<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="orphans: 2; widows: 2;" class="">I tried in FRR4.0, got error:</div><div style="orphans: 2; widows: 2;" class="">ASW-7001(config-router)# router bgp 65021</div><div style="orphans: 2; widows: 2;" class=""><div class="">ASW-7001(config-router)# add ipv4 vpn </div><div class="">ASW-7001(config-router-af)# neighbor 11.11.11.2 activate </div><div class="">ASW-7001(config-router-af)# exit</div></div><div style="orphans: 2; widows: 2;" class="">ASW-7001(config-router)# vrf-policy cust1</div><div style="orphans: 2; widows: 2;" class="">% Unknown command.</div><div style="orphans: 2; widows: 2;" class="">ASW-7001(config-router)#</div><div style="orphans: 2; widows: 2;" class=""><br class=""></div><div style="orphans: 2; widows: 2;" class="">It looks like this “<span style="color: rgb(36, 41, 46); font-family: SFMono-Regular, Consolas, "Liberation Mono", Menlo, Courier, monospace; white-space: pre;" class="">vpn-policy</span><span style="color: rgb(36, 41, 46); font-family: SFMono-Regular, Consolas, "Liberation Mono", Menlo, Courier, monospace; caret-color: rgb(36, 41, 46); white-space: pre;" class="">” </span><span style="color: rgb(36, 41, 46); caret-color: rgb(36, 41, 46); white-space: pre;" class="">was </span><font color="#24292e" class=""><span style="caret-color: rgb(36, 41, 46); white-space: pre;" class="">introduced in FRR5.0, which I am not in.</span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="caret-color: rgb(36, 41, 46); white-space: pre;" class=""><br class=""></span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="caret-color: rgb(36, 41, 46); white-space: pre;" class=""><br class=""></span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="caret-color: rgb(36, 41, 46); white-space: pre;" class="">Even for 5.0, if i want to configure TWO VRFs (as shown in my IOX configuration). In FRR, do I have to configure 2 BGP instances, and each one has its own vpn-policy, like:</span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="caret-color: rgb(36, 41, 46); white-space: pre;" class=""><br class=""></span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="white-space: pre;" class="">router bgp 6552 vrf red <======== BGP instance 1</span></font></div><div style="orphans: 2; widows: 2;" class=""><font color="#24292e" class=""><span style="white-space: pre;" class=""> </span></font>vpn-policy ipv4</div><blockquote type="cite" class=""> label 1041<br class=""> rd 10:41<br class=""> rt both 51:100<br class=""> exit</blockquote><div style="orphans: 2; widows: 2;" class=""><br class=""></div><div style="orphans: 2; widows: 2;" class=""><br class=""></div><div style="orphans: 2; widows: 2;" class="">router bop 6552 vrf blue <===== BGP instance 2</div><div style="orphans: 2; widows: 2;" class=""><div class=""> vpn-policy ipv4</div><blockquote type="cite" class=""> label 1042<br class=""> rd 10:42<br class=""> rt both 52:100<br class=""> exit</blockquote></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Can I just configure one BGP instance, and have 2 vpn-policy, one for red, one for blue, under the same BGP instance?</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">thanks</div><div class="">- Heidi</div><div class=""><br class=""></div><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jun 5, 2019, at 12:36 PM, Lou Berger <<a href="mailto:lberger@labn.net" class="">lberger@labn.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">see the example in <a href="https://github.com/FRRouting/topotests/blob/98ced3d021ec0bf03607dc5e2922673f2c4b15d2/bgp_l3vpn_to_bgp_vrf/r4/bgpd.conf" class="">https://github.com/FRRouting/topotests/blob/98ced3d021ec0bf03607dc5e2922673f2c4b15d2/bgp_l3vpn_to_bgp_vrf/r4/bgpd.conf</a><br class=""><br class="">e.g., in the bgp vrf config section"<br class=""><br class=""><br class=""> vpn-policy ipv4<br class=""> label 1041<br class=""> rd 10:41<br class=""> rt both 52:100<br class=""> exit<br class=""><br class="">On 6/5/2019 2:24 PM, Heidi net wrote:<br class=""><blockquote type="cite" class="">Thanks for your replies, I actually went through the document/examples for FRR 5.0, but wondering if I could do L3VPN on 4.0, without VRF leaking.<br class=""><br class="">In order to do that, I need to attach RD/RT to each VRF, so looking for configuration to configure RD/RT in FRR4.0.<br class=""><br class=""><br class="">thanks<br class="">- Heidi<br class=""><br class=""><blockquote type="cite" class="">On May 31, 2019, at 10:28 AM, Lou Berger <<a href="mailto:lberger@labn.net" class="">lberger@labn.net</a>> wrote:<br class=""><br class="">Hi,<br class=""><br class="">Some good examples can also be found in topotest, e.g.,<br class=""><br class=""><a href="https://github.com/FRRouting/frr/blob/master/tests/topotests/bgp_l3vpn_to_bgp_vrf/r4/bgpd.conf" class="">https://github.com/FRRouting/frr/blob/master/tests/topotests/bgp_l3vpn_to_bgp_vrf/r4/bgpd.conf</a><br class=""><br class="">but this uses the current RD/RT syntax but I'm unsure of the syntax for 4.0.<br class=""><br class="">Looking back, I suggest trying the following the example from a correspondingly old version of topotest:<br class=""><br class="">https://github.com/FRRouting/topotests/blob/98ced3d021ec0bf03607dc5e2922673f2c4b15d2/bgp_l3vpn_to_bgp_vrf/r4/bgpd.conf<br class=""><br class="">Lou<br class=""><br class="">On 5/30/2019 7:23 PM, Heidi net wrote:<br class=""><blockquote type="cite" class="">Hello,<br class=""><br class="">I am trying to migrate from IOX to FRR4.0. I have a simple configuration of 2 VRFs: red and blue. No VRF route leaking is needed.<br class=""><br class="">I know VRF route leaking was added to FRR5.0. But since I don’t do that. Can FRR4.0 be used to<br class=""><br class="">- Configure 2 VRFs for routes, attach different RD/RT to routes, and advertise routes into corresponding VPNs with FRR4.0?<br class="">- Any configuration examples?<br class=""><br class=""><br class="">Below is the current Cisco configuration.<br class=""><br class="">ip vrf red<br class=""> rd 100:101<br class=""> route-target export 200:101<br class=""> route-target import 200:101<br class="">!<br class="">ip vrf blue<br class=""> rd 100:201<br class=""> route-target export 200:201<br class=""> route-target import 200:201<br class="">!<br class="">interface Loopback101<br class="">ip vrf forwarding red<br class="">!<br class="">interface Loopback102<br class=""> ip vrf forwarding blue<br class="">!<br class="">router bgp 100<br class=""> neighbor 10.10.10.2 remote-as 200<br class=""> neighbor 10.10.10.2 update-source Loopback0<br class="">!<br class=""> address-family vpnv4<br class=""> neighbor 10.10.10.2 activate<br class=""> neighbor 10.10.10.2 send-community both<br class=""> exit-address-family<br class="">!<br class=""> address-family ipv4 vrf red<br class=""> redistribute connected<br class=""> exit-address-family<br class="">!<br class=""> address-family ipv4 vrf blue<br class=""> redistribute connected<br class=""> exit-address-family<br class=""><br class=""><br class="">thanks<br class="">- Heidi<br class="">_______________________________________________<br class="">frog mailing list<br class="">frog@lists.frrouting.org<br class="">https://lists.frrouting.org/listinfo/frog<br class=""></blockquote></blockquote><br class=""></blockquote></div></div></blockquote></div><br class=""></body></html>