Tuesday, November 14, 2017

Juniper route leaking, VRF's and RIB Groups

The issue I am having is as followed:

Let’s say PE1 terminates number of GRE tunnels and places them into VRF “Instance1”. These tunnels learn about the 172.21.1.1/32 route.

PE1 also has a VRF instance “Grey-VRF” with a static route to 203.1.1.1. I need this static route to be leaked into VRF “Instance1” and I need the 172.21.1.1/32 route to be leaked into “Grey-VRF”

I was able to get this to work using RIB groups:

set routing-options rib-groups group1 import-rib GreyVRF.inet.0

set routing-options rib-groups group1 import-rib Instance1.inet.0

set routing-instances GreyVRF routing-options static rib-group group1

set policy-options policy-statement Instance1-OSPF-TO-GREY term 1 from route-filter 172.21.1.1/32 orlonger

set policy-options policy-statement Instance1-OSPF-TO-GREY term 1 then accept

set policy-options policy-statement Instance1-OSPF-TO-GREY term 2 then reject

set routing-options rib-groups group2 import-policy Instance1-OSPF-TO-GREY

set routing-options rib-groups group2 import-rib Instance1-VRF.inet.0

set routing-options rib-groups group2 import-rib GreyVRF.inet.0

set routing-instances Instance1 protocols ospf rib-group group2

The above works, however I now have the issue whereby this is leaking the 172.21.1.1 route into all VRF’s that import from the GREY-VRF. I have tried using the VRF-export option, but no luck.

Any ideas?



No comments:

Post a Comment