You can configure IRB interfaces under virtual routing and forwarding (VRF) in a VPN Layer 3 network. IRB interfaces enable a switch to recognize which packets are being sent to local addresses so that they are bridged whenever possible and are routed only when needed. This same functionality applies, when IRB interfaces are part of routing instances or VRF. Virtual routing instances allows you to divide the switch into multiple independent virtual routers, each with its own routing table. This increases functionality by allowing network paths to be segmented without using multiple devices. Because traffic is automatically segregated, VRF also increases network security and can eliminate the need for encryption and authentication. Internet service providers often take advantage of VRF to create separate VPNs for their customers.