Hello, dear colleagues!
I’m trying to build BGP+vpnv4 sandbox environment using CCR-1016, but faced an issue advertising announce with ExtCommunity attribute.
The configuration is relatively simple:
-VLAN interface to network core;
-bridge interface bound to VRF (emulating PE-CE link);
-multihop iBGP session to core router(s) (Huawei and HP) on global routing table addresses;
-announce of redistribute static bridge interface with route-distinguisher specified.
I see the received announce on remote side with correct RD in attributes, but route is marked as non-valid, although next-hop is reachable.
<MSK-ne40e-Marks_22-PE3>disp bgp vpnv4 vpn-instance MT-Test routing-table 10.12.12.0 24
BGP local router ID : 10.77.19.3
Local AS number : 65000VPN-Instance MT-Test, Router ID 10.77.19.3:
Paths: 1 available, 0 best, 0 select
BGP routing table entry information of 10.12.12.0/24:
RR-client route.
Label information (Received/Applied): 16/NULL
From: 172.23.19.254 (172.23.19.254)
Route Duration: 00h54m07s
Relay Tunnel Out-Interface:
Relay token: 0x0
Original nexthop: 172.23.19.254
Qos information : 0x0
Ext-Community:RT <65000 : 444>
AS-path Nil, origin incomplete, localpref 100, pref-val 0, internal, pre 255
Not advertised to any peer yet
The same config made on another type of router works rather fine; the problem is with mikrotik only.
Does anybody could tell me if there are any specific points on configuration I missed? Is there anybody experienced in Mikrotik-Huawei(HP) BGP VRF configurations?
The config is below:
aug/21/2017 11:24:51 by RouterOS 6.40.1
software id = HNRX-4YF3
model = CCR1016-12S-1S+
serial number = 6EFD07BDB163
/interface bridge
add name=LAN protocol-mode=none
/interface vlan
add interface=sfp12 name=CORE vlan-id=444
add interface=sfp12 name=vlan99 vlan-id=99
add interface=sfp12 name=vlan206 vlan-id=206
/routing bgp instance
set default as=65000 client-to-client-reflection=no router-id=172.23.19.254
/ip address
add address=1.1.1.1/30 interface=sfp1 network=1.1.1.0
add address=172.23.19.254/30 interface=CORE network=172.23.19.252
add address=10.12.12.1/24 interface=LAN network=10.12.12.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=vlan206
/ip route
add check-gateway=ping distance=1 dst-address=10.77.19.3/32 gateway=172.23.19.253
add check-gateway=ping distance=1 dst-address=10.77.19.5/32 gateway=172.23.19.253
/ip route vrf
add export-route-targets=65000:444 import-route-targets=65000:444 interfaces=LAN
route-distinguisher=65000:444 routing-mark=MT-TEST
/routing bgp instance vrf
add redistribute-connected=yes routing-mark=MT-TEST
/routing bgp peer
add address-families=vpnv4 name=NE40E remote-address=10.77.19.3 remote-as=65000 ttl=default
update-source=CORE
add address-families=vpnv4 name=HP remote-address=10.77.19.5 remote-as=65000 ttl=default
update-source=CORE
/system ntp client
set enabled=yes primary-ntp=88.147.254.227