Configuring VRF

This section provides details for the configuration of VRF on the S- K- and 7100-Series platforms.

Default VRF Parameters lists VRF parameter default values.

Click to expand in new window

Default VRF Parameters

Parameter Description Default Value
SNMPv3 context Name The name that SNMPv3 will associate with this VRF. VRF Name
router context The VRF router command mode context if no router is specified global

VRF Configuration describes how to configure VRF.

Click to expand in new window

VRF Configuration

Step Task Command(s)
1 Create the VRF, in any configuration mode, optionally specifying an SNMPv3 context name. set router vrf create vrf-name [context context-name]
2 Enter router mode for the VRF to be configured. router [name]
3 Enter configuration mode for this VRF router instance. configure
4 Optionally, configure static routes to perform next hop lookup on the egress VRF for any route that the egress interface is on a different VRF instance. (S-, K-Series)

A layer 3 tunnel interface is currently only supported on the Global VRF.

ip route {prefix mask | prefix/prefix-length} {ip-address [recursive] | interface interface-name | vlan vlan-id | vrf egress-vrf | blackhole | reject} [distance] [tag tag-id]

or

ipv6 route prefix/length {ipv6-address [recursive] | [interface interface-name] | vlan vlan-id | vrf egress-vrf | blackhole | reject} [distance] [tag tag-id]

5 Optionally, when creating a policy route map, with a match IP address policy in which the interface belongs to a different VRF, configure the next hop VRF to perform the route lookup using its routing table. set vrf vrf-name
6 Optionally, when multiple VRFs contain overlapping IP networks that communicate to the outside Internet, use the NAT-inside-VRF feature to differentiate the VRFs containing the overlapping IP networks (S-Series). ip nat inside source static local-ip global-ip [inside-vrf vrf-name]

or

ip nat inside source static {tcp | udp} local-ip local-port global-ip global-port inside-vrf vrf-name

7 Optionally, when a VRF provides LSNAT SLB services to one or more non-SLB configured VRFs, configure the virtual server or a range of virtual servers of the SLB configured VRF with the all-VRFs feature (S-Series). virtual ip-address {tcp | udp} port [service service-name] [all-vrfs]

virtual-range start-address end-address {tcp | udp} port [service service-name] [all-vrfs]

8 Optionally, in interface configuration mode, when forwarding local UDP broadcasts to a new destination address, on a different VRF, specify the destination VRF using the vrf parameter. In addition, in VRF configuration mode, specify that option 82 information be included in packets sent to the DHCP server by the client (S-, K-Series). ip helper-address destination-address [global] [vrf vrf-name]

ip dhcp relay information option vpn