43-7
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
 
Chapter 43      Configuring VRF-lite
Configuring VRF-lite for IPv4
The following example lists all the steps to configure per-VRF TACACS+:
Switch> enable
Switch# configure terminal
Switch (config)# ip vrf cisco
Switch (config-vrf)# rd 100:1
Switch (config-vrf)# exit
Switch (config)# interface Loopback0
Switch (config-if)# ip vrf forwarding cisco
Switch (config-if)# ip address 10.0.0.2 255.0.0.0
Switch (config-if)# exit
Switch (config-sg-tacacs+)# ip vrf forwarding cisco
Switch (config-sg-tacacs+)# ip tacacs source-interface Loopback0
Switch (config-sg-tacacs)# exit
For more information about configuring per-VRF for TACACS+ server, 
http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_vrf_tacas_svrs.pdf
Configuring Multicast VRFs
To configure multicast within a VRF table, perform this task:
Step 12
Switch (config-sg-tacacs+)# ip vrf forwarding 
vrf-name
Configures the VRF reference of a AAA TACACS+ server 
group.
Step 13
Switch (config-sg-tacacs+)# ip tacacs 
source-interface subinterface-name
Uses the IP address of a specified interface for all outgoing 
TACACS+ packets.
Step 14
Switch (config-sg-tacacs)# exit
Exits server-group configuration mode.
Command or Action Purpose
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# ip routing
Enables IP routing.
Step 3
Switch(config)# ip vrf vrf-name
Names the VRF and enters VRF configuration mode.
Step 4
Switch(config-vrf)# ip 
multicast-routing vrf vrf-name
(Optional) Enables global multicast routing for VRF table.
Step 5
Switch(config-vrf)# rd 
route-distinguisher
Creates a VRF table by specifying a route distinguisher. 
Enter either an AS number and an arbitrary number 
(xxx:y) or an IP address and arbitrary number 
(A.B.C.D:y).
Step 6
Switch(config-vrf)# route-target 
{export | import | both} 
route-target-ext-community
Creates a list of import, export, or import and export route 
target communities for the specified VRF. Enter either an 
AS system number and an arbitrary number (xxx:y) or an 
IP address and an arbitrary number (A.B.C.D:y).
The route-target-ext-community value should be the same 
as the route-distinguisher value entered in Step 4.
Step 7
Switch(config-vrf)# import map 
route-map
(Optional) Associates a route map with the VRF.