VRF Lite

[patrick.hurley]

We have a customer that purchased our Metro Ethernet product and they think that because we are running MPLS in our backbone that their routers can participate in our VRF process, however they cannot. We basically hand a dot1q trunk to customers and provide hub and spoke VLANs. That is, 10Mbps connectiions at the spoke, with up to 8 VLANs and a 1 Gig connection at the hub with up to 64 subinterfaces for homing the spokes. Can VRF lite enhance VLAN connectivity in this case for a customer that is not participating in our MPLS process?

[romccallum]

let me get this correct. You currently have a customer in a Layer 2 vpn and they want to be in a layer 3 vpn but also have different sites in different vpns (hence the vrf lite question).

If all that the customer wants is L3vpn then shove IP addresses on the subinterfaces and place them in a vpn - job done. The same goes for Vrf-lite except each subinterface will more than likely be in seperate vpns and it is then up to the CE to route-leak what they want.

HtH

[patrick.hurley]

They aren't really in a Layer 2 VPN because the only thing that separates them at the hub is VLAN tags attached to subinterfaces which access lists could be applied against.

"Place them in a VPN" Is that using VRF Lite? Do you have a sample configuration for what you are talking about?