Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2VirtualizationEasy
A network engineer is designing a new data center network for a multi-tenant environment. Each tenant requires complete isolation of their routing tables and forwarding paths, even if they share the same physical infrastructure. Which virtualization technology is best suited to meet this requirement for Layer 3 isolation?
- AVXLAN
- BVLANs
- CVRF-Lite
- DPVLANs
Show answer & explanationAnswer & explanation
Correct answer: C. VRF-Lite
VRF-Lite provides complete Layer 3 isolation by creating separate routing tables and forwarding instances on a single router, making it ideal for multi-tenant environments where each tenant needs independent routing.
Why the other options are wrong
- A. VXLAN provides Layer 2 overlay over an IP network, primarily for stretching Layer 2 domains, not for Layer 3 routing isolation.
- B. VLANs provide Layer 2 isolation, not Layer 3 routing table isolation.
- D. PVLANs isolate ports within the same VLAN, offering Layer 2 isolation, not Layer 3 routing table separation.
VRF-Lite
VRF-Lite (Virtual Routing and Forwarding-Lite) is a technology that allows multiple independent routing tables to coexist on the same physical router, enabling Layer 3 isolation for different tenants or services without requiring MPLS.
- Provides Layer 3 isolation.
- Each VRF instance has its own routing table, forwarding table, and interfaces.
- Does not require MPLS, making it 'Lite'.
Memory trick: Route your Virtual Routes, Forwarding Lite.