Version 6.8 87 Mediant MSBR
Configuration Guide 14. Virtual Routing and Forwarding (VRF)
14.1.3 Example of Segment Isolation using VRF
This example includes two hosts, each connected to a separate VLAN. On the MSBR,
Layer-3 interface VLANS for the two VLANS are configured where each interface VLAN is
associated to a different VRF.
Without a VRF configuration, there would be routing between the two Layer-3 interfaces
where if Workstation 1 tries to reach Workstation 2 (with ICMP Ping, for example) it would
get an answer.
In the example, Layer-3 VLAN interfaces are associated with different VRFs and belong to
different routing tables. The MSBR isolates them from one another, and if ICMP
reachability is checked, an Unreachable message is received.
Figure 14-1: Segment Isolation using VRF
14.1.3.1 Configuration
MSBR# configure data
MSBR(conf-data)# ip vrf blue
MSBR(conf-data)# ip vrf red
MSBR(conf-data)# interface VLAN 1
MSBR(conf-if-VLAN 1)# ip address 192.169.0.1 255.255.255.0
MSBR(conf-if-VLAN 1)# desc "VLAN 1 – Lan segment 1"
MSBR(conf-if-VLAN 1)# ip vrf forwarding blue
MSBR(conf-if-VLAN 1)# exit
MSBR(conf-data)# interface VLAN 2
MSBR(conf-if-VLAN 2)# ip address 192.169.1.1 255.255.255.0
MSBR(conf-if-VLAN 2)# desc "VLAN 2 – Lan segment 2"
MSBR(conf-if-VLAN 2)# ip vrf forwarding red
MSBR(conf-data)# interface gi 0/0.1
MSBR(conf-if-VLAN 2)# desc "vlan 1 - WAN"
MSBR(conf-if-VLAN 2)# ip vrf forwarding blue
MSBR(conf-data)# interface gi 0/0.2
MSBR(conf-if-VLAN 2)# desc "vlan 2 – WAN"
MSBR(conf-if-VLAN 2)# ip vrf forwarding red
To Next Page
Loading...
