Using vrf for separating management and user traffic

hello
We use vrf in our network for separating user / production traffic vs management traffic. but the way we have used it has turned out to be messy and we are in a situation where we no longer have the distinction between the two. I personally feel that vrf is a great way to separate management vs user traffic.
Here is why I am in a dilema
If VLANS for users computers and server VLANS are in USERS vrf
and management servers ( including domain controllers, AD) are in management vrf , there is no way this will work . and this was the reason we thought it was going to work. now I am wondering if using vrf is even necessary in an enterprise environment when management traffic can be separated on server end and not so much at the clients end.
anyone has any ideas how to go about this..

Hello, very interesting scenario! I was in a similar position to you. I agree VRF's are great for management purposes, as it provides you with total segregation of routing instances. In fact the newer cisco devices come with vrf's configured for management out the box, with a separate interface for management only (for the network device itself).
However, when it comes to enterprise networks and you have domain controllers, file servers, messaging, maybe ACS or ISE, proxies etc... and other services that should be available for your users, is there any point in using vrf's to separate users from management servers. Lets take for example:
A PC on the domain, and I want to log in using my AD credentials. You need to be able to contact the domain controller(s) in order to login right? Since vrf's are contained they will have no routes to get to different networks in other vrf's. Except when configured to do so.
Unless you do something called vrf route leaking or advertising. It's explained well here:
http://packetlife.net/blog/2010/mar/29/inter-vrf-routing-vrf-lite/
http://blog.ipexpert.com/2010/12/01/vrf-route-leaking/
Anyway, nevertheless - you are still going to be providing reachability via routing, so this defeats the purpose kindof... It could add unnecessary complexity too.
Me personally, I just made sure that they were separated by VLAN's and had a dedicated vrf for management, i.e. ssh, snmp etc... to the network devices. I weighed up and thought its not worth doing something that will not really be of any benefit.
I can understand the need for ISPs and large service providers to use this but not business/enterprise.
I hope this helps.

Similar Messages

HT1918 I tried to sign for Course Manager and I am from Taiwan cannot use it why? its horrible it should be international here in Taiwan everybody also uses English too.. Apple should understand it very well.

I tried to sign for Course Manager and I am from Taiwan cannot use it why? its horrible it should be international here in Taiwan everybody also uses English too.. Apple should understand it very well. Can anybody guide how can I do or sign inot Course Manager as I am an English teacher here in Taiwan and not able to access the software or Apps because its says TAIWAN NOT AVAILABLE I THINK ITS NOT FAIR AT ALL AFTER SPENDING SO MUCH MONEY ON MY NEW IPAD 64GB

Licensing restrictions or issues.

GetSelectedFields() for time stamp and user stamp using java api

using Java API's
getSelectedFields() returns NULL value if values presented also, for Time stamp and User stamp
properties in Flat tables , is there any other alternative way to get the SelectedFields values ?
Edited by: Vijaya Sekhar Reddy Alla on Mar 19, 2008 3:16 PM

Well, I can't say I solved the problem, because I got another one afterwards.
As usually I created a GetFieldListCommand, set its needed attributes and executed it. Then I read all the field properties out:
FieldProperties[] fieldProp = getFieldListCommand.getFields();
Afterwards it is possible to do what you want. Using a for-loop.
for (FieldProperties fp : fieldProperties) {
UserStampFieldProperties usfp = (UserStampFieldProperties) fp; // <= Cast error
FieldId[] fieldIDs = usfp.getSelectedFields();
And this is what I get now:
Exception in thread "main" java.lang.ClassCastException: com.sap.mdm.schema.fields.FixedWidthTextFieldProperties cannot be cast to com.sap.mdm.schema.fields.UserStampFieldProperties
Why this happens, I don't know. But it should somehow be solveable.

I've used iMessage for abit now and latly my step dad has got an ipad that is now joint to the same computer and on his ipad is my number and the email for imessage and i want to no how to get it of fully and not just untick it?

I've used iMessage for abit now and latly my step dad has got an ipad that is now joint to the same computer and on his ipad is my number and the email for imessage and i want to no how to get it of fully and not just untick it?

Hi barryfromwarrington,
Welcome to the Support Communities! There are two things I can think of to keep your Stepdad's information separate from yours on the computer and the iPad. On the computer, he should have his own administrative account, and on the iPad he needs his own Apple ID for iTunes and iCloud services. Here is some basic information to get started. I don't know if you have a Mac or Windows computer, so I'll include info for both.)
OS X Yosemite: Set up users on your Mac
http://support.apple.com/kb/PH18891
OS X Yosemite: Set up users on your Mac
If your Mac has multiple users, you should set up an account for each person so he or she can personalize settings and options without affecting other users.
Add a user
Choose Apple menu > System Preferences, then click Users & Groups.
Click the lock icon to unlock it, then enter an administrator name and password.
Click Add below the list of users.
Click the New Account pop-up menu, then choose a type of user.
administrator: An administrator can add and manage other users, install apps, and change settings.
Enter a full name for the new user. An account name is generated automatically. To use a different account name, enter it now—you can’t change it later.
Enter a password for the user, then enter it again to verify. Using a password hint is recommended to help the user remember his or her password.
Click Create User.
For an administrator, select “Allow user to administer this computer.”
Last Modified: Nov 18, 2014
iTunes for Windows Vista, Windows 7, or Windows 8: Fix unexpected quits or launch issues - Apple Support
http://support.apple.com/en-us/HT203206
Follow the steps below to create a new user account in Windows Vista or Windows 7:
Choose Start > Control Panel.
Open "Add or remove user accounts." (If you're using the Classic view in Windows Vista, open "User Accounts," and then open "Manage another account.")
Select "Create a new account" and follow the instructions to set up the account.
Once you create the new account, choose Start > Log Off.
Log in to the new user account.
Open iTunes and see if the issue you're experiencing persists in this new user account.
Frequently asked questions about Apple ID - Apple Support
http://support.apple.com/en-us/HT204161
iCloud: Set up iCloud
http://support.apple.com/kb/PH2609
Cheers,
- Judy

PLEASE help!! I use Outlook for my email and the Mail App Icon in my dock was also storing all my emails. So, I tried to delete ONLY the emails in the Mail App but somehow (under Preferences maybe?) I also deleted all my emails in my Outlook inbox.

PLEASE help!! I use Outlook for my email and the Mail App Icon that is in my dock, that I know nothing about, was also storing all my emails. So, I tried to delete ONLY the emails in the Mail App but somehow (under Preferences maybe?) I also deleted ALL my OUTLOOK emails in my inbox. Can someone please please tell me if there is a way to get my Outlook inbox emails back OR EVEN the emails that were in my Mail app - because even tho I never use the Mail app, at least the emails would be there.
When I was trying to delete the emails in my inbox for the Mail app - I followed THESE directions. It did in fact clear my inbox for the Mail app. But then I went to log on to my Outlook account and EVERY SINGLE EMAIL was gone. And not in the Deleted box. Just gone. Here are the directions I followed that screwed everything up. Please help.
Top menu bar, Mail > Preferences > Accounts > Mailbox Behaviors.
Uncheck "Store deleted messages on the server".
At the drop list for "Permanently erase deleted messages when", choose "Quitting Mail".
Next...
Top menu bar, Mail > Preferences > General.
At "When searching all mailboxes, include results from", uncheck "Trash".
Select All = command A

i found out my prob!
here is what you do.
go to the "system preferences" on your dock.
click "software updates".
click "installed software"
if it shows something about a recent update about "EFI UPDATE, FIRMWARE, THUNDERBOLT" or anything like that, exit out of it.
go to mail.
click "mail" at the top.
click "preferences...".
find the account you are having trouble with, once you do, make sure its highlighted, then click the "-" at the bottom of the window (this will only effect that mail account, it will not effect your ical weather or not its synced thought that email account)
hit the "+" (right next to the "-") and add your accout back!
its something with that update that effected mail, i hope this works out for you, if not reply back

Q&A db for warehouse management and inventory management

Hello Everybody,
i read on the help.sap website that standard as well as industry specific versions of Q&A db are available. but the website doesnt say where. i searched a lot but the links dont lead to the actual Q&A db.
i would like to request you to kindly share the Q&A db for inventory management and warehouse management with me as i need it for preparing the AS IS documentation.(preferably automotive industry but if not then even standard Q&A db is fine).
thanks a lot.
sapman.

Now QADB will not help to map the clinets requirement. Instead of QADB get AS IS information form Coreusers... thats best practice now....
Go through www.sap-img.com for further details...
Edited by: Ganti on Jul 26, 2008 7:26 AM

I just installed the Lion operating system, basically to upgrade my iPhone. I didn't realize that my Microsoft Office 2004 application would no longer work. I have been using Word for my writing and I receive most of my emails with Word attachments. I hav

I just installed the Lion operating system, basically to upgrade my iPhone. I didn't realize that my Microsoft Office 2004 application would no longer work. I have been using Word for my writing and I receive most of my emails with Word attachments. I have been using Apple products for years, always touting their reliability and customer service. I am not a techie, I just want to be able to do what I do on the computer and Apple always fulfilled my needs. Now I am told because of some operating system gobbledygook, I have to go out and purchase new software to use Word. This is despicable. I see no particular benefit to using Lion, but I do see a lot of detriments. Apple now seems to have turned into Microsoft, making software obsolete so they can make more money and to **** with the customer. You can be sure that my next computer will be a PC. I have completely lost confidence in Apple.

I seem to never tire of saying this. It was for Apple when they first announced 10.7 to disclose this. Yes, it was widely reported -- or rather, rumored -- but not by Apple. And many people who have gotten caught by this assumed that Apple itself would have told them beforehand about the loss of this very important feature which they had come to rely on. As far as I know, not even in fine print, does this appear anywhere on the Lion announcement or any of its links.
I am not saying Apple had to continue Rosetta in Lion, or forever, just that if it was going to be dropped, it should have been made known.
As relative "insiders" we should not forget that many people don't have the time, habit or interest to do this kind of research. I think it is a breach of trust that Apple has never directly made this announcement or given people the opportunity to decide beforehand if giving up their PPC apps for a new OS is a worthwhile tradeoff.

I have a 1TB external hard drive (NTFS) that has all my files from my old PC, how do I create a partition on it for HFS without formatting it so that I can use it for Time Machine and the like?

I have a 1TB external hard drive (NTFS) that has all my files from my old PC, how do I create a partition on it for HFS without formatting it so that I can use it for Time Machine and the like?

There aren't any 3rd party apps or anything. I use PC's and Mac's at school and the only computer connected to a printer at my house is a PC so i need access to both

My MacBook Pro 13" won't turn on 90% of the time I try to get it running, and when it does turn on, even on a charger, it shuts down if I stop using it for 2 seconds and it won't turn back on. Should I replace the battery?

My MacBook Pro 13" won't turn on 90% of the time I try to get it running, and when it does turn on, even on a charger, it shuts down if I stop using it for 2+ seconds and it won't turn back on. Should I replace the battery? It doesn't hold a charge either...

EmadJamal,
the battery won’t melt because of long connection to the AC charger, although that has the potential of reducing the battery’s life.
Do you have access to a second 60 W AC charger to test with your MacBook Pro, or access to a second 13-inch MacBook Pro against which your AC charger could be tested?

I am unable to get my iPhone 4s to connect with my JBL Flip speaker via bluetooth anymore. I have been using it for 2 months and now it just wont find device. Any ideas?

I am unable to get my iPhone 4s to connect with my JBL Flip speaker via bluetooth anymore. I have been using it for 2 months and now it just wont find device. Any ideas?

Where exactly did you buy this phone?
Have you tried contacting your phone carrier to activate the phone?
Do you have a sim card?

I use Djay for my Apple and I would like to use TC as an external hd to access from Djay, however when I look for my external T1 drive I cannot find it in iTunes so I can load onto Djay? Any help?

I use Djay for my Apple and I would like to use TC as an external hd to access from Djay, however when I look for my external T1 drive I cannot find it in iTunes so I can load onto Djay? Any help?

Initially, you asked if you can hardwire your MBA to the TC. The answer is yes, by using the optional USB Ethernet adapter that Apple provides. However, in order for your MBA to access the TC's internal or USB-attached HDD, it would need to establish a network connection to it. This would be true of any NAS device on an Ethernet network. Therein, lies the problem. Your MBA cannot connect to two networks simultaneously.
One option then, would be to have two separate iTunes Media folders; one on the MBA & the other on the TC. This way, you can download the music to your MBA when connected to the Internet at the AirPort lounge, and then use iTunes Consolidate Library feature to transfer the audio files to the TC's iTunes Media Folder location. A great program to help maintain multiple iTunes Librarys and/or Media Folders, that you may want to consider, is PowerTunes.

My Old macbook pro that i bought in 2009. I have broke my screen and havent used it for a while, and now i have found out that i can use a monitor , but i have forgot my password is there any way i can make a new password? Thank you for reading this.

My Old macbook pro that i bought in 2009. I have broke my screen and havent used it for a while, and now i have found out that i can use a monitor , but i have forgot my password is there any way i can make a new password? Thank you for reading this.

Have you read for possible solutions over in the "More Like This" thread over here?----------------------->

I have used lightroom for ~2 years and have lightroom 5.5 installed on a PC. Yesterday evening I uploaded a new set of photos which I cataloged and rated as usual. After that when I switched to the develop module trouble began. First thing was when using

I have used lightroom for ~2 years and have lightroom 5.5 installed on a PC. Yesterday evening I uploaded a new set of photos which I cataloged and rated as usual. After that when I switched to the develop module trouble began. First thing was when using the crop tool the picture would disappear and only reappear once I closed the tool. Then exposure and White balance changes would change the histogram but not the appearance of the photo. Finally clipping was also not appearing on the picture. I first reuploaded the photos. No effect. Then I reinstalled lightroom. No effect. Help please!

Try deleting your preferences file
How do I delete the Lightroom Preferences file? - The Lightroom Queen Help Desk & Members Area - Powered by Kayako Resol…

HT5787 i buy iphone 4sfrom some friend that's he got it from his friend in canada and me set up software for it from Itunes and it asking now for apple ID that's i don't used it for download apps and me can't open my Iphone right now !! what i should do ?

i buy iphone 4sfrom some friend that's he got it from his friend in canada and me set up software for it from Itunes and it asking now for apple ID that's i don't used it for download apps and me can't open my Iphone right now !! what i should do ?

It's not stolen ,that iphone came from canada to Egypt and me activeted it last night i got the acc from the owner
Thanks for Replay Mr

My iPod has not been working for a month now and i was hoping that you could help me.The part where you charge and sync the iPod is not connecting.There is defiantly not the lead as we use it for the iPhone and that works please could you help!

my iPod has not been working for a month now and i was hoping that you could help me.The part where you charge and sync the iPod is not connecting.There is defiantly not the lead as we use it for the iPhone and that works please could you help!
yours sincerly
jackfromsurrey

What I am saying is ..........
The iPhone HAS to be active making calls on the UK carrier network for the carrier to identify as "theirs" and therefore eligible for the Carrier to unlock
The way to achieve this is to use a PAYG sim making and receiving calls to establish a customer relationship with the Carrier and then follow the Carrier's process to unlock
With a PAYG it usually means adding a specified (by the carrier ) amount usually £15 /£20 depending on the carrier
This is how O2 function and according to Gemma this is how Vodafone work

Using vrf for separating management and user traffic

Similar Messages

Maybe you are looking for