Questions tagged [vrf]

Questions relating to the usage of Virtual Routing and Forwarding and VPN Routing and Forwarding.

Filter by
Sorted by
Tagged with
3 votes
1 answer
217 views

VRF Leak global default route with a single router

I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
user avatar
  • 1,458
0 votes
1 answer
140 views

Nexus Management VRF on same VLAN as LAN switches

1 Hi All. I searched this question but I'm not finding anything relevant, or I'm not understanding the results properly. I have all my L2 switches remote management access, SSH/SFTP, configured on a ...
user avatar
3 votes
1 answer
80 views

Identify vrf within packet capture

I have a scenario where i am capturing data where mutiple customers vrfs traverse I am looking at my capture and ofcourse i see source & destination However, these addresses could come from ...
user avatar
  • 480
0 votes
1 answer
33 views

How a single BGP-process establishes sessions with neighbours in different VRFs?

In VRF-lite solution scenario, when BGP session is established between CE connected to a VRF in PE. The BGP process or in other words TCP server, is listening on port 179(default) for incoming BGP ...
user avatar
  • 1,043
0 votes
1 answer
41 views

Why do we need a Route Distinguisher in VPNv4 routes if there is already a VPN label?

I know the explanation about the usage of RD, that it makes routes from different VRFs globally unique. AFAIK, a VPN route is composed of [RD] + [VPN label] + [Prefix] Isn't the VPN label, that is ...
user avatar
  • 1,402
0 votes
1 answer
212 views

How to configure loopback for switch management

We have Cisco Switches (Nexus 93). My PC is on vxlan, in vrf "test" with default gateway 60.254. We want to use loopback 99 for managent for switches. We have created a loopback 99 with an ...
user avatar
1 vote
2 answers
101 views

How to isolate in VRF clients with public IPs in MPLS ISP network

I have OSPF and MPLS enabled in network and run xconnects to transmit L2 traffic. But also have just Internet clients that want public IP addresses. So I configure public IP on interface towards ...
user avatar
  • 21
0 votes
1 answer
85 views

Cisco IOS traffic thru VRF

I know, VRFs are meant to create a seperation on layer3. There are certain ways to "break" thru a vrf in a sense with things like: Tunnel interfaces IP helper NetFlow But is there a way ...
user avatar
  • 1,635
1 vote
0 answers
137 views

Getting VRF to work (and some other questions)

I'm messing with BGP/MPLS for the first time and I have some doubts both in if I'm doing something wrong with my configuration and if it is the best approach, hope you guys can clarify me a bit here. ...
user avatar
  • 101
2 votes
1 answer
72 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
user avatar
0 votes
1 answer
324 views

Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp

I'm looking after to use a setup with that objectives in mind: Create a subinterface on interface GigabitEthernet0/0/1 create a Vlan and assign it to that subinterface create a vrrf and assign it to ...
user avatar
3 votes
1 answer
455 views

Cellular interface in VRF (LTE)

We are testing an LTE configuration with a Cisco C1113-8PLTEEA router. We already have a wired internet connection in a specific VRF called DSL. As far as i understand the LTE backup, we do have to ...
user avatar
  • 1,635
0 votes
1 answer
264 views

VRF - How does a router select the VRF a packet belongs to?

Let's assume we have a switch connected to 2 hosts through 2 VLANs. And the switch is connected to a router (1) which handles VRF. Let's assume Router 1 and Router 2 implement two VRF: VRF_Red and ...
user avatar
  • 107
0 votes
0 answers
406 views

Dual WAN with each ISP in a VRF - Cisco IOS

I have a DMVPN spoke router setup almost identically to the spoke configuration listed here (Also quoted below): https://www.cisco.com/c/en/us/support/docs/security-vpn/dynamic-multi-point-vpn-dmvpn/...
user avatar
  • 1
0 votes
1 answer
171 views

Issue w/ Cisco router and failed NAT and static default route

I have a cisco router that is using a VRF to support a site to site VPN tunnel. I have added a second network to the router for non-VPN standard internet use. My problem is that my default static ...
user avatar
0 votes
1 answer
47 views

What is the use of route-target without export/import?

On my router, I can configure the following: I canont find any information regarding the use of the "route-target ASN:nn" command. I know what route-target import/export allows me to do, but what use ...
user avatar
3 votes
1 answer
985 views

Juniper MX: Leaking routes from RIB into VRF

Aim We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
user avatar
2 votes
1 answer
572 views

Can two networks with the same subnet be connected to the same router in different VRF?

Let's say I have the following four networks: Network A: 10.0.1.0/24 Network B: 10.0.0.0/24 Network C: 10.0.1.0/24 Network D: 10.0.0.0/24 I would like to connect networks A and B together, and do ...
user avatar
  • 861
2 votes
1 answer
580 views

Should the Loopback address be unique across the network?

I have an MPLS network where every site has two PEs for redundancy. and I want to configure a set of loopback interfaces on every PE router for routing traffic between different VRFs. is it possible ...
user avatar
  • 55
0 votes
1 answer
279 views

Can I use the same IPsec tunnel for two VRF?

I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF,...
user avatar
  • 861
5 votes
3 answers
2k views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
user avatar
  • 141
1 vote
0 answers
386 views

Cisco IP SLA HTTP request with frontdoor VRF

I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured ip name-server vrf ...
user avatar
  • 1,039
5 votes
1 answer
272 views

BGP - Advertise VRF routes

I have a router with a Global Routing Table (GRT), and a VRF. My end goal is to advertise to my eBGP neighbor my VRF routes. I have actually successfully done it by using address-families (ipv4, ...
user avatar
  • 319
9 votes
1 answer
1k views

NAT VLANs with same IP Subnets

I have a VMware environment in which VMs are running a simulation suite. The software used has hardcoded IP addresses, about 10-15 VMs, and we are running multiple instances of this software each in ...
user avatar
  • 93
9 votes
3 answers
17k views

What is the difference between a VRF and VRF-Lite?

To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables ...
user avatar
  • 357
1 vote
1 answer
954 views

Cisco VRF aware dynamic VTI based IPSEC VPN

im struggeling on a Cisco IPSEC Konfiguration. My aim is to terminate spoke sites behind CGN gateways into a MPLS L3VPN Network via IPSEC tunnels. The router at hub site is a ASR1k running IOS XE 3....
user avatar
1 vote
1 answer
86 views

Can we use VRFs for BW preservation across the MPLS network?

I have some ingress untagged voice traffic coming through the MPLS network and obviously I have some concerns about this traffic being de-prioritised should there is congestion on the MPLS backhaul. ...
user avatar
5 votes
1 answer
7k views

Cisco routing between two VRF

I have this scenario where i have two 10G link from my ISP and both link has two class C /24 public IP which is mentioned in diagram. I want to router data between two VRF RED & BLUE How do i ...
user avatar
  • 4,227
1 vote
1 answer
480 views

Cisco VRF with two ISP

I am posting this question to get better understand of VRF on Nexus switch. This is the scenario i have 10G_A link from my ISP running BGP on it, now i need more capacity so order second 10G_B link ...
user avatar
  • 4,227
1 vote
2 answers
10k views

Ping Vrf Loopback Interface

I'm doing a Lab and it's very simple. it's just like I need to confirm some commands but I'm really getting upset. here is my lab. I configured a vrf and a loopback interface which I apply it under ...
user avatar
0 votes
1 answer
150 views

Pass traffic to ASA from Spokes via Hub

Good afternoon, The network will be MPLS in the future and I am thinking about new design for it. We will have hub router with ASA behind and couple spokes without the need for IPsec (at least for ...
user avatar
  • 1
1 vote
1 answer
626 views

Vrf-lite limitations on Cisco 6800

I wish to segment a network consisting on 150 tenant using vrf lite on Cisco 6800. The vrf configuration will be standalone as only the 6800 will be configured with vrf. Tenant's CPE will be connected ...
user avatar
1 vote
0 answers
840 views

Logical-Tunnel Interface Juniper MX 480 doesn't "work"

I have configured a logical tunnel between my master-routing-instance and a additional routing-instance. I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
user avatar
  • 75
1 vote
1 answer
919 views

Vrf route with global ip as the next hop

I have the below topology: I have to make sure that the loopback interface of R1(1.0.1.1/32) is learnt on R2 but with a few constraints. Step1: The loopback of R1 is learnt in global routing table ...
user avatar
  • 849
1 vote
2 answers
2k views

Understanding MP-BGP basics

I am trying to understand the difference between address-family vpnv4 and address-family ipv4 vrf So to test the scenario, i connected 2 routers(R1 and R2) linearly back to back. R1 has the ...
user avatar
  • 849
1 vote
0 answers
457 views

Regarding BGP redistribution basics

I have 2 routers R1 and R2 connected back to back. R1 and R2 are ebgp neighbors for address family ipv4 and address family vpnv4. I want to test the following: --Redistribute a route from R2's global ...
user avatar
  • 849
1 vote
1 answer
168 views

Can I use a Dynamic Routing Protocol in this scenario?

We are going to have potentially 50~ VRFs which will each be segregated customers. We will have a VOIP LAN, and Print LAN, that all VRFs need access to. Currently I am having to create leaked routes ...
user avatar
  • 123
3 votes
1 answer
3k views

BGP and Inter-VRF Routing

I am having trouble routing between VRFs using BGP. In my lab there is a hub router with one spoke. I am using MP-BGP to extend VRFs between the two. I want to attach a firewall to the hub with a sub-...
user avatar
3 votes
1 answer
2k views

Cisco VRFs and L2 inter-switch communication

I am having trouble wrapping my brain around a VRF concept and why two switches are communicating with each other on a particular VLAN when I don't think they should. switch1 & switch2 are ...
user avatar
  • 210
1 vote
2 answers
2k views

Multiple IPSEC tunnels between 2 Cisco Routers

I have a scenario where we need to establish multiple IPSEC tunnels between 2 devices. In the above scenario, ASR has multiple VRFs and we want to create IPSEC tunnel for each VRF and the other end ...
user avatar
  • 11
2 votes
2 answers
126 views

Limit Access to a Specific VRF?

I may be barking up a tree that doesn't exist but I am trying to find out if there is a way to limit a user or group's access to only a specific VRF. This is a 6500 series switch. Note, I am not ...
user avatar
  • 210
10 votes
4 answers
35k views

VRFs, VLANs and subnets: difference

I have a basic understanding of VRFs, VLANs and subnets. I understand that VLANs operate on L2, and subnets and VRFs (lite) on L3. What I don't understand, is why you would choose one over the other ...
user avatar
  • 205
1 vote
0 answers
710 views

Best way to join VRFs using BGP when VRFs are on same PE

I have a Firewall that I need to use to join two different VRFs on service provider PEs. The EGP of choice is BGP. I have done a number of tests with different techniques, I have found two solutions ...
user avatar
0 votes
2 answers
357 views

Internet to ISP WAN Router or VRF?

I'm trying to establish, from a security and networking perspective, if it is advisable to run a internet VRF on a PE router(Cisco 7609 PE) or to use a dedicated router instead(such as a mikrotek ...
user avatar
  • 1
3 votes
1 answer
762 views

NTP Authentication within a vrf

I have a Cisco ASR1002 WAN router with multiple vrfs per department. Each vrf has a loopback interface on the router, which can be used as an NTP server for remote devices in the respective vrf/...
user avatar
1 vote
1 answer
2k views

What are the virtual router capabilities of Juniper QFX5100 and MX480? [closed]

1) How many virtual routers can be created on a Juniper QFX5100? 2) How many virtual route forwards (VRFs) can be created on a Juniper MX480? 3) What is the difference between FPC, MPC, SPC and NPC? ...
user avatar
1 vote
0 answers
1k views

Unable to Ping SVI IP (VRF) interface from VM [closed]

I'm trying to figure out why I am unable to ping an IP associated with a VLAN in a VRF from my VM's directly attached to the same VLANs. I can ping each interface on the switch directly using ping ...
user avatar
  • 11
1 vote
1 answer
1k views

MultiVRF (Cisco) Scenario - Route Target Imports

I have built a MultiVRF test scenario, it's working as intended but my question is, how? It's a tricky scenario, the VRFs between CE and PE have different RT and RD. Here are the configs R1: ip ...
user avatar
2 votes
1 answer
273 views

using OSPF over PE-CE Links in VPNs

area0 area0 CE1----------PE1-----------PE2-------------CE2 N1 N2 CE1,CE2 are same customer edge routers. PE1,PE2 are provider Edge routers of same ...
user avatar
1 vote
0 answers
383 views

can TACACS in VRF source interface be the ip for a Port-channel? [closed]

We have two VSS switch pairs, one which has TACACS working correctly with a similar config to this: aaa group server tacacs+ TacacsVrf server-private 10.4.25.8 key 7 ourKeyIsSecret ip ...
user avatar