Step Description Command Keys
4 Enable and configure dynamic traffic
routing protocols (Static/OSPF/BGP/IS-
IS) in VRF instance (optional). See the
related sections: Static routes
configuration, OSPF configuration, and
BGP configuration.
5 In the configuration mode of physical/
logical interface, tunnel, DNAT/SNAT
rule, DAS server or SNMPv3 user,
specify the name of VRF instance for
which the mode will be used
(optionally).
esr(config-snat-ruleset)# ip vrf
forwarding <VRF>
<VRF> – VRF instance name,
set by the string of up to 31
characters.
6 Configure LT tunnel to transmit traffic
to global mode or to other VRFs (if
required).
See section LT tunnel
configuration
11.8.2 Configuration example
Objective:
ESR series router features 2 connected networks that should be isolated from other networks.
Solution:
Create VRF:
esr(config)# ip vrf bit
esr(config-vrf)# exit
Create a security zone:
esr(config)# security zone vrf-sec
esr(config-zone)# ip vrf forwarding bit
esr(config-zone)# exit
Create rule for a pair of zones and allow all TCP/UDP traffic: