VRF reachability for device-initiated services

The following table lists the device-initiated services and associated commands that VRF reachability supports.
Table 1. Device-initiated services and associated commands that VRF reachability supports
Service VRF-related command Additional information
Firmware download

firmware download [ default-config ] ftp | scp | sftp [ use-vrf vrf-name ]...

Uses TCP IPv4 or IPv6.

By default, mgmt-vrf is used: use-vrf is optional.

LDAP

ldap-server host { ip-address | host_name } [ use-vrf vrf-name ] [ port portnum ] [ ldaps ] [ timeout seconds ][ retries num ][ basedn base domain name ]

Default vrf is mgmt-vrf. use-vrfis optional.
Logging server logging syslog-server { ipv4 | ipv6 address } [ use-vrf vrf-name ] Uses TCP UDP IPv4 or IPv6.
NTP

ntp server ip-address [ use-vrf vrf-name ]

Uses NTP UDP IPv4.
RADIUS radius-server host host-name [ use-vrf vrf-name ] Uses UDP IPv4 or IPv6
sFlow

[no] sflow collector ipv4/ipv6 address port-number [ use-vrf vrf-name ]

[no] sflow source-interface interface-type interface-number

Uses sFlow UDP IPv4 or IPv6.

In the case of the sflow source-interface command, the VRF of the specified interface is used.

Note: Any given interface can belong to only one VRF at any given time.
SSH Client ssh { IP_address | hostname } [ -l ] remote user/login name |[vrf vrf-name ] VRF is optional; default-vrf is used by default.
SNMP notification

snmp-server host ip-address [ use-vrf vrf-name ]

snmp-server v3host ip-address [ use-vrf vrf-name ]

Uses SNMP UDP IPv4 or IPv6.

By default, mgmt-vrf is used to send the SNMP notifications.

Support save copy support { ftp | scp } [ use-vrf vrf-name ] ...

Uses TCP IPv4 or IPv6.

By default, mgmt-vrf is used and a user-defined VRF is optional.

TACACS+ tacacs-server host host-name [ use-vrf vrf-name ] Uses TCP IPv4 or IPv6
Telnet client telnetIP_address | hostname [vrf vrf-name ] VRF is optional; default-vrf is used by default.

All these implementations use forward referencing of the VRF name in the use-vrf option, unless noted. At runtime when making the socket connection, the VRF ID by name must be resolved. If it does not resolve, it will result in a connection error.