swinog May 2007

swinog@lists.swinog.ch

27 participants
18 discussions

RE: [swinog] MPLS VRF source routing (inter-vrf routing)

by Varaillon Jean Christophe

Could NAT be an option? Jean-Christophe Varaillon ------------ ALTEC Telecoms - NOC 14, Patmou, 151 23 Maroussi, Greece Tel: +30 210 6872932 Fax: +30 210 6872904 E-mail: vajc(a)altectelecoms.gr ICQ: 264-755-242 -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Steven.Glogger(a)swisscom.com Sent: Thursday, March 22, 2007 12:12 AM To: swinog(a)swinog.ch Subject: [swinog] MPLS VRF source routing (inter-vrf routing) hi all i've got some nice cisco bugs / features / whatever. some prerequisites: - 2 VRFs: vrf blue and vrf red - both vrfs have a different default route. - a PPP session / user terminating in vrf blue a specific route (10.0.1.0/29) is routed over static route (e.g. radius avpair) over the ppp session (vrf blue). this route is imported to vrf red by importing rd values and route-map filtering. so the connectivity from the red vrf to the vrf blue is working (one way). so, the goal (and this is the problem) is traffic souring that specific route should go back to vrf red. how i thought would be the simplest way to do it: policy routing. interface virtual-access123 ip policy route-map set-vrf-red ... ! access-list 110 permit 10.0.1.0 0.0.0.7 any route-map set-vrf-red permit 10 match ip address 110 set vrf red ! would be the nicest way of doing this. now the but: if you put the policy on the virtual-template / radius profile the session starts flapping (connect/disconnect/connect/disconnect....). so: not usable. my other approach was: interconnect vrf blue with vrf red by a vlan / interface. assume on vrf blue: fastethernet0/0 with 11.0.0.1/30 connnected to vrf red with fastethernet0/1 with 11.0.0.2/30. modifying the route map to: route-map set-vrf-red permit 10 match ip address 110 set interface fastethernet0/0 set ip next-hop 11.0.0.2 ! this will stop the flapping (disconnect/connect/disconnect...) of the ppp session and the whole routing works as expected.... BUT: somewhen it stops working because of one thousand possible CEF bugs ;-( i have to put "no ip route-cache cef" on the interconnection interface, then it works. some hours later (as already said) it stops working. when i do again "no ip route-cache cef" on the interface it works some other hours. i've tried several IOS for the C7200series and the only half-way working version is the 12.4T (or even 12.3T). so, now the big question to the community: 1) do you see any other working way doing source-routing from one vrf to another vrf? (there's a vrf source routing command, but i think this will really not scale) 2) do you have encountered the same CEF bugs? (i have seen them on 7206, 1841 and 2851 series routers) how cisco tells me to do it: http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_ guide09186a0080296409.html i would be glad to get some input from you guys. greetings -steven _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog Disclaimer The information in this e-mail and any attachments is confidential. It is intended solely for the attention and use of the named addressee(s). If you are not the intended recipient, or person responsible for delivering this information to the intended recipient, please notify the sender immediately. Unless you are the intended recipient or his/her representative you are not authorized to, and must not, read, copy, distribute, use or retain this message or any part of it. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.

15 years, 5 months

Thanks for SwiNOG #14

by Christian Jouas

I just want to thank very much all sponsors & speakers and the core team for this very great SwiNOG #14. We also received a lot of goodies from the sponsors, we can now make a "peering" party with all guys wearing the same t-shirt ;-) Thanks Chris

15 years, 9 months

urgent: Marcel Leuenberger

by Pascal Gloor

I'm urgently looking for Marcel Leuenberger, BIT. He's currently out of office. If anyone knows how to reach him, perhaps on his mobile, could you please ask him to call me back ASAP on my mobile (whois RIPE objet PGL-RIPE for my mobile number) Thanks! Pascal

15 years, 9 months

AW: DE-CIX Update @ SwiNOG #14

by Michel Renfer

FYI -----Ursprüngliche Nachricht----- Von: Arnold Nipper [mailto:arnold.nipper@de-cix.net] Gesendet: Mittwoch, 30. Mai 2007 14:07 Betreff: Re: AW: [swinog-core] DE-CIX Update @ SwiNOG #14 Es gab einige Fragen nach dem optischen Equipment, das wir am DE-CIX einsetzen. Hier der link zu dem Hersteller: http://www.lynx-networks.com/ Vlt. kann man das ja an die Teilnehmer verteilen. Danke, Arnold -- Arnold Nipper e-mail: arnold.nipper(a)de-cix.net DE-CIX Management GmbH phone/mob: +49 172 265 0958 Lichtstr.43i, 50825 Koeln fax: +49 6224 9259 333 Geschaeftsfuehrer Harald A. Summa http://www.de-cix.net Registergericht AG Koeln HRB 51135

15 years, 9 months

Candid Aeby is out of the office.

by Candid Aeby

I will be out of the office starting 29.05.2007 and will not return until 01.06.2007. Your email will not be forwarded. I will respond to your message when I return. In urgent matters you can reach me via my mobile phone +41 77 208 10 88 Best Regards Candid Aeby

15 years, 9 months

Cablecom / chello.at plase contact me offline re your mailservers in various blacklists

by Benoit Panizzon

Hello viefep18-int.chello.at [213.46.255.22] is hopelessly blacklisted. Apparenty this is the server from which balcab.ch customers try to send emails to our customers and obviously don't get through. abuse(a)chello.at has been contacted 2 weeks ago regarding getting your mailserver ranges into the SWINOG whitelists - no reply. Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - System Services ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

15 years, 9 months

AS1233: cixp peers

by Philippe Strauss

Hello, AS12333 (DFi) is about to make maintenance work affecting CIXP peers. It should be offline just a few minutes. Have a nice week-end. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

15 years, 10 months

Sunrise

by Xaver Aerni

Could someone from Sunrise (Freesurf-Team) Contact offline. Greetings X. Aerni

15 years, 10 months

SwiNOG#14 - Registration is now CLOSED

by Pascal Gloor

All in subject. Pascal SwiNOG-Core Team

15 years, 10 months

2007 Infrastructure Security Survey

by Danny McPherson

Folks, It's time for the Infrastructure Security Survey again and I thought folks here might be interested in responding. If you're willing to complete the survey please go here to receive a token (which will be mailed to you with a URL for response input): https://sec-survey.tcb.net/index.php?sid=1 You can find the previous editions of the survey report here: http://www.tcb.net/ISP_Security_Report-2H2005.pdf http://www.tcb.net/2006-WISR.pdf If you have any questions, comments or concerns please let me know. Thanks in advance! -danny

15 years, 10 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog May 2007