Cisco Nexus 7000 Series Configuration Manual page 63

LISP Instance-ID Support
Figure 15: Large Scale LISP Site with Virtualized IPv4 EIDs and a Shared IPv4 Core
The components in the figure are as follows:
• LISP site:
• LISP remote sites
• Each customer premises equipment (CPE) switch functions as a LISP ITR and ETR (xTR), as well
as a Map-Server/Map-Resolver (MS/MR).
• Both LISP xTRs have three VRFs: TRANS (for transactions), SOC (for security operations), and
FIN (for financials). Each VRF contains only IPv4 EID-prefixes. No overlapping prefixes are used;
segmentation between each VRF by LISP instance-ids makes this possible. Note that in this example,
the separate authentication key is configured "per-vrf" and not "per-site", which affects both the
xTR and MS configurations.
• The HQ LISP Site is multihomed to the shared IPv4 core, but each xTR at the HQ site has a single
RLOC.
• Each CPE also functions as an MS/MR to which the HQ and Remote LISP sites can register.
• The map server site configurations are virtualized using LISP instance IDs to maintain separation
between the three VRFs.
• Each remote site CPE switch functions as a LISP ITR and ETR (xTR).
• Each LISP xTRs has the same three VRFs as the HQ Site: TRANS, SOC, and FIN. Each VRF
contains only IPv4 EID-prefixes.
Configuring Large-Scale LISP Shared Model Virtualization
Cisco Nexus 7000 Series NX-OS LISP Configuration Guide
51