Catalyst 6500, VSS, VRF and FWSM.

Unanswered Question

I have a requirement for two, or more VRF instances with a bunch of vlans in each.
I wish the MSFC to do the intervlan routing (within the VRF) and the FWSM to be the path for inter VRF and global communications.
Can someone validate my solution and suggest a solution with a transparent context?
Where can I find more informations?
Many thanks for help.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Giuseppe Larosa Mon, 11/23/2009 - 08:20

Hello Andrea,

I cannot open your attachment files that are marked as queued.

However, we have VRFs and FWSM with some routed and some transparent contexts.

We have only two interfaces in each transparent context.

The transparent context can be used to allow multicast traffic and to join in a controlled way two VRFs or one VRF and the global routing table

we have been able also to leave EIGRP messages between two VRFs to flow

Hope to help


Giuseppe Larosa Mon, 11/23/2009 - 08:58

Hello Andrea,

the key points are :

IRB is used to configure inter-vlan bridging

an ACL to permit BPDU is strictly needed it provides conversion of BDPU to avoid L2 supervisor to detect the two L2 domains are joined (rewrites vlan-id inside proprietary bpdu)

one MSFC SVI needs to have a modified source MAC address in order to exchange messages with SVI in other VRF.

see attachment I've removed object groups

Hope to help



This Discussion