© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Complex MPLS VPNs Using Advanced VRF Import and Export Features

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Outline Overview What Are Advanced VRF Features? Configuring Selective VRF import Configuring Selective VRF Export Summary

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Advanced VRF Features Selective import This features allows you to specify additional criteria for importing routes into the VRF. Selective export This features allows you to specify additional RTs attached to exported routes. VRF route limit This features allows you to specify the maximum number of routes in a VRF to prevent memory exhaustion on PE routers or denial-of-service attacks.

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v VRF import criteria might be more specific than just the match on the RTfor example : –Import only routes with specific BGP attributes (community, and so on). –Import routes with specific prefixes or subnet masks (only loopback addresses). A route map can be configured in a VRF to make the route import more specific. Configuring Selective VRF Import

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v import map route-map Router(config-vrf)# This command attaches a route map to the VRF import process. A route is imported into the VRF only if at least one RT attached to the route matches one RT configured in the VRF and the route is accepted by the route map. Configuring Selective VRF Import (Cont.)

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Configuring Selective VRF Import (Cont.)

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Configuring Selective VRF Export Routes from a VRF might have to be exported with different RTs. An example would be export management routes with particular RTs. An export route map can be configured on a VRF: This route map can set extended community RTs. No other set operations can be performed by this route map.

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v route-map name permit seq match condition set extcommunity rt extended-community-value [additive] Router(config)# This command creates a route map that matches routes based on any route map conditions and sets RTs. Configuring Selective VRF Export (Cont.)

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v export map name router(config-vrf)# This command attaches a route map to the VRF export process. All exported routes always get RTs configured with the route-target export command in the VRF. A route that is matched by the export route map will have additional RTs attached. Configuring Selective VRF Export (Cont.)

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Configuring Selective VRF Export (Cont.)

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v Summary Two advanced VRF features were discussed: –Selective import –Selective export Use the import map command to configure an import route map for VRF. Use the export map command to attach a route map to the VRF export process.

© 2006 Cisco Systems, Inc. All rights reserved. MPLS v