Sofware-Defined Networking

Reply
Occasional Contributor
Posts: 10
Registered: ‎10-12-2017
Accepted Solution

VRF config with vif interfaces on the same physical interface

Hi guys,

 

I need to separarte customer and management traffic on the Vyatta firewall. With the version 5600 there is the VRF support. I found yet only configuration to put a physical interface in a VRF.

Is it possible to put only a vif interface in a VRF?

If ye, how can it realized and is that already tested?

 

Best regards

 

Roger

Brocade Moderator
Posts: 79
Registered: ‎06-10-2009

Re: VRF config with vif interfaces on the same physical interface

Hello Roger,

 

I am not sure how far you got with your configuration but you can certainly put a vif into a vrf (or routing-instance in Vyatta terminology)

When setting the interface name in the routing-instance use physical.vif as the naming convention.

eg

 

set interfaces dataplane dp0p224p1 vif 1 address '1.0.0.1/24'

set interfaces dataplane dp0p224p1 vif 1 vlan '1001'

 

set routing routing-instance vrf1 instance-type 'vrf'
set routing routing-instance vrf1 interface 'dp0p224p1.1'


And confirmation that it has accepted the configuration and interface naming

 

vyatta@vrouter3:~$ show int rou vrf1
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
dp0p224p1.1      1.0.0.1/24                        u/u 

 

Regards

Steve

Occasional Contributor
Posts: 10
Registered: ‎10-12-2017

Re: VRF config with vif interfaces on the same physical interface

Hi Steve,

 

many thanks for the example which works fine.

Is that also possible with a VRRP address between two devices?

If I add the vrrp command the virtual adress is in the normal routing table and not in the VRF table.

Can you help meh?

 

Best regards

 

Roger

Brocade Moderator
Posts: 79
Registered: ‎06-10-2009

Re: VRF config with vif interfaces on the same physical interface

Hello Roger,

 

It works for me.  Remember to add the vrrp configuration after you have specified the vif under the dataplane interface

 

eg

set interfaces dataplane dp0p224p1 vif 1 vrrp vrrp-group 1 virtual-address '1.0.0.254'

 

and my route table looks like

 

vyatta@vrouter3:~$ sh ip rout routing vrf1

IP Route Table for Routing-instance "vrf1"
C    *> 1.0.0.0/24 is directly connected, dp0p224p1.1
C    *> 1.0.0.254/32 is directly connected, dp0p224p1.1
vyatta@vrouter3:~$

 

Steve

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.

vADC is now Pulse Secure
Download FREE NVMe eBook