VRF--虚拟路由表

VRF

Virtual routing forwarding，虚拟路由转发表，简称VPN。他能在两个site之间建⽴两个不⽤的路由表，相互隔离，把每台交换机逻辑上分成多台虚拟交换机，即多VPN路由转发实⼒。⼀般⽤于区分不同业务流量，不同的业务⾛不同的路由表，从⽽互相独⽴，达到控制设备全局路由流量⾛向的⽬的。

Vlan1960：10.130.229.X

实例：5560做管理⽹段⽹关（全局，2），7510将VPN流量转全局；⼚商设备管理地址为该⽹段任意地址（全局.X） ⼚商：Vlan 1960#

interface Vlan-interface1960

ip address 10.130.229.1 255.255.255.0#

ip route-static 10.130.229.0 24 10.130.229.2#

interface GigabitEthernet1/0/1port access vlan 1960# 7510##

interface Vlan-interface1960 ip binding -instance DMZ

ip address 10.130.229.253 255.255.255.0#

ip -instance DMZ route-distinguisher 100:1#

interface Vlan-interface1960 ip binding -instance DMZ

ip address 10.130.229.253 255.255.255.0#

ip route-static -instance DMZ 10.130.229.0 24 10.130.229.2#

interface range GigabitEthernet1/0/1 GigabitEthernet1/0/3port access vlan 1960# 5560:#

interface Vlan-interface1960

ip address 10.130.229.2 255.255.255.0#

interface GigabitEthernet1/0/1port access vlan 1960# 验证：7510：

dis arp -instance DMZ

Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-InvalidIP address MAC address SVLAN/VSI Interface/Link ID Aging Type10.130.229.1 a230-20b1-0302 1960 GE1/0/3 20 D10.130.229.2 a22e-6fd3-0202 1960 GE1/0/1 3 D

dis arp

Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-InvalidIP address MAC address SVLAN/VSI Interface/Link ID Aging Type10.130.229.1 a230-20b1-0302 1960 GE1/0/3 20 D10.130.229.2 a22e-6fd3-0202 1960 GE1/0/1 3 D

ping --instance DMZ 10.130.229.2

Ping 10.130.229.2 (10.130.229.2): 56 data bytes, press CTRL_C to break56 bytes from 10.130.229.2: icmp_seq=0 ttl=255 time=1.000 ms56 bytes from 10.130.229.2: icmp_seq=1 ttl=255 time=1.000 ms56 bytes from 10.130.229.2: icmp_seq=2 ttl=255 time=1.000 ms56 bytes from 10.130.229.2: icmp_seq=3 ttl=255 time=0.000 ms

56 bytes from 10.130.229.2: icmp_seq=4 ttl=255 time=0.000 ms