Cisco Catalyst 4500 Series Configuration Manual page 847

Configuring VRF-lite
Virtual Private Networks (VPNs) provide a secure way for customers to share bandwidth over an ISP
backbone network. A VPN is a collection of sites sharing a common routing table. A customer site is
connected to the service provider network by one or more interfaces, and the service provider associates
each interface with a VPN routing table. A VPN routing table is called a VPN routing/forwarding (VRF)
table.
With the VRF-lite feature, the Catalyst 4500 series switch supports multiple VPN routing/forwarding
instances in customer edge devices. (VRF-lite is also termed multi-VRF CE, or multi-VRF Customer
Edge Device). VRF-lite allows a service provider to support two or more VPNs with overlapping IP
addresses using one interface.
Note Starting with Cisco IOS Release 12.2(52)SG, the Catalyst 4500 switch supports VRF lite NSF support
with routing protocols OSPF/EIGRP/BGP.
The switch does not use Multiprotocol Label Switching (MPLS) to support VPNs. For information about
Note
MPLS VRF, refer to the Cisco IOS Switching Services Configuration Guide at:
http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_vpn_ipv4_ipv6_ps6922_TSD_Pro
ducts_Configuration_Guide_Chapter.html
This chapter includes these topics:
• About VRF-lite, page 39-2
• Default VRF-lite Configuration, page 39-3
• VRF-lite Configuration Guidelines, page 39-4
• Configuring VRFs, page 39-5
Configuring VRF-Aware Services, page 39-5
•
Configuring Per-VRF for TACACS+ Servers, page 39-9
•
Configuring Multicast VRFs, page 39-11
•
Configuring a VPN Routing Session, page 39-12
•
Configuring BGP PE to CE Routing Sessions, page 39-12
•
VRF-lite Configuration Example, page 39-13
•
Displaying VRF-lite Status, page 39-17
•
OL-25340-01
C H A P T E R
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
39
39-1