asked on

VRF on 7206

Good Morning!

I'm in the process of re-doing our network at our headquarters, and have a question that is a bit above me in terms of my Cisco studies (Third of my way through CCNP). The 7200 is doing some VRF stuff that I'm not sure how/why/whats happening with it. I'll provide the setup and some config. The 7200 was set up before I was employed here.

Setup:
Time Warner Fiber. They gave us 2 subnets of IPs.
1st - 24.3*.**.56/30
2nd - 24.3*.**.48/29

ASA IP is 24.3*.**.50 using a GW of .49

(Time Warner Media Box) -> (7200) --> (ASA 5510) -local net

The 7200 is using the first range, the ASA is using the 2nd range. I want to remove the 7200 once these last few T1 offices convert over to faster connections. Here is the 7200 config.
Partial config: (Try to edit everything out that wasn't necessary).

ip vrf TWTELECOM
 rd 65535:100
 route-target export 65535:100
 route-target import 65535:100
!
interface FastEthernet0/0
 description TWTELECOM UPLINK
 ip vrf forwarding TWTELECOM
 ip address 24.3*.**.58 255.255.255.252
 load-interval 30
 duplex full
!

interface Ethernet4/1
 description PRL PIX CONNECTION
 ip vrf forwarding TWTELECOM
 ip address 24.3*.**.49 255.255.255.248
 ip nat outside
 duplex full
!

ip route vrf TWTELECOM 0.0.0.0 0.0.0.0 24.3*.**.57
ip route vrf TWTELECOM 24.39.83.24 255.255.255.248 24.3*.**.50

Open in new window

I guess my main question is.. what is this really doing? If I removed this box, what would/should I replace it with?

ASKER CERTIFIED SOLUTION

John Meggers

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

prlit

ASKER

The 7200 is our router, however when Time Warner came through they requested to make those changes apparently for which ever reason. I'm not sure why they'd want or need to make the changes.. The only thing I can think of is if they can only give out a max /29?? Implemented the vrf and used the /30 to handle the gateway or something?

We literally use the 7200 for nothing except T1 offices entry/endpoint. Everything else is handled through the ASA. I want the 7200 out of there ASAP since it only has half duplex cards in it and it's a waste of our fibre speeds. I was just going to put in an L3 switch (I'm actually going to test that tonight when theres downtime).. I guess in the long run I'll probably have to call them and see if we actually need that setup as it is now..

My other question is, what exactly are the benefits of VRF in general. I've read some stuff about it, but haven't dived to much into it.

John Meggers

The ASA won't handle a T1 interface, but likely neither would the L3 switch you're referring to. Is T1 capability a requirement?

I see no need for the VRFs, the 7200 would route between the two subnets without any problem anyway. But if it's there and working I certainly wouldn't mess with it just to get rid of the VRF. If you don't need to support a T1 interface and can accept an Ethernet handoff, then just go straight to the ASA.

prlit

ASKER

The T1s are scheduled to expire in November, and Time Warner is supposedly doing construction next week to bring these remote sites cable broadband (they're in no mans land, haha). So once they are set and good, thats when I was planning on moving the new equipment in and taking the 7200 out.

Thanks!