Community discussions

MikroTik App
 
mafiosa
Member Candidate
Member Candidate
Topic Author
Posts: 266
Joined: Fri Dec 09, 2016 8:10 pm
Location: Kolkata, India
Contact:

How to do a simple Inter VRF route leak?

Sun Jul 24, 2022 7:55 pm

I have two networks 192.168.23.0/24 and 192.168.24.0/24 on main routing table and 192.168.72.0/23 on VRF say A on my rb5009 . How do I perform inter vrf route leak on the router on v7 without using mangle?
 
User avatar
osc86
Member Candidate
Member Candidate
Posts: 197
Joined: Wed Aug 09, 2017 1:15 pm

Re: How to do a simple Inter VRF route leak?

Mon Jul 25, 2022 9:56 am

/routing rule
add action=lookup-only-in-table disabled=no dst-address=192.168.72.0/23 table=A
/ip route
add disabled=no distance=1 dst-address=192.168.23.0/24 gateway=<interface> routing-table=A
add disabled=no distance=1 dst-address=192.168.24.0/24 gateway=<interface> routing-table=A
replace <interface> with the interface the network is assigned to, will be resolved to main table automatically
 
mafiosa
Member Candidate
Member Candidate
Topic Author
Posts: 266
Joined: Fri Dec 09, 2016 8:10 pm
Location: Kolkata, India
Contact:

Re: How to do a simple Inter VRF route leak?

Mon Jul 25, 2022 11:50 am

/routing rule
add action=lookup-only-in-table disabled=no dst-address=192.168.72.0/23 table=A
/ip route
add disabled=no distance=1 dst-address=192.168.23.0/24 gateway=<interface> routing-table=A
add disabled=no distance=1 dst-address=192.168.24.0/24 gateway=<interface> routing-table=A
replace <interface> with the interface the network is assigned to, will be resolved to main table automatically
Thanks. However, I cannot use gre tunnel on VRF.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: How to do a simple Inter VRF route leak?

Mon Jul 25, 2022 12:08 pm

Thanks. However, I cannot use gre tunnel on VRF.
The GRE tunnel itself (i.e. the traffic transported through it) can be part of a VRF, but the "outside" of the tunnel (the tunnel local and remote address) cannot.
That is a limitation of RouterOS.
 
mafiosa
Member Candidate
Member Candidate
Topic Author
Posts: 266
Joined: Fri Dec 09, 2016 8:10 pm
Location: Kolkata, India
Contact:

Re: How to do a simple Inter VRF route leak?

Mon Jul 25, 2022 2:14 pm

Thanks. However, I cannot use gre tunnel on VRF.
The GRE tunnel itself (i.e. the traffic transported through it) can be part of a VRF, but the "outside" of the tunnel (the tunnel local and remote address) cannot.
That is a limitation of RouterOS.
Everytime I wanna try something new a ROS limitation crops up.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: How to do a simple Inter VRF route leak?

Mon Jul 25, 2022 2:35 pm

It is possible to make it working but not using VRF, you need to use manually created ip route rules and/or marks.
 
dav26
just joined
Posts: 2
Joined: Wed May 03, 2023 5:19 pm

Re: How to do a simple Inter VRF route leak?

Mon Mar 25, 2024 4:48 pm

Hi,
is there any update on this thread?

I have a similar problem in ROS v7 when try to use "ipsec-secret" on GRE-Tunnel (without ipsec it works fine).
Does anyone know a solution?
Thanks

Who is online

Users browsing this forum: No registered users and 13 guests