Comware

 View Only
last person joined: 2 days ago 

Expand all | Collapse all

Comware 7 GRE - bind to vpn-instance

This thread has been viewed 1 times
  • 1.  Comware 7 GRE - bind to vpn-instance

    Posted Mar 21, 2018 07:00 AM

    Hi,

    Is it known as non working, to have a GRE tunnel formed in one VRF and bind the tunnel in other VRF ? Something like: 

    #
    ip vpn-instance VRF-2-RED
    route-distinguisher 203333:2
    description RED
    #
    ip vpn-instance VRF-4-GREEN
    route-distinguisher 203333:4
    description GREEN-VRF
    #
    interface Vlan-interface3511
    description RED
    ip binding vpn-instance VRF-2-RED
    ip address 21.11.13.18 255.255.255.252
    ipv6 address 2001:DB8:AF00:21::1/64
    #
    interface Tunnel1 mode gre
    description TUN-R1
    shutdown
    ip binding vpn-instance VRF-4-GREEN
    ip address 10.4.1.14 255.255.255.252
    source 21.11.13.18
    destination 10.17.56.2
    tunnel vpn-instance VRF-2-RED
    ipv6 address FD05:DB8:0:1::2/64
    #

    GRE tunnels on 5920AF-24XG Switch running HPE Comware 7.1.045 (2432P05) the GRE is up the OSPF and BGP seesions are up, but something goes wrong on the return path, there is nothing wrong with how the routing and route leaking is configured as I have another phisical link for backup, where this works fine. 

    In HPE VSR1000 this works without a problem.


    #vpn-instance
    #5920AF
    #GRE


  • 2.  RE: Comware 7 GRE - bind to vpn-instance

    Posted Mar 28, 2018 02:35 AM

    Same happens if I have the Tunnels forwarding in the same VRF

    interface Tunnel1 mode gre
    description TUN-R1
    ip binding vpn-instance VRF2-RED
    ip address 10.4.1.14 255.255.255.252
    source 21.11.13.18
    destination 10.17.56.2
    tunnel vpn-instance VRF-2-RED
    ipv6 address FD05:DB8:0:1::2/64

    I can reach the tunnel end 10.4.1.14, I can reach the VRF loopback ospf and bgp works, but when the route received from iBGP is leaked to another VRF the routing works in one direction, it is dropped on the return path. 

    Can this has something to do with fast-forwarding or urpf ? URPF is disabled by default from what I can read in the documentation.

     



  • 3.  RE: Comware 7 GRE - bind to vpn-instance

    Posted Apr 03, 2018 07:19 AM

    Same problem using ipip tunnel.