# L3VPN - OSPF Between CE and PE **URL:** \ **Category:** MPLS\ **Created:** [March 8, 2021, 10:37pm UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796 "2021-03-08T22:37:36Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![clive.gwyther](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/f07891/32.png) [@clive.gwyther](https://forum.networklessons.com/u/clive.gwyther)\ **Post date:** [March 8, 2021, 10:37pm UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796/1 "2021-03-08T22:37:36Z")
Someone can hopefully help as I know this is predominantly Cisco. I have a Juniper quetion (also valid for Cisco I expect). I have two customer using the same topology as below: CustA: CE → PE → P → P → PE → CE: CustA:SiteB CustB: CE → PE → P → P → PE → CE: CustB:SiteB Customer A utilises eBGP between the CE and the PE and the VONv4 is created with no issue and it works between the end points. The porblem is with Customer B who uses OSPF between the CE and the PE and the config (juniper) is as follows for the CE and PE (Basic): Customer B - CE ``` set interfaces ge-0/0/0 unit 0 family inet address 10.10.10.2/30 set interfaces lo0 unit 0 family inet address 3.3.3.3/32 set routing-options router-id 3.3.3.3 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 set protocols ospf area 0.0.0.0 interface lo0.0 passive ``` PE Router: ``` set routing-instances london-custA instance-type vrf set routing-instances london-custA interface ge-0/0/0.0 set routing-instances london-custA route-distinguisher 65533:10 set routing-instances london-custA vrf-target target:65533:10 set routing-instances london-custA protocols ospf area 0.0.0.0 interface ge-0/0/0.0 ``` So, I think what is happening is that the routes received from the CE in the PE vrf are actually IPv4 routes and they need distributing into MP-BGP. The problem I have is I cannot find any docs to suggest how that is completed within an actual vrf with the iBGP being configured external to the vrf in global config. Can anyone point me in the right direction please? ---
**Author:** ![530dreynolds](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/5/9fc348/32.png) [@530dreynolds](https://forum.networklessons.com/u/530dreynolds)\ **Post date:** [March 9, 2021, 6:33pm UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796/2 "2021-03-09T18:33:50Z")
I’m not going to be very helpful here, unfortunately, but my rule of thumb with customers I peer with for L3VPN is I dictate all routing. They will configure BGP with me or I’ll help them do it. I don’t let the customer make the decision and it makes my life much much easier. Saying that, in this case, you can re-distribute the routes as you specified. I don’t run Juniper so sorry I can’t be more helpful with your actual question here. I’m sure there is a good Juniper engineer that will chime in with a better technical answer. ---
**Author:** ![clive.gwyther](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/c/f07891/32.png) [@clive.gwyther](https://forum.networklessons.com/u/clive.gwyther)\ **Post date:** [March 9, 2021, 9:55pm UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796/3 "2021-03-09T21:55:39Z")
It’s all good. I now have it all working as expected. After some more investigation I discovered that the best way to achieve this over L3 VPN was to configure a sham-link. ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [March 10, 2021, 11:39am UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796/4 "2021-03-10T11:39:24Z")
Hello Clive First of all, thanks to @530dreynolds for your response and your suggestions, experience such as yours can be useful to everyone on the forum. Also, thanks to Clive for mentioning your solution to your particular problem. Your solution sounds good. You can find out more about related MPLS and OSPF features in the following lessons. Hopefully, it will be useful for you, even though you use Juniper. > **[MPLS Layer 3 VPN Configuration](https://networklessons.com/mpls/mpls-layer-3-vpn-configuration#EBGP_on_PE_and_CE)** > > This lesson explains how to configure MPLS Layer 3 VPN on Cisco IOS routers where we use BGP as the PE-CE routing protocol. > **[MPLS Layer 3 VPN PE-CE OSPF](https://networklessons.com/mpls/mpls-layer-3-vpn-pe-ce-ospf)** > > This lesson explains how to configure OSPF as the PE-CE routing protocol for MPLS L3 VPN. > **[MPLS Layer 3 VPN PE-CE OSPF Sham Link](https://networklessons.com/mpls/mpls-layer-3-vpn-pe-ce-ospf-sham-link)** > > The OSPF sham link is required in an MPLS VPN PE CE OSPF scenario with a backdoor link between the CE routers that you only want to use as backup. Let us know if you need any further clarification! Laz ---
**Author:** ![530dreynolds](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/5/9fc348/32.png) [@530dreynolds](https://forum.networklessons.com/u/530dreynolds)\ **Post date:** [March 11, 2021, 5:45pm UTC](https://forum.networklessons.com/t/l3vpn-ospf-between-ce-and-pe/13796/5 "2021-03-11T17:45:42Z")
I have not used Sham Links before, this is a new concept for me. Thanks for sharing your solution @clive.gwyther ! I’ll keep it in mind if I ever run into this issue myself.