Providing Internet Access To And From Vpns; Enabling Traffic Flow From The Vpn To The Internet; Problems; Table 92: Advertising Action Taken Following Best Route Selection - Juniper JUNOSE 11.2.X BGP AND MPLS Configuration Manual

Providing Internet Access to and from VPNs

Enabling Traffic Flow from the VPN to the Internet

Copyright © 2010, Juniper Networks, Inc.

Table 92: Advertising Action Taken Following Best Route Selection

Best Route SAFI Negotiated with Peer
Unlabeled SAFI 1 and SAFI 4 (unlabeled
and labeled)
Unlabeled SAFI 1 (unlabeled)
Unlabeled SAFI 4 (labeled)
Labeled SAFI 1 and SAFI 4 (unlabeled
and labeled)
Labeled SAFI 1 (unlabeled)
Labeled SAFI 4 (labeled)
BGP sends a route-refresh message for each SAFI that it has negotiated with a peer. For
example, if a speaker has negotiated both SAFI 1 and SAFI 4 with a particular peer, then
when you issue the clear ip bgp neighbor soft-in command, BGP sends two route-refresh
messages to this neighbor, one for each SAFI.
Normally, hosts in a VPN cannot communicate with hosts in the Internet because the
routing table in a VRF contains only routes to sites in the VPN and not routes to sites in
the Internet. The exchange of traffic between a VPN and the Internet requires both of
the following:
Traffic flow from the VPN to the Internet
Traffic flow from the Internet to the VPN
The most common, and simplest, method for providing Internet access is to configure
two separate logical circuits. One logical circuit runs between the CE router and the VRF
and is used for VPN traffic. The other logical circuit runs between the CE router and the
parent VR of the VRF and is used for Internet traffic. These logical circuits are typically
FR circuits, ATM circuits, or VLANs.
The following sections describe alternative methods of providing Internet access for
situations in which having two separate logical circuits is not acceptable or desirable.
Traffic from a CE router arrives on a PE interface that exists in the context of a VRF. The
PE router then looks up the destination address of the IP packet in the context of the
VRF routing table rather than the VR routing table.

Problems

The VRF routing table lookup introduces the following complication.
Chapter 6: Configuring BGP-MPLS Applications
Action Taken
Advertises unlabeled route.
Advertises unlabeled route.
Withdraws labeled route.
Advertises labeled route.
Withdraws unlabeled route.
Advertises labeled route.
461