Hi Alex, Under /ip router vrf you can also attach interfaces (VLANs, ports, tunnels, whatever) so that all traffic from them is automatically inside the VRF. No mangle rules required. Be mindful though that all management traffic is by default in the main routing table. If you want them accessible inside a VRF, you will need to use a mangle rule for that. I had to do that so customers could do SNMP queries against our routers, and also for DHCP relays to work correctly inside a VRF. With that in mind, would it be possible to have all customer traffic inside a VRF, and leave your management traffic in Main? It might be less troublesome. Regards, Philip -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Alex Samad - Yieldbroker Sent: Monday, 9 January 2017 4:47 PM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] vrf on mikrotik Hi I asked earlier, thought I would just double check. CCR1036 - looking at using this as my exterior WAN connector / Router. But I want to setup a management port (actually a VLAN) so I want to place that interface and some routes into its own VRF. I have just setup some arista switches which I have done the same - so all the management traffic traverses 1 port. I can see in /ip route vrf I can add routes to a route mark name space. How do I add all packet coming in on a specific interface to a VRF, do I use the firewall mangle table, and basically mark all the packet with the route mark I want to use. Is that it ?? Thanks Alex _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au