Routing

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.

  • 1.  L3 VPN - OSPF from CE to PE not functioning

    Posted 03-08-2021 17:27
    I have two customers both utilising the same topology from below:

    custA:CE --> PE --> P -->P -->PE --> CE:CustA:SiteB

    custB:CE --> PE --> P --> P --> PE --> CE:CustB-SiteB

    Customer A uses eBGP for CE to PE (vrf) and that works fine from end to end across an MPLS underlay (Label switch paths work fine).

    Customer B uses OSPF for connectivity and I cannot get that working. Here is the CE and PE basic configs:

    Cust B - CE:
    set interfaces ge-0/0/0 unit 0 family inet address 10.10.10.2/30
    set interfaces lo0 unit 0 family inet address 3.3.3.3/32
    set routing-options router-id 3.3.3.3
    set protocols ospf area 0.0.0.0 interface ge-0/0/0.0
    set protocols ospf area 0.0.0.0 interface lo0.0 passive

    PE:
    set routing-instances london-custA instance-type vrf
    set routing-instances london-custA interface ge-0/0/0.0
    set routing-instances london-custA route-distinguisher 65533:10
    set routing-instances london-custA vrf-target target:65533:10
    set routing-instances london-custA protocols ospf area 0.0.0.0 interface ge-0/0/0.0

    I think the issue is that the routes currently show in the vrf as IPv4 routes and these need to be distributed into MP-BGP to become the VPN4 routes. Problem is I cannot find out how to that anywhere. Can someone point me in the right direction please.

    Thanks

    ------------------------------
    Clive
    ------------------------------


  • 2.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-08-2021 19:37
    You can configure a sham link across the vpn to connect the two ospf neighbors following this process.

    https://www.juniper.net/documentation/en_US/junos/topics/topic-map/l3-vpns-routing-between-ce-pe.html

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------

    Original Message


  • 3.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-09-2021 02:02
    Hello. I think you need vrf-table-lable statement on PE and remove passive statement from lo0.0 interface from CE.


  • 4.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-09-2021 08:16
    Just to clarify do you see the neighborship established between CE and PE? If yes and you are missing far-end routes, then you need to import/ export routes between ospf/bgp using policies. I believe you will need vrf-table-label statement as well within the instance
    Original Message


  • 5.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-09-2021 08:50
    On the PE's where you are running OSPF with CEs, you will need an export policy in OSPF that takes the L3VPN MP-BGP routes and puts them back into OSPF within the VRF.

    set policy-options policy-statement BGP-to-OSPF term BGP from protocol bgp
    set policy-options policy-statement BGP-to-OSPF term BGP then accept

    set routing-instance <vrf name> protocols ospf export BGP-to-OSPF


    Original Message