VRF Remote Management Access

[PvCr]

Hi everybody,

Does anyone know if it's possible to create VRFs (one per customer) and get access (SSH, TELNET) to the specific VRF assigned to the particular customer??? Like assign for each customer a particular virtual router without getting access to the entire global config or other VRFs??

For example:

Customer A has his own ssh/telnet access to the VRF A (get admin access to configure routes, interfaces, etc)

Customer B has his own VRF B and so on...

I want to partition my entire router to many VRF but each customer has his own admin and management access to the portion assign to it...

[Francesco Molino]

Hi

Are you using ios or ios-xr?
I believe it's ios otherwise you would have specified it.

You can create role based cli acccess by creating views and push these views to users depending on which vrf they're assigned to. Or you can create profiles on your tacacs server (if you have any) to filter each command a user can use (1 profile per vrf that you must define once) and then apply it based on user authentication.

I don't see any other way right now but i can think about it.