cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

6509
Views
10
Helpful
3
Replies
Highlighted
Contributor

tunnel vrf and vrf forwarding commands

Hi All

Can anyone tell me what is the difference in the commands below on a tunnel interface?

 

tunnel vrf

vrf forwarding

 

Are these the commands how you would make whats called a front door vrf?

 

please explain how they work?

 

cheers

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

Re: tunnel vrf and vrf forwarding commands

Hi there,

On a tunnel interface you use the vrf forwarding command to place the tunnel interface in that particular routing table.

The tunnel vrf instructs the router to use the specified VRFs routing table for the tunnel source and destination IP addresses.

This can be used in secure environments where VRF A has outbound access and VRF B does not. By using the tunnel vrf command VRF B can use VRF A's routing table to establish a GRE tunnel, when strictly it has no route itself to the destination.

 

Not sure what a front door vrf is ??!

 

cheers,

Seb.

View solution in original post

3 REPLIES 3
Highlighted
VIP Advisor

Re: tunnel vrf and vrf forwarding commands

Hi there,

On a tunnel interface you use the vrf forwarding command to place the tunnel interface in that particular routing table.

The tunnel vrf instructs the router to use the specified VRFs routing table for the tunnel source and destination IP addresses.

This can be used in secure environments where VRF A has outbound access and VRF B does not. By using the tunnel vrf command VRF B can use VRF A's routing table to establish a GRE tunnel, when strictly it has no route itself to the destination.

 

Not sure what a front door vrf is ??!

 

cheers,

Seb.

View solution in original post

Highlighted
Cisco Employee

Re: tunnel vrf and vrf forwarding commands

The following blog post from Denise Fishburn covers the concept of front door VRF and how to implement it.

 

http://www.networkingwithfish.com/tunnels-and-the-use-of-front-door-vrfs/

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México
Highlighted
Beginner

Re: tunnel vrf and vrf forwarding commands

Thx Harold