CISCO LISP + GETVPN RLOC interface in VRF

[meiercyrill]

I’am a student making an apprenticeship.

My current task is to create a new VPN LAB environemente.

I have to compare DMVPN Phase 3 with Cisco LISP + GETVPN.

Thanks to the Cisco GETVPN+LISP Lab Guide I was able to build a quiet good lab.

But there is no MGMT routing separation. I want to have Loopback 0 interface and the interface facing to the RLOC to be vrf forwarding to MGMT.

But then LISP stopped working.

I was searching for a solution and I tried to vrf forwared the Lisp Interface , which did not worked out for me. 

I didn't quiet get what those 2 commands are supposed to do.

Ip lisp source-locator

Ipv4 alt-vrf

Is it even possible to pop the interface facing to the RLOC into an other vrf?

Thanks for your help, I really appreciate it.

[Jaffer.Razvi · Accepted solution]

I am not sure I understand, do you have a topology and diagram? You can create a separate EID table called management and "client registration interface" command to source it for GETVPN, example:

crypto gdoi group management-group
identity number 2016
server address ipv4 10.255.255.1
client protocol gikev2 default
client registration interface Loopback2016

Under router lisp:

 eid-table vrf management instance-id 1

The loopback2000 would have the VRF management.  

You may need to change the following:

"locator-table default," This could be "management" or "default."

[meiercyrill]

Hey Jaffer Razvi

I fixed the Problem by using

locator-table vrf VRF4RLOCINTERFACE 

under router Lisp

Thanks!