Hi,
I’m trying to place a PPPoE client in a separate VRF. So far I’ve-
- Created a separate /ppp/profile with interface-list set to PPP_VRF
- Assigned the PPPoE client to the PPP profile using RADIUS attribute ‘Mikrotik-Group’.
- Created the VRF with interface-list PPP_VRF
- Assigned a new bridge interface to the PPP_VRF
/interface/list/member shows the dynamic PPPoE connnection and the Bridge interface in the correct list.
/ip/vrf shows the PPP_VRF as VRF 0 with the correct interface list assigned.
/ip/route includes -
DAc 10.55.55.1/32 PPP_Bridge@PPP_VRF 0
DAc 10.55.56.1/32 <user@broadband.com>@PPP_VRF 0
Running /ping 10.55.56.1 src-address=10.55.55.1 vrf=PPP_VRF shows a timeout.
During a ping running /tool/sniffer/quick ip-address=10.55.56.1 shows
<pppoe-user@broadband.com> 23.127 8 ← 10.55.56.1:811 10.55.55.1:53 (dns) ip:udp 62 2
*FFFFFFFF 23.128 9 → 10.55.55.1 10.55.56.1 ip:icmp 90 2
Traffic appears to be coming into the PPP_VRF from the PPP client, but traffic going out to the PPP client is marked with interface *FFFFFFFF. Does anyone know why this traffic is marked with F’s and doesn’t appear to be using the <user@broadband.com>@PPP_VRF route?