VRFの設定と確認コマンド [Cisco]

(config)#ip vrf <vrf-name>
(config-vrf)#rd <rd>

<vrf-name> : VRF名
<rd> : RDの値

(config)#interface <interface-name>
(config-if)#ip vrf forwarding <vrf-name>
(config-if)#ip address <address> <subnetmask>

<interfane-name> : インタフェース名
<vrf-name> : VRF名
<address> <subnetmask> : IPアドレス サブネットマスク

(config)#ip route vrf <vrf-name> <network> <subnetmask> <next-hop>

<vrf-name> : VRF名
<network> : ネットワークアドレス
<subnetmask> : サブネットマスク
<next-hop> : ネクストホップアドレス

(config)#router rip
(config-router)#address-family ipv4 vrf <vrf-name>
(config-router-af)#network <network>
(config-router-af)#version 2
(config-router-af)#no auto-summary

<vrf-name> : VRF名
<network> : ネットワークアドレス

(config)#router eigrp <AS1>
(config-router)#address-family ipv4 vrf <vrf-name>
(config-router-af)#autonomous-system <AS2>
(config-router-af)#network <address> [<wildcard>]
(config-router-af)#no auto-summary

<AS1> : グローバルのルーティングプロセスのAS番号
<vrf-name> : VRF名
<AS2> : VRFのAS番号
<network> : ネットワークアドレス
<wildcard> : ワイルドカードマスク

(config)#router bgp <AS1>
(config-router)#address-family ipv4 vrf <vrf-name>
(config-router-af)#neighbor <ip-address> remote-as <AS2>
(config-router-af)#neighbor <ip-address> activate
(config-router-af)#network <network> [mask <subnetmask>]

<AS1> : 自AS番号
<vrf-name> : VRF名
<ip-address> : ネイバーのIPアドレス
<AS2> : ネイバーのAS番号
<network> : ネットワークアドレス
<subnetmask> : サブネットマスク

(config)#router ospf <process> vrf <vrf-name>
(config-router)#network <network> <wildcard> area <area>

<process> : プロセス番号
<vrf-name> : VRF名
<network> : ネットワークアドレス
<wildcard> : ワイルドカードマスク
<area> : エリア番号

P1#show ip vrf
  Name                             Default RD          Interfaces
  VRF-A                            10:10               Et0/1
                                                       Lo1
                                                       Et0/0.10
  VRF-B                            20:20               Et0/2
                                                       Lo2
                                                       Et0/0.20
P1#show ip vrf detail
VRF VRF-A; default RD 10:10; default VPNID 
  Interfaces:
    Et0/1                    Lo1                      Et0/0.10
  Connected addresses are not in global routing table
  No Export VPN route-target communities
  No Import VPN route-target communities
  No import route-map
  No export route-map
  VRF label distribution protocol: not configured
VRF VRF-B; default RD 20:20; default VPNID 
  Interfaces:
    Et0/2                    Lo2                      Et0/0.20
  Connected addresses are not in global routing table
  No Export VPN route-target communities
  No Import VPN route-target communities
  No import route-map
  No export route-map
  VRF label distribution protocol: not configured

P1#show ip route vrf VRF-A
 
Routing Table: VRF-A
～省略～
 
Gateway of last resort is not set
 
C    192.168.0.0/24 is directly connected, Ethernet0/0.10
C    192.168.1.0/24 is directly connected, Ethernet0/1
     192.168.100.0/32 is subnetted, 1 subnets
C       192.168.100.1 is directly connected, Loopback1
P1#show ip route vrf VRF-B
 
Routing Table: VRF-B
～省略～
 
Gateway of last resort is not set
 
C    192.168.0.0/24 is directly connected, Ethernet0/0.20
C    192.168.1.0/24 is directly connected, Ethernet0/2
     192.168.100.0/32 is subnetted, 1 subnets
C       192.168.100.1 is directly connected, Loopback2

P1#ping vrf VRF-A 192.168.10.101 source loopback 1
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.101, timeout is 2 seconds:
Packet sent with a source address of 192.168.100.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/29/40 ms

P1#traceroute vrf VRF-A 192.168.10.101 source loopback 1

Type escape sequence to abort.
Tracing the route to 192.168.10.101

  1 192.168.1.11 8 msec 28 msec 20 msec
  2 192.168.10.101 24 msec 44 msec 36 msec

P1#telnet 192.168.100.11 /vrf VRF-A
Trying 192.168.100.11 ... Open

A1#exit

[Connection to 192.168.100.11 closed by foreign host]
P1#

(config)#vrf definition <vrf-name>
(config-vrf)#rd <RD>
(config-vrf)#address-family ipv4
(config-vrf-af)#

<vrf-name> : VRF名
<RD> : RDの値

(config)#interface <interface-name>
(config-if)#vrf forwarding <vrf-name>
(config-if)#ip address <address> <subnetmask>

<interfane-name> : インタフェース名
<vrf-name> : VRF名
<address> <subnetmask> : IPアドレス サブネットマスク

(config)#vrf upgrade-cli multi-af-mode common-policies

IOU3#show run | section vrf|interface Ethernet0/0
ip vrf TEST
 rd 65001:100
interface Ethernet0/0
 ip vrf forwarding TEST
 ip address 192.168.1.1 255.255.255.0
IOU3#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
IOU3(config)#vrf upgrade-cli multi-af-mode common-policies
You are about to upgrade to the multi-AF VRF syntax commands.
You will lose any IPv6 addresses configured on interfaces
belonging to upgraded VRFs.

Are you sure ? [yes]: yes
Number of VRFs upgraded: 1
IOU3(config)#end
IOU3#show run | section vrf|interface Ethernet0/0
vrf definition TEST
 rd 65001:100
 !
 address-family ipv4
 exit-address-family
interface Ethernet0/0
 vrf forwarding TEST
 ip address 192.168.1.1 255.255.255.0