Allied Telesis C613-16164-00 REV E manual Example C

Inter-VRF configuration examples with Internet access

Example C

Intranet

remote1

Intranet

1

route

remote2

Internet

VRF

1

static

Router

0

1

1

Private to

_

1

VRF2

route

2

11re

a

public NAT

VRFote

1

m

re

1 b

3

mote

VLAN

0

Intranet

1

re

1 c

2 2

mote

2

route

re

VLAN

248re

1 d

mote

fault

re

VLAN

re

mVRFote

de

1

mote

2 b

VLAN

mote

re

m

ote

re

ote

VLAN

3

_

VLAN

90

mVLAN

101

_

a

VRF

e

VRF4

VLANshared3

200

route

shared3

_100

4

RIP

VLAN

LANshared3

_

a

f

shared3

102

b

f

fice4VRF

o

fice4

_

c

VLAN_

a

COMMUNICATION PLAN

VRF3 has communication with VRF1

VRF3 has communication with VRF2

No communication between:

VRF1 and VRF2

VRF1 and VRF4

VRF2 and VRF4

VRF3 and VRF4

Intranet remote1 and Intranet remote2 have IP address plan overlapping (vlan 10 and vlan20 respectively). There is no inter-VRF communication from VRF3 to overlapping networks associated with vlan10 and vlan20.

Inter-VRF communication is limited to connected interface routes only.

Inter-VRF communications (VLAN to VLAN) are handled by dynamic inter-VRF routing.

VRF1 and VRF2 can both access the Internet via shared VRF3 vlan100, however additional HW ACLs are now required to prevent data from VRF1 being routed via Internet access router back to VRF2 and vice-versa.

Page 40 Configure VRF-lite