CSR 1000V Multitenancy

[ThariqAli]

Hello,

I have attached a rough diagram of what we are trying to accomplish using the CSR 1000V. The basic concept if we have outside customers coming in and hitting the CSR, from there depending on what IP the person is coming from I would like to direct that specific traffic to another host (VM) and have access to nothing else. Would the best way to accomplish this be using ACLs on the CSR?

[balaji.bandi]

I suggest to have VRF high level here :

https://www.cisco.com/c/en/us/td/docs/routers/csr1000/software/configuration/b_CSR1000v_Configuration_Guide/b_CSR1000v_Configuration_Guide_chapter_011000.html

but i have some questions :

1. is the Customer1 have dedicated VM to access.

2. is the Customer2 have dedicated VM to access.

or customer 1 and Customer2 need to access any VM.

You also need NAT here

[ThariqAli]

1. is the Customer1 have dedicated VM to access.

A: Yes

2. is the Customer2 have dedicated VM to access.

A: Yes

[balaji.bandi]

then VRF is the best way to segmentation, in terms of security also.