Virtual Firewall Configuration

[bapatsubodh]

Hi,

Trying to configure Virtual firewall as per the document:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a00809492a4.shtml

Configured the vrf like this:

ip vrf acct

and  added to sub-interface

ip vrf forwarding acct

When this command is given it pops an  error:

"VRF acct not configured."  VRF acct is configured earlier.

Even after  IP inspection rule applied or  not applied same error pops up!!

Above mentioned documents states "Cisco IOS^® Software Release 12.3(14)T introduced Virtual (VRF-aware)  Firewall"  I am using

ROM: 3600 Software (C3640-JK9O3S-M), Version 12.3(14)T7, RELEASE SOFTWARE (fc2)

Is this error due to IOS image.

Please share the experience

Thanks

Subodh

[Giuseppe Larosa · Accepted solution]

Hello Subodh,

you need at least to configure the route distinguisher under VRF config

ip vrf acct

rd 100:101

!

to start the VRF effectively

the document is not correct in this part rd is mandatory cannot be omitted

Hope to help

Giuseppe

[bapatsubodh]

Hi,

Thanks Giuslar.

That Cisco document confused me a lots. I could configure overlaping private IP subnets and it's working.

Subodh