Got it

In an MPLS L3VPN scenario, why doesn't an IBGP peer advertise routes to the other IBGP peers?

Created: Sep 20, 2021 11:24:13Latest reply: Sep 21, 2021 02:59:05 243 7 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi everyone,


I want to do an MPLS L3VPN simulation but I can't connect two CEs. I do not know why the routes between the IBGP peers are not announced. I share below the topology I am using and the results of some commands so that they have information.


1



<PE1>disp bgp vpnv4 all peer


BGP Local Router ID : 10.10.10.1

 Local AS number : 100

Total number of peers : 4 Peers in established state : 4


  Peer            V          AS  MsgRcvd  MsgSent  OutQ  Up/Down       State Pre

fRcv


  2.2.2.2         4         100      181      182     0 02:53:20 Established    

   2

  3.3.3.3         4         100      173      181     0 02:50:56 Established    

   1


  Peer of IPv4-family for vpn instance :


 VPN-Instance vpna, Router ID 10.10.10.1:

  20.20.10.2      4         200      188      190     0 03:04:55 Established    

   2


 VPN-Instance vpnb, Router ID 10.10.10.1:

  20.20.20.2      4         300      187      186     0 03:04:29 Established    

   1




<PE1>disp ip vpn-instance verbose 

 Total VPN-Instances configured      : 2

 Total IPv4 VPN-Instances configured : 2

 Total IPv6 VPN-Instances configured : 0


 VPN-Instance Name and ID : vpna, 1

  Interfaces : GigabitEthernet4/0/0

 Address family ipv4

  Create date : 2021/06/13 00:18:41 UTC-08:00    

  Up time : 0 days, 04 hours, 00 minutes and 00 seconds

  Route Distinguisher : 100:1

  Export VPN Targets :  111:1

  Import VPN Targets :  111:1

  Label Policy : label per route

  Log Interval : 5


 VPN-Instance Name and ID : vpnb, 2

  Interfaces : GigabitEthernet4/0/1

 Address family ipv4

  Create date : 2021/06/13 00:43:38 UTC-08:00    

  Up time : 0 days, 03 hours, 35 minutes and 03 seconds

  Route Distinguisher : 100:2

  Export VPN Targets :  222:2

  Import VPN Targets :  222:2

  Label Policy : label per route

  Log Interval : 5




<PE1>disp ip routing-table vpn-instance vpna

Route Flags: R - relay, D - download to fib

------------------------------------------------------------------------------

Routing Tables: vpna

         Destinations : 6        Routes : 6        


Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface


     20.20.10.0/24  Direct  0    0           D   20.20.10.1      GigabitEthernet

4/0/0

     20.20.10.1/32  Direct  0    0           D   127.0.0.1       GigabitEthernet

4/0/0

   20.20.10.255/32  Direct  0    0           D   127.0.0.1       GigabitEthernet

4/0/0

    60.60.60.60/32  EBGP    255  0           D   20.20.10.2      GigabitEthernet

4/0/0

    192.168.1.0/24  EBGP    255  0           D   20.20.10.2      GigabitEthernet

4/0/0

255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0


<PE1>



Thank you very much for your help.


Featured Answers
E.DR_91
MVE Author Created Sep 20, 2021 11:32:51

The correct import of the routes corresponding to each vpn-instance is shown in PE1

PE1

PE2

PE2

PE3

PE3


- Connectivity test from PC2 to PC1

PING


Configuring vpn-instance PE1

ip vpn-instance CLIENTE_A

 ipv4-family

  route-distinguisher 1:200

  vpn-target 1:200 export-extcommunity

  vpn-target 200:1 import-extcommunity

#

ip vpn-instance CLIENTE_B

 ipv4-family

  route-distinguisher 1:300

  vpn-target 1:300 export-extcommunity

  vpn-target 300:1 import-extcommunity

#

- Pe1 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_A

 ip address 20.20.10.1 255.255.255.0 

#

GigabitEthernet2/0/0 interface

 ip binding vpn-instance CLIENTE_B

 ip address 20.20.20.1 255.255.255.0 

#

configuring BGP in PE1

bgp 100

 router-id 1.1.1.1

 peer 6.6.6.6 as-number 100 

 peer 6.6.6.6 connect-interface LoopBack0

 peer 7.7.7.7 as-number 100 

 peer 7.7.7.7 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 6.6.6.6 enable

  peer 7.7.7.7 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 6.6.6.6 enable

  peer 7.7.7.7 enable

 #

 ipv4-family vpn-instance CLIENTE_A 

  import-route direct

  peer 20.20.10.2 as-number 200 

 #

 ipv4-family vpn-instance CLIENTE_B 

  import-route direct

  peer 20.20.20.2 as-number 300 

#

Configuring vpn-instance PE2

ip vpn-instance CLIENTE_A

 ipv4-family

  route-distinguisher 1:200

  vpn-target 200:1 export-extcommunity

  vpn-target 1:200 import-extcommunity

#

- Pe2 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_A

 ip address 20.20.30.1 255.255.255.0 

#

BGP configuration in PE2

bgp 100

 router-id 6.6.6.6

 peer 1.1.1.1 as-number 100 

 peer 1.1.1.1 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 1.1.1.1 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 1.1.1.1 enable

 #

 ipv4-family vpn-instance CLIENTE_A 

  import-route direct

  peer 20.20.30.2 as-number 400 

#

Configuration of vpn-instance PE3

ip vpn-instance CLIENTE_B

 ipv4-family

  route-distinguisher 1:300

  vpn-target 300:1 export-extcommunity

  vpn-target 1:300 import-extcommunity

#

- Pe3 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_B

 ip address 20.20.40.1 255.255.255.0 

#

- Configuration of BGP in PE3

bgp 100

 router-id 7.7.7.7

 peer 1.1.1.1 as-number 100 

 peer 1.1.1.1 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 1.1.1.1 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 1.1.1.1 enable

 #

 ipv4-family vpn-instance CLIENTE_B 

  import-route direct

  peer 20.20.40.2 as-number 500 

#



View more
  • x
  • convention:

All Answers
Hi,
We've noticed about your problem, and we're processing on.
View more
  • x
  • convention:

E.DR_91
E.DR_91 MVE Author Created Sep 20, 2021 11:25:38

Hi

could you send the vpns settings in the other iBGP PE please?

Huawei by default exports the routes known by eBGP to iBGP peers.

The only thing that could be happening is that the peer in vpnv4 is not declared within the MP-BGP family of your router.

Could you also submit the BGP config?
View more
  • x
  • convention:

tubaboraka
tubaboraka Created Sep 20, 2021 11:27:11 (0) (0)
-VPN configuration in PE1

#

ip vpn-instance vpna

ipv4-family

route-distinguisher 1:200

vpn-target 1:200 export-extcommunity

vpn-target 200:1 import-extcommunity

#

ip vpn-instance vpnb

ipv4-family

route-distinguisher 1:300

vpn-target 1:300 export-extcommunity

vpn-target 300:1 import-extcommunity

#

#

GigabitEthernet4/0/0 interface

ip binding vpn-instance vpna

ip address 20.20.10.1 255.255.255.0

#

GigabitEthernet4/0/1 interfa 
tubaboraka
tubaboraka Created Sep 20, 2021 11:28:16 (0) (0)
<PE2>display bgp vpnv4 all peer 1.1.1.1 verbose



BGP Peer is 1.1.1.1, remote AS 100

Type: IBGP link

BGP version 4, Remote router ID 10.10.10.1

Update-group ID: 1

BGP current state: Established, Up for 00h01m53s

BGP current event: KATimerExpired

BGP last state: OpenConfirm

BGP Peer Up count: 1

Received total routes: 2

Received active routes total: 2

Advertised total routes: 2

Port: Local - 50938 Remote - 179

Configured: Connect-r 
tubaboraka
tubaboraka MVE Author Created Sep 20, 2021 11:28:59

Posted by E.DR_91 at 2021-09-20 11:25 Hi could you send the vpns settings in the other iBGP PE please? Huawei by default exports the route ...
<PE2>display bgp vpnv4 all peer 1.1.1.1 verbose



BGP Peer is 1.1.1.1, remote AS 100

Type: IBGP link

BGP version 4, Remote router ID 10.10.10.1

Update-group ID: 1

BGP current state: Established, Up for 00h01m53s

BGP current event: KATimerExpired

BGP last state: OpenConfirm

BGP Peer Up count: 1

Received total routes: 2

Received active routes total: 2

Advertised total routes: 2

Port: Local - 50938 Remote - 179

Configured: Connect-retry Time: 32 sec

Configured: Active Hold Time: 180 sec Keepalive Time:60 sec

Received : Active Hold Time: 180 sec

Negotiated: Active Hold Time: 180 sec Keepalive Time:60 sec

Peer optional capabilities:

Peer supports bgp multi-protocol extension

Peer supports bgp route refresh capability

Peer supports bgp 4-byte-as capability

Address family IPv4 Unicast: advertised and received

Address family VPNv4: advertised and received

Received: Total 6 messages

Update messages 3

Open messages 1

KeepAlive messages 2

Notification messages 0

Refresh messages 0

Sent: Total 4 messages

Update messages 1

Open messages 1

KeepAlive messages 2

Notification messages 0

Refresh messages 0

Authentication type configured: None

Last keepalive received: 2021/06/15 01:32:03 UTC-08:00

Last keepalive sent : 2021/06/15 01:32:03 UTC-08:00

Last update received: 2021/06/15 01:31:11 UTC-08:00

Last update sent : 2021/06/15 01:31:03 UTC-08:00

Minimum route advertisement interval is 0 seconds

Optional capabilities:

Route refresh capability has been enabled

4-byte-as capability has been enabled

Connect-interface has been configured

Peer Preferred Value: 0

Routing policy configured:

No routing policy is configured

<PE2>



<PE3>display bgp vpnv4 all peer 1.1.1.1 verbose



BGP Peer is 1.1.1.1, remote AS 100

Type: IBGP link

BGP version 4, Remote router ID 10.10.10.1

Update-group ID: 1

BGP current state: Established, Up for 00h05m14s

BGP current event: KATimerExpired

BGP last state: OpenConfirm

BGP Peer Up count: 1

Received total routes: 1

Received active routes total: 1

Advertised total routes: 0

Port: Local - 49873 Remote - 179

Configured: Connect-retry Time: 32 sec

Configured: Active Hold Time: 180 sec Keepalive Time:60 sec

Received : Active Hold Time: 180 sec

Negotiated: Active Hold Time: 180 sec Keepalive Time:60 sec

Peer optional capabilities:

Peer supports bgp multi-protocol extension

Peer supports bgp route refresh capability

Peer supports bgp 4-byte-as capability

Address family IPv4 Unicast: advertised and received

Address family VPNv4: advertised and received

Received: Total 10 messages

Update messages 3

Open messages 1

KeepAlive messages 6

Notification messages 0

Refresh messages 0

Sent: Total 7 messages

Update messages 0

Open messages 1

KeepAlive messages 6

Notification messages 0

Refresh messages 0

Authentication type configured: None

Last keepalive received: 2021/06/15 01:35:33 UTC-08:00

Last keepalive sent : 2021/06/15 01:35:35 UTC-08:00

Last update received: 2021/06/15 01:31:11 UTC-08:00

Minimum route advertisement interval is 0 seconds

Optional capabilities:

Route refresh capability has been enabled

4-byte-as capability has been enabled

Connect-interface has been configured

Peer Preferred Value: 0

Routing policy configured:

No routing policy is configured

<PE3>



<PE2>disp bgp vpnv4 vpn-instance vpna routing-table peer 1.1.1.1 received-routes



Info: The peer does not exist.



<PE3>disp bgp vpnv4 vpn-instance vpnb routing-table peer 1.1.1.1 received-routes



Info: The peer does not exist.
View more
  • x
  • convention:

E.DR_91
E.DR_91 MVE Author Created Sep 20, 2021 11:32:51

The correct import of the routes corresponding to each vpn-instance is shown in PE1

PE1

PE2

PE2

PE3

PE3


- Connectivity test from PC2 to PC1

PING


Configuring vpn-instance PE1

ip vpn-instance CLIENTE_A

 ipv4-family

  route-distinguisher 1:200

  vpn-target 1:200 export-extcommunity

  vpn-target 200:1 import-extcommunity

#

ip vpn-instance CLIENTE_B

 ipv4-family

  route-distinguisher 1:300

  vpn-target 1:300 export-extcommunity

  vpn-target 300:1 import-extcommunity

#

- Pe1 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_A

 ip address 20.20.10.1 255.255.255.0 

#

GigabitEthernet2/0/0 interface

 ip binding vpn-instance CLIENTE_B

 ip address 20.20.20.1 255.255.255.0 

#

configuring BGP in PE1

bgp 100

 router-id 1.1.1.1

 peer 6.6.6.6 as-number 100 

 peer 6.6.6.6 connect-interface LoopBack0

 peer 7.7.7.7 as-number 100 

 peer 7.7.7.7 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 6.6.6.6 enable

  peer 7.7.7.7 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 6.6.6.6 enable

  peer 7.7.7.7 enable

 #

 ipv4-family vpn-instance CLIENTE_A 

  import-route direct

  peer 20.20.10.2 as-number 200 

 #

 ipv4-family vpn-instance CLIENTE_B 

  import-route direct

  peer 20.20.20.2 as-number 300 

#

Configuring vpn-instance PE2

ip vpn-instance CLIENTE_A

 ipv4-family

  route-distinguisher 1:200

  vpn-target 200:1 export-extcommunity

  vpn-target 1:200 import-extcommunity

#

- Pe2 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_A

 ip address 20.20.30.1 255.255.255.0 

#

BGP configuration in PE2

bgp 100

 router-id 6.6.6.6

 peer 1.1.1.1 as-number 100 

 peer 1.1.1.1 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 1.1.1.1 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 1.1.1.1 enable

 #

 ipv4-family vpn-instance CLIENTE_A 

  import-route direct

  peer 20.20.30.2 as-number 400 

#

Configuration of vpn-instance PE3

ip vpn-instance CLIENTE_B

 ipv4-family

  route-distinguisher 1:300

  vpn-target 300:1 export-extcommunity

  vpn-target 1:300 import-extcommunity

#

- Pe3 ip address configuration

GigabitEthernet0/0/2 interface

 ip binding vpn-instance CLIENTE_B

 ip address 20.20.40.1 255.255.255.0 

#

- Configuration of BGP in PE3

bgp 100

 router-id 7.7.7.7

 peer 1.1.1.1 as-number 100 

 peer 1.1.1.1 connect-interface LoopBack0

 #

 ipv4-family unicast

  undo synchronization

  peer 1.1.1.1 enable

 # 

 ipv4-family vpnv4

  policy vpn-target

  peer 1.1.1.1 enable

 #

 ipv4-family vpn-instance CLIENTE_B 

  import-route direct

  peer 20.20.40.2 as-number 500 

#



View more
  • x
  • convention:

Hello @tubaboraka
From the BGP VPNv4 information you upload, the VPNv4 peer relationships between PEs are normal.
Please check the MPLS LSP between the PEs.
In addition, you can check the sent VPNv4 routes through the command 'display bgp vpnv4 vpn-instance vpnb routing-table peer 1.1.1.1 advertised-routes'.
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.