Native Catalyst 6500 with SUP 720.

[andrea.meconi]

I'm looking for info about private vlan and vrf on 6500. Can these work together? May I put a private L3 interface into a VRF?

Thanks.

Regards.

Andrea.

[Reza Sharifi]

Hi Andrea,

I don't see why not.  Both VRF and private vlans are supported on Sup-720

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet09186a0080159856_ps4835_Products_Data_Sheet.html

HTH

Reza

[andrea.meconi]

Hello and many thanks for help.

I remembered that not all Catalyst support private VLAN on a VRF-Lite.

Regards.

Andrea

[Giuseppe Larosa]

Hello Andrea,

VRF is an OSI layer 3 concept and private Vlans are an OSI layer2 concept so I don't see why they couldn't be combined if desired.

But of course implementation choices may lead to a different result.

the only requirement is that you cannot configure SVI for secondary vlans

From a practical point of view you should be able to implement multiple VRFs instead of one VRF + private vlans with no problems of scalability.

Also DAI, DHCP snooping may be an alternative to private vlans.

see

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/pvlans.html

Hope to help

Giuseppe

[andrea.meconi]

Hello Giuseppe.

I need to combine VRF-Lite, private VLAN and VACL for a backup solution using the Catalyst 6500 at core.

With VRF I can create an intervlan (private primary vlans) routing istance, separed from GRT. With Private VLAN e VACL I can apply security also.

What do you think about?

Regards.

Andrea