VRF--虚拟路由表

VRF

Virtual routing forwarding，虚拟路由转发表，简称VPN。他能在两个site之间建立两个不用的路由表，相互隔离，把每台交换机逻辑上分成多台虚拟交换机，即多VPN路由转发实力。一般用于区分不同业务流量，不同的业务走不同的路由表，从而互相独立，达到控制设备全局路由流量走向的目的。

Vlan1960：10.130.229.X

实例：5560做管理网段网关（全局，254），7510将VPN流量转全局；厂商设备管理地址为该网段任意地址（全局.X）

厂商：

Vlan 1960

#

interface Vlan-interface1960

ip address 10.130.229.1 255.255.255.0

#

ip route-static 10.130.229.0 24 10.130.229.254

#

interface GigabitEthernet1/0/1

port access vlan 1960

#

7510

#

#

interface Vlan-interface1960

 ip binding vpn-instance DMZ

ip address 10.130.229.253 255.255.255.0

#

ip vpn-instance DMZ

 route-distinguisher 100:1

#

interface Vlan-interface1960

 ip binding vpn-instance DMZ

 ip address 10.130.229.253 255.255.255.0

#

 ip route-static vpn-instance DMZ 10.130.229.0 24 10.130.229.254

#

interface range GigabitEthernet1/0/1 GigabitEthernet1/0/3

port access vlan 1960

#

5560:

#

interface Vlan-interface1960

ip address 10.130.229.254 255.255.255.0

#

interface GigabitEthernet1/0/1

port access vlan 1960

#

验证：

7510：

<H3C>dis arp vpn-instance DMZ

Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address       MAC address    SVLAN/VSI Interface/Link ID        Aging Type

10.130.229.1     a230-20b1-0302 1960      GE1/0/3                  20    D

10.130.229.254   a22e-6fd3-0202 1960      GE1/0/1                  3     D

<H3C>dis arp

Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address       MAC address    SVLAN/VSI Interface/Link ID        Aging Type

10.130.229.1     a230-20b1-0302 1960      GE1/0/3                  20    D

10.130.229.254   a22e-6fd3-0202 1960      GE1/0/1                  3     D

<H3C>ping -vpn-instance DMZ 10.130.229.254

Ping 10.130.229.254 (10.130.229.254): 56 data bytes, press CTRL_C to break

56 bytes from 10.130.229.254: icmp_seq=0 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=1 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=2 ttl=255 time=1.000 ms

56 bytes from 10.130.229.254: icmp_seq=3 ttl=255 time=0.000 ms

56 bytes from 10.130.229.254: icmp_seq=4 ttl=255 time=0.000 ms