UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????

UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????
Description:
I am unable to get a static default route via MPBGP session for a vrf, any other route redistributed the same way is getting through.
Just the static default route isn't ????
1>
SOURCE PE WHERE IS THE ROUTE REDISTRIBUTED:
pe1#
router bgp 4755
bgp router-id 10.10.10.103
no bgp default ipv4-unicast
bgp log-neighbor-changes
neighbor 10.10.10.100 remote-as 4755
neighbor 10.10.10.100 update-source Loopback0
address-family vpnv4
neighbor 10.10.10.100 activate
neighbor 10.10.10.100 send-community extended
exit-address-family
address-family ipv4 vrf B
redistribute static <<<<<<<<<<<<<< STATIC REDIS
no auto-summary
no synchronization
exit-address-family
address-family ipv4 vrf A
redistribute static <<<<<<<<<<<<<< STATIC REDIS
no auto-summary
no synchronization
exit-address-family
ip classless
ip route vrf A 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
ip route vrf B 0.0.0.0 0.0.0.0 Serial1/0 192.168.1.2 global <<<< STATIC ROUTE POINTING THE GLOBAL CONTEXT INTERFACE
DESTINATION PE HERE I CANNOT SEE THE STATIC DEFAULT ROUTE:
pe3(config-router-af)#do sh ip bgp vpnv4 all
BGP table version is 11, local router ID is 10.10.10.103
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 4755:1 (default for vrf A)
*>i172.16.1.0/30 10.10.10.101 0 100 0 ?
*>i172.16.2.0/30 10.10.10.102 0 100 0 ?
*>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
*>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
*>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
Route Distinguisher: 4755:2 (default for vrf B)
*>i172.16.1.0/30 10.10.10.101 0 100 0 ?
*>i172.16.2.0/30 10.10.10.102 0 100 0 ?
*>i172.16.10.0/24 10.10.10.101 2297856 100 0 ?
*>i172.16.20.0/24 10.10.10.102 2297856 100 0 ?
*>i172.16.200.0/24 10.10.10.102 2170112 100 0 ?
THE STAITC ROUTE IS REDISTRIBUTED TO LOCAL VRF CONTXT ASWELL AS WE CAN SEE:
pe3(config-router-af)#do sh ip route vrf A
Routing Table: A
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.1.2 to network 0.0.0.0
172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks
B 172.16.200.0/24 [200/2170112] via 10.10.10.102, 00:00:23
B 172.16.20.0/24 [200/2297856] via 10.10.10.102, 00:00:23
B 172.16.10.0/24 [200/2297856] via 10.10.10.101, 00:00:23
B 172.16.1.0/30 [200/0] via 10.10.10.101, 00:00:23
B 172.16.2.0/30 [200/0] via 10.10.10.102, 00:00:23
S* 0.0.0.0/0 [1/0] via 192.168.1.2, Serial1/0
Hope I am clear in explaining the issue...
Thanks,
Dara

Hehehe :)
"Unfortunately" that's true !!!!
This could have been the last thing that I try.
Getting he techs work, protocols work is fine.
But if get to make myself understand the logic behind adding this command as well than ... :(
Thanks a lot,

Similar Messages

How do I inject a static default route into vrf

Could anybody give me any advise on injecting a static default route into vrf.
The static route is to the internet, I can't enable vrf forwading on the fa interface as other users also use this internet connection.
I am configuring a 7206 VXR 12.3(26) and have attached a copy of the config
Any help gratefully received

Hi
I think you have to specify the route as this
ip route vrf delegate_wireless fa0/0 0.0.0.0 0.0.0.0 194.154.168.1 global
it tells the router to to use a next hop that is not part of the vrf.
Also, don't forget that the return traffic has to be routed out to the vrf.
Something like this.
ip route a.b.c.d tu1 10.252.254.2
/Mikael

Metrics when redistributing a static default route into EIGRP?

I saw a network working with EIGRP and resdistributing a static default route into it. I did not find the "default metrics" to redistribute into EIGRP but the static default route works and is redistributed. My understanding was that everytime you redistribute into EIGRP you needed to specify the metrics. How come this network is working? Can someone explain or point to a cisco document what explains it?
Sample of the config:
router eigrp 1
redistribute static
no autosummary
network Y.Y.Y.Y
ip route 0.0.0.0 0.0.0.0 X.X.X.X
Thank you,

It's just one of those specific things about EIGRP and IOS, maybe a design choice. If they do use the interface as the seed metric then that would help explain why it's that way.
Weirdly if you are using EIGRP VRF address family configuration on IOS and you redistribute statics you do need a metric.
And I believe NXOS running on Nexus switches also needs a metric defined.
Just one of those things you have to remember but it would be good if it was consistent.
Jon

WRV200 Unable to set static default route

In my case i should use the wrv200 as a router with static routes.
A tried to set up a route 0.0.0.0 0.0.0.0 192.168.1.254.
I did not get any error messages after clicking the "save changes" button, but it does not work and it can't be seen on the routing table.
I think that it is not a missing feature! That must be a bug!
Could anybody help me please?

I can not do that because the default gateway parameter belongs to the wan interface, which is connected with the router at the vineyard over vpn and has the ip 172.16.1.1 if I try to set here 192.168.1.254 it says:
"The gateway should be in the same subnet as the interface" or something like that with the same meaning.
I did not post but i use the firmware version 1.0.39

Injecting Global default Routes into a MPLS VPN

Hi,
I have a PE router running MPBGP which receives two default routes to the internet through an IPV4 BGP session. I need to import these routes in to a VRF and export them to different customer VRFs so that these VRFs are able to access Internet.
I have used the feature called "BGP Support for IP Prefix Import from Global Table into a VRF Table" (URL:http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00803b8db9.html#wp1063870)
and imported these routes into a VRF.
The issue is these routes are not propagated to any of the other PE routers which has customer VRFs configured.
Has anybody tried this or a similar method to inject a dynamic default route into a MPLS VPN.
Any suggestions would be highly appreciated.
Thanks
Subhash

Hi Subhash,
is there anything preventing you from terminating your internet BGP sessions in a VRF? Then everything should go smoothly, i.e. standard VRF import/export.
So possibility A) create a VRF Internet, move bgp neighbor commands there and use filters preventing anything but the default route, then use route targets to distribute the default route into other VRFs.
Possibility B) use static routing with packet leaking. Could look like this:
ip route vrf Internet 0.0.0.0 0.0.0.0 global
ip route vrf Internet 0.0.0.0 0.0.0.0 global 250
ip route Serial0/0 !assuming this is where the customer router connects.
Note: the BGP peer IP does not have to be directly connected! There has to be a LDP label for it though. so include your BGP peers network into your IGP and the backup will work, when you loose the link to the peer.
Hope this helps! Please rate all posts.
Regards, Martin

Using ACE RHI to inject a default route

I think I posted this onto the wrong Forum. Anyone able to advise here?
SteveK.
Posted by: stevek1 - Network Administrator, Dept Natural Resources and Mines
Apr 18, 2008, 12:04am PST
Hi Folks,
I need to provide internal devices with active-active access to our clustered firewall which sits across 2 data centres.
I need to allow internal hosts to reach external/unknown networks via a default route.
We have ACE modules in our internal network aggregation 6513s at each site.
I aim to achieve this using RHI...ie...device at site 1 reaches the internet via firewall at site 1, device at site 2 reaches internet via firewall at site 2 (due to better route). If the firewall is inaccessible from site 2, ACE at site 2 removes the route from the MSFC using RHI and site 2 device traffic is re-routed to the site 1 exit point.
Has anyone out there done this before?
Regards, Steve.
| Outline | Subscribe | E-Mail this Message
Replied by: stevek1 - Network Administrator, Dept Natural Resources and Mines - Apr 20, 2008, 6:48pm PST
Hi Folks,
It's Steve here again. I haven't had a response to my query as yet, but basically I need to know the validity of using ACE RHI to inject a default route as opposed to a host route.
Can anyone please advise?
Best Wishes, Steve.

Thanks so much for your response Zahoor.
The solution you have provided is more complicated than I had in mind. For example we had not intended using FWSM (we don't have these modules). I just want to use our existing ACEs at each Data Centre to provide the injection of a default route to our internal EIGRP process based on the result of a probe to our Checkpoint FW. What do you think?
Steve.

Inject BGP Default Routes into Multiple VRF before Best Path Selection

Hello,
I have the following setup:
Multiple Border Routers with eBGP sessions to external AS. We receive a default route from this multiple AS to keep the Table manageable. We noticed an important part of our traffic was been SW routed instead of CEF when we had the Full Internet table. Router Resources came to the ground when we changed to a default.
Now I want to separate this default routes into different VRF. Attached is the Diagram.
My question is, the multiple default route all go into the BGP Table. The BGP table then select the best route and place it on the RIB and then to the FIB.
I want to redistribute the different Route on the BGP table prior to the Best path selection algorithm and placed on the RIB.
How can I achieve this?

Hi,
Redistribution of multiple routes to same prefix is not possible. Even if you have configured BGP multipath and all different bgp routes got installed into routing table, during redistribution only route will be redistributed.
Also would like to understand the requirement of redistributing multiple BGP routes in to IGP. As per your diagram, 3 different eBGP sessions are on three different routers, so you can prefer eBGP route over iBGP received from other routers and can distribute eBGP route to IGP from each router. Thus you will have three different default routes in to IGP in core.
Please don't forget to rate this post if it has been helpful
- Akash

Where does the default route come from ?

Dear All
As we know, the edge router in client side gets default route from ISP' edge router. Where does the default route come from in ISP? If the ISP edge router has full route table, it produces there. If not, it comes from its upstream router until full routes table(only BGP). Please correct me if I am wrong. Thank you.

Hello.
While establishing BGP with ISP, there are three options for a client:
> Default route (used in general) - client router forwards every request (for destination route) to ISP router.
> Full route - ISP router's complete routing table would be received and maintained in client router.
> Partial route - Only specific route would be received from ISP (Head office - Branch office scenario)
ISP generate default route from their peering router that should have full routing table or knowledge of the router having it. A local ISP may generate default to their client and have one received from their upstream or global / larger ISP. Hope this helps.

Problem leaking route from VRF to global table on CSR 1000V

Hi Guys,
So I have a problem with VRF's on a CSR 1000V, specifically exporting a connected subnet from a VRF into the global routing table.
My config, very abbreviated, is as follows:
Router:
GE1: 10.0.0.1/31 VRF TEST
GE2: 172.30.20.1/24 (No VRF, BGP neighbor to 172.30.20.2, receiving 0.0.0.0/0 (default route))
Now sh ip route displays:
0.0.0.0/0 (BGP)
172.30.20.1/24 (Connected)
sh ip route vrf TEST displays:
0.0.0.0/0 (BGP)
10.0.0.1/31 connected
My VRF config is as follows:
ip vrf TEST
rd 1:1
import ipv4 unicast map GLOBAL
export ipv4 unicast map CONNECTED-SUBNET
ip prefix-list CONNECTED seq 1 permit 10.0.0.1/31
ip prefix-list DEFAULT seq 1 permit 0.0.0.0/0
route-map CONNECTED-SUBNET permit 10
match ip address prefix-list CONNECTED
route-map GLOBAL permit 10
match ip address prefix-list DEFAULT
Now my import command works perfectly (0.0.0.0/0 is imported from BGP into the VRF's routing table), however my export command does not function - seemingly at all.
Even though my prefix list is an exact match, I do not see 10.0.0.1/31 appearing in the global routing table, or the BGP table at all (show ip bgp 10.0.0.1 shows only the 0.0.0.0/0 default route)
Any thoughts on what is going on here? Am I misunderstanding the export command for VRF's? I was under the impression this will export directly to the BGP table, and then be imported to the global routing table if applicable?
Any thoughts/input would be appreciated!

Hello
"GE1: 10.0.0.1/31 VRF TEST
GE2: 172.30.20.1/24 (No VRF, BGP neighbor to 172.30.20.2, receiving 0.0.0.0/0 (default route))"
I must have misunderstood somewhere I was assuming you had no vrf bgp between GE1-2 , and just vrf on subnet 10.0.0.0/x which needed to be advertised in the global routing table hence my last post suggested you redistribute into bgp,
So assuming you are accepting a default route from GE2 it went like this
GE1
int fa0/1
ip vrf forwading TEST
ip addresses 10.0.0.1 255.255.255.255
int xx
ip address 172.30.20.1 255.255.255.0
router bgp xy
neighbour 172.30.20.2 remote-as yx
redistribute static ( to advertised the vrf subnet to GE2)
ip route 10.0.0.1 255.255.255.255 fa0/1 ( this is tell the global rib where to go for the vrf route)
ip prefix-list VRF permit 0.0.0.0/0
route-map VRF_rm
match ip address prefix VRF ( match on the default route advertised from GE2 which is in the global rib)
ip vrf TEST
import-map ipv4 vrf VRF-rm ( import the default from global rib into the vrf rib)
res
Paul

Distribution of default route of four different ISP in a WAN MPLS

We´ve a MPLS Network, there is a vrf, the Green vrf, in wich are the users, now we are going to have four connections to internet in each one we are going to be receiving the default route, but we want to control the use of that connections, so if you are an user in one PE your default route must be provided depending on the region in wich you are. We´ve route reflectors.
How can we make the distribution of the default route depending of the region in wich the user is, such that the PE_11 gets his default route from the PE_ 1 and not from the PE_3, and the users in the PE_13 gets his default route from the PE_3 and not from the PE_5.
If we put the four defaults route in the vrf green an let bgp works, the route reflectors are going to distribute de best route that they learn, so will be only one ”best” default route out of the four we are having, and we need to balance the traffic.
How can we solve this?
The equipment involved is 7613 with IOS 12.2(33)SRD3

Hello.
If your PE_1, PE_5, PE_6 and PE_3 use different RD for the vrf, RR would reflect all the "default gateways" as they are different in terms of VPNV4 prefix.
So, now you need a solution to prefer one PE over another. The best would be to use communities, like:
PE_1 - injects 1:1
PE_3 - injects 1:3
PE_5 - injects 1:5
PE_6 - injects 1:6
Now regions could have following routing policy:
if community matches 1:1 then
set local-pref 140
elseif community matches 1:3 then
set local-pref 130
Per region you would assign high LP for "closer" exit-point.
Now you have typical configuration per region and failover mechanism between them all.

BGP default route advertisement - change preference

hi guys,
I would appreciate some assistance here. We have a primary head office & a DR site. Routers at both sites connect to our carrier for an IP VPN service using BGP. BGP configs on each router advertise a default route 0.0.0.0.
#sh ip bgp neighbors x.x.x.x advertised-routes
BGP table version is 358, local router ID is x.x.x.x
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Originating default network 0.0.0.0
Issue is, some of our remote sites prefer the DR router path for traffic destined to internet.
We are advertising multiple default routes to our carrier, and based on feedback from carrier, route with lowest MED is preferred.
This brings me to what i need to change from my side. Need to change the route preference so that from our remote offices, only the route to head office is preferred with DR site the least preferred route. I know there are multliple ways of doing this, however keen to get input from the experts out there.
DR site router has this BGP config currently applied:
router bgp XXXXX
bgp log-neighbor-changes
redistribute connected
redistribute ospf 1 match internal external 1 external 2
neighbor x.x.x.x remote-as XXXX
neighbor x.x.x.x default-originate
neighbor x.x.x.x soft-reconfiguration inbound
neighbor x.x.x.x route-map IMPORT-POLICY in
neighbor x.x.x.x route-map OPI-route-advertisement out
default-information originate
Removing the "neighbor x.x.x.x default-originate" is not an option, as we need to have the ability to failover to DR at any point.
Thanks in advance & if you need any further info pls advise.
Rama

Hi Milan,
Thanks. Answers below:
Does it provide an MPLS backbone to you? YES
Are you using the same AS number on all your sites or different ones? Same AS
Any way, what about advertising the default route from your DR site with the site AS number prepended several times (5 times, e.g.)? That's the thing I am struggling to understand as the route-map OPI-route-advertisement already has it prepended 2 times. Shouldn't that be enough to influence which route is least preferred?
route-map OPI-route-advertisement permit 20
match ip address prefix-list xxx default-route
set as-path prepend XXXXX XXXXX
If your provider would permit that and hasn't configured his routers to ignore the AS_PATH length (as him a question), it should make the default route advertised from your DR less preferred within your backbone. Will ask.
Given this, any other thoughts/questions?
Thanks, Rama

Show ip route, Why 46.1.1.4 is chosen as default route ?

Dear All,
Can you give some idea about this: when entering command "show ip route" the output is as the following. Why 46.1.1.4 is chosen as default route instead of 36.1.1.3 ? Thank you
R6#sh ip route
Gateway of last resort is 46.1.1.4 to network 0.0.0.0
36.0.0.0/24 is subnetted, 1 subnets
C 36.1.1.0 is directly connected, FastEthernet0/1
67.0.0.0/24 is subnetted, 1 subnets
C 67.1.1.0 is directly connected, Serial0/2
78.0.0.0/24 is subnetted, 1 subnets
S 78.1.1.0 [1/0] via 67.1.1.7
46.0.0.0/24 is subnetted, 1 subnets
C 46.1.1.0 is directly connected, Serial0/0
S* 0.0.0.0/0 [1/0] via 46.1.1.4
[1/0] via 36.1.1.3
R6(config)#do sh run | s route
ip route 0.0.0.0 0.0.0.0 36.1.1.3
ip route 0.0.0.0 0.0.0.0 46.1.1.4
ip route 78.1.1.0 255.255.255.0 67.1.1.7

Hello, the static default route is showing to two next hops, 46.1.1.4 and 36.1.1.3. They have the same Admin Distance and cost, if CEF is enabled it will load-share per session (src-dst IP pair)
If the router was only using one of the routes, only one would be displayed.

CSS advertise OSPF default route?

I have a CSS in one armed mode sitting between the Internet Edge router and PIX firewall.
The edge router is getting a default route from BGP and distributes that into the Firewall via OSPF.
The firewall sees the Edge router as the default gateway from the distributed route.
Would it be possible to have the CSS (through OSPF) get the default route from the Edge router and advertise it to the Firewall?
The goal is to have the Firewall use the CSS as it's default gateway, rather than the Edge router, but it needs to be a dynamic route.
In turn the edge router would pass traffic through the CSS to the firewall.
The CSS would be an intermidiate hop between the router and firewall.
Is this something that the CSS is capable of doing?
And from a design perspective, it is something that could be an issue?

Thanks,
I did see that document and played with it some last night.
I think it should work too, but was not sure if it was not reccomended by Cisco or not.
I have seen they they do not reccomend OSPF or RIP configurations, but I am only concerned with the default route and this would maybe solve the problem of any potential asymetric traffic flow.

Basic Default Route Question

Hi,
I have a very basic question I wanted to run by everyone to make sure my understanding is correct.
Setup:
Basic config, router with two interfaces and a single default route.
hostname RTR1
interface Ethernet0/0
ip address 1.1.1.1 255.255.255.0
interface Ethernet0/1
ip address 1.1.2.1 255.255.255.0
ip route 0.0.0.0 0.0.0.0 1.1.2.2
add -> ip route 0.0.0.0 0.0.0.0 10.10.10.1
If I add a default route (currently in a telnet session coming through 1.1.2.2 to get to RTR1) to a gateway that is NOT locally connected nothing will happen, correct? The router won't try to load balance my traffic since the second gateway is not directly connected and reachable, correct?
Next, if I change the IP address on e0/1 to 10.10.10.2/24 then my default route of 1.1.2.2 will no longer be used and my 10.10.10.1 defaut route will become active, correct?
I can then connect using my new IP of 10.10.10.2 assuming all routing is working on my new default gateway, correct?
Basically, I'm making sure my understanding of the default gateway route not being used unless it is accessible is valid. If it is, it will load balance traffic across up to 6 of them.
Please comment or correct if my understanding is incorrect.
Thanks.

Jamie
I believe that most of your understanding is ok especially about not load sharing over the routes as defined. I checked it on a router and only the default route with a reachable next hop is inserted into the routing table. Both static default routes are in the config but only one is in the routing table.
HTH
Rick

Can anyone check this for me, nat overload, static and default routes, dhcp

VA has DHCP on fa0/0 and will have last good address for the gateway and will reserve 20 IP's for admin devices.
VA fa0/1 will be using static IP addressing and will be using the last good address as the default gateway address.
Serial links will use the 50.75.120.0/30 network on all serials.
Default route set to main via VAs next hop.
VA will be using NAT overload to Main via local interface.
VA
Fa0/0= 172.16.81.254
Fa0/1=172.16.82.126
S0/0/0=50.75.120.130
Main s0/0/1= 50.75.120.129 with a clock rate of 128kbps
Building configuration...
Current configuration : 1376 bytes
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname VA
enable secret 5 $1$mERr$3nisV1NYMTmTN5PhTMBC2/
enable password insurance
ip dhcp excluded-address 172.16.81.235 172.16.81.254
ip dhcp pool VA-dhcp
network 172.16.80.0 255.255.254.0
default-router 172.16.81.254
spanning-tree mode pvst
interface FastEthernet0/0
ip address 172.16.81.254 255.255.254.0
ip nat inside
duplex auto
speed auto
interface FastEthernet0/1
ip address 172.16.82.126 255.255.255.128
ip nat inside
duplex auto
speed auto
interface Serial0/0/0
ip address 50.75.100.130 255.255.255.252
ip nat outside
interface Serial0/0/1
no ip address
shutdown
interface Vlan1
no ip address
shutdown
ip nat inside source list 1 interface Serial0/0/0 overload
ip nat inside source list 2 interface Serial0/0/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/1
ip route 50.74.100.128 255.255.255.252 50.74.100.130
access-list 1 permit 172.16.0.0 0.0.255.255
access-list 2 permit 172.16.0.0 0.0.255.255
banner motd ^C
Restricted access to all unauthorized users, proceed at your will. Unauthorized users will be prosecuted to the extend of the law. ^C
line con 0
password shots
login
line aux 0
line vty 0 4
password xrays
login
end
VA(config)#
A network beginner, thank you in advance :))
Sent from Cisco Technical Support iPhone App

Reyna,
I can see a couple of issues
Your static routes:-
ip route 0.0.0.0 0.0.0.0 Serial0/0/1
ip route 50.74.100.128 255.255.255.252 50.74.100.130
Ser 0/0/1 is shut and has no ip addressing.
The route to 50.74.100.128 has no way to reach the next hop 50.74.100.130
Your NAT translations are both the same therfore only one is effective.
Just tidy up a little:-
The only static route you need is a default route:-
ip route 0.0.0.0 0.0.0.0 50.75.100.129
The NAT only requires one list and trans pointing out the outside interface
ip nat inside source list 1 interface Serial0/0/1 overload
access-list 1 permit 172.16.0.0 0.0.255.255
Regards,
Alex.
Please rate useful posts.

UNABLE TO INJECT A STATIC DEFAULT ROUTE FROM PE????

Similar Messages

Maybe you are looking for