CCNP ENARSI lab 14 of 35
VRF-Lite with OSPF, EIGRP and BGP
Split two routers into isolated corporate and lab networks that reuse the same addresses, run OSPF in one VRF and named EIGRP in the other over one trunk, and connect only the corporate VRF to a cloud provider with eBGP.
Run this lab
It needs Lite: its 3 nodes are set to 3 vCPU and 1,536 MB in total. That fits the free demo too.
In your workspace: Shared, then CCNP ENARSI 300-410 guided labs, then 14 - VRF-Lite with OSPF EIGRP and BGP
- Level
- Advanced
- Time
- About 75 minutes
- Nodes need
- 3 vCPU, 1,536 MB
- Smallest plan
- Lite
The scenario
Willowmere Engineering runs its corporate network and its product-test lab between two sites (R1 and R2). The lab team copies customer networks, so the lab uses the same addresses as the corporate LANs, and auditors require the two to be completely separated. Instead of buying separate routers and circuits, you'll use VRF-Lite: two routing tables per router, carried over the existing link as two VLANs. Only the corporate network may reach the company's cloud provider (R3), which peers with R2 using eBGP.
| Device | Interface | VRF | Address | Purpose |
|---|---|---|---|---|
| R1 | Gi0/0.10 (VLAN 10) | CORP | 10.0.12.1/30 | to R2 |
| R1 | Gi0/0.20 (VLAN 20) | LAB | 10.0.12.1/30 | to R2 (same address, other VRF) |
| R1 | Lo10 / Lo20 | CORP / LAB | 192.168.1.1/24 / 192.168.1.1/24 | site 1 LANs |
| R2 | Gi0/0.10 / Gi0/0.20 | CORP / LAB | 10.0.12.2/30 | to R1 |
| R2 | Lo10 / Lo20 | CORP / LAB | 192.168.2.1/24 / 192.168.2.1/24 | site 2 LANs |
| R2 | Gi0/1 | CORP | 203.0.113.1/30 | eBGP to R3 (203.0.113.2), AS 65001 ↔ 65030 |
| R3 | Lo1 | global | 198.51.100.1/24 | cloud service |
| R1 / R2 | Lo0 | global | 10.255.0.1 / 10.255.0.2 | management |
Routing design: OSPF process 10 in VRF CORP; **named EIGRP LABS, AS 20 in VRF LAB; BGP AS 65001** on R2 with an IPv4 VRF CORP address family towards R3. Route distinguishers: CORP 65001:10, LAB 65001:20.
What you’ll practise
- Create VRFs with vrf definition, route distinguishers and the IPv4 address family
- Carry two VRFs over one link with 802.1Q subinterfaces
- Run OSPF and named-mode EIGRP inside VRFs
- Peer eBGP inside a VRF and redistribute between BGP and OSPF in that VRF
- Use VRF-aware show, ping and traceroute commands and prove isolation
The tasks
- Create the VRFs
- Put interfaces in the VRFs
- OSPF in VRF CORP
- Named EIGRP in VRF LAB
- eBGP to the cloud inside VRF CORP
- Prove isolation and connectivity
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- R1
Gi0/0to R2Gi0/0 - R2
Gi0/1to R3Gi0/0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| R1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| R2 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| R3 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CCNP ENARSI 300-410 guided labs.Open
14 - VRF-Lite with OSPF EIGRP and BGPand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More CCNP ENARSI labs
Related labs in other courses
CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.