Lesson Overview
Virtual Routing and Forwarding (VRF) is a network virtualization technology that allows a single physical router or Layer 3 switch to maintain multiple independent routing and forwarding tables.
VRF enables organizations to logically separate network traffic, support overlapping IP address spaces, and provide routing isolation without deploying dedicated physical routers for each network.
This lesson covers VRF fundamentals, VRF-Lite, routing table isolation, interface assignments, inter-VRF communication, and route leaking. Learners will also explore practical Cisco VRF configurations, verification commands, and troubleshooting techniques used in enterprise campus, data center, and service provider networks.
VRF-Lite separates routing domains across a shared enterprise infrastructure.
Learning Objectives
- Explain Virtual Routing and Forwarding (VRF) and how it creates multiple logical routing instances on one physical device.
- Distinguish the global routing table from per-VRF routing tables and understand interface-to-VRF membership.
- Identify enterprise VRF use cases such as tenant isolation, management separation, overlapping address space, shared services, and segmented WAN designs.
- Configure VRF-Lite with modern IOS XE vrf definition syntax, routed ports, SVIs, and 802.1Q subinterfaces.
- Configure VRF-aware static routing and understand how dynamic routing protocols operate per VRF.
- Use show vrf, show ip route vrf, show ip protocols vrf, ping vrf, traceroute vrf, and CEF commands to verify operation.
- Troubleshoot missing routes, incorrect interface membership, next-hop failures, routing protocol mismatches, ACL/policy issues, and return-path problems.
|
Module outcome: After this lesson, learners should be able to explain VRF operation, build VRF-Lite, assign interfaces, install and verify routes, interpret show-command output, and troubleshoot common isolation and reachability failures. |
1. What Is Virtual Routing and Forwarding (VRF)?
Virtual Routing and Forwarding (VRF) allows a single physical router or multilayer switch to maintain multiple independent Layer 3 routing instances. Each instance has its own routing table (RIB), forwarding table (FIB), interfaces, next-hop resolution, and routing protocol context.
A useful mental model is to imagine one physical chassis acting like several logical routers. An interface belongs either to the global routing table or to a specific VRF. A packet entering an interface is looked up in the routing table associated with that interface.
Figure 1 - One device, multiple isolated routing tables.
1.1 Global Routing Table vs VRF Routing Tables
In traditional IP networking, a router uses a Global Routing Table (GRT) to determine how packets should reach their destinations.
All Layer 3 interfaces assigned to the global routing environment share the same routing table. Routes can be installed through directly connected networks, static routes, or dynamic routing protocols such as OSPF, EIGRP, and BGP.
However, modern enterprise networks often require multiple departments, customers, applications, or services to operate independently on the same physical network infrastructure.
This is where Virtual Routing and Forwarding (VRF) becomes important.
VRF allows a single physical router or Layer 3 switch to maintain multiple independent routing and forwarding tables.
Each VRF operates as a separate logical routing domain, with its own interfaces, routes, next-hop resolution, and forwarding decisions.
Key Concept
Global Routing Table: The default routing environment on a router.
VRF Routing Table: An independent routing environment created for a specific department, customer, or service.
Routing Isolation: Routes in one VRF are not automatically available to another VRF or the global table.
Cisco describes