cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2672
Views
5
Helpful
2
Replies

VRFs and Vlans

Luis Seyler
Level 1
Level 1

Hi! I have a bit of a confusion here. I understand that vrfs are analog to vlans in means of separating traffic of layer 3 and layer 2, right?

If this is correct, would create a VRF in a ML Switch that will only have an access port to a host and another access port to a FW do anything that a vlan doesn't?

1 Accepted Solution

Accepted Solutions

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Without a routed interface or a SVI, in the topology you describe you would not be able to associate a VRF with that traffic flow.

 

cheers,

Seb.

View solution in original post

2 Replies 2

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Without a routed interface or a SVI, in the topology you describe you would not be able to associate a VRF with that traffic flow.

 

cheers,

Seb.

Joseph W. Doherty
Hall of Fame
Hall of Fame
"If this is correct, would create a VRF in a ML Switch that will only have an access port to a host and another access port to a FW do anything that a vlan doesn't?"

Depends on the overall configuration. If those ports resolve to different VRFs, by default, they will not be able to intercommunicate. Much like different VLANs cannot intercommunicate, unless you route between them. The big difference is, with VRF, there's no layer above it to allow VRFs to intercommunicate. (NB: BTW, there are ways to pass traffic/routes between VRFs, but it's a bit more involved than routing between VLANs.)