https://support.hpe.com/hpsc/doc/public/display?

docId=emr_na-c03529403

HPE Support Center

HP A-Series Switches - How to Configure Virtual Routing and Forwarding (VRF)

Information
Virtual Router Forwarding instances (VRFs) are virtual private networks. A VRF is not a campus wide bridged Vlan.

A VRF is a completely private campus wide network and it appears as if a department has its own private router. Any subnets in any
buildings campus wide can be assigned to a VRF. A department may have as many VRFs as required to implement the security policies.

Details
In the following example, two Virtual Private Networks (VPNs) have been configured. Switches Rack4sw1 and Rack4sw3 are configured for
VPN 13. Switch Rack4sw2 and Rack4sw4 are configured for VPN 24.

Switches Rack4sw5 and Rack4sw6 are configured for the VRF instances. A trunk link connects these switches. Two separate IP VRF
interfaces shares this link.

The configuration, verification, and testing associated with the diagram follows:

***** Rack4sw1 configuration and verification *****

Rack4sw1# show running-config vlan 101

Running configuration:

1 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

vlan 101
name "VLAN101"
untagged A12
ip address 192.168.101.1 255.255.255.0

Rack4sw1# show vlans ports a12 detail

Status and Counters - VLAN Information - for ports A12

VLAN ID Name | Status Voice Jumbo Mode

------- -------------------- + ---------- ----- ----- --------
101 VLAN101 | Port-based No No Untagged

Rack4sw1# show ip | begin Default

Default Gateway : 192.168.101.254

Default TTL : 64
Arp Age : 20
Domain Suffix :
DNS server :
| Proxy ARP
VLAN | IP Config IP Address Subnet Mask Std Local
-------------------- + ---------- --------------- --------------- ----------
DEFAULT_VLAN | Disabled
VLAN101 | Manual 192.168.101.1 255.255.255.0 No No

Rack4sw1# show ip route | exclude 127

IP Route Entries

Destination Gateway VLAN Type Sub-Type Metric Dist.

------------------ --------------- ---- --------- ---------- ---------- -----
0.0.0.0/0 192.168.101.254 101 static 250 1
192.168.101.0/24 VLAN101 101 connected 1 0

***** Rack4sw2 configuration and verification *****

Rack4sw2# show running-config vlan 102

Running configuration:

vlan 102
name "VLAN102"
untagged A11
ip address 192.168.102.1 255.255.255.0

Rack4sw2# show vlans ports a11 detail

Status and Counters - VLAN Information - for ports A11

VLAN ID Name | Status Voice Jumbo Mode

------- -------------------- + ---------- ----- ----- --------
102 VLAN102 | Port-based No No Untagged

Rack4sw2# show ip | begin Default

Default Gateway : 192.168.102.254

Default TTL : 64
Arp Age : 20
Domain Suffix :
DNS server :
| Proxy ARP
VLAN | IP Config IP Address Subnet Mask Std Local
-------------------- + ---------- --------------- --------------- ----------
DEFAULT_VLAN | Disabled
VLAN102 | Manual 192.168.102.1 255.255.255.0 No No

Rack4sw2# show ip route | exclude 127

IP Route Entries

Destination Gateway VLAN Type Sub-Type Metric Dist.

------------------ --------------- ---- --------- ---------- ---------- -----
0.0.0.0/0 192.168.102.254 102 static 250 1
192.168.102.0/24 VLAN102 102 connected 1 0

***** Rack4sw3 configuration and verification *****

Rack4sw3# show running-config vlan 103

Running configuration:

2 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

vlan 103
name "VLAN103"
untagged D21
ip address 192.168.103.1 255.255.255.0

Rack4sw3# show vlans ports d21

Status and Counters - VLAN Information - for ports D21

VLAN ID Name | Status Voice Jumbo

------- -------------------------------- + ---------- ----- -----
103 VLAN103 | Port-based No No

Rack4sw3# show ip | begin Default

Default Gateway : 192.168.103.254

Default TTL : 64
Arp Age : 20
Domain Suffix :
DNS server :
| Proxy ARP
VLAN | IP Config IP Address Subnet Mask Std Local
-------------------- + ---------- --------------- --------------- ----------
DEFAULT_VLAN | Disabled
VLAN103 | Manual 192.168.103.1 255.255.255.0 No No

Rack4sw3# show ip route | exclude 127

IP Route Entries

Destination Gateway VLAN Type Sub-Type Metric Dist.

------------------ --------------- ---- --------- ---------- ---------- -----
0.0.0.0/0 192.168.103.254 103 static 250 1
192.168.103.0/24 VLAN103 103 connected 1 0

***** Rack4sw4 configuration and verification *****

Rack4sw4# show running-config vlan 104

Running configuration:

vlan 104
name "VLAN104"
untagged B21
ip address 192.168.104.1 255.255.255.0

Rack4sw4# show vlans ports b21 detail

Status and Counters - VLAN Information - for ports B21

VLAN ID Name | Status Voice Jumbo Mode

------- -------------------- + ---------- ----- ----- --------
104 VLAN104 | Port-based No No Untagged

Rack4sw4# show ip | begin Default

Default Gateway : 192.168.104.254

Default TTL : 64
Arp Age : 20
Domain Suffix :
DNS server :
| Proxy ARP
VLAN | IP Config IP Address Subnet Mask Std Local
-------------------- + ---------- --------------- --------------- ----------
DEFAULT_VLAN | Disabled
VLAN104 | Manual 192.168.104.1 255.255.255.0 No No

Rack4sw4# show ip route | exclude 127

IP Route Entries Destination Gateway VLAN Type Sub-Type Metric Dist.

***** Rack4sw5 Vlan and interface configuration *****

<Rack4sw5>display current-configuration interface Vlan-interface

interface Vlan-interface56
ip binding vpn-instance 13
ip address 192.168.56.5 255.255.255.0

interface Vlan-interface65
ip binding vpn-instance 24

3 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

ip address 192.168.65.5 255.255.255.0

interface Vlan-interface101
ip binding vpn-instance 13
ip address 192.168.101.254 255.255.255.0

interface Vlan-interface102
ip binding vpn-instance 24
ip address 192.168.102.254 255.255.255.0

<Rack4sw5>display current-configuration interface Ten-GigabitEthernet 1/0/1

interface Ten-GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 56 65

<Rack4sw5>display current-configuration interface Ten-GigabitEthernet 1/0/11

interface Ten-GigabitEthernet1/0/11
port link-mode bridge
port access vlan 102

<Rack4sw5>display current-configuration interface Ten-GigabitEthernet 1/0/12

interface Ten-GigabitEthernet1/0/12
port link-mode bridge
port access vlan 101

***** Rack4sw5 Vlan and interface verification *****

<Rack4sw5>display vlan 56 to 102

VLAN ID: 56
VLAN Type: static
Route Interface: configured
IP Address: 192.168.56.5
Subnet Mask: 255.255.255.0
Description: VLAN 0056
Name: VLAN 0056
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 65
VLAN Type: static
Route Interface: configured
IP Address: 192.168.65.5
Subnet Mask: 255.255.255.0
Description: VLAN 0065
Name: VLAN 0065
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 101

VLAN Type: static
Route Interface: configured
IP Address: 192.168.101.254
Subnet Mask: 255.255.255.0
Description: VLAN 0101
Name: VLAN 0101
Tagged Ports: none
Untagged Ports:
Ten-GigabitEthernet1/0/12

VLAN ID: 102

VLAN Type: static
Route Interface: configured
IP Address: 192.168.102.254
Subnet Mask: 255.255.255.0
Description: VLAN 0102
Name: VLAN 0102
Tagged Ports: none
Untagged Ports:
Ten-GigabitEthernet1/0/11

<Rack4sw5>display interface Ten-GigabitEthernet 1/0/1 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
XGE1/0/1 UP 1G(a) F(a) T 1

4 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

<Rack4sw5>display interface Ten-GigabitEthernet 1/0/11 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
XGE1/0/11 UP 1G(a) F(a) A 102

<Rack4sw5>display interface Ten-GigabitEthernet 1/0/12 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
XGE1/0/12 UP 1G(a) F(a) A 101

***** Rack4sw5 VPN configuration and verification *****

<Rack4sw5>display current-configuration configuration vpn-instance

ip vpn-instance 13
route-distinguisher 13:13

ip vpn-instance 24
route-distinguisher 24:24

<Rack4sw5>display ip vpn-instance

Total VPN-Instances configured : 2

VPN-Instance Name RD Create time

13 13:13 2000/04/26 12:03:12
24 24:24 2000/04/26 12:07:39

<Rack4sw5>display ip vpn-instance instance-name 13

VPN-Instance Name and ID : 13, 1

Create time : 2000/04/26 12:03:12
Up time : 0 days, 01 hours, 22 minutes and 44 seconds
Route Distinguisher : 13:13
Interfaces : Vlan-interface101, Vlan-interface56

<Rack4sw5>display ip vpn-instance instance-name 24

VPN-Instance Name and ID : 24, 2

Create time : 2000/04/26 12:07:39
Up time : 0 days, 01 hours, 18 minutes and 32 seconds
Route Distinguisher : 24:24
Interfaces : Vlan-interface102, Vlan-interface65

***** Rack4sw5 IP configuration and verification *****

<Rack4sw5>display current-configuration | include static

ip route-static vpn-instance 13 192.168.103.0 255.255.255.0 192.168.56.6

ip route-static vpn-instance 24 192.168.104.0 255.255.255.0 192.168.65.6

<Rack4sw5>display ip interface brief | exclude unassigned

*down: administratively down

(s): spoofing
Interface Physical Protocol IP Address Description
Vlan-interface56 up up 192.168.56.5 Vlan-inte...
Vlan-interface65 up up 192.168.65.5 Vlan-inte...
Vlan-interface101 up up 192.168.101.254 Vlan-inte...
Vlan-interface102 up up 192.168.102.254 Vlan-inte...

<Rack4sw5>display ip routing-table vpn-instance 13 | exclude 127

Routing Tables: 13

Destination/Mask Proto Pre Cost NextHop Interface

192.168.56.0/24 Direct 0 0 192.168.56.5 Vlan56

192.168.101.0/24 Direct 0 0 192.168.101.254 Vlan101
192.168.103.0/24 Static 60 0 192.168.56.6 Vlan56

<Rack4sw5>display ip routing-table vpn-instance 24 | exclude 127

5 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

Routing Tables: 24

Destination/Mask Proto Pre Cost NextHop Interface

192.168.65.0/24 Direct 0 0 192.168.65.5 Vlan65

192.168.102.0/24 Direct 0 0 192.168.102.254 Vlan102
192.168.104.0/24 Static 60 0 192.168.65.6 Vlan65

***** Rack4sw6 Vlan and interface configuration *****

<Rack6sw6>display current-configuration interface Vlan-interface

interface Vlan-interface56
ip binding vpn-instance 13
ip address 192.168.56.6 255.255.255.0

interface Vlan-interface65
ip binding vpn-instance 24
ip address 192.168.65.6 255.255.255.0

interface Vlan-interface103
ip binding vpn-instance 13
ip address 192.168.103.254 255.255.255.0

interface Vlan-interface104
ip binding vpn-instance 24
ip address 192.168.104.254 255.255.255.0

<<Rack6sw6>display current-configuration interface GigabitEthernet 2/0/3

interface GigabitEthernet2/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 56 65

<Rack6sw6>display current-configuration interface GigabitEthernet 2/0/7

interface GigabitEthernet2/0/7
port link-mode bridge
port access vlan 103

<Rack6sw6>display current-configuration interface GigabitEthernet 2/0/11

interface GigabitEthernet2/0/11
port link-mode bridge
port access vlan 104

***** Rack4sw6 Vlan and interface verification *****

<Rack6sw6>display vlan 56 to 104

VLAN ID: 56
VLAN Type: static
Route Interface: configured
IP Address: 192.168.56.6
Subnet Mask: 255.255.255.0
Description: VLAN 0056
Name: VLAN 0056
Tagged Ports:
GigabitEthernet2/0/3
Untagged Ports: none

VLAN ID: 65
VLAN Type: static
Route Interface: configured
IP Address: 192.168.65.6
Subnet Mask: 255.255.255.0
Description: VLAN 0065
Name: VLAN 0065
Tagged Ports:
GigabitEthernet2/0/3
Untagged Ports: none

VLAN ID: 103

VLAN Type: static
Route Interface: configured
IP Address: 192.168.103.254
Subnet Mask: 255.255.255.0
Description: VLAN 0103
Name: VLAN 0103
Tagged Ports: none
Untagged Ports:

6 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

GigabitEthernet2/0/7

VLAN ID: 104

VLAN Type: static
Route Interface: configured
IP Address: 192.168.104.254
Subnet Mask: 255.255.255.0
Description: VLAN 0104
Name: VLAN 0104
Tagged Ports: none
Untagged Ports:
GigabitEthernet2/0/11

<Rack6sw6>display interface GigabitEthernet 2/0/3 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE2/0/3 UP 1G(a) F(a) T 1

<Rack6sw6>display interface GigabitEthernet 2/0/7 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE2/0/7 UP 1G(a) F(a) A 103

<Rack6sw6>display interface GigabitEthernet 2/0/11 brief

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE2/0/11 UP 1G(a) F(a) A 104

***** Rack4sw6 VPN configuration and verification *****

<Rack6sw6>display current-configuration configuration vpn-instance

ip vpn-instance 13
route-distinguisher 13:13

ip vpn-instance 24
route-distinguisher 24:24

<Rack6sw6>display ip vpn-instance

Total VPN-Instances configured : 2

VPN-Instance Name RD Create time

13 13:13 2012/10/08 02:41:03
24 24:24 2012/10/08 02:41:17

<Rack6sw6>display ip vpn-instance instance-name 13

VPN-Instance Name and ID : 13, 1

Create time : 2012/10/08 02:41:03
Up time : 0 days, 01 hours, 33 minutes and 52 seconds
Route Distinguisher : 13:13
Interfaces : Vlan-interface103, Vlan-interface56

<Rack6sw6>display ip vpn-instance instance-name 24

VPN-Instance Name and ID : 24, 2

Create time : 2012/10/08 02:41:17
Up time : 0 days, 01 hours, 33 minutes and 45 seconds
Route Distinguisher : 24:24
Interfaces : Vlan-interface104, Vlan-interface65

***** Rack4sw6 IP configuration and verification *****

<Rack6sw6>display current-configuration | include static

ip route-static vpn-instance 13 192.168.101.0 255.255.255.0 192.168.56.5

ip route-static vpn-instance 24 192.168.102.0 255.255.255.0 192.168.65.5

<Rack6sw6>display ip interface brief | exclude down

7 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

(s): spoofing (l): loopback

Interface Physical Protocol IP Address Description
Vlan1 up up -- --
Vlan56 up up 192.168.56.6 --
Vlan65 up up 192.168.65.6 --
Vlan103 up up 192.168.103.254 --
Vlan104 up up 192.168.104.254 --

<Rack6sw6>display ip routing-table vpn-instance 13 | exclude 127

Routing Tables: 13

Destination/Mask Proto Pre Cost NextHop Interface

192.168.56.0/24 Direct 0 0 192.168.56.6 Vlan56

192.168.101.0/24 Static 60 0 192.168.56.5 Vlan56
192.168.103.0/24 Direct 0 0 192.168.103.254 Vlan103

<Rack6sw6>display ip routing-table vpn-instance 24 | exclude 127

Routing Tables: 24

Destination/Mask Proto Pre Cost NextHop Interface

192.168.65.0/24 Direct 0 0 192.168.65.6 Vlan65

192.168.102.0/24 Static 60 0 192.168.65.5 Vlan65
192.168.104.0/24 Direct 0 0 192.168.104.254 Vlan104

***** Testing *****

<Rack4sw5>ping -vpn-instance 13 -c 1 192.168.101.1

PING 192.168.101.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.101.1: bytes=56 Sequence=1 ttl=255 time=2 ms

--- 192.168.101.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms

<Rack4sw5>ping -vpn-instance 13 -c 1 192.168.103.1

PING 192.168.103.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.103.1: bytes=56 Sequence=1 ttl=254 time=1 ms

--- 192.168.103.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms

<Rack4sw5>ping -vpn-instance 24 -c 1 192.168.102.1

PING 192.168.102.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.102.1: bytes=56 Sequence=1 ttl=255 time=3 ms

--- 192.168.102.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms

<Rack4sw5>ping -vpn-instance 24 -c 1 192.168.104.1

PING 192.168.104.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.104.1: bytes=56 Sequence=1 ttl=254 time=2 ms

--- 192.168.104.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms

<Rack6sw6>ping -vpn-instance 13 -c 1 192.168.101.1

PING 192.168.101.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.101.1: bytes=56 Sequence=0 ttl=254 time=2 ms

--- 192.168.101.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms

<Rack6sw6>ping -vpn-instance 13 -c 1 192.168.103.1

PING 192.168.103.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.103.1: bytes=56 Sequence=0 ttl=255 time=2 ms

8 of 9 30-03-2019, 19:42
 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03529403

--- 192.168.103.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms

<Rack6sw6>ping -vpn-instance 24 -c 1 192.168.102.1

PING 192.168.102.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.102.1: bytes=56 Sequence=0 ttl=254 time=2 ms

--- 192.168.102.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 2/2/2 ms

<Rack6sw6>ping -vpn-instance 24 -c 1 192.168.104.1

PING 192.168.104.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.104.1: bytes=56 Sequence=0 ttl=255 time=1 ms

--- 192.168.104.1 ping statistics ---

1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms

***** Physical interconnect *****

Rack4sw1# show lldp info remote-device

LLDP Remote Devices Information

LocalPort | ChassisId PortId PortDescr SysName

--------- + ------------------------- ------ --------- ----------------------
A12 | 38 22 d6 6b e2 52 Ten... Ten-Gi... Rack4sw5

Rack4sw2# show lldp info remote-device

LLDP Remote Devices Information

LocalPort | ChassisId PortId PortDescr SysName

--------- + ------------------------- ------ --------- ----------------------
A11 | 38 22 d6 6b e2 52 Ten... Ten-Gi... Rack4sw5

Rack4sw3# show lldp info remote-device

LLDP Remote Devices Information

LocalPort | ChassisId PortId PortDescr SysName

--------- + ------------------------- ------ --------- ----------------------
D21 | 38 22 d6 25 50 c6 Gig... Gigabi... Rack6sw6

Rack4sw4# show lldp info remote-device

LLDP Remote Devices Information

LocalPort | ChassisId PortId PortDescr SysName

--------- + ------------------------- ------ --------- ----------------------
B21 | 38 22 d6 25 50 c6 Gig... Gigabi... Rack6sw6

<Rack4sw5>display lldp neighbor-information list

System Name Local Interface Chassis ID Port ID

Rack6sw6 XGE1/0/1 3822-d625-50c6 GigabitEthernet2/0/3
Rack4sw2 XGE1/0/11 0024-a83f-a600 11
Rack4sw1 XGE1/0/12 0026-f110-8700 12

<Rack6sw6>display lldp neighbor-information list

System Name Local Interface Chassis ID Port ID

Rack4sw5 GE2/0/3 3822-d66b-e252 Ten-GigabitEthernet1/0/1
Rack4sw3 GE2/0/7 f062-8109-2100 93
Rack4sw4 GE2/0/11 f062-8109-6700 45

9 of 9 30-03-2019, 19:42