System and method for supporting VRF-based traffic isolation across a network with dynamic provisioning

A method for virtual routing and forwarding support across a network with dynamic provisioning, the method comprising:

• at a first network device configured with a default virtual routing and forwarding instance (VRF) and a traffic isolation context VRF, the traffic isolation context VRF comprising host reachability information and having an associated subinterface configured with a VLAN tag that comprises a traffic isolation context label, exporting the host reachability information and the VLAN tag from the traffic isolation context VRF to the default VRF of the first network device;
• and
• providing, by the first network device, route information to a second network device, the route information comprising an address of the first network device as a next hop address, the host reachability information and the VLAN tag, wherein the first network device provides the route information to the second network device using a default VRF of the first network device, wherein providing the route information from the first network device to the second network device comprises sending a virtual private network (VPN) table that holds the VLAN tag for the subinterface such that the second network device receiving the VLAN tag in the VPN table triggers automatic configuration of the subinterface with the traffic isolation context VRF on a network interface over which the VPN table is received.

A non-transitory, machine-readable medium having executable instructions to cause a processor to dynamically configure a network device, the executable instructions comprising instructions for:

• receiving, over a network interface, route information from a next hop network device, the route information including an address for the next hop network device, a VLAN tag that comprises a traffic isolation context label for a traffic isolation context, and host reachability information;
• determining a target virtual routing and forwarding instance (VRF) corresponding to the traffic isolation context;
• configuring a subinterface of the network interface with the traffic isolation context label and the target VRF;
• importing a reachability for the next hop network device into the target VRF;
• and
• importing a route into the target VRF based on the route information, the route comprising the host reachability information and a next hop address, wherein the next hop address is the address of the next hop network device, wherein receiving the route information from the next hop network device comprises receiving a virtual private network (VPN) table that holds the VLAN tag for the subinterface such that receiving the VLAN tag in the VPN table triggers automatic configuration of the subinterface with the traffic isolation context corresponding to the target VRF on the network interface over which the VPN table is received.