Inter-VRF-Lite routing (4/7)


Direct any-to-any communication

– R1 separates Customers and common site traffic using different routing instances “vhost4”, “vhost5” and “vhost7”. (Picture1-3)

– All VRFs can communicate with each other.

R1 Configuration

Enough to add static routes from one Customer VRF to another customer VRF outbound interface and we obtain any-any- connectivity.

VRF “vhost4”

ip route vrf vhost4 40.0.0.0 255.255.255.0 155.1.0.4

ip route vrf vhost4 50.0.0.0 255.255.255.0 Serial1/0.105 155.1.0.5

ip route vrf vhost4 172.1.1.0 255.255.255.0 FastEthernet2/0 172.1.1.7

VRF “vhost5”

ip route vrf vhost5 40.0.0.0 255.255.255.0 Serial1/0.104 155.1.0.4

ip route vrf vhost5 50.0.0.0 255.255.255.0 155.1.0.5

ip route vrf vhost5 172.1.1.0 255.255.255.0 FastEthernet2/0 172.1.1.7

VRF “vhost7”

ip route vrf vhost7 40.0.0.0 255.255.255.0 Serial1/0.104 155.1.0.4

ip route vrf vhost7 50.0.0.0 255.255.255.0 Serial1/0.105 155.1.0.5

VERIFICATION

VRF “vhost4” Routing table:

R1(config)#do sh ip route vrf vhost4

Gateway of last resort is not set

50.0.0.0/24 is subnetted, 1 subnets

S 50.0.0.0 [1/0] via 155.1.0.5, Serial1/0.105

155.1.0.0/24 is subnetted, 1 subnets

C 155.1.0.0 is directly connected, Serial1/0.104

172.1.0.0/24 is subnetted, 1 subnets

S 172.1.1.0 [1/0] via 172.1.1.7, FastEthernet2/0

40.0.0.0/24 is subnetted, 1 subnets

S 40.0.0.0 [1/0] via 155.1.0.4

R1(config)#

VRF “vhost5” Routing table:

R1(config)#do sh ip route vrf vhost5

Gateway of last resort is not set

50.0.0.0/24 is subnetted, 1 subnets

S 50.0.0.0 [1/0] via 155.1.0.5

155.1.0.0/24 is subnetted, 1 subnets

C 155.1.0.0 is directly connected, Serial1/0.105

172.1.0.0/24 is subnetted, 1 subnets

S 172.1.1.0 [1/0] via 172.1.1.7, FastEthernet2/0

40.0.0.0/24 is subnetted, 1 subnets

S 40.0.0.0 [1/0] via 155.1.0.4, Serial1/0.104

R1(config)#

As illustrated by picture1-4, Customers can communicate ONLY with the common site.

Picture 1-4: direct any-to-any communication


CustomerB to CustomerA

vhost#trace vrf vhost4 50.0.0.5

Type escape sequence to abort.

Tracing the route to 50.0.0.5

1 40.0.0.4 88 msec 64 msec 4 msec

2 155.1.0.14 52 msec 24 msec 12 msec

3 155.1.0.5 56 msec * 120 msec

vhost#

CustomerA to CustomerB

vhost#trace vrf vhost5 40.0.0.4

Type escape sequence to abort.

Tracing the route to 40.0.0.4

1 50.0.0.5 56 msec 40 msec 8 msec

2 155.1.0.15 48 msec 16 msec 16 msec

3 155.1.0.4 84 msec * 120 msec

vhost#

Back to main article

Advertisements

About ajnouri
Se vi deziras sekure komuniki eksterbloge, jen mia publika (GPG) ŝlosilo: My public key for secure communication: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x41CCDE1511DF0EB8

One Response to Inter-VRF-Lite routing (4/7)

  1. Pingback: Inter-VRF-Lite routing « CCIE, the beginning!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: