I've checked my labs and notes on this and as the help to the command "capability vrf-lite" says - "Do not perform PE specific checks" -it indeed among other checks disables checking of the ospf domain-id against the bgp domain-id extended community during redistribution of VPNv4 BGP routes to ospf
What Cisco has to say: Defaults: by default domain-id is equal to the process id associated with the OSPF vrf instance. 0005 is used as a domain-id type. (Venkat -I bet you had the same ospf process ids on both PE routers) Usage Guidelines: Domain-id is an 8 byte identifier that idetifies OSPF domain of the prefix. When OSPF route is redistributed to BGP VPNv4 route in the MPLS VPN context, Domain-id extended community is attached to the BGP update. Domain-id is used on the egress PE, when BGP VPNv4 route is redistributed to OSPF to decide what type of LSA to generate as a result of the redistribution of the BGP VPNv4 route. adam -----Original Message----- From: Vitkovsky, Adam Sent: Monday, March 15, 2010 6:14 PM To: '[email protected]' Subject: "capability vrf-lite" on PE routers. (venkat) Hi, I found this interesting, I believe the "special" treatment of routes on the PEs when redistributing form ospf to mp-bgp and especially back to ospf is somehow disabled when the "capability vrf-lite" command is entered and the redistribution is treated as a regular bgp to ospf or any protocol to ospf redistribution -which results in the external routes in ospf database Would that be a safe assumption please? adam -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Monday, March 15, 2010 5:00 PM To: [email protected] Subject: CCIE_SP Digest, Vol 36, Issue 7 Send CCIE_SP mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://onlinestudylist.com/mailman/listinfo/ccie_sp or, via email, send a message with subject or body 'help' to [email protected] You can reach the person managing the list at [email protected] When replying, please edit your Subject line so it is more specific than "Re: Contents of CCIE_SP digest..." Today's Topics: 1. "capability vrf-lite" on PE routers. (venkat) 2. Re: "capability vrf-lite" on PE routers. (Marko Milivojevic) 3. filtering routes in ISIS (Praveen g) 4. Re: filtering routes in ISIS (matt reath) 5. Re: filtering routes in ISIS (Praveen g) ---------------------------------------------------------------------- Message: 1 Date: Mon, 15 Mar 2010 01:55:01 +0530 From: venkat <[email protected]> Subject: [OSL | CCIE_SP] "capability vrf-lite" on PE routers. To: "<[email protected]>" <[email protected]> Message-ID: <[email protected]> Content-Type: text/plain; charset="iso-8859-1" Hi Experts, Here is a simple topology; CE1-----PE1----MPLS n/w----- PE2------CE2 OSPF(area 0) is running between PE and CE. As expected, i could see the loopback IP (advertise via ospf) of CE1 in CE2 as "IA" summary routes. When i enabled "*capability vrf-lite" *command on PE2, the same routes are appeared as "E2" routes in CE2. The cisco CLI document doesnt give much info about this type conversation. Could you please explain what really going on after enabling "*capability vrf-lite" * * * *R6 is CE2.* * * * R6#show ip route ospf 100.0.0.0/32 is subnetted, 1 subnets O IA 100.100.100.100 [110/3] via 13.1.2.1, 00:01:43, FastEthernet0/0 12.0.0.0/24 is subnetted, 1 subnets O IA 12.1.1.0 [110/2] via 13.1.2.1, 00:01:43, FastEthernet0/0 13.0.0.0/24 is subnetted, 2 subnets O 13.1.1.0 [110/2] via 13.1.2.1, 00:01:43, FastEthernet0/0 R6# R6# R6# *Mar 1 02:41:11.043: %OSPF-5-ADJCHG: Process 1, Nbr 13.1.2.1 on FastEthernet0/0 from LOADING to FULL, Loading Done R6# R6# R6#show ip route ospf 100.0.0.0/32 is subnetted, 1 subnets O E2 100.100.100.100 [110/2] via 13.1.2.1, 00:01:12, FastEthernet0/0 12.0.0.0/24 is subnetted, 1 subnets O E2 12.1.1.0 [110/1] via 13.1.2.1, 00:01:12, FastEthernet0/0 13.0.0.0/24 is subnetted, 2 subnets O 13.1.1.0 [110/2] via 13.1.2.1, 00:01:12, FastEthernet0/0 R6# * * * Thanks, Venkat -------------- next part -------------- An HTML attachment was scrubbed... URL: http://onlinestudylist.com/pipermail/ccie_sp/attachments/20100315/07d500d5/attachment.html ------------------------------ Message: 2 Date: Sun, 14 Mar 2010 23:05:55 +0000 From: Marko Milivojevic <[email protected]> Subject: Re: [OSL | CCIE_SP] "capability vrf-lite" on PE routers. To: venkat <[email protected]> Cc: "<[email protected]>" <[email protected]> Message-ID: <[email protected]> Content-Type: text/plain; charset=UTF-8 When you enable this function, DS-bit in Type-3 LSAs is ignored. -- Marko Milivojevic - CCIE #18427 Senior Technical Instructor - IPexpert Mailto: [email protected] Telephone: +1.810.326.1444 Fax: +1.810.454.0130 Web: http://www.ipexpert.com/ On Sun, Mar 14, 2010 at 20:25, venkat <[email protected]> wrote: > Hi Experts, > ?Here is a simple topology; > CE1-----PE1----MPLS n/w----- PE2------CE2 > OSPF(area 0) is running between PE and CE. As expected, i could see the > loopback IP (advertise via ospf) of CE1 in CE2 as "IA" summary routes. > When i enabled "capability vrf-lite" command on PE2, the same routes are > appeared as "E2" routes in CE2. The cisco CLI document doesnt give much info > about this type conversation. Could you please explain what really going on > after enabling?"capability vrf-lite" > R6 is CE2. > R6#show ip route ospf > ?? ? 100.0.0.0/32 is subnetted, 1 subnets > O IA ? ?100.100.100.100 [110/3] via 13.1.2.1, 00:01:43, FastEthernet0/0 > ?? ? 12.0.0.0/24 is subnetted, 1 subnets > O IA ? ?12.1.1.0 [110/2] via 13.1.2.1, 00:01:43, FastEthernet0/0 > ?? ? 13.0.0.0/24 is subnetted, 2 subnets > O ? ? ? 13.1.1.0 [110/2] via 13.1.2.1, 00:01:43, FastEthernet0/0 > R6# > R6# > R6# > *Mar ?1 02:41:11.043: %OSPF-5-ADJCHG: Process 1, Nbr 13.1.2.1 on > FastEthernet0/0 from LOADING to FULL, Loading Done > R6# > R6# > R6#show ip route ospf > ?? ? 100.0.0.0/32 is subnetted, 1 subnets > O E2 ? ?100.100.100.100 [110/2] via 13.1.2.1, 00:01:12, FastEthernet0/0 > ?? ? 12.0.0.0/24 is subnetted, 1 subnets > O E2 ? ?12.1.1.0 [110/1] via 13.1.2.1, 00:01:12, FastEthernet0/0 > ?? ? 13.0.0.0/24 is subnetted, 2 subnets > O ? ? ? 13.1.1.0 [110/2] via 13.1.2.1, 00:01:12, FastEthernet0/0 > R6# > > Thanks, > Venkat > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > ------------------------------ Message: 3 Date: Mon, 15 Mar 2010 15:54:45 +0400 From: Praveen g <[email protected]> Subject: [OSL | CCIE_SP] filtering routes in ISIS To: [email protected] Message-ID: <[email protected]> Content-Type: text/plain; charset=ISO-8859-1 Hi, what is the best way to filter routes in ISIS when redistributing BGP Ofcourse, you can use route-map with prefix-list or ACL or metric i tried doing some sample lab but nothing worked. can any one let me know how to enable Thanks G Praveen ------------------------------ Message: 4 Date: Mon, 15 Mar 2010 07:29:44 -0500 From: matt reath <[email protected]> Subject: Re: [OSL | CCIE_SP] filtering routes in ISIS To: Praveen g <[email protected]> Cc: [email protected] Message-ID: <[email protected]> Content-Type: text/plain; charset="iso-8859-1" A standard ACL and route-map should do the trick. If thats not working please post the config you are using and verify the routes exist in the BGP table. 'sh ip bgp' On Mon, Mar 15, 2010 at 6:54 AM, Praveen g <[email protected]>wrote: > Hi, > what is the best way to filter routes in ISIS when redistributing BGP > Ofcourse, you can use route-map with prefix-list or ACL or metric > i tried doing some sample lab but nothing worked. > can any one let me know how to enable > Thanks > G Praveen > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://onlinestudylist.com/pipermail/ccie_sp/attachments/20100315/098c2ccf/attachment-0001.htm ------------------------------ Message: 5 Date: Mon, 15 Mar 2010 16:38:39 +0400 From: Praveen g <[email protected]> Subject: Re: [OSL | CCIE_SP] filtering routes in ISIS To: matt reath <[email protected]> Cc: [email protected] Message-ID: <[email protected]> Content-Type: text/plain; charset=ISO-8859-1 Hi, i tried using the route-map with ACL and redistributing with BGP it did not work i am trying simple setup. R1 is connected to R2 and R3 R2 is connected to R3 and R5 R3 is connected to R2 and R5 R2,R3,R5 is full mesh. lets say R1,R2,R3 is as 10 and R5,R6 is in AS 1010 all routes from AS10 should take R3 primary path to BB and R2 primary to AS 1010 the routes are flipping.i used ACL to deny the routes and matched that into route-map then redistributed. let me know the status. all the routes are in sh ip bgp Thanks GP On Mon, Mar 15, 2010 at 16:29, matt reath <[email protected]> wrote: > A standard ACL and route-map should do the trick.? If thats not working > please post the config you are using and verify the routes exist in the BGP > table. 'sh ip bgp' > > On Mon, Mar 15, 2010 at 6:54 AM, Praveen g <[email protected]> > wrote: >> >> Hi, >> what is the best way to filter routes in ISIS when redistributing BGP >> Ofcourse, you can use route-map with prefix-list or ACL or metric >> i tried doing some sample lab but nothing worked. >> can any one let me know how to enable >> Thanks >> G Praveen >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com > > End of CCIE_SP Digest, Vol 36, Issue 7 ************************************** _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
