VRF-lite with 3750-EMI

[aoshea]

Dear Support,

I've been asked to implement a solution based around VRF-Lite.

The solution is for a multi-tenant building where each client gets access to a firewall and internet access.

It has a switch or switches in each client office. These are then connected to two 3750-EMIs running VRF-Lite. The 3750-EMI are then connected to 2 cisco ASA 5520 (via a trunk port) running a separate Security context for each customer for internet access.

Is the VRF-Lite on the 3750 able to maintain complete separation between the client networks and are there any support documents for this type of design.

Thanks in advance for your assistance.

Best regards,

Adrian

[spilkinton]

Yes, this is possible...

This should help:

Network Virtualization Solutions

http://www.cisco.com/en/US/netsol/ns658/networking_solutions_package.html

Network Virtualization for the Campus

http://www.cisco.com/en/US/netsol/ns658/networking_solutions_white_paper0900aecd804a17c9.shtml

Scott

[aoshea]

Many thanks for the links.

Probably the question I need to ask is ;

is it possible for a have a single (or a stack of 3750-EMI (2 x 3750-EMIs connected via stackwise cable)) to provide complete separation for a customer aggregation point.

If these VRFs can be then be presented on dot1q egress port in separate VLANs that would then help a lot.

Obviously if this can be done great!

thanks again.

Regards, Adrian.

[lvanacker]

I am thinking about the same implementation, do you achieve to test this design yet ?

Does the ASA 5520 able to have possible overlapsed ip networks on separated vrf ?

thanks

Luc