cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
601
Views
0
Helpful
4
Replies
Highlighted
Beginner

L3OUT with VRF unenforced

Hello,

is it correct that without enforcement L3OUT on same VRF do not need contracts ? 

May be that there are some difference between releases  ?

 

Thanks and regard 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

When the VRF is unenforced, every leaf with an interface in that VRF will install the pervasive routes for every bridge domain in the VRF.  External routes are downloaded to every leaf participating in the VRF as well (normal behavior).

View solution in original post

4 REPLIES 4
Highlighted
Beginner

Correct. Unenforced VRF is not using security zone table, so contracts are ignored. 

Highlighted

Thanks,

 

but what about the fact that to install BD route on border leaf it is necessary a contract ?

So also if unenforced the contact is necessary .... or not ?

Thanks and regards

Highlighted

not sure what is :

"but what about the fact that to install BD route on border leaf it is necessary a contract"

you do not contact to allow connections between EPGs on the same VRF, if VRF is unrestricted. 

you need contract to leak route via l3out or to another vrf. 

Highlighted

When the VRF is unenforced, every leaf with an interface in that VRF will install the pervasive routes for every bridge domain in the VRF.  External routes are downloaded to every leaf participating in the VRF as well (normal behavior).

View solution in original post

Content for Community-Ad