Questions tagged [vrf]
Questions relating to the usage of Virtual Routing and Forwarding and VPN Routing and Forwarding.
66
questions
0
votes
0
answers
51
views
The use of VRF Lite
I have a quick question about VRF Lite.
So I understand that VRF is a technology which allows the router to build multiple virtual routing tables which divide the network on L3 with each VRF table ...
- 783
0
votes
1
answer
120
views
Can I use VRF to loop around traffic through a firewall?
I have a firewall that's in-line of the default gateway for a network. It's a multi-layer filtering beast it handles all the NAT in the network (public and internal 1:1) and the access to DMZs. ...
- 95
2
votes
2
answers
100
views
Cisco IOS - how can I make the guestshell be reachable via VRF?
I am currently trying to set up a cloud application on the guestshell of an ISR4331. It installs a connector that needs to have connectivity to the internet. I assume the issue is not specific to what ...
- 163
0
votes
1
answer
332
views
Why should we replicate route before doing inter-vrf redistribution
Consider a network topology like -
+-------------------------------------------------+
+--------------------|-----------------------------+ |
| ...
- 697
4
votes
1
answer
290
views
Routing between VRFs through an outside bridge link
Note - 2022-11-09: We opened a support ticket with Dell and they think it is a software bug. Engineering is supposedly working on it now. This question may become moot, or, they might decide not to ...
- 181
0
votes
2
answers
159
views
what do i need to configure to route vrf to internet in a very simple way?
i designed a realy simple network.
i have a switch layer 3 with VRF named "A" with VLAN 1 forwarded to it.
the switch is connected to the internet with a router through gi0/3.
i want that ...
4
votes
1
answer
3k
views
VRF Leak global default route with a single router
I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
- 1,478
0
votes
1
answer
555
views
Nexus Management VRF on same VLAN as LAN switches
1
Hi All.
I searched this question but I'm not finding anything relevant, or I'm not understanding the results properly. I have all my L2 switches remote management access, SSH/SFTP, configured on a ...
- 13
3
votes
1
answer
400
views
Identify vrf within packet capture
I have a scenario where i am capturing data where mutiple customers vrfs traverse
I am looking at my capture and ofcourse i see source & destination
However, these addresses could come from ...
- 480
0
votes
1
answer
81
views
How a single BGP-process establishes sessions with neighbours in different VRFs?
In VRF-lite solution scenario, when BGP session is established between CE connected to a VRF in PE. The BGP process or in other words TCP server, is listening on port 179(default) for incoming BGP ...
- 1,124
0
votes
1
answer
99
views
Why do we need a Route Distinguisher in VPNv4 routes if there is already a VPN label?
I know the explanation about the usage of RD, that it makes routes from different VRFs globally unique.
AFAIK, a VPN route is composed of [RD] + [VPN label] + [Prefix]
Isn't the VPN label, that is ...
- 1,604
0
votes
1
answer
674
views
How to configure loopback for switch management
We have Cisco Switches (Nexus 93). My PC is on vxlan, in vrf "test" with default gateway 60.254.
We want to use loopback 99 for managent for switches. We have created a loopback 99 with an ...
1
vote
2
answers
240
views
How to isolate in VRF clients with public IPs in MPLS ISP network
I have OSPF and MPLS enabled in network and run xconnects to transmit L2 traffic.
But also have just Internet clients that want public IP addresses. So I configure public IP on interface towards ...
- 31
0
votes
1
answer
235
views
Cisco IOS traffic thru VRF
I know, VRFs are meant to create a seperation on layer3. There are certain ways to "break" thru a vrf in a sense with things like:
Tunnel interfaces
IP helper
NetFlow
But is there a way ...
- 1,700
1
vote
0
answers
151
views
Getting VRF to work (and some other questions)
I'm messing with BGP/MPLS for the first time and I have some doubts both in if I'm doing something wrong with my configuration and if it is the best approach, hope you guys can clarify me a bit here.
...
- 101
2
votes
1
answer
97
views
MPLS-BGP - VPN isolation - RFC 4364
In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
- 23
0
votes
1
answer
744
views
Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp
I'm looking after to use a setup with that objectives in mind:
Create a subinterface on interface GigabitEthernet0/0/1
create a Vlan and assign it to that subinterface
create a vrrf and assign it to ...
3
votes
1
answer
869
views
Cellular interface in VRF (LTE)
We are testing an LTE configuration with a Cisco C1113-8PLTEEA router. We already have a wired internet connection in a specific VRF called DSL. As far as i understand the LTE backup, we do have to ...
- 1,700
0
votes
1
answer
509
views
VRF - How does a router select the VRF a packet belongs to?
Let's assume we have a switch connected to 2 hosts through 2 VLANs. And the switch is connected to a router (1) which handles VRF.
Let's assume Router 1 and Router 2 implement two VRF: VRF_Red and ...
- 107
0
votes
1
answer
806
views
Dual WAN with each ISP in a VRF - Cisco IOS
I have a DMVPN spoke router setup almost identically to the spoke configuration listed here (Also quoted below):
https://www.cisco.com/c/en/us/support/docs/security-vpn/dynamic-multi-point-vpn-dmvpn/...
- 3
0
votes
1
answer
233
views
Issue w/ Cisco router and failed NAT and static default route
I have a cisco router that is using a VRF to support a site to site VPN tunnel. I have added a second network to the router for non-VPN standard internet use. My problem is that my default static ...
0
votes
1
answer
83
views
What is the use of route-target without export/import?
On my router, I can configure the following:
I canont find any information regarding the use of the "route-target ASN:nn" command. I know what route-target import/export allows me to do, but what use ...
- 33
3
votes
1
answer
2k
views
Juniper MX: Leaking routes from RIB into VRF
Aim
We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
- 211
2
votes
1
answer
910
views
Can two networks with the same subnet be connected to the same router in different VRF?
Let's say I have the following four networks:
Network A: 10.0.1.0/24
Network B: 10.0.0.0/24
Network C: 10.0.1.0/24
Network D: 10.0.0.0/24
I would like to connect networks A and B together, and do ...
- 871
2
votes
1
answer
820
views
Should the Loopback address be unique across the network?
I have an MPLS network where every site has two PEs for redundancy. and I want to configure a set of loopback interfaces on every PE router for routing traffic between different VRFs.
is it possible ...
- 57
0
votes
1
answer
594
views
Can I use the same IPsec tunnel for two VRF?
I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF,...
- 871
5
votes
3
answers
2k
views
Traceroute doesn't show one hop?
I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
- 141
1
vote
0
answers
500
views
Cisco IP SLA HTTP request with frontdoor VRF
I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured
ip name-server vrf ...
- 1,059
5
votes
1
answer
392
views
BGP - Advertise VRF routes
I have a router with a Global Routing Table (GRT), and a VRF. My end goal is to advertise to my eBGP neighbor my VRF routes.
I have actually successfully done it by using address-families (ipv4, ...
- 319
9
votes
1
answer
2k
views
NAT VLANs with same IP Subnets
I have a VMware environment in which VMs are running a simulation suite. The software used has hardcoded IP addresses, about 10-15 VMs, and we are running multiple instances of this software each in ...
- 93
9
votes
3
answers
19k
views
What is the difference between a VRF and VRF-Lite?
To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables ...
- 399
1
vote
1
answer
1k
views
Cisco VRF aware dynamic VTI based IPSEC VPN
im struggeling on a Cisco IPSEC Konfiguration.
My aim is to terminate spoke sites behind CGN gateways into a MPLS L3VPN Network via IPSEC tunnels.
The router at hub site is a ASR1k running IOS XE 3....
- 527
1
vote
1
answer
97
views
Can we use VRFs for BW preservation across the MPLS network?
I have some ingress untagged voice traffic coming through the MPLS network and obviously I have some concerns about this traffic being de-prioritised should there is congestion on the MPLS backhaul. ...
5
votes
1
answer
10k
views
Cisco routing between two VRF
I have this scenario where i have two 10G link from my ISP and both link has two class C /24 public IP which is mentioned in diagram. I want to router data between two VRF RED & BLUE
How do i ...
- 4,371
1
vote
1
answer
531
views
Cisco VRF with two ISP
I am posting this question to get better understand of VRF on Nexus switch.
This is the scenario i have 10G_A link from my ISP running BGP on it, now i need more capacity so order second 10G_B link ...
- 4,371
1
vote
2
answers
11k
views
Ping Vrf Loopback Interface
I'm doing a Lab and it's very simple. it's just like I need to confirm some commands but I'm really getting upset.
here is my lab. I configured a vrf and a loopback interface which I apply it under ...
- 21
0
votes
1
answer
167
views
Pass traffic to ASA from Spokes via Hub
Good afternoon,
The network will be MPLS in the future and I am thinking about new design for it. We will have hub router with ASA behind and couple spokes without the need for IPsec (at least for ...
- 1
1
vote
1
answer
751
views
Vrf-lite limitations on Cisco 6800
I wish to segment a network consisting on 150 tenant using vrf lite on Cisco 6800. The vrf configuration will be standalone as only the 6800 will be configured with vrf. Tenant's CPE will be connected ...
- 43
1
vote
0
answers
1k
views
Logical-Tunnel Interface Juniper MX 480 doesn't "work"
I have configured a logical tunnel between my master-routing-instance and a additional routing-instance.
I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
- 75
1
vote
1
answer
1k
views
Vrf route with global ip as the next hop
I have the below topology:
I have to make sure that the loopback interface of R1(1.0.1.1/32) is learnt on R2 but with a few constraints.
Step1: The loopback of R1 is learnt in global routing table ...
- 893
1
vote
2
answers
3k
views
Understanding MP-BGP basics
I am trying to understand the difference between
address-family vpnv4 and address-family ipv4 vrf
So to test the scenario, i connected 2 routers(R1 and R2) linearly back to back.
R1 has the ...
- 893
1
vote
1
answer
479
views
Regarding BGP redistribution basics
I have 2 routers R1 and R2 connected back to back. R1 and R2 are ebgp neighbors for address family ipv4 and address family vpnv4.
I want to test the following:
--Redistribute a route from R2's global ...
- 893
1
vote
1
answer
175
views
Can I use a Dynamic Routing Protocol in this scenario?
We are going to have potentially 50~ VRFs which will each be segregated customers.
We will have a VOIP LAN, and Print LAN, that all VRFs need access to. Currently I am having to create leaked routes ...
- 123
3
votes
1
answer
3k
views
BGP and Inter-VRF Routing
I am having trouble routing between VRFs using BGP. In my lab there is a hub router with one spoke. I am using MP-BGP to extend VRFs between the two. I want to attach a firewall to the hub with a sub-...
- 33
3
votes
1
answer
2k
views
Cisco VRFs and L2 inter-switch communication
I am having trouble wrapping my brain around a VRF concept and why two switches are communicating with each other on a particular VLAN when I don't think they should.
switch1 & switch2 are ...
- 210
1
vote
2
answers
2k
views
Multiple IPSEC tunnels between 2 Cisco Routers
I have a scenario where we need to establish multiple IPSEC tunnels between 2 devices.
In the above scenario, ASR has multiple VRFs and we want to create IPSEC tunnel for each VRF and the other end ...
- 11
2
votes
2
answers
160
views
Limit Access to a Specific VRF?
I may be barking up a tree that doesn't exist but I am trying to find out if there is a way to limit a user or group's access to only a specific VRF. This is a 6500 series switch.
Note, I am not ...
- 210
12
votes
4
answers
40k
views
VRFs, VLANs and subnets: difference
I have a basic understanding of VRFs, VLANs and subnets. I understand that VLANs operate on L2, and subnets and VRFs (lite) on L3. What I don't understand, is why you would choose one over the other ...
- 225
1
vote
0
answers
811
views
Best way to join VRFs using BGP when VRFs are on same PE
I have a Firewall that I need to use to join two different VRFs on service provider PEs. The EGP of choice is BGP. I have done a number of tests with different techniques, I have found two solutions ...
- 111
0
votes
2
answers
419
views
Internet to ISP WAN Router or VRF?
I'm trying to establish, from a security and networking perspective, if it is advisable to run a internet VRF on a PE router(Cisco 7609 PE) or to use a dedicated router instead(such as a mikrotek ...
- 1