L3 BGP MPLS and VPN don't work together

[Alexandr_P]

Summit X460.
Scheme:
X460-1 (loopback vlan) <-> (ospf+mpls+ldp)<->X460-2 (loopback vlan) <-> (ospf+mpls+ldp) <-> cisco 7301
All work fine beetween X460-1 and X460-2; X460-2 and Cisco
All routes is present, protocols working, labels is running, BUT when enable iBGP session beetween X460-2 and Cisco, there is no connection beetween X460-1 and Cisco.
Is there some nuances or ideas?

Than you!

[Alexandr_P]

I can ping when configured mpls+ospf without bgp.
When enable bgp I can't ping (but routes is present)
Now I can ping 192.168.89.253 but can't ping 192.168.88.226

X460-1
-> show ospf neighbor Neighbor ID Pri State Up/Dead Time Address Interface
BFD Session State
==========================================================================================
192.168.88.240 1 FULL /DROTHER 00:08:51:18/00:00:00:08 192.168.89.249 vman140
None

-> show bgp neighbor detail
IBGP Peer : 192.168.88.226 AS : 45800 Enabled : Yes OperStatus : Up
Weight : 1 Shutdown-Priority : 1024
ConnectRetry : 120 MinAsOrig : 5
HoldTimeCfg : 180 KeepaliveCfg : 60
Source Interface : 192.168.88.241 RRClient : No
EBGP-Multihop : Yes Remove Private AS : No
Capabilities Config : 4-Byte-As,vpnv4,route-refresh (old & new)
Policy for NLRI Type ipv4-unicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : Extended
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type ipv4-multicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type vpnv4
In Policy : None
Out Policy : None
NextHopSelf : Enabled Send Communities : Standard, Extended
Soft Input Recfg : Enabled Allow Looped AS-Path: No
Policy for NLRI Type ipv6-unicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type ipv6-multicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
State : ESTABLISHED
FSM Up since : Fri Oct 10 09:52:51 2014
(Duration: 0:1:25:34)
Remote Addr : 192.168.88.226 Local Addr : 192.168.88.241
Remote Port : 179 Local Port : 51414
Remote RouterId : 192.168.88.226 Local RouterId : 192.168.88.241
HoldTimeNegotiated : 180 KeepAliveNegotiated : 60
FsmTransitions : 3
InUpdateElapsedTime : 00:00:00:25 InMsgElapsedTime : 0:0:00:25
InUpdates : 25 OutUpdates (in TxQ) : 6 (0)
InTotalMsgs : 140 OutTotalMsgs : 131
InRouteRefreshes : 0 OutRouteRefreshes : 0
Route Statistics for NLRI Type vpnv4
Received : 8 Accepted : 8
Rejected : 0 Active : 0
Suppressed : 0
Capabilities Tx : 4-Byte-As,vpnv4,route-refresh (old & new)
Capabilities Rx : 4-Byte-As,vpnv4,route-refresh (old & new),graceful-restart
NLRI for the session: vpnv4
Last State : ESTABLISHED Last Event : RX_KEEP
LastError : 'Open Message - Unspecific error subcode' (RX) on: Fri Oct 10 09:52:36 2014

X460-2
-> show ospf neighbor Neighbor ID Pri State Up/Dead Time Address Interface
BFD Session State
==========================================================================================
192.168.90.226 10 FULL /BDR 00:01:32:49/00:00:00:04 192.168.90.172 vlan219
None

192.168.88.225 5 2WAY /DROTHER 00:01:32:49/00:00:00:00 192.168.90.169 vlan219
None

192.168.88.226 5 2WAY /DROTHER 00:01:32:49/00:00:00:03 192.168.90.170 vlan219
None

192.168.90.225 10 FULL /DR 00:01:32:49/00:00:00:02 192.168.90.171 vlan219
None

192.168.88.225 5 FULL /BDR 00:01:32:51/00:00:00:01 192.168.89.241 Vlan60
None

192.168.88.226 5 FULL /BDR 00:10:47:27/00:00:00:03 192.168.89.253 vlan61
None

192.168.88.241 1 FULL /DROTHER 00:08:49:52/00:00:00:08 192.168.89.250 vman140
None

Total number of neighbors: 7 (5 neighbors in Full state)

-> show bgp neighbor detail
IBGP Peer : 192.168.88.226 AS : 45800 Enabled : No OperStatus : Down
Weight : 1 Shutdown-Priority : 1024
ConnectRetry : 120 MinAsOrig : 5
HoldTimeCfg : 180 KeepaliveCfg : 60
Source Interface : 192.168.88.240 RRClient : No
EBGP-Multihop : Yes Remove Private AS : No
Capabilities Config : 4-Byte-As,vpnv4,route-refresh (old & new)
Policy for NLRI Type ipv4-unicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : Extended
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type ipv4-multicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type vpnv4
In Policy : None
Out Policy : None
NextHopSelf : Enabled Send Communities : Standard, Extended
Soft Input Recfg : Enabled Allow Looped AS-Path: No
Policy for NLRI Type ipv6-unicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
Policy for NLRI Type ipv6-multicast
In Policy : None
Out Policy : None
NextHopSelf : Disabled Send Communities : No
Soft Input Recfg : Disabled Allow Looped AS-Path: No
State : IDLE
FSM Down since : Fri Oct 10 11:20:31 2014
(Duration: 0:0:00:00)
Remote Addr : 192.168.88.226 Local Addr : 192.168.88.240
Remote Port : 0 Local Port : 0
Remote RouterId : 192.168.88.226 Local RouterId : 192.168.88.240
HoldTimeNegotiated : 0 KeepAliveNegotiated : 0
FsmTransitions : 0
InUpdateElapsedTime : 00:00:00:00 InMsgElapsedTime : 0:0:00:00
InUpdates : 0 OutUpdates (in TxQ) : 0 (0)
InTotalMsgs : 0 OutTotalMsgs : 0
InRouteRefreshes : 0 OutRouteRefreshes : 0
Capabilities Tx : None
Capabilities Rx : None
NLRI for the session: None

[Stephane_Grosj1]

Not being able to ping means you have another issue than BGP. Your ping should work through the IGP (OSPF). If you can't ping the loopback of the Cisco, you won't be able to establish a BGP session with it.
Do you have a route to that loopback? ie is the loopback announced in OSPF by the Cisco router?

[Alexandr_P]

So now I have the same routerid but problem not gone.

Any ideas?

[Alexandr_P]

But there is processes BGP and BGP4.

Also in situation:
irtual-router BBBB
configure bgp AS-number 45800
configure bgp routerid 10.20.1.121
or chane to
irtual-router BBBB
configure bgp AS-number 45800
configure bgp routerid 192.168.88.241
(or when I have previous config)

I have situation:
- From 192.168.88.241 I can ping 192.168.89.254 and 192.168.89.253, but can't ping 192.168.88.226

Thank you!

[Stephane_Grosj1]

The VPN-VRF are children of the VR, and in that respect they are using the same BGP process. This is why you have to have the same BGP settings (ASN, RouterId).

You could create several VR (user VR as we say) and have different BGP process in each one, and then each would have a different RouterId.

Be aware that only one VR can have MPLS, though.