[c-nsp] Multiple VRF Question

Bruce Pinsky bep at whack.org
Wed Jan 3 13:44:20 EST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shakeel Ahmad wrote:
> In a lab scenario we have following design (Hub-Spoke VPN)
> 
>     CE(HUB)----PE---P----P----PE-----CE(SPOKE1)
>                                            |-------CE(SPOKE2)
> 
> 
> Both Spoke sites are connected to a same interface on PE(Spoke) router. Now
> requirement is to create 2 VPN's - actually 2 different VPNs between 1 HUB &
> 2 Spoke.
> 
> 1-1 VPN is working perfectly fine , as per my study we can only associate
> single VRF to a physical interface - can someone give any idea how will i
> assign RD to spoke2 packets...(if it was a seperate interface , it was easy
> just another VRF on a seperate interface)
> 

What is the physical media that connects the PE to the spoke CEs?  If it is
ethernet, then create separate .1Q subinterfaces and assign them to
different VRFs.  If it is some type of serial interface, you would need to
frame relay encap to create separate subinterfaces for each PVC and assign
to different VRFs.

If you cannot physically or logically segregate the customers, then you
will need to use Source-Based VRF Select.  See:

http://www.cisco.com/en/US/products/ps6604/products_white_paper09186a00804fbfac.shtml

- --
=========
bep

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFm/mDE1XcgMgrtyYRAiz0AJ9584jf/8kbMZVv2DITDFhrCd8gZACfajl+
AiezspkdmuXJ1duaJb+HeGw=
=0ofi
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list