VRF-lite
If you have 1 switch and the following config.
ip vrf VPN_ISP
rd 100:100
route-target both 100:100
ip vrf VPN_clientA
rd 100:101
route-target both 100:101
ip vrf VPN_clientB
rd 100:102
route-target both 100:102
int vlan 100
ip vrf forwarding VPN_ISP
ip address 10.10.100.1 255.255.255.0
int vlan 101
ip vrf forwarding VPN_clientA
ip address 10.10.101.1 255.255.255.0
int vlan 102
ip vrf forwarding VPN_clientB
ip address 10.10.102.1 255.255.255.0
int g1/1
desc "TO ISP"
ip vrf VPN_ISP
switchport access vlan 100
int g1/2
desc "TO ClientA"
ip vrf VPN_clientA
switchport access vlan 101
int g1/3
desc "TO ClientB"
ip vrf VPN_clientB
switchport access vlan 102
Is there anyway that I can leak the ISP Vlan 100 route to VLAN 101 & 102 without Vlan 101 & 102 connecting to eachother? I treid exporting the route-targets but isnt that only for communities?
Comments
Nevermind, I just relaized I would need to run BGP locally and redistribute the routes.
yes as you say , cabling in loop the ports of the same switch that are in two different vrfs would leak the routes between them..
otherwise with route targets etc , it' s not vrf lite anymore :-)