I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF, I thought about creating an IPsec tunnel over Internet with a new interface with public IP and then use that tunnel with my VRF. However, it is not clear if I need a tunnel per VRF or only one for both. Thank in advance for your help.

enter image description here

1 Answer 1


Cisco routers have a feature called VRF aware IPSec. It is available in version 12.2(33) and later. Here’s a brief introduction.

Other companies may have similar features.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.