[c-nsp] general question on VRFs and FIBs...

Robert Raszuk robert at raszuk.net
Tue Sep 27 10:25:22 EDT 2011


Hi Keegan,

> over another.  However, if the vrf's all have separate tables in the real
> world then that should require the table lookup to come before the prefix
> lookup.  If not there would be no way to figure out which fib to search.

For packets coming from customer (CE) there is no need for any 
additional lookup as switching vectors of the interfaces 
(logical/physical) are already locked to a given VRF.

/* One exception of the above is Policy Based VRF selection where you 
are choosing VRF dynamically based on preconfigured policy or even 
remote radius lookup. in this configuration interfaces are not bounded 
to any VRF. */

For packets coming from the core to a PE the VPN label directly points 
to the right VRF (per vrf label/aggregate label case). For per CE or per 
prefix labels no IP lookup is necessary in the VRFs at all for packets 
going to the CE.

Thx,
R.


More information about the cisco-nsp mailing list