Hi experts,
I need to set up a L3VPN hub and spoke for a customer. I have previously done this using different RT's for hub and spokes. This time however there will be multiple spoke sites connected to the same PE. All spoke sites are reached via static routing from the PE's. What is best practice in this case? I would prefer not to use multiple VRF's on the PE for the very same VPN if possible. And I would also prefer to restrict spokes form reaching each other via routing, not ACL's. Is there a way to do this? Do I have to use multiple VRF's?
Reccy