VRF
Virtual routing forwarding，虚拟路由转发表，简称VPN。他能在两个site之间建立两个不用的路由表，相互隔离，把每台交换机逻辑上分成多台虚拟交换机，即多VPN路由转发实力。一般用于区分不同业务流量，不同的业务走不同的路由表，从而互相独立，达到控制设备全局路由流量走向的目的。
Vlan1960：10.130.229.X
实例：5560做管理网段网关（全局，254），7510将VPN流量转全局；厂商设备管理地址为该网段任意地址（全局.X）
厂商：
Vlan 1960
interface Vlan-interface1960
ip address 10.130.229.1 255.255.255.0
ip route-static 10.130.229.0 24 10.130.229.254
interface GigabitEthernet1/0/1
port access vlan 1960
7510
interface Vlan-interface1960
ip binding vpn-instance DMZ
ip address 10.130.229.253 255.255.255.0
ip vpn-instance DMZ
route-distinguisher 100:1
#
interface Vlan-interface1960
ip binding vpn-instance DMZ
ip address 10.130.229.253 255.255.255.0
#
ip route-static vpn-instance DMZ 10.130.229.0 24 10.130.229.254
interface range GigabitEthernet1/0/1 GigabitEthernet1/0/3
port access vlan 1960
5560:
interface Vlan-interface1960
ip address 10.130.229.254 255.255.255.0
interface GigabitEthernet1/0/1
port access vlan 1960
验证：
7510：
<H3C>dis arp vpn-instance DMZ
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address SVLAN/VSI Interface/Link ID Aging Type
10.130.229.1 a230-20b1-0302 1960 GE1/0/3 20 D
10.130.229.254 a22e-6fd3-0202 1960 GE1/0/1 3 D
<H3C>dis arp
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address SVLAN/VSI Interface/Link ID Aging Type
10.130.229.1 a230-20b1-0302 1960 GE1/0/3 20 D
10.130.229.254 a22e-6fd3-0202 1960 GE1/0/1 3 D
<H3C>ping -vpn-instance DMZ 10.130.229.254
Ping 10.130.229.254 (10.130.229.254): 56 data bytes, press CTRL_C to break
56 bytes from 10.130.229.254: icmp_seq=0 ttl=255 time=1.000 ms
56 bytes from 10.130.229.254: icmp_seq=1 ttl=255 time=1.000 ms
56 bytes from 10.130.229.254: icmp_seq=2 ttl=255 time=1.000 ms
56 bytes from 10.130.229.254: icmp_seq=3 ttl=255 time=0.000 ms
56 bytes from 10.130.229.254: icmp_seq=4 ttl=255 time=0.000 ms