Cisco Catalyst 4500 Series - Configuring VRF-Aware Services

41-6
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 41 Configuring VRF-lite
Configuring VRF-lite for IPv4
Configuring VRF-Aware Services
IP services can be configured on global interfaces and within the global routing instance. IP services are
enhanced to run on multiple routing instances; they are VRF-aware. Any configured VRF in the system
can be specified for a VRF-aware service.
VRF-aware services are implemented in platform-independent modules. VRF provides multiple routing
instances in Cisco IOS. Each platform has its own limit on the number of VRFs it supports.
VRF-aware services have the following characteristics:
• The user can ping a host in a user-specified VRF.
• ARP entries are learned in separate VRFs. The user can display Address Resolution Protocol (ARP)
entries for specific VRFs.
Configuring the User Interface for ARP
To configure VRF-aware services for ARP, perform this task:
Configuring Per-VRF for TACACS+ Servers
The per-VRF for TACACS+ servers feature enables you to configure per-virtual route forwarding
(per-VRF) authentication, authorization, and accounting (AAA) on TACACS+ servers.
Before configuring per-VRF on a TACACS+ server, you must have configured AAA and a server group.
You can create the VRF routing table (shown in Steps 3 and 4) and configure the interface (Steps 6, 7,
and 8). The actual configuration of per-VRF on a TACACS+ server is done in Steps 10 through 13.
.
Command Purpose
Switch# show ip arp vrf vrf-name
Displays the ARP table (static and dynamic entries) in the specified
VRF.
Switch(config)# arp vrf vrf-name
ip-address mac-address ARPA
Creates a static ARP entry in the specified VRF.
Command or Action Purpose
Step 1
Switch> enable
Enables privileged EXEC mode.
Enter your password if prompted.
Step 2
Switch# configure terminal
Enters global configuration mode.
Step 3
Switch(config)# ip vrf vrf-name
Configures a VRF table and enters VRF configuration mode.
Step 4
Switch (config-vrf)# rd route-distinguisher
Creates routing and forwarding tables for a VRF instance.
Step 5
Switch (config-vrf)# exit
Exits VRF configuration mode.
Step 6
Switch (config)# interface interface-name
Configures an interface and enters interface configuration
mode.
Step 7
Switch (config-if)# ip vrf forwarding vrf-name
Configures a VRF for the interface.
Step 8
Switch (config-if)# ip address ip-address mask
[secondary]
Sets a primary or secondary IP address for an interface.
Step 9
Switch (config-if)# exit
Exits interface configuration mode.