A tenant requires a VRF for all bridge domains
and subnets. In this example, you will create a single, common VRF
for the firewall and endpoints. Then configure a dedicated bridge domain
for your firewall and disable dataplane learning. Disabling dataplane
learning is required to use Policy Based Redirect in a bridge domain.