Тёмный

How VRFs Work (VRF Lite) | VRFs Part 1 

Network Direction
Подписаться 181 тыс.
Просмотров 178 тыс.
50% 1

How VRFs Work (VRF Lite) | VRFs Part 1
VRFs, or Virtual Routing and Forwarding, are virtual routing tables. They enable separation of one part of the network from another.
There could be many reasons to do this. It could be for security, to separate the inside network from the DMZ. Or, it could be to separate BU's, or separate customers from each other.
This video explains VRF basics, what they are used for, when they are used, and how they work.
This includes two labs you can follow along with.
The first lab starts at the beginning and shows basic VRF configuration to separate two customers.
The second lab shows how you can use VRFs to force traffic through a firewall for security purposes.
You can download the labs, and practice on your own if you want (Patreon).
networkdirection.net/VRF+Lab+1
Part 1: VRF Lite - The Fundamentals of how VRF's work. This covers route separation, why you need it, and how it's configured
• How VRFs Work (VRF Lit...
Part 2: Dynamic Routing - Taking it a step further, we see how to add OSPF, EIGRP, and BGP routing, all while keeping it VRF-aware
• Dynamic Routing with V...
Part 3: Route Targets - VRF's are local to each router. But, we can use route-targets and MP-BGP to share routes between VRF's on different routers. The ed result? VRF's are spanned across your network!
• Route Target Import an...
Part 4: Route Leaking - VRF's keep routes separate, but what if you have some important services to share? How do you share the routes then? With Route Leaking!
• Leak Routes Between VRF's
For more information, have a look at networkdirection.net/VRF+Lite
/ networkdirection
/ netwrkdirection
/ networkdirection

Наука

Опубликовано:

 

16 май 2018

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 123   
@patriceboccara
@patriceboccara 2 года назад
the first video where vrf is cleary explained... thanx
@NetworkDirection
@NetworkDirection 2 года назад
Thankyou! I also found it hard to find a clear explanation (which is why I tried to make one)
@clanIRG
@clanIRG 5 дней назад
very easy explanation from the beginning to the end. New subscriber!
@functiongarage
@functiongarage 4 года назад
This is really solid bud. Been doing this stuff for 10+ years. Showed this to some entry level guys on my team and they picked it up instantly. Great work!
@NetworkDirection
@NetworkDirection 4 года назад
Thanks Rougewolf! I am really glad you have been able to find the videos beneficial! Have a great day.
@MrGuitarSmoker
@MrGuitarSmoker 4 года назад
Hello ! I can only confirm since i'm a entry level network engineer who never heard about VRFs and your video explained it very well ! I got it now ;) Thanks buddy !
@narinderpalsingh4769
@narinderpalsingh4769 4 года назад
Thanks for this video, now i feel more confident on VRF's.
@zorlac72
@zorlac72 4 года назад
Amazing! Simple and clear explanation. Thank you!
@zeeesh9806
@zeeesh9806 2 года назад
I love the way how you keep it simple and short! Thank you very much for the great content :)
@NetworkDirection
@NetworkDirection 2 года назад
Thanks for the feedback
@fredd164
@fredd164 4 года назад
great video. lots of work put into this to make it easily digestible
@techno_ocean1938
@techno_ocean1938 5 лет назад
You are great bro, first time I found great explanation to this topic, we need more videos series for other network topics
@NetworkDirection
@NetworkDirection 5 лет назад
Thanks Techno Ocean. Working through a GRE series right now. Considering a DMVPN series in the near future.
@hussainsyed2161
@hussainsyed2161 4 года назад
Never understood this before hitting here God bless you sir
@LuisReyes-mw3jo
@LuisReyes-mw3jo 3 года назад
Thank you for sharing. Simple explanation of a complex subject. Great work.
@NetworkDirection
@NetworkDirection 3 года назад
Glad you like it, thanks for the feedback
@TheQadri92
@TheQadri92 2 года назад
Beautifully explained
@NetworkDirection
@NetworkDirection 2 года назад
Thanks
@dupajasiu920
@dupajasiu920 5 лет назад
absolutely fantastic Teacher !
@AxRic
@AxRic 3 года назад
I'm amazed how easy looks the concept after your explanation. Kudos for this great content.
@NetworkDirection
@NetworkDirection 3 года назад
Thanks!
@GoodGameOKC1
@GoodGameOKC1 5 лет назад
Nice video, glad to have found this channel. Thanks for sharing.
@NetworkDirection
@NetworkDirection 5 лет назад
Glad to help
@VandersonT_
@VandersonT_ 5 лет назад
Amazing job! You guys rock!!
@NetworkDirection
@NetworkDirection 5 лет назад
Thanks mate!
@mikgruff
@mikgruff 3 года назад
excellent!! Just what I was looking for. Thanks for your time.
@NetworkDirection
@NetworkDirection 3 года назад
Glad to help!
@dustcore
@dustcore Год назад
Great explanation. Thank you
@tusharnaik4710
@tusharnaik4710 6 лет назад
Nice Video.....appreciated
@rlopez3188
@rlopez3188 3 года назад
You’re the best!!!!! Thanks for the knowledge dump!
@NetworkDirection
@NetworkDirection 3 года назад
You're welcome!
@chaotikpie1881
@chaotikpie1881 4 года назад
Fantastic mate
@Blueadi1
@Blueadi1 5 лет назад
Very nice video...helps a lot...keep it coming :)
@nachogon9302
@nachogon9302 3 года назад
Great explanation!
@NetworkDirection
@NetworkDirection 3 года назад
Thanks!
@Mandolorian84
@Mandolorian84 Год назад
thank you! amazing video!
@JotaEseUveA
@JotaEseUveA 3 года назад
Great videos, thank you very much!
@NetworkDirection
@NetworkDirection 3 года назад
You're welcome!
@shahadatanwar4109
@shahadatanwar4109 Год назад
great explanation thanks
@NetworkDirection
@NetworkDirection Год назад
Glad you liked it
@James-op5hb
@James-op5hb 2 года назад
The Videos are great for refreshing one's knowledge, top.
@NetworkDirection
@NetworkDirection 2 года назад
Glad you like it
@tonyhoy4688
@tonyhoy4688 2 года назад
Nice one. Keep up the good work.
@NetworkDirection
@NetworkDirection Год назад
Thanks!
@alenbilic
@alenbilic 4 года назад
Great work on these vids. would be awesome to see some more vids in relation to routing and switching
@NetworkDirection
@NetworkDirection 4 года назад
Hi Alenbilic, thanks for the suggestion. Is there anything specific that you are after?
@alenbilic
@alenbilic 4 года назад
@@NetworkDirection im the middle of studying for my CCNP route switch. so detailed info on the layer 2 and 3 technologies and also some vids in regards to the TSHOOT exam. e.g troubleshooting scenarios, would be awesome
@Johanneslol11
@Johanneslol11 5 лет назад
amazing vid !
@siminwen4580
@siminwen4580 5 лет назад
help a lot, Thanks for sharing
@NetworkDirection
@NetworkDirection 5 лет назад
Happy to help! Glad you're getting some value from the videos!
@HimanshuSharma1981
@HimanshuSharma1981 3 года назад
Awesome explanation!
@NetworkDirection
@NetworkDirection 3 года назад
Thanks!
@shehabeldinalabyad787
@shehabeldinalabyad787 3 года назад
Very Helpful. Thank you
@NetworkDirection
@NetworkDirection 3 года назад
Glad it was helpful!
@luigui.a7907
@luigui.a7907 5 лет назад
Superuseful video !
@NetworkDirection
@NetworkDirection 5 лет назад
That's good to hear, thanks!
@xdarkryujinx
@xdarkryujinx 3 года назад
I'm literally configuring this right now except with Cisco 3850s and clustered as sRX345 that need to route back for nat. Thank you for this! It's wonky for sure but a work around I had to do due to vendor compliance.
@NetworkDirection
@NetworkDirection 3 года назад
Glad this is helping! I also use SRX345's. They use the term 'routing-instance'. The 'virtual router' type is most similar to Cisco's VRF-Lite, as discussed in this video networkdirection.net/articles/routingandswitching/juniper-routers-and-switches/juniper-routing-instances/
@DarkbaseTTV
@DarkbaseTTV 6 лет назад
Awesome video, once again! I also really enjoy how you run into errors on purpose, because that's likely what someone configuring VRFs for the first time would run into. But a little sad that it's only available on an enterprise service license level in IOS, if you run another license level on your L3 device, you won't be able to use VRFs. :(
@NetworkDirection
@NetworkDirection 6 лет назад
Thanks again 😀 Some platforms (like the N5k I think) allow VRF lite on a lower license, and full VRF on a higher license
@DarkbaseTTV
@DarkbaseTTV 6 лет назад
Roman Matys This is not a lab issue, but a real life enterprise issue for me :P
@sportsboy5935
@sportsboy5935 6 лет назад
how u make it so easy to understand :) well done
@NetworkDirection
@NetworkDirection 6 лет назад
Hours of writing and rewriting the script :) Thanks for watching
@TheJerseyJohn
@TheJerseyJohn 5 лет назад
Thanks man.. Good sub!
@NetworkDirection
@NetworkDirection 5 лет назад
You're very welcome!
@relaxationinnature4608
@relaxationinnature4608 3 года назад
** GREAT WORK ------ THANKS FOR SHARING ------- CHEERS PEOPLE ! **
@NetworkDirection
@NetworkDirection 3 года назад
Glad you like it!
@CanecaProductions
@CanecaProductions 4 года назад
Subbed!!!
@aadishbahati188
@aadishbahati188 5 лет назад
awesome!
@NetworkDirection
@NetworkDirection 5 лет назад
Thanks!
@rarab8714
@rarab8714 5 лет назад
very good
@mymediapc9521
@mymediapc9521 5 лет назад
Thank you for the video, much appreciated. You mention the global routing table can still be used even with the VRF tables, is there a common instance where you would want to use both?
@NetworkDirection
@NetworkDirection 5 лет назад
In one case, I use the global routing table to carry infrastructure routes. How to get from one environment to another, that sort of thing Then I use VRFs for the tenant traffic. That was a good question!
@techno_ocean1938
@techno_ocean1938 5 лет назад
@@NetworkDirection can you explain with more easier scenario?
@NetworkDirection
@NetworkDirection 5 лет назад
On using the global routing table with VRF's? Sure. I like to use the global routing table for infrastructure. If I have a few routers, I will connect them and get BGP (or some routing protocol) working in the global routing table. Then a customer comes along. I don't want them knowing about all my routes. I just want to help them move packets around while keeping my infrastructure secure. That's when I would create a VRF. Customers will have their own routes, and they will all go in the VRF. Extra customers get their own VRF's too. As you get to part 3 of this series, this will probably make more sense.
@Bilal.Al-Sardar
@Bilal.Al-Sardar Год назад
Great video and right to the point!. i have a scenario where i want to use 1 VRF and leak 1 route to the global table, is it possible?.
@premarajagopalan8610
@premarajagopalan8610 2 года назад
Concept well explained.Ty. What is the difference btn vrf and vrf-lite.Need to know how both works and their respective configuration as well.
@NetworkDirection
@NetworkDirection 2 года назад
Part 4 will explain this better, but in short, VRF uses MPLS or similar technology to share informatio with other routers. VRF-Lite does not.
@landro3552
@landro3552 5 лет назад
Hey man. I've done the 9 Network fundamental videos. This video makes very little sense to me.I don't really understand the concepts and purpose here. Could you give me some info about it and what I should learn now. (cuz this is too advanced for me) I appreciate your job man keep up.
@NetworkDirection
@NetworkDirection 5 лет назад
Yeah, the VRF videos are going to be a bit more advanced than the fundamental ones. I would suggest looking at reading up on CCENT or CCNA to fill in a few gaps before moving into the deeper topics.
@bernardgarrett3897
@bernardgarrett3897 3 года назад
Nice ansswer
@paulzapodeanu9407
@paulzapodeanu9407 4 года назад
Vrf commands can be cumbersome to work with, so on some platforms there is a command that can help out a lot: #routing-context vrf CustA and then you can use the regular commands. Much easier!
@NetworkDirection
@NetworkDirection 4 года назад
I didn't know about that shortcut, thanks!
@philipbadhams5139
@philipbadhams5139 Год назад
Do you not need to configure a route distinguisher when you create the VRF?
@prasadpardeshi2231
@prasadpardeshi2231 3 года назад
Thnxxxxxxxxxxx!!!!!
@Leonhart1982
@Leonhart1982 5 лет назад
Amazing Explanation about VRF. Great work bro !!! How can the overlapping ip subnet 10.10.0.0/24 exchange between them ? what is the feature in the FW that can allow it ?
@NetworkDirection
@NetworkDirection 5 лет назад
The only way to have overlapping subnets communicate with each other is by sending the traffic to an L3 device (router or firewall), where there is no VRF, or the traffic is in the same VRF. This device then needs to use NAT to make the networks appear unique. It's a complicated scenario, so avoid it if you can
@ithereos9554
@ithereos9554 4 года назад
@@NetworkDirection It does sound complicated, is it something you'd usually see in real networks? Why would companies do that besides bad design?
@NetworkDirection
@NetworkDirection 4 года назад
@@ithereos9554 I've done it myself in some cases. I've used it when working for a cloud provider. We had different customers connected through WAN links. We couldn't control their IP space, and they couldn't control ours. So in a case like this, we can use NAT. However, if you have control, use unique subnets to avoid using NAT.
@surb0nt
@surb0nt 3 года назад
@@ithereos9554 Service Providers use this to divide customer overlapping 10/8 rfc1918 networks. And customers can communicate over Service Provider MPLS network separately. You can do this always when you have many customers and you need to separate them into domains.
@youtubeaccountid489
@youtubeaccountid489 11 месяцев назад
Good🎉
@angelaiacob4955
@angelaiacob4955 5 лет назад
I couldnt understand gi 0/3 sub interface, as per your diagrams there are .9 and .13 interface towards firewall and not .3 interface ..?
@NetworkDirection
@NetworkDirection 5 лет назад
Looking at 9:58, it is .13, not .3 Is that the part you mean, or is there somewhere else I'm missing?
@Brian-nz6ns
@Brian-nz6ns 4 года назад
I've never heard of VRF's before. Is this new? What products support this feature? How do we know if a certain product supports this feature?
@memyselfimemyselfi496
@memyselfimemyselfi496 4 года назад
I had the same question. Please answer!!!!!!!!!
@igorlifanov8333
@igorlifanov8333 2 года назад
how come adding the router will allow hosts from different VLANs to communicate with each other? (without additional config. like a router on a stick.)
@NetworkDirection
@NetworkDirection 2 года назад
Generally they will have an IP address in each of those VLANs, and will be able to pass packets from one to the other
@bumpthecrypto3059
@bumpthecrypto3059 4 года назад
Are custa and b 10.10.0.0 networks on different interface and if so are they sub interfaces?
@NetworkDirection
@NetworkDirection 4 года назад
The 10.0.0.0 network are on different routers. Is that what you mean?
@Buildingmachines
@Buildingmachines Год назад
I want to install an SOHO network please I need guidelines on how to do it
@SanDiegoSalesAcademycom
@SanDiegoSalesAcademycom 2 года назад
Good
@NetworkDirection
@NetworkDirection 2 года назад
Thanks
@tusharnaik4710
@tusharnaik4710 6 лет назад
is it possible for you two create video scenerio like:- one router with two ISP and router runnning two routing protocol rip and osp.rip for acitve and ospf for standby
@NetworkDirection
@NetworkDirection 6 лет назад
In part 2, I'll show you how to configure dynamic routing (OSPF and EIGRP) with VRF's, which might be similar to what you're asking for. I'm not sure how you would use RIP for active and OSPF for secondary though. For dual-ISP, I would use BGP
@tusharnaik4710
@tusharnaik4710 6 лет назад
yes but i have seen such senerio..customer having one router with two isp one nomal and 2ndar 3g cellular link..abd only ospf and rip config are there..i can share you config if you provide me email....nowa days i am too much confuse about this
@NetworkDirection
@NetworkDirection 6 лет назад
Sure, send it through. My details are on the website.
@bhasker1999
@bhasker1999 5 лет назад
How come Core1 router ports(.1 and .5) are in the same network, Aren't they suppose to be on different network ?
@NetworkDirection
@NetworkDirection 5 лет назад
They are in different networks. They are /30's
@bhasker1999
@bhasker1999 5 лет назад
@@NetworkDirection yes yes, thank you .will need to refresh my subnetting..thanks again.
@NetworkDirection
@NetworkDirection 5 лет назад
No worries, glad to help. I have some IP addressing and subnetting videos coming in about two weeks if you're interested
@bhasker1999
@bhasker1999 5 лет назад
@@NetworkDirection that would be great..subscribe and enabled notification..
@NetworkDirection
@NetworkDirection 5 лет назад
Good to hear 😀
@Pete_H312
@Pete_H312 5 лет назад
Why does the vrf definition command not work on my IOS? I have to use # IP VRF CustA on my router. Also, ADDRESS-FAMILY IPV4 command not recognised in vrf configuration mode. What IOS are you using?
@NetworkDirection
@NetworkDirection 5 лет назад
Have you tried downloading the labs from the site?
@vincekimcostales6658
@vincekimcostales6658 Год назад
How to do static route with VRF in Cisco iOS ?
@ThuyThanh-nz1ez
@ThuyThanh-nz1ez 2 года назад
how did you do it can you share with me , thank you
@NetworkDirection
@NetworkDirection 2 года назад
How did I create the VRF do you mean?
@igorlifanov8333
@igorlifanov8333 2 года назад
he is pinging (ping vrf custB 10.20.0.1) unsuccessfully. How it could be successful; he did not define the route to 10.20.0.0 for custB vrf?
@NetworkDirection
@NetworkDirection 6 лет назад
Here's the lab files (Patreon): networkdirection.net/VRF+Lab+1
@DemonKamikaze
@DemonKamikaze 6 лет назад
Really nice video! built something like this for my employer a couple of years ago, now spans multiple VRFs for internal divisions and individual business clients we process data for, inter VRF routing is accomplished with OSPF :)
@NetworkDirection
@NetworkDirection 6 лет назад
It works really well doesn't it? Rock solid
@sepbla178
@sepbla178 3 года назад
I don't get your explanation at all. You show some topology with IPs, when you configure the routes in the vRFs they are all differents. :| I'm totally confused by this video.
@abdellahchadid7382
@abdellahchadid7382 Год назад
It's 2023 and you still charge in order to view some firewall configuration!!. Make it free man.. specially your old labs. 6$ for some firewall config🦂
Далее
Nexus vPC | Routing over vPC
8:38
Просмотров 56 тыс.
BGP Overview
9:41
Просмотров 209 тыс.
OSPF Explained | Step by Step
13:50
Просмотров 912 тыс.
Quality Of Service Application Traffic Explained
3:37
Просмотров 2,3 тыс.
Full MikroTik MTCRE - VRF (Basic Overview & Lab)
19:23
Cisco Packet Tracer | Everything You Need to Know
17:10
What’s your charging level??
0:14
Просмотров 7 млн