[c-nsp] VRF Configs - Catalyst 3550

[sthaug at nethelp.no]

> Today I have been trying to setup a vrf session between 2 Catalyst 3550 Switches, what with no success!
> 
> 
> What's wrong?

I'm not quite sure what you're trying to do here, but I suspect the
3550 can't do it.

Multi-VRF CE (or VRF-Lite) on the 3550 will give you separate routing
tables, connected to interfaces/VLANs. No more, no less. It will not
exchange MPLS labeled traffic with anything else. You need to use
normal VLAN trunks to separate the traffic between the 3550 switches.

Note that you need to use the "sdm prefer" command to partition the
TCAM for extended match. See the description in

http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12120ea2/3550scg/swiprout.htm#wp1206101

Steinar Haug, Nethelp consulting, sthaug at nethelp.no


> 
> Thanks
> 
> Alexandra Alvarado
> 
> 
> PD: The config is like this:
> 
> 
> SWITCH A
> ----------------
> 
> !
> ip vrf aaaab
>  rd 100:1
>  route-target export 100:1
>  route-target import 100:1
> 
> !
> interface FastEthernet0/6
>  switchport access vlan 200
>  switchport mode access
>  switchport nonegotiate
>  switchport port-security
>  switchport port-security maximum 10
>  no cdp enable
>  spanning-tree bpduguard enable
>  spanning-tree guard root
> end
> 
> !
> interface Vlan200
>  ip address 172.16.1.5 255.255.255.252
> end
> 
> !
> interface FastEthernet0/23
>  no switchport
>  ip vrf forwarding aaaab
>  ip address 200.93.195.1 255.255.255.252
>  no cdp enable
> end
> 
> !
> ip route vrf aaaab 172.16.1.0 255.255.255.252 200.93.195.2
> 
> SWITCH B
> ----------------
> 
> !
> ip vrf aaaab
>  rd 100:1
>  route-target export 100:1
>  route-target import 100:1
> 
> !
> interface FastEthernet0/6
>  switchport access vlan 200
>  switchport mode access
>  switchport nonegotiate
>  switchport port-security
>  switchport port-security maximum 10
>  no cdp enable
>  spanning-tree bpduguard enable
>  spanning-tree guard root
> end
> 
> !
> interface Vlan200
>  ip address 172.16.1.2 255.255.255.252
> end
> 
> !
> interface FastEthernet0/23
>  no switchport
>  ip vrf forwarding aaaab
>  ip address 200.93.195.2 255.255.255.252
>  no cdp enable
> end
> 
> !
> ip route vrf aaaab 172.16.1.4 255.255.255.252 200.93.195.2
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>