Hi,
Where am I using VRF-Lite? When I am designing a network, I preferred for two VRF-lite instances (If it is possible) One for the Guest and another for IT management. I don't want to share my global routing and resources with the guest network. It must be sperate from the main network due to security reasons. Same I am doing for the IT management network.
Other uses of the VRF-lite as if you want to use overlapping subnets, or wants a network must be sperate from the other.
I have seen routing redistribution and a route to a firewall but was wondering if anyone else uses a different way? Or what is the best way?
It completely depends on the requirements, As I am talking about the Guest network, I will extend the same VRF till to the firewall and will not allow communicating with my company network. In some cases, We configure route leaks between VRFs because we want to share some resources with each other means limited communication between VRFs. As your guest may ask for use of a printer and due to cost-saving you can't a sperate printer for guests. In this condition, it's needed for route leaks.
Really stuck on how would this VRF-lite network would be able to get to resources in the global routing table.
There is two different way 1. easy and not recommended (many times) as take a port in a VRF and take another port in Global VRF as connect both ports with each other (looping), those ports are commended as Layer 3 ports only.
Another way is by using the BGP routing Protocol as:
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200158-Configure-Route-Leaking-between-Global-a.html
Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
