The MPLS-OPS Archive

Cell Relay Retreat>MPLS-OPS Archive>month:2003-Feb> msg00153



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

Re: Route Distinguisher Questions

  • From: Martin Heusinger <MHeusinger@gmx.net>
  • Date: Fri, 21 Feb 2003 04:59:20 +0100
  • Resent-Date: Fri, 21 Feb 2003 00:20:58 -0500
  • To: vola ray <vola_ray@yahoo.com>, mpls-ops@mplsrc.com
  • User-Agent: Opera7.01/Win32 M2 build 2651

Hi vola,

about your question one:

In the case of only one VPN with several VRFs/RDs on one PE an example 
would be a Hub-and-Spoke VPN or a central service VPN.
Let me briefly describe the latter. Assume a service provider sets up a 
server farm to be used by customers. Every customer should be able to 
connect to the server, but there should not be connectivity between them.
So lets assume a single PE for the servers and two customers, the VRF 
relevant part of the config could look like this:

ip vrf CustomerA
 rd 100:1
 route-target export 100:111
 route-target import 100:42
!
ip vrf CustomerB
 rd 100:2
 route-target export 100:222
 route-target import 100:42
 ! ip vrf BigHorsePowerServer
 rd 100:3270
 route-target export 100:42
 route-target import 100:111
 route-target import 100:222



What is the trick? CustomerA will ONLY import routes from the Server 
(marked with RT 100:42) NOT from other customers - same for CustomerB.
Server will export its routes to all customers and import their routes 
(each of them marked with a unique RT).
The numbers are somewhat arbitrarily choosen and RD unequal RT for 
educational purposes ;-) Voila ... SP is starting to earn money, customers 
are safe, everybody is living happily ever after! (Hopefully me too!)

This could not be done by a single VRF as any to any connectivity would 
arise, which is not desired.

About question two: no, an interface is always attached to only one VRF.

Hope this helps

Martin

P.S.: I hope this thread doesn´t explode after mentioning hub and spoke VPN 
... ;-)


On Thu, 20 Feb 2003 13:14:05 -0800 (PST), vola ray <vola_ray@yahoo.com> 
wrote:

> hello,
> I have seen Very Clear Explanations from Robert, Martin, Roger etc......
> But Still a Question puzzles me:
>
> Can Anyone Show an Example where we may have One VPN with 2 or More
> RDs on a PE; If so then it will point to 2 or More VRF Tables on a PE....
> [as I see a RD MUST point to a VRF Table (1:1) inside a PE]
>
> And my second Question:
>
> Is it Possible to have 2 VRF tables existing on one single Interface
> on a PE connected to a CE.
> I will Greatly Appreciate any Answers....
> Thanks in advance,
> vola
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Tax Center - forms, calculators, tips, more
> http://taxes.yahoo.com/
>
> -------
> The MPLS-OPS Mailing List
> Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
>
>

 
 
 
-- 
Dr. Martin Heusinger
Consulting Manager Central European Region
CCIE #5980 CCSI 98285
 
Global Knowledge
Hungener Str. 6
60389 Frankfurt
 
Tel.: +49 69 90556700
FAX:  +49 69 90556729
 
mailto:Martin.Heusinger@GlobalKnowledge.de
web:   www.globalknowledge.de

-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml