cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1535
Views
0
Helpful
0
Replies

VRF configuration on NEXUS 5K

tsocon
Level 1
Level 1

Hello,

I have two NEXUS 5548 switches connected to our two core 6506's which are running VSS.

NOTE: The 5K's are not running VSS

The NEXUS' are connected to SAN gear and NEXUS 2K's using FEX connectors on the back side and are using HSRP on each VLAN interface for redundancy.

Currently each VLAN is configured to be in the only OSPF instance running on the 5K switches.

On the core we are running 4 OSPF instances as we are implementing VRF's to separate traffic and implement tighter security.

I am new to the company and am unfamiliar with the NEXUS platform and have just been tasked to extend two of the new VRF's to the NEXUS 5K.

What I am finding is the nomenclature is different in the 5K versus the 6500's and I am trying to come up with a config to complete this.

The VRF's to be extended are:
ospf 1600 vrf Untrusted

ospf 3300 vrf Trusted

I am creating new vlan interfaces on each 5K and configuring HSRP.

Here is what I have for the 5K config and I am just wondering if this is close or not.

Only putting config from one switch here:

FIRST VRF

vrf context Trusted

int vlanXX
description Trusted-Route
vrf member Trusted
ip address 10.x.x.x 255.255.255.254
ip router ospf 3300 area 0
ip pim sparse-dense-mode

int vlanXX
description VirtualDesktop Trusted
vrf member Trusted
ip address 10.x.x.x/22
ip router ospf 3300 area 127
hsrp xx
preempt delay minimum 300
priority 90
ip 10.x.x.x
ip dhcp relay address x.x.x.x
ip dhcp relay address x.x.x.x

router ospf 3300
vrf Trusted

SECOND VRF

vrf context Untrusted

int vlanXX
description Untrusted-Route
vrf member Untrusted
ip address 10.x.x.x 255.255.255.254
ip router ospf 1600 area 0
ip pim sparse-dense-mode

int vlanXX
description VirtualDesktop Untrusted
vrf member Untrusted
ip address 10.x.x.x/22
ip router ospf 1600 area 127
hsrp XX
preempt delay minimum 300
priority 110
ip 10.x.x.x
ip dhcp relay address x.x.x.x
ip dhcp relay address x.x.x.x

router ospf 1600
vrf Untrusted

Thank you for taking the time to look at this.

Sean

0 Replies 0