What is the difference between a VRF and VRF-Lite?
Clash Royale CLAN TAG#URR8PPP
up vote
4
down vote
favorite
To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables separated within a router.
Knowing that what is the meaning of VRF-Lite and how vendors refer to this concept?
vrf vrf-lite
add a comment |Â
up vote
4
down vote
favorite
To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables separated within a router.
Knowing that what is the meaning of VRF-Lite and how vendors refer to this concept?
vrf vrf-lite
2
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
1
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47
add a comment |Â
up vote
4
down vote
favorite
up vote
4
down vote
favorite
To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables separated within a router.
Knowing that what is the meaning of VRF-Lite and how vendors refer to this concept?
vrf vrf-lite
To the best of my knowledge, the concept of VRF is something that exists only in the Cisco World. Other vendors refer to this concept as VPN, which is in other words, a way to keep routing tables separated within a router.
Knowing that what is the meaning of VRF-Lite and how vendors refer to this concept?
vrf vrf-lite
edited Sep 5 at 12:07


Cown
4,4383830
4,4383830
asked Sep 5 at 11:59
user
905
905
2
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
1
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47
add a comment |Â
2
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
1
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47
2
2
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
1
1
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47
add a comment |Â
2 Answers
2
active
oldest
votes
up vote
3
down vote
VRF lite is used to separate router interfaces within the routing tables. It can be used when multiple customers share a router. Full blown VRF has the full MP-BGP across the MPLS and can be shared across multiple sites/locations.
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
add a comment |Â
up vote
1
down vote
VRF (virtual routing and forwarding) is a core technology of MPLS which allows a service provider to provide BGP routing to many customer VPNs while isolating each customer's routing tables.
VRF lite provides the same isolation in an enterprise LAN.
Imagine you have a corporate LAN with a number of VLANs and a default gateway to the corporate WAN.
If you want to add a guest VLAN with a default gateway to the internet, you can simply exclude it from the corporate LAN by not providing a switched virtual interface (interface Vlan on Cisco) on the guest VLAN.
Now suppose you need a second guest VLAN and you need to route between the two guest VLANs and the Internet without opening a hole to the corporate LAN.
This is a use case for VRF lite. On each layer 3 switch or router, you create a VRF for the corporate LAN and a VRF for the guest LAN. You map the VLANs to the appropriate VRFs. There are now two separate routing tables and no traffic can pass between them (unless you specifically configure that).
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
3
down vote
VRF lite is used to separate router interfaces within the routing tables. It can be used when multiple customers share a router. Full blown VRF has the full MP-BGP across the MPLS and can be shared across multiple sites/locations.
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
add a comment |Â
up vote
3
down vote
VRF lite is used to separate router interfaces within the routing tables. It can be used when multiple customers share a router. Full blown VRF has the full MP-BGP across the MPLS and can be shared across multiple sites/locations.
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
add a comment |Â
up vote
3
down vote
up vote
3
down vote
VRF lite is used to separate router interfaces within the routing tables. It can be used when multiple customers share a router. Full blown VRF has the full MP-BGP across the MPLS and can be shared across multiple sites/locations.
VRF lite is used to separate router interfaces within the routing tables. It can be used when multiple customers share a router. Full blown VRF has the full MP-BGP across the MPLS and can be shared across multiple sites/locations.
answered Sep 5 at 12:05


Cown
4,4383830
4,4383830
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
add a comment |Â
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
So If I understood correctly, the VRF lite is a concept referred locally on a single router, whereas the VRF is the extension of the same concept when shared across multiple sites/locations. Why did you mention MPLS?
– user
Sep 5 at 15:20
add a comment |Â
up vote
1
down vote
VRF (virtual routing and forwarding) is a core technology of MPLS which allows a service provider to provide BGP routing to many customer VPNs while isolating each customer's routing tables.
VRF lite provides the same isolation in an enterprise LAN.
Imagine you have a corporate LAN with a number of VLANs and a default gateway to the corporate WAN.
If you want to add a guest VLAN with a default gateway to the internet, you can simply exclude it from the corporate LAN by not providing a switched virtual interface (interface Vlan on Cisco) on the guest VLAN.
Now suppose you need a second guest VLAN and you need to route between the two guest VLANs and the Internet without opening a hole to the corporate LAN.
This is a use case for VRF lite. On each layer 3 switch or router, you create a VRF for the corporate LAN and a VRF for the guest LAN. You map the VLANs to the appropriate VRFs. There are now two separate routing tables and no traffic can pass between them (unless you specifically configure that).
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
1
down vote
VRF (virtual routing and forwarding) is a core technology of MPLS which allows a service provider to provide BGP routing to many customer VPNs while isolating each customer's routing tables.
VRF lite provides the same isolation in an enterprise LAN.
Imagine you have a corporate LAN with a number of VLANs and a default gateway to the corporate WAN.
If you want to add a guest VLAN with a default gateway to the internet, you can simply exclude it from the corporate LAN by not providing a switched virtual interface (interface Vlan on Cisco) on the guest VLAN.
Now suppose you need a second guest VLAN and you need to route between the two guest VLANs and the Internet without opening a hole to the corporate LAN.
This is a use case for VRF lite. On each layer 3 switch or router, you create a VRF for the corporate LAN and a VRF for the guest LAN. You map the VLANs to the appropriate VRFs. There are now two separate routing tables and no traffic can pass between them (unless you specifically configure that).
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
1
down vote
up vote
1
down vote
VRF (virtual routing and forwarding) is a core technology of MPLS which allows a service provider to provide BGP routing to many customer VPNs while isolating each customer's routing tables.
VRF lite provides the same isolation in an enterprise LAN.
Imagine you have a corporate LAN with a number of VLANs and a default gateway to the corporate WAN.
If you want to add a guest VLAN with a default gateway to the internet, you can simply exclude it from the corporate LAN by not providing a switched virtual interface (interface Vlan on Cisco) on the guest VLAN.
Now suppose you need a second guest VLAN and you need to route between the two guest VLANs and the Internet without opening a hole to the corporate LAN.
This is a use case for VRF lite. On each layer 3 switch or router, you create a VRF for the corporate LAN and a VRF for the guest LAN. You map the VLANs to the appropriate VRFs. There are now two separate routing tables and no traffic can pass between them (unless you specifically configure that).
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
VRF (virtual routing and forwarding) is a core technology of MPLS which allows a service provider to provide BGP routing to many customer VPNs while isolating each customer's routing tables.
VRF lite provides the same isolation in an enterprise LAN.
Imagine you have a corporate LAN with a number of VLANs and a default gateway to the corporate WAN.
If you want to add a guest VLAN with a default gateway to the internet, you can simply exclude it from the corporate LAN by not providing a switched virtual interface (interface Vlan on Cisco) on the guest VLAN.
Now suppose you need a second guest VLAN and you need to route between the two guest VLANs and the Internet without opening a hole to the corporate LAN.
This is a use case for VRF lite. On each layer 3 switch or router, you create a VRF for the corporate LAN and a VRF for the guest LAN. You map the VLANs to the appropriate VRFs. There are now two separate routing tables and no traffic can pass between them (unless you specifically configure that).
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Sep 5 at 15:59
grahamj42
1112
1112
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
grahamj42 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f53027%2fwhat-is-the-difference-between-a-vrf-and-vrf-lite%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
2
A VPN has nothing to do with a VRF.
– Ron Maupin♦
Sep 5 at 12:04
Ok, but how is VRF concept identified outside cisco?
– user
Sep 5 at 12:41
1
As a VRF. The term is not specific to Cisco. A full-blown VRF implementation can use VPNs to transport routing updates, but VPNs are not dependent on VRFs.
– Ron Maupin♦
Sep 5 at 12:47