Native Catalyst 6500 with SUP 720.

andrea.meconi · ‎04-26-2010

I'm looking for info about private vlan and vrf on 6500. Can these work together? May I put a private L3 interface into a VRF?

Thanks.

Regards.

Andrea.

Reza Sharifi · ‎04-26-2010

Hi Andrea,

I don't see why not. Both VRF and private vlans are supported on Sup-720

HTH

Reza

andrea.meconi · ‎04-26-2010

Hello and many thanks for help.

I remembered that not all Catalyst support private VLAN on a VRF-Lite.

Regards.

Andrea

Giuseppe Larosa · ‎04-26-2010

Hello Andrea,

VRF is an OSI layer 3 concept and private Vlans are an OSI layer2 concept so I don't see why they couldn't be combined if desired.

But of course implementation choices may lead to a different result.

the only requirement is that you cannot configure SVI for secondary vlans

From a practical point of view you should be able to implement multiple VRFs instead of one VRF + private vlans with no problems of scalability.

Also DAI, DHCP snooping may be an alternative to private vlans.

see

Hope to help

Giuseppe

andrea.meconi · ‎04-27-2010

Hello Giuseppe.

I need to combine VRF-Lite, private VLAN and VACL for a backup solution using the Catalyst 6500 at core.

With VRF I can create an intervlan (private primary vlans) routing istance, separed from GRT. With Private VLAN e VACL I can apply security also.

What do you think about?

Regards.

Andrea