Limiting Routes to Be Advertised by an MVPN VRF Instance
If a hub-and-spoke deployment uses one VPN routing and forwarding (VRF) routing instance for unicast routing and a separate VRF for MVPN routing, you need to limit the PE routers at the hub site to advertise only IPv4 MVPN routes, only IPv6 MVPN routes, or both. This is necessary to prevent the multicast VRF instance from advertising unicast VPN routes to other PE routers.
This configuration does not prevent the exportation of
VPN routes to other VRF instances on the same router if the auto-export
statement is included in the [edit routing-options]
hierarchy.
To configure a VRF routing instance with the name green
to advertise MVPN routes from both the inet
and inet6
address families, perform the following steps:
After the configuration is committed, only the MVPN routes for
the specified address families are advertised from the VRF instance
to remote PE routers. To remove the restriction on routes being advertised,
delete the vrf-advertise-selective
statement.
You cannot include the vrf-advertise-selective
statement and the no-vrf-advertise
statement in the same
VRF configuration. However, if you configure the vrf-advertise-selective
statement without any of its options, the router has the same behavior
as if you configured the no-vrf-advertise
statement. VPN
routes are prevented from being advertised from a VRF routing instance
to the remote PE routers.