IEOC - Internetwork Expert's Online Community

Hello all,

I have a question about this task.Once competing this task , i can ping the loopback interface of R8 but I still coudnt ping the 191.1.58.x segment between R5 and R8.Obviously because the devices in VPN_A do not have a router to this segment.

I added the e0/0 of R5 under Vrf VPN_A and then i was able to ping this segment as well.My question is would adding this interface to vrf VPN_A is a right solution for this task ??

Please let me know

Thanks

I don't think you are allow to add interface e0/0 in vrf VPN_A regarding Task 5.5 & 5.6
In this csse you need to :
Task 5.5- Implement on R5 a vrf VPN_A static route of  R8's lo0 pointed to interface e0/0 in the global routing table by using the key GLOBAL and redistribute this vrf VPN_A  static route in bgp. All vrf VPN_A routing table will know how to reach lo0 of R8

ip route vrf VPN_A [lo0 r8 address][lo0 R8 mask] e0/0 global

Task 5.6 - Implement the vrf aware nat on R5 using a route-map to match your inside source ip. The goal here is to translate all traffic coming from VPN_A on R7 into interface  ip of e0/0  in global routing table. R8 will now reach all VPN_A via e0/0
!
ip access-list extended FROM_R7
 permit ip host 150.1.7.7 any
!
route-map FROM_R7 permit 5
 match ip address FROM_R7
!
ip nat inside source route-map FROM_R7 interface e0/0 vrf VPN_A overload
!
interface Serial1/0.1 point-to-point
 ip nat inside
!
int e0/0
ip nat outside
!

Thanks
Arnaud