VRF-lite is VRF without the need to run MPLS in the network. VRF-lite is used for isolating customer networks – it allows multiple secure customer routing domains to co-exist in one physical device simultaneously, which remain completely isolated from each other.
This guide outlines key features and generic commands for configuring VRF-lite on AlliedWare Plus switches and AR-Series firewalls.
It includes several simple configuration examples that demonstrate its use with OSPF, RIP, and BGP routing protocols. The guide also covers a complex inter-VRF scenario involving overlapping IP addresses and multiple routing protocols, providing a breakdown of the configuration. Additionally, it explains dynamic inter-VRF communication between the global VRF domain and a VRF instance, along with diagnostic information for troubleshooting VRF-related issues.
Furthermore, the guide explores scenarios for implementing VRF-lite with firewall protection, over Virtual Tunnel Interfaces, using multiple VRF instances with IPsec VPN and Ethernet pseudowires, and connecting central and remote sites.
