Questions tagged [vrf]

Questions relating to the usage of Virtual Routing and Forwarding and VPN Routing and Forwarding.

Filter by
Sorted by
Tagged with
1
vote
2answers
36 views

How to isolate in VRF clients with public IPs in MPLS ISP network

I have OSPF and MPLS enabled in network and run xconnects to transmit L2 traffic. But also have just Internet clients that want public IP addresses. So I configure public IP on interface towards ...
0
votes
1answer
43 views

Cisco IOS traffic thru VRF

I know, VRFs are meant to create a seperation on layer3. There are certain ways to "break" thru a vrf in a sense with things like: Tunnel interfaces IP helper NetFlow But is there a way ...
1
vote
0answers
85 views

Getting VRF to work (and some other questions)

I'm messing with BGP/MPLS for the first time and I have some doubts both in if I'm doing something wrong with my configuration and if it is the best approach, hope you guys can clarify me a bit here. ...
2
votes
1answer
50 views

MPLS-BGP - VPN isolation - RFC 4364

In Section 6 of RFC-4364, it is stated that, if MPLS is being used as the tunneling technology (in the scope of forwarding VPN-IPV4 traffic from one PE to an other) , this means that a router in the ...
0
votes
1answer
98 views

Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp

I'm looking after to use a setup with that objectives in mind: Create a subinterface on interface GigabitEthernet0/0/1 create a Vlan and assign it to that subinterface create a vrrf and assign it to ...
0
votes
0answers
22 views

Force Packet thru different VRF with route-map

I am working on a LTE backup configuration. I would like to have the cellular connection open constantly and establish a VPN connection even before a failure on the wired internet line occurs. This ...
3
votes
1answer
199 views

Cellular interface in VRF (LTE)

We are testing an LTE configuration with a Cisco C1113-8PLTEEA router. We already have a wired internet connection in a specific VRF called DSL. As far as i understand the LTE backup, we do have to ...
0
votes
1answer
104 views

VRF - How does a router select the VRF a packet belongs to?

Let's assume we have a switch connected to 2 hosts through 2 VLANs. And the switch is connected to a router (1) which handles VRF. Let's assume Router 1 and Router 2 implement two VRF: VRF_Red and ...
0
votes
0answers
171 views

Dual WAN with each ISP in a VRF - Cisco IOS

I have a DMVPN spoke router setup almost identically to the spoke configuration listed here (Also quoted below): https://www.cisco.com/c/en/us/support/docs/security-vpn/dynamic-multi-point-vpn-dmvpn/...
0
votes
1answer
129 views

Issue w/ Cisco router and failed NAT and static default route

I have a cisco router that is using a VRF to support a site to site VPN tunnel. I have added a second network to the router for non-VPN standard internet use. My problem is that my default static ...
0
votes
1answer
44 views

What is the use of route-target without export/import?

On my router, I can configure the following: I canont find any information regarding the use of the "route-target ASN:nn" command. I know what route-target import/export allows me to do, but what use ...
3
votes
1answer
667 views

Juniper MX: Leaking routes from RIB into VRF

Aim We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
2
votes
1answer
424 views

Can two networks with the same subnet be connected to the same router in different VRF?

Let's say I have the following four networks: Network A: 10.0.1.0/24 Network B: 10.0.0.0/24 Network C: 10.0.1.0/24 Network D: 10.0.0.0/24 I would like to connect networks A and B together, and do ...
2
votes
1answer
375 views

Should the Loopback address be unique across the network?

I have an MPLS network where every site has two PEs for redundancy. and I want to configure a set of loopback interfaces on every PE router for routing traffic between different VRFs. is it possible ...
0
votes
1answer
169 views

Can I use the same IPsec tunnel for two VRF?

I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF,...
5
votes
3answers
1k views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
1
vote
0answers
325 views

Cisco IP SLA HTTP request with frontdoor VRF

I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured ip name-server vrf ...
5
votes
1answer
229 views

BGP - Advertise VRF routes

I have a router with a Global Routing Table (GRT), and a VRF. My end goal is to advertise to my eBGP neighbor my VRF routes. I have actually successfully done it by using address-families (ipv4, ...
8
votes
1answer
1k views

NAT VLANs with same IP Subnets

I have a VMware environment in which VMs are running a simulation suite. The software used has hardcoded IP addresses, about 10-15 VMs, and we are running multiple instances of this software each in ...
9
votes
3answers
15k views

What is the difference between a VRF and VRF-Lite?

To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables ...
1
vote
1answer
809 views

Cisco VRF aware dynamic VTI based IPSEC VPN

im struggeling on a Cisco IPSEC Konfiguration. My aim is to terminate spoke sites behind CGN gateways into a MPLS L3VPN Network via IPSEC tunnels. The router at hub site is a ASR1k running IOS XE 3....
1
vote
1answer
80 views

Can we use VRFs for BW preservation across the MPLS network?

I have some ingress untagged voice traffic coming through the MPLS network and obviously I have some concerns about this traffic being de-prioritised should there is congestion on the MPLS backhaul. ...
4
votes
1answer
6k views

Cisco routing between two VRF

I have this scenario where i have two 10G link from my ISP and both link has two class C /24 public IP which is mentioned in diagram. I want to router data between two VRF RED & BLUE How do i ...
1
vote
1answer
438 views

Cisco VRF with two ISP

I am posting this question to get better understand of VRF on Nexus switch. This is the scenario i have 10G_A link from my ISP running BGP on it, now i need more capacity so order second 10G_B link ...
1
vote
2answers
9k views

Ping Vrf Loopback Interface

I'm doing a Lab and it's very simple. it's just like I need to confirm some commands but I'm really getting upset. here is my lab. I configured a vrf and a loopback interface which I apply it under ...
0
votes
1answer
144 views

Pass traffic to ASA from Spokes via Hub

Good afternoon, The network will be MPLS in the future and I am thinking about new design for it. We will have hub router with ASA behind and couple spokes without the need for IPsec (at least for ...
1
vote
1answer
523 views

Vrf-lite limitations on Cisco 6800

I wish to segment a network consisting on 150 tenant using vrf lite on Cisco 6800. The vrf configuration will be standalone as only the 6800 will be configured with vrf. Tenant's CPE will be connected ...
1
vote
0answers
673 views

Logical-Tunnel Interface Juniper MX 480 doesn't “work”

I have configured a logical tunnel between my master-routing-instance and a additional routing-instance. I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
1
vote
1answer
811 views

Vrf route with global ip as the next hop

I have the below topology: I have to make sure that the loopback interface of R1(1.0.1.1/32) is learnt on R2 but with a few constraints. Step1: The loopback of R1 is learnt in global routing table ...
1
vote
2answers
2k views

Understanding MP-BGP basics

I am trying to understand the difference between address-family vpnv4 and address-family ipv4 vrf So to test the scenario, i connected 2 routers(R1 and R2) linearly back to back. R1 has the ...
1
vote
0answers
445 views

Regarding BGP redistribution basics

I have 2 routers R1 and R2 connected back to back. R1 and R2 are ebgp neighbors for address family ipv4 and address family vpnv4. I want to test the following: --Redistribute a route from R2's global ...
1
vote
1answer
158 views

Can I use a Dynamic Routing Protocol in this scenario?

We are going to have potentially 50~ VRFs which will each be segregated customers. We will have a VOIP LAN, and Print LAN, that all VRFs need access to. Currently I am having to create leaked routes ...
3
votes
1answer
2k views

BGP and Inter-VRF Routing

I am having trouble routing between VRFs using BGP. In my lab there is a hub router with one spoke. I am using MP-BGP to extend VRFs between the two. I want to attach a firewall to the hub with a sub-...
3
votes
1answer
1k views

Cisco VRFs and L2 inter-switch communication

I am having trouble wrapping my brain around a VRF concept and why two switches are communicating with each other on a particular VLAN when I don't think they should. switch1 & switch2 are ...
1
vote
2answers
2k views

Multiple IPSEC tunnels between 2 Cisco Routers

I have a scenario where we need to establish multiple IPSEC tunnels between 2 devices. In the above scenario, ASR has multiple VRFs and we want to create IPSEC tunnel for each VRF and the other end ...
2
votes
2answers
115 views

Limit Access to a Specific VRF?

I may be barking up a tree that doesn't exist but I am trying to find out if there is a way to limit a user or group's access to only a specific VRF. This is a 6500 series switch. Note, I am not ...
10
votes
4answers
31k views

VRFs, VLANs and subnets: difference

I have a basic understanding of VRFs, VLANs and subnets. I understand that VLANs operate on L2, and subnets and VRFs (lite) on L3. What I don't understand, is why you would choose one over the other ...
1
vote
0answers
651 views

Best way to join VRFs using BGP when VRFs are on same PE

I have a Firewall that I need to use to join two different VRFs on service provider PEs. The EGP of choice is BGP. I have done a number of tests with different techniques, I have found two solutions ...
0
votes
2answers
347 views

Internet to ISP WAN Router or VRF?

I'm trying to establish, from a security and networking perspective, if it is advisable to run a internet VRF on a PE router(Cisco 7609 PE) or to use a dedicated router instead(such as a mikrotek ...
3
votes
1answer
723 views

NTP Authentication within a vrf

I have a Cisco ASR1002 WAN router with multiple vrfs per department. Each vrf has a loopback interface on the router, which can be used as an NTP server for remote devices in the respective vrf/...
1
vote
1answer
2k views

What are the virtual router capabilities of Juniper QFX5100 and MX480? [closed]

1) How many virtual routers can be created on a Juniper QFX5100? 2) How many virtual route forwards (VRFs) can be created on a Juniper MX480? 3) What is the difference between FPC, MPC, SPC and NPC? ...
1
vote
0answers
1k views

Unable to Ping SVI IP (VRF) interface from VM [closed]

I'm trying to figure out why I am unable to ping an IP associated with a VLAN in a VRF from my VM's directly attached to the same VLANs. I can ping each interface on the switch directly using ping ...
1
vote
1answer
981 views

MultiVRF (Cisco) Scenario - Route Target Imports

I have built a MultiVRF test scenario, it's working as intended but my question is, how? It's a tricky scenario, the VRFs between CE and PE have different RT and RD. Here are the configs R1: ip ...
2
votes
1answer
267 views

using OSPF over PE-CE Links in VPNs

area0 area0 CE1----------PE1-----------PE2-------------CE2 N1 N2 CE1,CE2 are same customer edge routers. PE1,PE2 are provider Edge routers of same ...
1
vote
0answers
206 views

can TACACS in VRF source interface be the ip for a Port-channel? [closed]

We have two VSS switch pairs, one which has TACACS working correctly with a similar config to this: aaa group server tacacs+ TacacsVrf server-private 10.4.25.8 key 7 ourKeyIsSecret ip ...
3
votes
1answer
817 views

Cisco LNS and per Customer VRF

O.P. Hi , I am trying to configure a Cisco LNS with VRF per Customer. Each customer that dial (PPPoE) to the LNS will bond to the appropiate VRF. The VRF will be assign according to the RADIUS AV-...
1
vote
0answers
48 views

Applying ACLs in a SIP-400 Card (Configuring IP Subscriber Awareness over Ethernet ) [closed]

Good morning, I am trying to apply an ACL in a 7609 SIP-400 Card used to allow PPPoE on the 7609 (with a SPA-5X1G). A Pbr doesn't work when applied to the virtual-template (as it does on a 7200 ...
4
votes
1answer
1k views

Cisco ASR Multiple BGP processes

Virtual Router: I have 1 ASR router that already has a multi-homed EBGP setup on AS#XXXXX, and I need an isolated BGP process that is also multi-homed (separate circuits) with a completely different ...
5
votes
1answer
5k views

Catalyst4500 Sup7E “mgmtVrf” vs “Mgmt-vrf”

Background I recently upgraded a pair of Catalyst4500s from Sup6E to Sup7E. Before the upgrade, I pre-loaded IOS-XE 3.4.1SG on the Sup7Es, and loaded the migration configurations into bootflash: on ...
6
votes
2answers
3k views

VRFs to address asymmetric routing with stateful inspection

For branch offices with dual routers and WAN connections asymmetric routing causes issues with stateful packet inspection. Packets leaving through one router and returning through the other are ...