5320 Series VRF Support

For the 5320 Series, only 5320-48P-8XE and 5320-48T-8XE support more than one VRF with IP configuration.

The 16- and 24-port 5320 Series models support a single active VRF with IP configuration; the VRF can be the Global Routing Table (GRT) or a non-default VRF:

• The GRT becomes the active VRF if you attach an IP interface to a VLAN. Otherwise, the first non-default VRF you create becomes the active VRF.

• If the GRT is the active VRF, you cannot create a second VRF.

• You cannot create more than one non-default VRF.

• You cannot configure IP interfaces in the GRT if the active VRF is a non-default VRF.

• To transition the active VRF from the GRT to a non-default VRF, remove all IP interfaces and then create the non-default VRF.

• To transition the active VRF from a non-default VRF to the GRT, first remove all router, ARP, and IP interfaces. Delete the VRF, and then add IP interfaces to the GRT.

Support for a single active VRF affects other features that rely on VRFs with IP configuration:

• ExtremeCloud SD-WAN—You must specify the VRF name that Auto-sense uses for the SD-WAN configuration on models that support a single active VRF. On these models, Auto-sense cannot create the dynamic SD-WAN VRF if an IP configuration already exists.
• Fabric Extend—on platforms that support multiple VRFs with IP configuration, you cannot configure the tunnel source address (ip-tunnel-source-address command) if the address belongs to a VRF with an attached I-SID, which presents an issue for single VRF platforms. On platforms with only one active VRF, you can use an overlay parameter to bypass this restriction.

• Fabric Extend—you must configure a route-map policy to suppress IS-IS redistribution of the FE tunnel subnet:

  • Configure route-maps to not permit redistribution of the local route used as the tunnel source address (ip-tunnel-source-address command).

  • Configure an accept policy to deny IS-IS routes that overlap with the destination tunnel IP address.

• IP Shortcuts and Layer 3 VSN—You cannot configure the IP source address (ip-source-address command) as an IP address in the GRT if the active VRF is a non-default VRF.