What Juniper doesn’t tell you about 2547
They’re called Routing Instances (VRFs), but they
AREN’T virtual routers.  JunOs has virtual routers in 6.1
2547 vpns have only one iBGP.  What happens is that a
Route Identifier and Target bgp communities are added,
putting routes into separate tables.  IGP remains same.
The catch is that interfaces need to be in one VRF or
another.  They can’t be in multiples.  There are tricky
workarounds with next-table policies, but they didn’t work
well in our situation.  Customers don’t know about 2547.
So since we ebgp with everyone, we establish second
peerings with ISP customers.  A nuisance but it works.