I have a Cisco ISR 4331 licensed with the AdvUCSuite package (CME, Cube, uck9) that is functioning as a SIP gateway. Since this is in fact a gateway, is it possible (or recommended) to create two VRFs: VRF_EXT, VRF_INT, then place the external interface into VRF_EXT and the internal interface(s) into VRF_INT?
Would this affect the SIP functionality?
The reasoning is to further isolate the internal and external networks (beyond just an interface ACL) , and appease Infosec.
thanks!
