VRF on 7206

Posted on 2011-09-30
Last Modified: 2012-06-27
Good Morning!

I'm in the process of re-doing our network at our headquarters, and have a question that is a bit above me in terms of my Cisco studies (Third of my way through CCNP). The 7200 is doing some VRF stuff that I'm not sure how/why/whats happening with it. I'll provide the setup and some config. The 7200 was set up before I was employed here.

Time Warner Fiber. They gave us 2 subnets of IPs.
1st - 24.3*.**.56/30
2nd - 24.3*.**.48/29

ASA IP is 24.3*.**.50 using a GW of .49

(Time Warner Media Box) -> (7200) --> (ASA 5510) -local net

The 7200 is using the first range, the ASA is using the 2nd range. I want to remove the 7200 once these last few T1 offices convert over to faster connections. Here is the 7200 config.
Partial config: (Try to edit everything out that wasn't necessary).
 rd 65535:100
 route-target export 65535:100
 route-target import 65535:100
interface FastEthernet0/0
 ip vrf forwarding TWTELECOM
 ip address 24.3*.**.58
 load-interval 30
 duplex full

interface Ethernet4/1
 ip vrf forwarding TWTELECOM
 ip address 24.3*.**.49
 ip nat outside
 duplex full

ip route vrf TWTELECOM 24.3*.**.57
ip route vrf TWTELECOM 24.3*.**.50

Open in new window

I guess my main question is.. what is this really doing? If I removed this box, what would/should I replace it with?
Question by:prlit
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 18

Accepted Solution

jmeggers earned 500 total points
ID: 36892857
It doesn't seem to make a lot of sense that you would have a single VRF configured, unless there's a reason to separate VRF traffic from global traffic.  But it appears to me that you're just routing through the 7200 and the VRF isn't really providing you any benefit, unless there's some reason I can't think of why the ISP wants it set up that way.  Is the 7200 your router or managed by the ISP?

Author Comment

ID: 36893059
The 7200 is our router, however when Time Warner came through they requested to make those changes apparently for which ever reason. I'm not sure why they'd want or need to make the changes.. The only thing I can think of is if they can only give out a max /29?? Implemented the vrf and used the /30 to handle the gateway or something?

We literally use the 7200 for nothing except T1 offices entry/endpoint. Everything else is handled through the ASA. I want the 7200 out of there ASAP since it only has half duplex cards in it and it's a waste of our fibre speeds. I was just going to put in an L3 switch (I'm actually going to test that tonight when theres downtime).. I guess in the long run I'll probably have to call them and see if we actually need that setup as it is now..

My other question is, what exactly are the benefits of VRF in general. I've read some stuff about it, but haven't dived to much into it.
LVL 18

Expert Comment

ID: 36894029
The ASA won't handle a T1 interface, but likely neither would the L3 switch you're referring to.  Is T1 capability a requirement?

I see no need for the VRFs, the 7200 would route between the two subnets without any problem anyway.  But if it's there and working I certainly wouldn't mess with it just to get rid of the VRF.  If you don't need to support a T1 interface and can accept an Ethernet handoff, then just go straight to the ASA.

Author Comment

ID: 36894198
The T1s are scheduled to expire in November, and Time Warner is supposedly doing construction next week to bring these remote sites cable broadband (they're in no mans land, haha). So once they are set and good, thats when I was planning on moving the new equipment in and taking the 7200 out.


Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a step by step guide on how to create a basic PTP link using Ubiquiti airOS devices. This guide can be used on the following Ubiquiti AirMAX devices. Nanostation, Bullets, AirBridge, Nanobeam, NanoBridge to name a few. Please review …
Introduction This article explores the design of a cache system that can improve the performance of a web site or web application.  The assumption is that the web site has many more “read” operations than “write” operations (this is commonly the ca…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question