NSXT VRF Lite uplink explanation

[MasterWayZ]

Hi,

I've been having an issue where I have to run four Edge nodes as I have 4 Tier 0s that need uplinks.

Recently I heard that using VRF lite could be a solution, but I'm having some issues on understanding the implementation.

The Tier 0 router, the main one, and its VRF lite Tier 0s require uplink interfaces. Which I understand, however, I understand that each VRF lite requires an uplink interface to its segment that is it supposed to connect to. But what about the main Tier 0 router that they run on? What kind of uplink does this need? I'm confused on this.

Anyone who could explain or has documentation that explains it?

[Sreec · Accepted solution]

Parent T0 needs an external interface when we configure VRF, this is because vrf uplinks need a connection to Tier-0 gateway interface which should be in Trunk mode to peer with upstream routers and we use access VLAN to differentiate different VRF tenants. I have answered a similar thread here https://communities.vmware.com/t5/VMware-NSX-Discussions/NSX-T-3-0-Adding-interfaces-to-VRF-gateway-... 

[CyberNils]

Take a look at this:

https://nsx.techzone.vmware.com/resource/nsx-t-reference-design-guide-3-0#_Toc59008633

[MasterWayZ]

I understand it now. In the accepted answer, there's a link to a topic thatt goes to this blog post: https://vdcnetworker.blog/vrf-lite-on-nsx-t-3-0/

From there, I went ahead and set it up and it all works. Separate VLAN Transport Zone for the VRFs, with a trunked VLAN for the VRFs and the main Tier 0 interface just sitting on an untagged VLAN with no routing or static routes, just kind of there.