The L3 VPN Configuration feature lets you create and manage VRF (Virtual Routing and Forwarding) instances and L3 VPN bindings on SPB-enabled switches. VRF instances segment networks by isolating routing tables, while L3 VPN bindings link VRFs to SPB services for inter-site Layer 3 connectivity. It supports both IPv4 and IPv6 gateway types.
The VRF Configuration Screen is used to view configuration on a device; and to create, edit, and delete VRF instances on devices. Refer to the troubleshooting section for solutions to your queries. To manage the VRF configuration, navigate to the VRF screen by clicking on LAN > Layer 3 > VRF under the “Configure” section of the OmniVista Cirrus Menu. The below screen displays.
Creating a VRF
The Create VRF screen is used to provision VRF instance on the selected devices. To access this screen, click on Create VRF button.
The organization administrator can create, edit, and delete VRF instances. The administrator can assign and remove devices. Users with view-only rights can see VRF data, including device configuration status, but cannot create, update, or delete configurations. The server validates all write operations regardless of client-side restrictions. Unauthorized requests return a 403 response.
The Create VRF screen provides the following step-by-step process for creating a VRF:
-
Basic Information - Configures the VRF name and the routing capabilities.
-
Switch Selection - Select the Switch or LAN devices from the available list to create a VRF.
Complete the following sections of the Create VRF screen, then click on Create Button.
Basic Information
Complete the fields as described below for configuring basic information:
-
Name - Enter the VRF name. (Alphanumeric characters and hyphens only, maximum = 20 characters.) Must be unique within the organization.
-
Routing Capability - Select the VRF Capability level.
-
Max - Full routing capability with VRRP support.
-
Low - Reduced routing capability.
-
-
Auto-load VRRP with this VRF - Appears only when the Routing Capability is set to Max. When enabled, VRRP is automatically loaded with the VRF on each device.
Switch Selection
Select the switch devices from the available list to receive the VRF configuration. You can select multiple target switch devices.
When you are done with the Switch Selection, click on Create button to complete the process of Creating a VRF.
-
The 'Create' button remains disabled until the name is valid and not already in use.
-
The system sends CLI commands to each selected device. The new VRF appears in the list with a pending status that updates as devices respond.
Editing a VRF
Select a VRF from the VRF List and click on the Edit icon under the “Actions” column. The Edit VRF Information screen opens on which you can edit the basic information and add new devices or remove existing device assignments, as described above.
The Name and Routing Capability fields are read-only and cannot be changed after creation.
Deleting a VRF
To delete a VRF, use one of the following methods to select the VRF you want to delete:
-
Select the VRF name to delete by clicking on the checkbox next to the list, click on Actions, then select Delete from the drop-down menu.
-
Click on the trash can icon under the “Actions” column next to the list that you want to delete.
The following confirmation prompt appears:
Click on Delete to confirm that you want to delete the VRF.
-
You cannot delete a VRF if it has an active L3 VPN binding on any assigned device. Remove all L3 VPN bindings before deleting the VRF.
-
The default VRF cannot be deleted.
Viewing VRF Instances
The VRF List displays basic and detailed information for all configured VRF templates across the organization. Click on an entry in the list to view additional information about a VRF instance.
The following field values will be displayed:
-
VRF Name - Enter the unique name of the VRF instance. The same VRF name on different devices appears as a single row. (The default VRF is always listed).
-
Assigned Devices - Switch devices with this VRF configured, grouped by site.
-
Routing Capability - The VRF profile that determines routing capacity (Max or Low).
-
Auto-load VRRP - Checks whether VRRP loads automatically with the VRF (enabled or disabled). Applies only when the VRF profile is Max.
-
Config Status - The provisioning status of the VRF on assigned devices.
Display Assigned Device Configuration Details
The VRF Profile List displays information for the configured VRF Profiles. You can click on the VRF Name to view the assigned device configuration details of a specific profile as shown below.
The following screen appears:
The following information is displayed for each of the VRF Profile:
-
IPv4 Address - The IPv4 address of the device.
-
Device Friendly Name - The name assigned to the device is derived from the Preferred Device Naming convention specified in the user preference settings. By default, the Friendly Name is set to IP Address (System Name).
-
Config Status - The configuration status of the device. (Successful or Failed or Pending).
-
Pending - The configuration is being pushed to the device and is still not receiving a response from the device.
-
Failed - The configuration failed to apply to the device. Possible reasons include a timeout while applying the configuration due to the device being unreachable or a network issue, or the configuration being invalid and rejected by the device. Check alerts to identify the specific reason.
-
Successful - The configuration is pushed to the device successfully.
-
-
Routing Capability - The VRF profile that determines routing capacity (Max or Low).
-
Auto-load VRRP - Checks whether VRRP loads automatically with the VRF (enabled or disabled). Applies only when the VRF profile is Max.
Troubleshooting/FAQs
The Create VRF button is not visible or disabled.
Only users with the Organization Administrator role can create VRF instances. Confirm your role with your system administrator.
I get a notification, "Name already exists" when creating a VRF.
Each VRF name must be unique within the organization. Choose a different name. (Note: VRF names are case-sensitive.)
I cannot delete a VRF as delete tab is disabled.
You cannot delete the default VRF. Remove all active L3 VPN bindings on any device before deleting the VRF.