[c-nsp] VRF forwarding limits on SVI?

[Alexandre Snarskii]

On Thu, Jul 19, 2007 at 11:02:46AM -0400, Jeff Kell wrote:
> 6500 Sup-II/MSFC2/PFC2 can't do SVI VRF forwarding?
> 
> > UTC-6509(config)#interface Vlan801
> > UTC-6509(config-if)# description No Man's LAN ring 1
> > UTC-6509(config-if)# ip vrf forwarding no-mans-lan
> > %This interface does not support ip vrf forwarding
> 
> Say it ain't so...?   IOS c6sup22-jk2s-mz.121-26.E5.

With sup2 you can only do vrf's on GE-WAN subinterfaces, and
even then it's a bit tricky. 

In a most common (if not only possible) scenario, you must create 
'hairpin' connection between lan-port (GigabitEthernetA/B) and wan-port 
(GE-WANc/D), put lan-port in 'switchport mode trunk' mode and allow vlan 801
on this trunk. On wan-port you create subinterface, 

interface GE-WANc/D.801
 encaps dot 801
 ip vrf forwarding no-mans-lan
 ip address .... 

and then it works. 

PS: not sure about 12.1(26)E5, but on 12.2(17d)SXB11 that trick works.