The EIGRP IPv6 VRF-Lite feature provides separation between routing and forwarding, which supports an additional level of
security because communication between devices belonging to different VRFs is not allowed, unless explicitly configured. While
the EIGRP IPv6 VRF-Lite feature supports multiple VRFs, the feature also simplifies the management and troubleshooting of
traffic belonging to a specific VRF.
Virtual Private Networks (VPNs) provide a secure way for customers to share bandwidth over a service provider backbone network.
A VPN is a collection of sites sharing a common routing table. A customer site is connected to the service provider network
by one or more interfaces, and the service provider associates each interface with a VPN routing table. A VPN routing table
is called a VPN routing/forwarding (VRF) table.
VRF-lite allows a service provider to support two or more VPNs with an overlapping IP address using one interface. VRF-lite
uses input interfaces to distinguish routes for different VPNs and forms virtual packet-forwarding tables by associating one
or more Layer 3 interfaces with each VRF. Interfaces in a VRF can be either physical, such as Ethernet ports, or logical,
such as VLAN SVIs, but a Layer 3 interface cannot belong to more than one VRF at any time.
Note
|
The EIGRP IPv6 VRF-Lite feature is available only in EIGRP named configurations.
|