Junos OS

 View Only
last person joined: yesterday 

Ask questions and share experiences about Junos OS.
  • 1.  L3 VPN - OSPF from CE to PE not functioning

    Posted 03-08-2021 17:25
    I have two customers both utilising the same topology from below:

    custA:CE --> PE --> P -->P -->PE --> CE:CustA:SiteB

    custB:CE --> PE --> P --> P --> PE --> CE:CustB-SiteB

    Customer A uses eBGP for CE to PE (vrf) and that works fine from end to end across an MPLS underlay (Label switch paths work fine).

    Customer B uses OSPF for connectivity and I cannot get that working. Here is the CE and PE basic configs:

    Cust B - CE:
    set interfaces ge-0/0/0 unit 0 family inet address 10.10.10.2/30
    set interfaces lo0 unit 0 family inet address 3.3.3.3/32
    set routing-options router-id 3.3.3.3
    set protocols ospf area 0.0.0.0 interface ge-0/0/0.0
    set protocols ospf area 0.0.0.0 interface lo0.0 passive

    PE:
    set routing-instances london-custA instance-type vrf
    set routing-instances london-custA interface ge-0/0/0.0
    set routing-instances london-custA route-distinguisher 65533:10
    set routing-instances london-custA vrf-target target:65533:10
    set routing-instances london-custA protocols ospf area 0.0.0.0 interface ge-0/0/0.0

    I think the issue is that the routes currently show in the vrf as IPv4 routes and these need to be distributed into MP-BGP to become the VPN4 routes. Problem is I cannot find out how to that anywhere. Can someone point me in the right direction please.

    Thanks

    ------------------------------
    Spuddy
    ------------------------------


  • 2.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-08-2021 19:35
    You can configure a sham link across the vpn to connect the two ospf neighbors following this process.

    https://www.juniper.net/documentation/en_US/junos/topics/topic-map/l3-vpns-routing-between-ce-pe.html

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: L3 VPN - OSPF from CE to PE not functioning

    Posted 03-09-2021 02:46
    Thanks Steve. I have configured up a "Sham-Link" and it works perfectly. Here is the vrf with the sham link:

    set interfaces lo0 unit 1 description sham-link-test
    set interfaces lo0 unit 1 family inet address 200.200.200.200/32

    set routing-instances london-custA instance-type vrf
    set routing-instances london-custA interface ge-0/0/0.0
    set routing-instances london-custA interface lo0.1
    set routing-instances london-custA route-distinguisher 65533:10
    set routing-instances london-custA vrf-target target:65533:10
    set routing-instances london-custA protocols ospf sham-link local 200.200.200.200
    set routing-instances london-custA protocols ospf area 0.0.0.0 sham-link-remote 100.100.100.100 metric 1
    set routing-instances london-custA protocols ospf area 0.0.0.0 interface ge-0/0/0.0

    ------------------------------
    Clive
    ------------------------------