MicroNugget: What is VRF Lite?

Start learning cybersecurity with CBT Nuggets. courses.cbt.gg/security
In this video, Anthony Sequeira covers using VRF Lite for segmenting and partitioning traffic at Layer 3. Segmenting traffic with virtual routing and forwarding tables in MPLS environments is one thing, but what about when you're not using MPLS? Anthony configures VRF Lite before your eyes.
VRF Lite makes it possible to take particular traffic and give it its own routing tables in the infrastructure, even when you're working in an environment without MPLS. That sort of Layer 3 segmentation can help keep a network environment with high risk devices secure. First hand, Anthony demonstrates how to configure your devices' custom routing tables. First, he creates the virtual routing and forwarding tables that'll get used. Then, he goes directly into the interfaces to have them participate in the VRFs. He establishes the IP addresses and maps the path for each VRF. He wraps up by configuring the addresses that go out to the internet, and then places each interface into their respective VRF environment. By following along, you'll learn how to replace a global routing table with custom made virtual routing tables and be one step closer to being prepared for the CCIE Routing and Switching.
🌐 Download the Free Ultimate Networking Cert Guide: blog.cbt.gg/c21o
⬇️ 13-Week Study Plan: CCNA (200-301): blog.cbt.gg/owmx
Start learning with CBT Nuggets:
• Cisco CCNP Routing and Switching | courses.cbt.gg/6gj
• Cisco CCDP Design | courses.cbt.gg/8c5
• Cisco CCIE Routing and Switching (400-101) | courses.cbt.gg/e29

[@mrshiv3166]

All others confused me. Thank you for simplifying the VRF concept :) Nice work & good example chosen,

[@franciscotorrecillas8006]

Great explanation, very clear and concise

[@Gooseycoyne]

This is a fantastic video. I could never find a proper source. I was always under the illusion that the connected routers also had to be part of the vrf ospf process but they just run a routing protocol like normal. Its only local to the router performing VRF. Thanks for clearing that up.

[@nishantkumar-qn2mu]

superb to start of learning VRF basics

[@djcarlos2001]

Very good overview. We are implementing but with dell force ten hardware.

[@miovieira]

Very good explanation!

[@YJAB6264]

well done Anthony

[@Paul-rx1xr]

Fantastic video, thanks!

[@pikopiko18]

clear and easy to understand !

[@phkh6285]

Thank you very much favor the sacrifice share knowledge.
Let all good things in the world. Wish you are happy

[@roy5721]

wow great explanation on this

[@Babak_82]

Thanks. very good video

[@gavenchan]

thanks Anthony

[@TheLithGH]

Great Lesson, thanks!!

[@cbtnuggets]

Thank you!

[@ghibli971]

good, thank you!

[@chinodemiguel2]

you are the man

[@mrshiv3166]

I feel like saying AWESOME :))

[@mirriaz486]

very well explained

[@cbtnuggets]

Thanks for liking, and we're glad that it was helpful!

[@alikhan-to1nn]

Hi sir, Next when you make video please keep configuration in middle page, We couldnt seee when mouse on the screen it is covered with scroll bar.....

[@tvnetwork01]

Layer 3 segment without mpls by giving interfaces and different routing tables

[@user-xe2jy1nw3e]

Can't understand why we get debug message like:
" % Interface IPv4 disabled and address removed due to DISABLING!!! VRF..."
Why we get "DISABLING" message, if we ENABLING VRF using this command ?!!!

[@nandu2106]

can we configure Sub interfaces and assign VRF to it..

[@nandu2106]

i found it's possible .. .just need to ensure that main interface should be up and encapsulation is dot 1q ...

[@jagageralla]

why not use access lists on the switch to do the same thing?

[@jagageralla]

yea i discussed this with my teacher and i understand now but thank you !! =)

[@Jh-xo9yb]

Younger Anthony sounds like a Cali kid.

[@rami_rasikh]

how (LabCLIENTS) & (CLIENTS) can reach their resources while they pass through Ethernet1/0 & Ethernet1/1 ?? which they are a passive interfaces.

[@300096586]

+Rami Rasikh
Good point.

[@geojohnku]

+Rami Rasikh
OSPF is not configured on routers LabClient1 & Client1...Instead there must be a default route pointing towards the EDGE router. As you can see on 11:28, the OSPF neighbors to EDGE router are router LabWWW and WWW.

[@renusiwach6146]

(y)

[@ghibli971]

@@JeanChristophePerrault good answer ....by CISCO manual
passive interface option doesn't affect normal traffic flow - only inside LANs they dont receive nor send Hello packets; LSDB and other OSPF messages, because the hosts aren't aware about OSPF protocol. So the bandwith do not worsen

[@ciscolive4062]

Haaaa

[@TeslaMaxwell]

Very clear and concise. Thanks.