Solved: Virtual Firewall Configuration

bapatsubodh · ‎04-22-2010

Hi,

Trying to configure Virtual firewall as per the document:

Configured the vrf like this:

ip vrf acct

and added to sub-interface

ip vrf forwarding acct

When this command is given it pops an error:

"VRF acct not configured." VRF acct is configured earlier.

Even after IP inspection rule applied or not applied same error pops up!!

Above mentioned documents states "Cisco IOS^® Software Release 12.3(14)T introduced Virtual (VRF-aware) Firewall" I am using

ROM: 3600 Software (C3640-JK9O3S-M), Version 12.3(14)T7, RELEASE SOFTWARE (fc2)

Is this error due to IOS image.

Please share the experience

Thanks

Subodh

Giuseppe Larosa · ‎04-22-2010

Hello Subodh,

you need at least to configure the route distinguisher under VRF config

ip vrf acct

rd 100:101

!

to start the VRF effectively

the document is not correct in this part rd is mandatory cannot be omitted

Hope to help

Giuseppe

Giuseppe Larosa · ‎04-22-2010

Hello Subodh,

you need at least to configure the route distinguisher under VRF config

ip vrf acct

rd 100:101

!

to start the VRF effectively

the document is not correct in this part rd is mandatory cannot be omitted

Hope to help

Giuseppe

bapatsubodh · ‎04-23-2010

Hi,

Thanks Giuslar.

That Cisco document confused me a lots. I could configure overlaping private IP subnets and it's working.

Subodh