VRF and Set Policy Next Hop Lookup (S-, K-Series)

VRF segmented systems support overlapping IP addresses because the interface each IP address belongs to are members of a particular VRF. When configuring a policy route map on a VRF, in which the next hop for an IP address match belongs to a different VRF, the next hop VRF that will perform the route lookup must be specified.

Use the set vrf vrf-name command to configure the VRF that will perform the next hop lookup for the IP address match.

Only one set VRF clause is allowed, and only one VRF can be specified. All subsequent set clauses are ignored if a valid set VRF clause is detected. A set VRF clause is valid when the specified VRF name exists. If the VRF exists, the packet is forwarded to the VRF, even if there are no interfaces or any other configuration present.

If the VRF specified in the set clause does not exist, then any other existing set clause will be processed, and the frame is forwarded by the VRF it came in on.

This example shows how to set VRF vr2 to determine the next hop, for policy route map 101, based upon its route table lookup:

System(rw-vr1-config)->route-map policy 101 permit 20
System(rw-vr1-config-route-map-pbr)->match ip address 1
System(rw-vr1-config-route-map-pbr)->set vrf vr2