Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VRF with multiple default routes?

I have a 2811 with 3 ISP's, and am trying to set up equal-cost routes for load-balancing. The ISP interfaces and firewall interface are in a "PUBLIC" vrf. All other interfaces are in the global config. Everything is fine with a single default route. However, when I add a 2nd default route, I lose all connectivity to both public interfaces. I can still access the firewall interface (from a node behind the interface). Are there any restrictions in VRF for multiple default routes? Related config is attached.

  • LAN Switching and Routing
Hall of Fame Super Bronze

Re: VRF with multiple default routes?

No restrictions with having multiple default routes in a VRF. The rules of routing within a VRF are the same as with a global routing table.

You may be running into an issue with NAT and the packet trying to exit an interface with a translated address in the wrong block.

Inspect your NAT table and see this behavior.




New Member

Re: VRF with multiple default routes?

If I were trying to access internal hosts, perhaps, but I'm simply trying to SSH to any of the public interfaces within the VRF from a non-local public ip address. I didn't think NAT played a part there. I have been known to be wrong before, though... :)

Hall of Fame Super Bronze

Re: VRF with multiple default routes?

Can you provide a detailed description as the source and destination of the traffic and ip route table before and after the problem occurs.

In your original message, you stated 'all other interfaces are in the global config' yet on the portion of the config it only shows interfaces within the VRF, no interfaces in the global routing table.

If you want to isolate this to a NAT issue, add the multiple default routes and during a maintenance window, remove the NAT and try to SSH.

This widget could not be displayed.