IPv6 routes for interfaces in a IPv4 VRF

Should have put in the version I tried this on - 5.14


I have an interface in a IPv4 VRF and the IPv4 routes are show with the correct routing mark and in the correct VRF. However, IPv6 routes on the same interface are not shown as /ipv6 route has no concept of the VRF. If I remove the interface from the VRF then the connected IPv6 route becomes visible:

There is no connected route on pptp-out2:
[admin@door.banana.org.uk] /ip route vrf> /ipv6 route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable

DST-ADDRESS GATEWAY DISTANCE

0 A S ::/0 XXXX:XXX:6:2d6::1 1
1 ADC XXXX:XXX:6:2d6::/64 sit1 0
2 ADC XXXX:XXX:139::/64 ether1.11 0
3 ADC XXXX:XXX:139:1::/64 ether2 0
4 ADC XXXX:XXXX:11:2::/64 ether1.21 0

Now disable the interface in the VRF:
[admin@door.banana.org.uk] /ip route vrf> set numbers=0 disabled=yes

[admin@door.banana.org.uk] /ip route vrf> /ipv6 route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable

DST-ADDRESS GATEWAY DISTANCE

0 A S ::/0 XXXX:XXX:6:2d6::1 1
1 ADC XXXX:XXX:6:2d6::/64 sit1 0
2 ADC XXXX:XXX:139::/64 ether1.11 0
3 ADC XXXX:XXX:139:1::/64 ether2 0
4 ADC XXXX:XXXX:10:1::/64 pptp-out2 0
5 ADC XXXX:XXXX:11:2::/64 ether1.21 0

Re-enable the interface into the VRF:
[admin@door.banana.org.uk] /ip route vrf> set numbers=0 disabled=no

The connected route is no longer visible again:
[admin@door.banana.org.uk] /ip route vrf> /ipv6 route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable

DST-ADDRESS GATEWAY DISTANCE

0 A S ::/0 XXXX:XXX:6:2d6::1 1
1 ADC XXXX:XXX:6:2d6::/64 sit1 0
2 ADC XXXX:XXX:139::/64 ether1.11 0
3 ADC XXXX:XXX:139:1::/64 ether2 0
4 ADC XXXX:XXXX:11:2::/64 ether1.21 0

However the routing works whether the connected IPv6 route is visible or not.


Matt.

Hi Matt,

your posting is old, but I also want to use VRF with IPv6. Did you resolve this issue?

Regards

No.

I don’t think vrf is supported for IPv6.

You could define an extra VLAN on the attachment circuit and route v6 over that instead. Since v6 doesn’t use private addresses, things will go where they’re supposed to anyway. Just a thought.