Question

VRF-to-VRF intercommuniation

  • 20 November 2018
  • 0 replies
  • 169 views

Hello cumulus community,

we are using Cumulus VX 3.7.1 to experiment with Vagrant 2.2.1 and Libvirt 4.6.0.

We set up a leaf1 node. Within that leaf1 we want to isolate network traffic using Virtual Routing and Forwarding (VRF).

We created the two VRFs "pxe" and "prod".

code:
vagrant@leaf1:~$ ip a s
1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
[...]
3: swp1: mtu 1500 qdisc pfifo_fast master pxe state UP group default qlen 1000
link/ether 44:38:39:00:00:11 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.200/32 scope global swp1
valid_lft forever preferred_lft forever
inet6 fe80::4638:39ff:fe00:11/64 scope link
valid_lft forever preferred_lft forever
4: swp2: mtu 1500 qdisc pfifo_fast master prod state UP group default qlen 1000
link/ether 44:38:39:00:00:12 brd ff:ff:ff:ff:ff:ff
inet 10.0.1.200/32 scope global swp2
valid_lft forever preferred_lft forever
inet6 fe80::4638:39ff:fe00:12/64 scope link
valid_lft forever preferred_lft forever
[...]
10: pxe: mtu 65536 qdisc pfifo_fast state UP group default qlen 1000
link/ether 9e:96:e2:c0:36:de brd ff:ff:ff:ff:ff:ff
inet 10.0.0.201/32 scope global pxe
valid_lft forever preferred_lft forever
11: prod: mtu 65536 qdisc pfifo_fast state UP group default qlen 1000
link/ether c2:f8:84:b7:2c:fc brd ff:ff:ff:ff:ff:ff
inet 10.0.1.201/32 scope global prod
valid_lft forever preferred_lft forever


Now we want to communicate from "pxe" into "prod" e.g. with:

code:
vagrant@metal-leaf1:~$ ip vrf exec pxe ping 10.0.1.200
PING 10.0.1.200 (10.0.1.200) 56(84) bytes of data.


This fails!

We tried out static route leaking but either the routes we added where not correct or static route leaking is not the correct way.

How would we add "routing" so that this communication can work? Please advise.

Tanks,
ize0j10

0 replies

Be the first to reply!

Reply