Comments on: VRF is the new Black: How I Learned to Stop Worrying and Love the Complexity http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/ Information security, a little slower...a little deeper Thu, 17 May 2012 08:33:26 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: anon http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-7032 anon Fri, 12 Feb 2010 17:10:56 +0000 http://praetorianprefect.com/?p=612#comment-7032 <p>No - Junos Virtual Router does not = Cisco VRF-Lite.</p> <p>VRF is VRF no matter the vendor.</p> <p>Junipers VR is something that is done in Junos only with the use of rib groups.</p> No – Junos Virtual Router does not = Cisco VRF-Lite.

VRF is VRF no matter the vendor.

Junipers VR is something that is done in Junos only with the use of rib groups.

]]> By: jt http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-5515 jt Mon, 11 Jan 2010 04:21:31 +0000 http://praetorianprefect.com/?p=612#comment-5515 <p>@anonymous The article states early on 'There are two types of VRFs: “VRF” and “VRF Lite.”' - Then goes on to give great multi-vendor examples of "vrf-lite".</p> <p>I thought it was a clear and concise howto on doing overlapping addresses/separate routing tables without going into the added requirements of MPLS-VPNs.</p> <p>Also I gather that JUNOS vrf = Cisco vrf and JUNOS virtual-router = Cisco vrf-lite (marketing term)</p> @anonymous The article states early on ‘There are two types of VRFs: “VRF” and “VRF Lite.”’ – Then goes on to give great multi-vendor examples of “vrf-lite”.

I thought it was a clear and concise howto on doing overlapping addresses/separate routing tables without going into the added requirements of MPLS-VPNs.

Also I gather that JUNOS vrf = Cisco vrf and JUNOS virtual-router = Cisco vrf-lite (marketing term)

]]> By: Anonymous http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1478 Anonymous Wed, 21 Oct 2009 15:00:15 +0000 http://praetorianprefect.com/?p=612#comment-1478 <p>That was a typo on the "vrf-lite" since "vrf-lite" is a marketing term cisco uses.</p> <p>But you can see from even from the examples you posted there is an instance type "vrf" and in your examples you specifically use "virtual-router" which is not VRF, plain and simple.</p> <p>I think your article rocks I just wanted to point out on the Junos side thats not a true example of VRF.</p> That was a typo on the “vrf-lite” since “vrf-lite” is a marketing term cisco uses.

But you can see from even from the examples you posted there is an instance type “vrf” and in your examples you specifically use “virtual-router” which is not VRF, plain and simple.

I think your article rocks I just wanted to point out on the Junos side thats not a true example of VRF.

]]> By: JD McCloud http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1464 JD McCloud Tue, 20 Oct 2009 07:07:58 +0000 http://praetorianprefect.com/?p=612#comment-1464 <p>Response to @ANONYMOUS</p> <p>Juniper documentation on the subject at hand.</p> <ul> <li><a href="http://www.juniper.net/techpubs/software/junos/junos95/swconfig-routing/id-10866933.html#id-10866933" rel="nofollow">Junos 9.5: Configuring an Instance</a></li> <li><a href="http://www.juniper.net/techpubs/software/junos/junos95/swconfig-vpns/id-10066935.html#id-10042904" rel="nofollow">Junos 9.5: Types of VPNs</a></li> <li><a href="http://www.juniper.net/techpubs/software/junos/junos95/swconfig-vpns/id-10396234.html#id-10396234" rel="nofollow">Junos 9.5: instance-type</a></li> <li><a href="http://www.juniper.net/techpubs/en_US/junos9.6/information-products/topic-collections/config-guide-vpns/id-10066935.html#id-10042904" rel="nofollow">Junos 9.6: Types of VPNs</a></li> </ul> <p>I have also checked for and think you are mistaken, as their is no option for <code>instance-type vrf-lit</code> in JunOS. I have also verified this on my test Juniper Router new running 9.3: <a href="http://praetorianprefect.com/wp-content/uploads/2009/10/Screen-shot-2009-10-20-at-2.44.01-AM.png" rel="nofollow">ScreenShot</a></p> Response to @ANONYMOUS

Juniper documentation on the subject at hand.

I have also checked for and think you are mistaken, as their is no option for instance-type vrf-lit in JunOS. I have also verified this on my test Juniper Router new running 9.3: ScreenShot

]]> By: Anonymous http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1461 Anonymous Tue, 20 Oct 2009 05:48:21 +0000 http://praetorianprefect.com/?p=612#comment-1461 <p>"instance-type vrf-lite" is how vrf-lite is configured. Junipers KB articles reference Virtual routers.</p> <p>VRF-Lite supports vpnv4 virtual routers do not.</p> <p>You are falling into marketing jargon....</p> “instance-type vrf-lite” is how vrf-lite is configured. Junipers KB articles reference Virtual routers.

VRF-Lite supports vpnv4 virtual routers do not.

You are falling into marketing jargon….

]]> By: JD McCloud http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1459 JD McCloud Tue, 20 Oct 2009 04:55:18 +0000 http://praetorianprefect.com/?p=612#comment-1459 <blockquote>Responce to @ ANONYMOUS </blockquote> <p>Juniper's <a href="http://kb.juniper.net/index?page=content&id=KB14926&actp=search&searchid=1256013708068" rel="nofollow">KB14926</a> describes a VRF-lite configuration using <code>instance-type virtual-router</code>. Also on JNET a juniper employee <a href="http://forums.juniper.net/jnet/profile?user.id=6668" rel="nofollow">mikep</a> creates a VRF-lite example in this <a href="http://forums.juniper.net/jnet/board/message?board.id=switch&message.id=965&query.id=808551#U25441&searchid=1256014288673" rel="nofollow">thread</a> once again using <code>instance-type virtual-router</code>.</p> <p>Junos has a large number of ways of configuring vrf and vrf-lite like features. In the <a href="http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/#fn:3" rel="nofollow">footnotes</a> I also provided a link to Junipers <a href="http://www.juniper.net/techpubs/software/junos/junos85/swconfig85-vpns/frameset.html" rel="nofollow">docs</a> just for this reason.</p> <p>Thank you for the comment.</p> Responce to @ ANONYMOUS

Juniper’s KB14926 describes a VRF-lite configuration using instance-type virtual-router. Also on JNET a juniper employee mikep creates a VRF-lite example in this thread once again using instance-type virtual-router.

Junos has a large number of ways of configuring vrf and vrf-lite like features. In the footnotes I also provided a link to Junipers docs just for this reason.

Thank you for the comment.

]]> By: Anonymous http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1457 Anonymous Tue, 20 Oct 2009 00:37:59 +0000 http://praetorianprefect.com/?p=612#comment-1457 <p>Nice article but you have the VRF-Lite incorrect on Junos.</p> <p>Virtual-Routers are not in anyway related to VRF.</p> <p>Thats not to say Junos does not support vrf-lite its just setup completely different than you have it in the example above.</p> Nice article but you have the VRF-Lite incorrect on Junos.

Virtual-Routers are not in anyway related to VRF.

Thats not to say Junos does not support vrf-lite its just setup completely different than you have it in the example above.

]]> By: Ben Djandash http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1411 Ben Djandash Mon, 12 Oct 2009 12:52:47 +0000 http://praetorianprefect.com/?p=612#comment-1411 <p>Good Background and principles I like the examples on how its implement on differing vendor products.</p> <p>Good background for a number of assurance activities that I am involved with for a large transistion project within Transport for London (A new MPLS cloud !)</p> <p>TfL Technology Analyst.</p> Good Background and principles I like the examples on how its implement on differing vendor products.

Good background for a number of assurance activities that I am involved with for a large transistion project within Transport for London (A new MPLS cloud !)

TfL Technology Analyst.

]]> By: Al http://praetorianprefect.com/archives/2009/09/vrf-is-the-new-black-how-i-learned-to-stop-worrying-and-love-the-complexity/comment-page-1/#comment-1366 Al Thu, 01 Oct 2009 18:58:31 +0000 http://praetorianprefect.com/?p=612#comment-1366 <p>Thank you for the well-written article! It aided my understanding on how to implement VRF in my Cisco network.</p> Thank you for the well-written article! It aided my understanding on how to implement VRF in my Cisco network.

]]>