Filter
Top Products
Configuring a complex inter-VRF solution
Page 56 | Configure VRF-lite
Static routes are configured. Each VRF instance is also configured with its own static default
route (via VRF shared) to allow each of them to access the internet. Default routes are not
able to be leaked dynamically via BGP between VRF instances as the BGP default-originate
command only applies when peering to an external BGP neighbor.
The command ip route <source-vrf-name> < dest-network> < next-hop-ip> <egress-
vlan>
is used. For example the command ip route vrf red 0.0.0.0/0 192.168.100.254 vlan5
denotes a static default route to the Internet which has a next-hop IP of 192.168.100.254
(192.168.100.254 is the IP address of the Internet router), which originates from VRF red,
which egresses vlan5 in VRF shared.
The routes configured on VRF shared do not need to specify the egress VLAN, as they are
not inter-VRF routes. So, the command ip route vrf shared 192.168.45.0/24 192.168.100.2
CONFIGURE DYNAMIC ROUTING
awplus(config)#router bgp 100
awplus(config-router)#address-family ipv4 vrf red
awplus(config-router-af)#redistribute connected
awplus(config-router-af)#redistribute ospf
awplus(config-router-af)#exit-address-family
awplus(config-router)#address-family ipv4 vrf green
awplus(config-router-af)#redistribute connected
awplus(config-router-af)#neighbor 192.168.20.2 remote-as 100
awplus(config-router-af)#neighbor 192.168.20.2 next-hop-self
awplus(config-router-af)#neighbor 192.168.20.2 activate
awplus(config-router-af)#neighbor 192.168.20.2 default-originate
awplus(config-router-af)#exit-address-family
awplus(config-router)#address-family ipv4 vrf blue
awplus(config-router-af)#redistribute connected
awplus(config-router-af)#redistribute rip
awplus(config-router-af)#exit-address-family
awplus(config-router)#address-family ipv4 vrf orange
awplus(config-router-af)#redistribute connected
awplus(config-router-af)#redistribute static
awplus(config-router-af)#redistribute ospf
awplus(config-router-af)#exit-address-family
awplus(config-router)#address-family ipv4 vrf shared
awplus(config-router-af)#redistribute connected
awplus(config-router-af)#redistribute static
awplus(config-router-af)#neighbor 192.168.100.254 remote-as 200
awplus(config-router-af)#neighbor 192.168.100.254 activate
awplus(config-router-af)#exit-address-family
awplus(config-router)#exit