<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Personally - we have public routes / customer routes etc in 'no' VRF
(or the main routing table) then create a VRF for management either
on a VLAN interface or a dedicated interface. We run RFC1918
addressing then have a VPN front end for outside access for
management if required.<br>
<br>
We tend to run it across the same routers and switching so its not
full separate protection, just protects against mistake in
firewalling or routing locking out of devices. Our network isn't
overly large or complex either which aids in that decision.<br>
<br>
<div class="moz-cite-prefix">On 11/12/14 12:47, Ben Hohnke wrote:<br>
</div>
<blockquote
cite="mid:CAB-d-NAeYf2YrqA3PB-h9M8Q59rAHWgTweP6gBC0wBoaWFUDjQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>Hi Noggers,<br>
<br>
</div>
I've been doing a little research around management VRF's,
mainly for splitting my company's network management traffic
into it's own VRF, to shield it from any potential routing
issues. <br>
</div>
<div>I know some of our kit, such as the Cisco ASR 1001 and
cat4948's have dedicated management ethernet interfaces
locked in a management VRF.<br>
</div>
<div><br>
</div>
<div>At this stage I see two common options:<br>
</div>
<div>Management traffic in a VRF with RFC1918 addressing, and<br>
</div>
<div>Management traffic in the global routing table, with
customer traffic, with BGP etc in a VRF (i.e, turn it all
"inside out")<br>
</div>
<div><br>
</div>
I'm curious to see others thoughts on this, and what
implementations you've all put in place out there?<br>
<br>
</div>
Thanks,<br>
<br>
Ben<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>