Configuring Vrf-Lite - Cisco Catalyst 4500 series Administration Manual

Configuring VRF-lite

Virtual Private Networks (VPNs) provide a secure way for customers to share bandwidth over an ISP
backbone network. A VPN is a collection of sites sharing a common routing table. A customer site is
connected to the service provider network by one or more interfaces, and the service provider associates
each interface with a VPN routing table. A VPN routing table is called a VPN routing/forwarding (VRF)
table.
With the VRF-lite feature, the Catalyst 4500 series switch supports multiple VPN routing/forwarding
instances in customer edge devices. (VRF-lite is also termed multi-VRF CE, or multi-VRF Customer
Edge Device). VRF-lite allows a service provider to support two or more VPNs with overlapping IP
addresses using one interface.
This document addresses both IPv4 and IPv6 VRF-lite.
Starting with Cisco IOS Release 12.2(52)SG, the Catalyst 4500 switch supports VRF-lite NSF support
Note
with routing protocols OSPF/EIGRP/BGP.
The switch does not use Multiprotocol Label Switching (MPLS) to support VPNs. For information about
Note
MPLS VRF, refer to the Cisco IOS Switching Services Configuration Guide at:
http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_ipv4_ipv6_ps6922_TSD_Pro
ducts_Configuration_Guide_Chapter.html
This chapter includes these topics:
• About VRF-lite, page 41-2
• VRF-lite Configuration Guidelines, page 41-3
• Configuring VRF-lite for IPv4, page 41-5
Configuring VRF-lite for IPv6, page 41-15
•
VPN Co-existence Between IPv4 and IPv6, page 41-28
•
Migrating from the Old to New CLI Scheme, page 41-28
•
For complete syntax and usage information for the switch commands used in this chapter, see the Cisco
Note
Catalyst 4500 Series Switch Command Reference and related publications at this location:
http://www.cisco.com/en/US/products/hw/switches/ps4324/index.html
OL_28731-01
C H A P T E R
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
41
41-1