Specifications

ip route static inter-vrf
MP-98
Cisco IOS Multiprotocol Label Switching Command Reference
January 2010
ip route static inter-vrf
To allow static routes to point to Virtual Private Network (VPN) routing and forwarding (VRF) interfaces
other than those to which the static route belongs, use the ip route static inter-vrf command in global
configuration mode. To prevent static routes from pointing to VRF interfaces in VRFs to which they do
not belong, use the no form of this command.
ip route static inter-vrf
no ip route static inter-vrf
Syntax Description This command has no arguments or keywords.
Defaults Static routes are allowed to point to VRF interfaces in any VRF.
Command Modes Global configuration
Command History
Usage Guidelines The ip r
oute static inter-vrf command is turned on by default. The no ip route static inter-vrf
command causes the respective routing table (global or VRF) to reject the installation of static routes if
the outgoing interface belongs to a different VRF than the static route being configured. This prevents
security problems that can occur when static routes that point to a VRF interface in a different VRF are
misconfigured. You are notified when a static route is rejected, then you can reconfigure it.
For example, a static route is defined on a provider edge (PE) router to forward Internet traffic to a
c
ustomer on the interface pos1/0, as follows:
Router(config)# ip route 10.1.1.1 255.255.255.255 pos 1/0
The same route is mistakenly configured with the next hop as the VRF interface pos10/0:
Router(config)# ip route 10.1.1.1 255.255.255.255 pos 10/0
By default, Cisco IOS software accepts the command and starts forwarding the traffic to both pos1/0
(Internet) and pos10/0 (VPN) interfaces.
Release Modification
12.0(23)S This command was introduced.
12.2(13)T This command was integrated into Cisco IOS Release 12.2(13)T.
12.2(14)S This command was integrated into Cisco IOS Release 12.2(14)S.
12.2(33)SRA This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX This command is supported in the Cisco IOS Release 12.2SX train. Support
i
n a specific 12.2SX release of this train depends on your feature set,
platform, and platform hardware.