VRF in Multi Tenant Environment

[sameer-parvaiz]

Hi There,

I am confused regarding VRF communication between two devices to maintain multi tenant environment, for example we have edge router which is making VPN's with different customers and further it used VRF to isolate customers traffic from each other then on downstream we have 7K and 7K also have VRF configured for each customer but when router forward traffic to 7K for specific customer then how router will recognized the VRF on 7K for specific customer.

Thanks for the reply

Regards
Sameer

[Reza Sharifi]

Hi,

The customers VRF exist on both the router and the 7ks. If the 7k connect to the router via a routed link, than there is probably multiple sub-interfaces between them and each sub-interface belongs to a different customer (vrf) and that is how each customer is isolated from the others.

HTH

[sameer-parvaiz]

Thanks for reply, I want to understand how both devices will identified traffic for specific customer. Like Customer A VRF exist on Router and 7K and traffic is coming from router to 7K then how 7K will identified customer A traffic

[Reza Sharifi]

If the connection between the 7k and the router is layer-3, each device will have a sub-interface on the link that belong to different customers.  For example, if you have a one gig connection between the 2 devices, you create a sub-interface with IP for customer-A and you put that sub-interface on customer-A's VRF. Now for the second customer you create a second sub-interface on that link with IP and put that sub-interface in customer's-B VRF and so on...

HTH