VRF Interface Limit

It seems the limit imposed by Mikrotik for the number of interfaces which can be added to a VRF is set to 30. Through winbox, one is only able to add 30 interfaces before the interface stops allowing you to add more. This limit seems not to exist on the CLI as one can easy exceed this limit, however it seems things do not work as they should. When viewing the interface list in winbox when the number exceeds 30, the active interface (vlan in this case) is displayed in red. As soon as one reduces the number of interfaces to a total of 30, the active interface turns black.

Initial reports from Mikrotik Support suggest that you can have up to 125 interfaces attached to a VRF, however this doesn’t seem to be the case.

I would prefer not to implement a device per customer when they have more than 30 GRE tunnels terminating in to their VRF…

It sounds like this is a WinBox UI bug rather than a bug in RouterOS.

Have Mikrotik support confirmed this as a known issue ?

I am busy working with the Mikrotik Support, but it seems that even though you can add them on the CLI, it doesnt work… something breaks :slight_smile:

Great, keep us updated.

I thought I would have hit this bug by now, but when I checked we are at max 28 interfaces per VRF on a bunch of our routers, I guess we have been lucky that we terminate customer interfaces across multiple PE routers !

It is only a matter of time before we will hit the same problem as you..

We have a client with more than 50 interfaces on a vrf without problem. We use CLI for do that

Adding interfaces to a VRF from the CLI is horrific on RouterOS (Sorry guys, but it is).

There badly needs to be an append operator !

Yeah! I agree. I did post a feature request and MT support provided a post with an alternative.

http://forum.mikrotik.com/t/feature-request-append-values-to-configuration/101729/1

We have 4 devices in multiple locations that terminate the tunnels based on the best local routes available and act as fail-over for the other locations. Sort of n+4 redundancy. For this reason I provision every customers tunnel on all 4 devices, which in turn easily exceeds the limit set in winbox for example :slight_smile:.

The next option is to provide a dedicated router for our customers with a large number of sites so that we don’t use VRFs, removing this limitation.

Cool, so we could say then that 50 interfaces is still ok?

When I ran in to this issue, we had attached about 80 interfaces (not all active) and found that the active sites suddenly became isolated.

Hi

Old post, but what was the final outcome of this?

Brad

The same as anything to do with routing in RouterOS v6, “Fixed in v7”… Since 2013 :frowning:

Have also just discovered this issue… the hard way. Does anyone have any updates on this?

Agreed that the CLI side of this definitely needs to be better - everything on our routers is scripted except for having to manually enter VRF!

v7beta does not have this limit.

So if I understand this answer correctly, VRFs are limited to system resources available? Which should mean that several thousand is realistically possible

Not really but almost. Total amount of tables is limited to 65k (this is including policy routing tables and vrfs in total).