VRFs and Vlans

[Luis Seyler]

Hi! I have a bit of a confusion here. I understand that vrfs are analog to vlans in means of separating traffic of layer 3 and layer 2, right?

If this is correct, would create a VRF in a ML Switch that will only have an access port to a host and another access port to a FW do anything that a vlan doesn't?

[Seb Rupik · Accepted solution]

Hi there,

Without a routed interface or a SVI, in the topology you describe you would not be able to associate a VRF with that traffic flow.

cheers,

Seb.

[Joseph W. Doherty]

"If this is correct, would create a VRF in a ML Switch that will only have an access port to a host and another access port to a FW do anything that a vlan doesn't?"

Depends on the overall configuration. If those ports resolve to different VRFs, by default, they will not be able to intercommunicate. Much like different VLANs cannot intercommunicate, unless you route between them. The big difference is, with VRF, there's no layer above it to allow VRFs to intercommunicate. (NB: BTW, there are ways to pass traffic/routes between VRFs, but it's a bit more involved than routing between VLANs.)