I'm looking after to use a setup with that objectives in mind:

  1. Create a subinterface on interface GigabitEthernet0/0/1
  2. create a Vlan and assign it to that subinterface
  3. create a vrrf and assign it to that subinterface
  4. declare a dhcp server and attach it to that subinterface. 4)route to wan from vlan.

The idea is to have a layer 2 and 3 separate isolated virtual networks.

The sites a was reading where:






The Code I produced is:

configure terminal
ip cef
ip dhcp database disk0:router-dhcp timeout 60
ip dhcp database disk0:router-dhcp write-delay 60
ip dhcp bootp ignore

configure terminal
ip vrf VRF200
RD 68686:200
route-target export 68686:200
route-target import 68686:200
ip route vrf VRF200
ip dhcp excluded-address
ip dhcp excluded-address
ip dhcp pool VLAN200
   class VLAN200
   domain-name localdomain
   lease infinite
   vrf VRF200

interface GigabitEthernet0/0/1.200
description VLAN200
encapsulation dot1q 200
ip address
no shutdown
vrf forwarding VLAN200
duplex auto
speed auto

Is just a prove of concept, I'm not experienced on cisco, and evidently this code is not working. I attach a interface to GigabitEthernet0/0/1 from my PC tagged with vlan200 and no ping into GigabitEthernet0/0/1.200 and no dhcp.

Any guide will be very welcome.

Yes, this card can send tagged frames. Used it a lot before. I have a router mikrotik and I can use the vlan200 without problems if I plug the wire into it.

1.Seems up:

#show interface GI0/0/1.200
GigabitEthernet0/0/1.200 is up, line protocol is up
  Hardware is ISR4331-3x1GE, address is 00a3.d1ab.d5dc (bia 00a3.d1ab.d5dc)
  Description: VLAN200
  Internet address is
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  200.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive not supported
  Last clearing of "show interface" counters never

I didn't setup a Spaning Tree so last commands do not aply.

After a few tests I was doing again step by step the config and testing. The vlan seems ok, and after setup ip by hand I can ping...

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

Them I setup the DHCP server and seems ok too:

#Show ip dhcp binding
Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name  0118.31bf.d040.62       Infinite                Automatic  Active     GigabitEthernet0/0/1.200

So the problem of my setup has to be related to VRF.

Thank you for your help.

1 Answer 1



Here are a few things to check:

Can your PC really send tagged frames (most PCs can't)?

  1. Your VRF is named VRF200, but your config shows VLAN200
  2. Be sure you enter

vrf forwarding VRF200

before you enter the ip address

ip address
  • That was the solution. thank you ofr the hint :D Dec 11, 2020 at 18:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.