We run PIM-SM passive today and push everything to our providers. But now many off them doesn't want that, they want us to have a ordinary PIM-SM with MSDP (I've gotten everything working except multicast). So to isolate them from our core, I want a separate VRF.
A solution would be to add a new "droppoing" switch and it would only deliver to them, but it's just wrong 😉