I am having trouble wrapping my brain around a VRF concept and why two switches are communicating with each other on a particular VLAN when I don't think they should.
switch1 & switch2 are independent core switches with a port channel between them. However, none of the VLANs that are configured with SVIs in the VRF are configured on the port channel.
I have vlan 920 (L2) configured on switch1 and switch2. I also have SVI vlan920 (L3) configured on both switches. The SVI vlan920 is configured inside VRF extwan as are several others.
vlan920 on switch1 is 10.146.64.130 & 10.146.64.131 on switch2.
If I issue a 'ping vrf extwan 10.146.64.131' on switch1, I get a reply.
If I do a 'sh ip arp vrf extwan' on switch1 there's an entry pointing .131 to vlan920 & a MAC address on switch2 that is the same for every SVI on that switch. I assume it represents the MSFC.
So, there is no physical L3 connection set up yet between the switches and the existing L2 channel does not include these VLANs, how am I getting ARP entries in the VRF for the other switch?
The VRF is connected to a set of ASAs on another SVI (also in the VRF) so maybe it's going through that?
Another possibility is that these switches are connected to access switches but STP is blocking one of the links on each VLAN.