VRF Leaking to default VRF - can't ping self

Hello, I have problem with setting up VRF.
I can’t ping switch self IP from default VRF but I can any other IP in DHCP_Server VRP

Did I miss something?

SW1:

set vrf bind-to-all
set interfaces ethernet eth6 address '10.0.8.2/29'
set interfaces ethernet eth6 vrf 'DHCP_Server'
set protocols static route 10.0.8.0/29 interface eth6 vrf 'DHCP_Server'
set vrf name DHCP_Server protocols static route 0.0.0.0/0 next-hop 10.0.255.65 vrf 'default'
set vrf name DHCP_Server table '100'

SW2:

set vrf bind-to-all
set interfaces ethernet eth6 address '10.0.8.3/29'
set interfaces ethernet eth6 vrf 'DHCP_Server'
set protocols static route 10.0.8.0/29 interface eth6 vrf 'DHCP_Server'
set vrf name DHCP_Server protocols static route 0.0.0.0/0 next-hop 10.0.255.65 vrf 'default'
set vrf name DHCP_Server table '100'

VM dhcp1:
IP:10.0.8.6/28
Can ping both

Example ping from SW1:

vyos@sw1# ping 10.0.8.2
PING 10.0.8.2 (10.0.8.2) 56(84) bytes of data.
^C
--- 10.0.8.2 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 0ms

[edit]
vyos@sw1# ping 10.0.8.3
PING 10.0.8.3 (10.0.8.3) 56(84) bytes of data.
64 bytes from 10.0.8.3: icmp_seq=1 ttl=64 time=0.505 ms
64 bytes from 10.0.8.3: icmp_seq=2 ttl=64 time=0.391 ms
^C
--- 10.0.8.3 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1008ms
rtt min/avg/max/mdev = 0.391/0.448/0.505/0.057 ms

It is expected
You cannot ping router itself, just only devices behind router
If you want to ping local addresses you can use
VETH interfaces
https://docs.vyos.io/en/latest/configuration/interfaces/virtual-ethernet.html?highlight=Virtual-router%20#example

1 Like