# Lab: Implementing VRF-Lite with VXLAN

DevFeed: [Lab: Implementing VRF-Lite with VXLAN](<https://devfeed.tech/articles/lab-implementing-vrf-lite-with-vxlan-11398.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/06/lab-vxlan-vrf-lite/>)

Published: 2026-06-05T07:21:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [VXLAN](<https://devfeed.tech/topics/vxlan.md>), [networking](<https://devfeed.tech/topics/networking.md>), [IP routing](<https://devfeed.tech/topics/ip-routing.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [apple](<https://devfeed.tech/tags/apple.md>), [container](<https://devfeed.tech/tags/container.md>), [evpn](<https://devfeed.tech/tags/evpn.md>), [free](<https://devfeed.tech/tags/free.md>), [github](<https://devfeed.tech/tags/github.md>), [installation](<https://devfeed.tech/tags/installation.md>), [ip-routing](<https://devfeed.tech/tags/ip-routing.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [routing](<https://devfeed.tech/tags/routing.md>), [vxlan](<https://devfeed.tech/tags/vxlan.md>)

## AI overview

This lab exercise demonstrates how to implement a VRF-Lite design with VXLAN. The design uses VRF routing protocols over VXLAN-backed VLAN segments and requires IP routing on core switches instead of configuring VLANs and routing protocols for every VRF on every link and device. The lab can run on netlab-enabled infrastructure, a free GitHub Codespace, or an Apple-silicon Mac.

## Source excerpt

Did you know that you can implement a VRF-Lite design with VXLAN? All you need are devices that can run VRF routing protocols over VXLAN-backed VLAN segments. Compared to the "traditional" VRF-Lite design, in which you need a set of VLANs on every link and every device running the routing protocol for every VRF, the VXLAN-based design needs just IP routing on the core switches, resulting in a design that's pretty close to what we were building with DMVPN (without IPsec and NHRP complications). Read more ...