Questions tagged [vrf]

Questions relating to the usage of Virtual Routing and Forwarding and VPN Routing and Forwarding.

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

Dual FlexVPNs with VRFs on a single router

I'm trying to achieve a double wrapped VPN using a single router at both ends. (Tin foiled hat customer) My current chain of thought is HUB |global routing table >Internal VPN> VRF BLACK > ...
0
votes
1answer
32 views

What is the use of route-target without export/import?

On my router, I can configure the following: I canont find any information regarding the use of the "route-target ASN:nn" command. I know what route-target import/export allows me to do, but what use ...
3
votes
1answer
212 views

Juniper MX: Leaking routes from RIB into VRF

Aim We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
2
votes
1answer
248 views

Can two networks with the same subnet be connected to the same router in different VRF?

Let's say I have the following four networks: Network A: 10.0.1.0/24 Network B: 10.0.0.0/24 Network C: 10.0.1.0/24 Network D: 10.0.0.0/24 I would like to connect networks A and B together, and do ...
2
votes
1answer
127 views

Should the Loopback address be unique across the network?

I have an MPLS network where every site has two PEs for redundancy. and I want to configure a set of loopback interfaces on every PE router for routing traffic between different VRFs. is it possible ...
0
votes
1answer
88 views

Can I use the same IPsec tunnel for two VRF?

I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF,...
5
votes
3answers
510 views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
1
vote
0answers
142 views

Cisco IP SLA HTTP request with frontdoor VRF

I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured ip name-server vrf ...
5
votes
1answer
189 views

BGP - Advertise VRF routes

I have a router with a Global Routing Table (GRT), and a VRF. My end goal is to advertise to my eBGP neighbor my VRF routes. I have actually successfully done it by using address-families (ipv4, ...
8
votes
1answer
599 views

NAT VLANs with same IP Subnets

I have a VMware environment in which VMs are running a simulation suite. The software used has hardcoded IP addresses, about 10-15 VMs, and we are running multiple instances of this software each in ...
6
votes
2answers
7k views

What is the difference between a VRF and VRF-Lite?

To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables ...
3
votes
1answer
1k views

Cisco VRFs and L2 inter-switch communication

I am having trouble wrapping my brain around a VRF concept and why two switches are communicating with each other on a particular VLAN when I don't think they should. switch1 & switch2 are ...
1
vote
1answer
449 views

Cisco VRF aware dynamic VTI based IPSEC VPN

im struggeling on a Cisco IPSEC Konfiguration. My aim is to terminate spoke sites behind CGN gateways into a MPLS L3VPN Network via IPSEC tunnels. The router at hub site is a ASR1k running IOS XE 3....
1
vote
1answer
69 views

Can we use VRFs for BW preservation across the MPLS network?

I have some ingress untagged voice traffic coming through the MPLS network and obviously I have some concerns about this traffic being de-prioritised should there is congestion on the MPLS backhaul. ...
4
votes
1answer
3k views

Cisco routing between two VRF

I have this scenario where i have two 10G link from my ISP and both link has two class C /24 public IP which is mentioned in diagram. I want to router data between two VRF RED & BLUE How do i ...
1
vote
2answers
895 views

Multiple IPSEC tunnels between 2 Cisco Routers

I have a scenario where we need to establish multiple IPSEC tunnels between 2 devices. In the above scenario, ASR has multiple VRFs and we want to create IPSEC tunnel for each VRF and the other end ...
1
vote
1answer
311 views

Cisco VRF with two ISP

I am posting this question to get better understand of VRF on Nexus switch. This is the scenario i have 10G_A link from my ISP running BGP on it, now i need more capacity so order second 10G_B link ...
1
vote
2answers
1k views

Understanding MP-BGP basics

I am trying to understand the difference between address-family vpnv4 and address-family ipv4 vrf So to test the scenario, i connected 2 routers(R1 and R2) linearly back to back. R1 has the ...
10
votes
3answers
20k views

VRFs, VLANs and subnets: difference

I have a basic understanding of VRFs, VLANs and subnets. I understand that VLANs operate on L2, and subnets and VRFs (lite) on L3. What I don't understand, is why you would choose one over the other ...
1
vote
2answers
7k views

Ping Vrf Loopback Interface

I'm doing a Lab and it's very simple. it's just like I need to confirm some commands but I'm really getting upset. here is my lab. I configured a vrf and a loopback interface which I apply it under ...
0
votes
1answer
125 views

Pass traffic to ASA from Spokes via Hub

Good afternoon, The network will be MPLS in the future and I am thinking about new design for it. We will have hub router with ASA behind and couple spokes without the need for IPsec (at least for ...
1
vote
1answer
399 views

Vrf-lite limitations on Cisco 6800

I wish to segment a network consisting on 150 tenant using vrf lite on Cisco 6800. The vrf configuration will be standalone as only the 6800 will be configured with vrf. Tenant's CPE will be connected ...
1
vote
0answers
408 views

Logical-Tunnel Interface Juniper MX 480 doesn't “work”

I have configured a logical tunnel between my master-routing-instance and a additional routing-instance. I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
1
vote
1answer
677 views

Vrf route with global ip as the next hop

I have the below topology: I have to make sure that the loopback interface of R1(1.0.1.1/32) is learnt on R2 but with a few constraints. Step1: The loopback of R1 is learnt in global routing table ...
1
vote
0answers
418 views

Regarding BGP redistribution basics

I have 2 routers R1 and R2 connected back to back. R1 and R2 are ebgp neighbors for address family ipv4 and address family vpnv4. I want to test the following: --Redistribute a route from R2's global ...
1
vote
1answer
139 views

Can I use a Dynamic Routing Protocol in this scenario?

We are going to have potentially 50~ VRFs which will each be segregated customers. We will have a VOIP LAN, and Print LAN, that all VRFs need access to. Currently I am having to create leaked routes ...
3
votes
1answer
2k views

BGP and Inter-VRF Routing

I am having trouble routing between VRFs using BGP. In my lab there is a hub router with one spoke. I am using MP-BGP to extend VRFs between the two. I want to attach a firewall to the hub with a sub-...
2
votes
2answers
94 views

Limit Access to a Specific VRF?

I may be barking up a tree that doesn't exist but I am trying to find out if there is a way to limit a user or group's access to only a specific VRF. This is a 6500 series switch. Note, I am not ...
1
vote
0answers
510 views

Best way to join VRFs using BGP when VRFs are on same PE

I have a Firewall that I need to use to join two different VRFs on service provider PEs. The EGP of choice is BGP. I have done a number of tests with different techniques, I have found two solutions ...
0
votes
2answers
328 views

Internet to ISP WAN Router or VRF?

I'm trying to establish, from a security and networking perspective, if it is advisable to run a internet VRF on a PE router(Cisco 7609 PE) or to use a dedicated router instead(such as a mikrotek ...
3
votes
1answer
672 views

NTP Authentication within a vrf

I have a Cisco ASR1002 WAN router with multiple vrfs per department. Each vrf has a loopback interface on the router, which can be used as an NTP server for remote devices in the respective vrf/...
1
vote
1answer
2k views

What are the virtual router capabilities of Juniper QFX5100 and MX480? [closed]

1) How many virtual routers can be created on a Juniper QFX5100? 2) How many virtual route forwards (VRFs) can be created on a Juniper MX480? 3) What is the difference between FPC, MPC, SPC and NPC? ...
1
vote
0answers
923 views

Unable to Ping SVI IP (VRF) interface from VM

I'm trying to figure out why I am unable to ping an IP associated with a VLAN in a VRF from my VM's directly attached to the same VLANs. I can ping each interface on the switch directly using ping ...
2
votes
1answer
256 views

using OSPF over PE-CE Links in VPNs

area0 area0 CE1----------PE1-----------PE2-------------CE2 N1 N2 CE1,CE2 are same customer edge routers. PE1,PE2 are provider Edge routers of same ...
1
vote
1answer
918 views

MultiVRF (Cisco) Scenario - Route Target Imports

I have built a MultiVRF test scenario, it's working as intended but my question is, how? It's a tricky scenario, the VRFs between CE and PE have different RT and RD. Here are the configs R1: ip ...
7
votes
1answer
1k views

DHCP Snooping Confusion

I'm trying to work out how to enable dhcp snooping and dynamic arp inspection on our guest network and I'm a little confused.... Here's the situation: We have a hub and spoke topology, with a ...
1
vote
0answers
183 views

can TACACS in VRF source interface be the ip for a Port-channel?

We have two VSS switch pairs, one which has TACACS working correctly with a similar config to this: aaa group server tacacs+ TacacsVrf server-private 10.4.25.8 key 7 ourKeyIsSecret ip ...
3
votes
1answer
748 views

Cisco LNS and per Customer VRF

O.P. Hi , I am trying to configure a Cisco LNS with VRF per Customer. Each customer that dial (PPPoE) to the LNS will bond to the appropiate VRF. The VRF will be assign according to the RADIUS AV-...
1
vote
0answers
48 views

Applying ACLs in a SIP-400 Card (Configuring IP Subscriber Awareness over Ethernet ) [closed]

Good morning, I am trying to apply an ACL in a 7609 SIP-400 Card used to allow PPPoE on the 7609 (with a SPA-5X1G). A Pbr doesn't work when applied to the virtual-template (as it does on a 7200 ...
4
votes
1answer
948 views

Cisco ASR Multiple BGP processes

Virtual Router: I have 1 ASR router that already has a multi-homed EBGP setup on AS#XXXXX, and I need an isolated BGP process that is also multi-homed (separate circuits) with a completely different ...
5
votes
1answer
5k views

Catalyst4500 Sup7E “mgmtVrf” vs “Mgmt-vrf”

Background I recently upgraded a pair of Catalyst4500s from Sup6E to Sup7E. Before the upgrade, I pre-loaded IOS-XE 3.4.1SG on the Sup7Es, and loaded the migration configurations into bootflash: on ...
6
votes
2answers
2k views

VRFs to address asymmetric routing with stateful inspection

For branch offices with dual routers and WAN connections asymmetric routing causes issues with stateful packet inspection. Packets leaving through one router and returning through the other are ...
2
votes
1answer
1k views

IPv6: to VRF or not to VRF

Been discussing this with people and reading up, would like people's thoughts on whether or not its worth running IPv6 in a VRF or just let it loose in the global routing table. Even though ...
5
votes
1answer
13k views

IOS - Nat from a VRF to WAN interface in global routing table

Trying to get my head round how best to achieve the above In essence we have s speed test server that is available in the CPE's global routing table , that we would like the customer in VRF X to test ...
7
votes
2answers
3k views

Tacacs VRF authentication

We just got a new Supervisor7 with os 3.4.1. I'm trying to configure authentication with tacacs, and I can't understand how to make it work. This configuration works on our other switches, but it ...
7
votes
2answers
3k views

How to configure OOB access via IP

Single Cisco IOS device in a remote DC, I have an OOB connection delivered into the rack (length of Cat5e into my rack from another onsite providers rack, who have diverse routes from my own, in and ...