# Front-Door VRF (FVRF)

**URL:** https://forum.networklessons.com/t/front-door-vrf-fvrf/56931
**Category:** IP Routing
**Created:** [May 2, 2025, 7:58pm UTC](https://forum.networklessons.com/t/front-door-vrf-fvrf/56931 "2025-05-02T19:58:42Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![pralineuse](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/p/b77776/32.png) [@pralineuse](https://forum.networklessons.com/u/pralineuse)
#### Post date: [May 2, 2025, 7:58pm UTC](https://forum.networklessons.com/t/front-door-vrf-fvrf/56931/1 "2025-05-02T19:58:43Z")

</div>

I came across this cool topic of Front-Door VRF (FVRF).

Front Door VRF is to isolate the underlay and overlay networks, both to avoid potential routing recursion issues as well as to add a layer of security by segmenting the underlay and overlay at L3.

Can I suggest to create a lesson on that?

Regards,  
Pascal

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [May 5, 2025, 4:36am UTC](https://forum.networklessons.com/t/front-door-vrf-fvrf/56931/2 "2025-05-05T04:36:58Z")

</div>

Hello Pascal

Thanks for the suggestion! You can officially make your suggestion at the following member ideas page:

> **[Lesson Ideas - NetworkLessons.com](https://networklessons.com/lesson-ideas)**
>
> This page allows networklessons members to share what content they would like to see in the future.

There you can suggest new topics, and you may find that others have made similar suggestions, and you can add your voice to theirs.

The specific topic is very interesting, and is associated with VRF-Aware IPsec. The truth is I haven’t found very much Cisco documentation about it, so it would make a good addition. Here is a link to Cisco documentation that mentioned it briefly…

> **[VRF-Aware IPsec - Security and VPN Configuration Guide, Cisco IOS XE 17.x -...](https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/sec-vpn/b-security-vpn/m_vrf-aware-fw.html#GUID-BEF7B4FE-0D07-4DF0-9AC6-08D3AEBAE326)**
>
> A VRF-aware firewall inspects IP packets that are sent or received within a VRF. VRF allows multiple instances of routing tables to coexist within a single router. This allows VPN segregation and the ability to have independent overlapping of IP...

I hope this has been helpful!

Laz

---

<div class="post-metadata">

### Author: ![ors](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/ors/32/4880_2.png) [@ors](https://forum.networklessons.com/u/ors)
#### Post date: [May 10, 2025, 7:14am UTC](https://forum.networklessons.com/t/front-door-vrf-fvrf/56931/3 "2025-05-10T07:14:28Z")

</div>

Hi Pascal  
I stumbled across the same topic a while ago - Denise Fishbourne has a cool blog on the topic including topologi and config examples.  
Its quite easy to replicate her setup based on the blogpost.

> **[Tunnels and the Use of Front Door VRFs](https://www.networkingwithfish.com/tunnels-and-the-use-of-front-door-vrfs/)**
>
> Front Door VRFs seem to cause a lot of confusion. In this blog Fish goes delves into the whys, the hows, and the how it works in a simple easy way.

Have fun  
Orla