L3VRF¶

It is possible to move an interface to an existing L3VRF domain. This operation enables to isolate incoming traffic coming from that interface in a separate routing domain.

To bind a physical interface eth0 to an L3VRF domain in vrf main, do the following:

vsr running config# vrf main
vsr running vrf main# interface physical eth0
vsr running physical eth0# l3vrf vrf1
vsr running physical eth0# commit

To move an interface to an other L3VRF within the same VRF, do:

vsr running config# vrf main
vsr running vrf main# interface physical eth0
vsr running physical eth0# l3vrf vrf2

It is also possible to unbind an interface from an L3VRF by issuing the command below. In that way, eth0 is moved to the default L3VRF domain.

vsr running config# vrf main
vsr running vrf main# interface physical eth0
vsr running physical eth0# del l3vrf

All configurable interfaces are eligible to be bound to an L3VRF, provided they actually route packets. For instance, interfaces attached to a bridge or a a LAG interface cannot be bound to an L3VRF.