Could NAT be an option?
Jean-Christophe Varaillon
------------
ALTEC Telecoms - NOC
14, Patmou, 151 23 Maroussi, Greece
Tel: +30 210 6872932
Fax: +30 210 6872904
E-mail: vajc(a)altectelecoms.gr
ICQ: 264-755-242
-----Original Message-----
From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Steven.Glogger(a)swisscom.com
Sent: Thursday, March 22, 2007 12:12 AM
To: swinog(a)swinog.ch
Subject: [swinog] MPLS VRF source routing (inter-vrf routing)
hi all
i've got some nice cisco bugs / features / whatever.
some prerequisites:
- 2 VRFs: vrf blue and vrf red
- both vrfs have a different default route.
- a PPP session / user terminating in vrf blue
a specific route (10.0.1.0/29) is routed over static route (e.g. radius
avpair) over the ppp session (vrf blue).
this route is imported to vrf red by importing rd values and route-map filtering.
so the connectivity from the red vrf to the vrf blue is working (one way).
so, the goal (and this is the problem) is traffic souring that specific route should go back to vrf red.
how i thought would be the simplest way to do it: policy routing.
interface virtual-access123
ip policy route-map set-vrf-red
...
!
access-list 110 permit 10.0.1.0 0.0.0.7 any
route-map set-vrf-red permit 10
match ip address 110
set vrf red
!
would be the nicest way of doing this.
now the but: if you put the policy on the virtual-template / radius profile the session starts flapping (connect/disconnect/connect/disconnect....). so: not usable.
my other approach was:
interconnect vrf blue with vrf red by a vlan / interface.
assume on vrf blue: fastethernet0/0 with 11.0.0.1/30 connnected to vrf red with fastethernet0/1 with 11.0.0.2/30.
modifying the route map to:
route-map set-vrf-red permit 10
match ip address 110
set interface fastethernet0/0
set ip next-hop 11.0.0.2
!
this will stop the flapping (disconnect/connect/disconnect...) of the ppp session and the whole routing works as expected.... BUT: somewhen it stops working because of one thousand possible CEF bugs ;-(
i have to put "no ip route-cache cef" on the interconnection interface, then it works. some hours later (as already said) it stops working. when i do again "no ip route-cache cef" on the interface it works some other hours.
i've tried several IOS for the C7200series and the only half-way working version is the 12.4T (or even 12.3T).
so, now the big question to the community:
1) do you see any other working way doing source-routing from one vrf to another vrf?
(there's a vrf source routing command, but i think this will really not
scale)
2) do you have encountered the same CEF bugs? (i have seen them on 7206,
1841 and 2851 series routers)
how cisco tells me to do it:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_
guide09186a0080296409.html
i would be glad to get some input from you guys.
greetings
-steven
_______________________________________________
swinog mailing list
swinog(a)lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Disclaimer
The information in this e-mail and any attachments is confidential. It is intended solely for the attention and use of the named addressee(s). If you are not the intended recipient, or person responsible for delivering this information to the intended recipient, please notify the sender immediately. Unless you are the intended recipient or his/her representative you are not authorized to, and must not, read, copy, distribute, use or retain this message or any part of it. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
Hi,
I am currently out of the office until july 30th.
For business or technical support you can contact Michel Romy (mromy(a)jahia.com) or Tristan Renaud (trenaud(a)jahia.com).
Best Regards,
Philippe
----------
Bonjour,
Je serais en congé jusqu'au 30 Juillet.
Pour des questions d'ordre commerciales ou techniques vous pouvez contacter: Michel Romy (mromy(a)jahia.com) ou Tristan Renaud (trenaud(a)jahia.com).
Salutations,
Philippe
Hi,
I am currently out of the office until july 30th.
For business or technical support you can contact Michel Romy (mromy(a)jahia.com) or Tristan Renaud (trenaud(a)jahia.com).
Best Regards,
Philippe
----------
Bonjour,
Je serais en congé jusqu'au 30 Juillet.
Pour des questions d'ordre commerciales ou techniques vous pouvez contacter: Michel Romy (mromy(a)jahia.com) ou Tristan Renaud (trenaud(a)jahia.com).
Salutations,
Philippe
Hi,
Sorry for the cross-post.
The Netlantis team (Pascal Gloor and me) is pleased to announce a new
BGP routing tables visualization project.
This project is called Routing Table Geoanalysis and aims at
representing various statistics based on the analysis of a BGP routing table.
The result of this analysis is a poster-size computer-generated image
(12+ Megapixels) which you can easily print.
Project's URL : http://rtg.netlantis.org/
The statistics for each routing table we analyse are :
- The distribution across continents (or more precisely geo-political
areas) of the total number of IP addresses announced
- The number of IP addresses announced for 100 inhabitants of these areas
- The number of routes, IP addresses and the average number of IP
addresses per route
- The main upstream AS's share in the routing table (in number of IP)
and the geographic distribution of IP addresses announced through or by them
- The distribution of AS path length by continent
- The prefix size distribution
The geo-political areas (I'm abusively calling continents) used for
the statistics are : Africa, Asia, Central America, Europe,
Middle-East, North America, Oceania and South America. When it's
relevant, I also use the area World which is simply a way to display
the average statistics for the whole routing table.
The posters (and statistics) will be automatically updated every month.
English not being my native language, I'll be happy if some people
can help me fix or improve my wording and explanations so they can be
better understood, especially on this page: http://rtg.netlantis.org/?info=rtg
I'm thinking about adding a page on which you could automatically
upload (via curl) your clogin -c "term len 0\rsh ip bgp" every month
so that any AS could also be listed without the need to peer
anywhere... tell me if you are interested by this feature.
Thanks to routeviews for providing the routing tables and to our
sponsors : IP-MAN, OVH and MaxMind.
ps: If you want to sponsor Netlantis, we found a piece of hardware
which might help us return in a short time to production, the thing
is a DDRAM-based hard-disk (more details on my blog), contact me in
private if you can help us get one.
Sincerely,
Philippe Bourcier
web : http://sysctl.org/
blog : http://netlantis.blogspot.com
Habe ein schönes "Danke, liebe Admins" Banner erhalten.. ich hätte
mit mehr Bestechung gerechnet :)
Gruss
-----Ursprüngliche Nachricht-----
Von: Michele Capobianco [mailto:Michele.Capobianco@online.ch]
Gesendet: Freitag, 27. Juli 2007 11:31
An: 'swinog(a)lists.swinog.ch'
Betreff: [swinog] Happy Sysadminday!
Alle jahre wieder....
Na?
Was habt ihr für geschenke bekommen?
http://www.sysadminday.ch
Gruss aus Wil
Michele
Hi,
I am currently out of the office until july 30th.
For business or technical support you can contact Michel Romy (mromy(a)jahia.com) or Tristan Renaud (trenaud(a)jahia.com).
Best Regards,
Philippe
----------
Bonjour,
Je serais en congé jusqu'au 30 Juillet.
Pour des questions d'ordre commerciales ou techniques vous pouvez contacter: Michel Romy (mromy(a)jahia.com) ou Tristan Renaud (trenaud(a)jahia.com).
Salutations,
Philippe
hi swinog members
we have the need to rollout a pppoe setup on our
dsl colocations where static ip with mtu 1500
is actually in place.
as i know many postings around the world regarding
pppoe mtu problems and advices to customers to
reduce mtu on their clients down to 1492, i wanted
to ask for a feedback from you if you all have pppoe
with 1500 (=1492) in place or someone uses pppoe
with 1508 from cpe to pppoe-server?
if you use 1500: are the mentioned problems with
websites (eg: gmx) or ipsec setups still an issue ?
thanx and best regards from austria to our neighbors
bernd spiess / happynet.at / i3b.at
Hi,
I am currently out of the office until july 30th.
For business or technical support you can contact Michel Romy (mromy(a)jahia.com) or Tristan Renaud (trenaud(a)jahia.com).
Best Regards,
Philippe
----------
Bonjour,
Je serais en congé jusqu'au 30 Juillet.
Pour des questions d'ordre commerciales ou techniques vous pouvez contacter: Michel Romy (mromy(a)jahia.com) ou Tristan Renaud (trenaud(a)jahia.com).
Salutations,
Philippe