VRF gives one router multiple independent routing contexts — separate RIB, separate CEF table, separate routing processes. Overlapping IPs across tenants are fine; a failure in one VRF doesn’t touch the others.
vrf forwardingon an interface removes its IP — re-add the address afterwards.- Each VRF runs its own OSPF/EIGRP/BGP:
router ospf 10 vrf CUSTOMER_A. - Between VRFs: nothing, until you do explicit route leaking (static, or BGP/RT-based in MPLS).
- VRF-Lite = no MPLS; MPLS L3VPN adds RD/RT + MP-BGP + labels.
ip route vrf VRF_A 0.0.0.0 0.0.0.0 10.10.10.254
ping vrf VRF_A 8.8.8.8
show ip route vrf VRF_AVRF is routing isolation, not a firewall.