cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5234
Views
0
Helpful
3
Replies

svi vs vrf in LAN

what is the benefits using vrf in LAN instead of svi interfaces?   I see it was deployed this way in client LAN, reminds me mpls config with all route target and rd on the lan switches. I still can't get the reason why vrf but not vlan routing.... and how subnets from diff vrf will communicate, with route import ? 

 

Thank you 

 

3 Replies 3

a.alekseev
Level 7
Level 7
if you need networks isolation on L3 vrf is preferred.

mmanthe
Level 1
Level 1

Its really not a matter of either-or or 'instead of'. In grossly over-simplified terms, VRF is to Layer 3 (kind-of) what VLANs are to Layer 2. VRF is there to logically divide L3 topologies - to provide a means to create multiple, autonomous routing topologies. A given VRF instance in a given environment could technically consist of many different VLANs - each with their own associated SVIs - all a part of that VRFs L3 routing domain.

 

For example - you could build a data center where you host multiple customer environments. Each of those customers could be on their own VRF (actually in this design it would probably be VRF-lite) instance. Each of those customers VRF's could consist of dozens of VLANs that each use an SVI as its gateway for inter-VLAN routing - all converging back to the core router where the VFR is defined. The core router is where (for example) Internet or B-to-B (including inter-VRF in the case of VRF-lite) routing is provided.

 

In reality, VRF is much more complex than this and would require MUCH more writing on my part just to impart my limited scope on its nuance ;-) But I did want to iterate that VRFs and VLANs are *not* mutually exclusive at all. 

balaji.bandi
Hall of Fame
Hall of Fame

VLAN provides Layer 2 separation. A SVI is a Layer3 interface for a VLAN on a given switch.

 

 VRF provides Layer 3 separation. This is done by a creating separate table per VRF to the global tables.

 

If this is enterprise and you know the network and trusted device then VLAN(SVI) is good example.

 

If this is hosted and ISP / DC network, then VRF is preferred.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help