

Once again thanks for your time.

Highlighted
Routing

Re: PE learned routes are showing as unverified

‎06-29-2017 12:41 PM

Hi Folks,
You can give shot with these topologies [ALL IN ONE SINGLE BOX]!

 

http://forums.juniper.net/t5/Routing/How-To-Build-a-service-provider-network-with-a-single-Juniper/t...

 

-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.
Highlighted
Routing

Re: PE learned routes are showing as unverified

‎06-30-2017 03:08 AM

thanks phython.

Highlighted
Routing

Re: PE learned routes are showing as unverified

‎01-18-2020 05:35 PM

Hi Zannisen,

 

I'm kinda having a very similar issue, where I can't ping the CE from non-directly connected PE, or CE from another site.

I wonder if you would like to share what made that work for you. Thanks.

 

Regards, Waqar

Feedback