Filter
Top Products
Configure VRF-lite | Page 41
Inter-VRF configuration examples with Internet access
Configuration
!
access-list standard deny_overlap deny 10.0.0.0/8
access-list standard deny_overlap permit any
!
ip vrf remote1 1
rd 100:1
route-target export 100:1
route-target import 100:3
export map block10
!
ip vrf remote2 2
rd 100:2
route-target export 100:2
route-target import 100:3
export map block10
!
ip vrf shared3 3
rd 100:3
route-target import 100:1
route-target import 100:2
route-target export 100:3
!
ip vrf office4 4
!
access-list hardware deny_to_vrf1
deny ip any 11.0.0.0/8
deny ip any 12.0.0.0/8
deny ip any 13.0.0.0/8
deny ip any 14.0.0.0/8
access-list hardware deny_to_vrf2
deny ip any 20.0.0.0/8
!
vlan database
vlan 10 name remote1_a
vlan 11 name remote1_b
vlan 12 name remote1_c
vlan 13 name remote1_d
vlan 20 name remote2_a
vlan 90 name remote1_e
vlan 100 name shared3_a
vlan 101 name shared3_b
vlan 102 name shared3_c
vlan 200 name office4_a
vlan 248 name remote2_b
vlan 10-13,20,90,100-102,200,248 state enable
!
interface port1.0.1
switchport
switchport mode trunk
switchport trunk allowed vlan add 10-13,90
access-group deny_to_vrf2
!
interface port1.0.2
switchport
switchport mode trunk
switchport trunk allowed vlan add 20,248
access-group deny_to_vrf1
!
interface port1.0.3
switchport
switchport mode trunk
switchport trunk allowed vlan add 100-102