{% set vrf_command = '/sbin/ip vrf exec ' + vrf + ' ' if vrf is defined else '' %} [Service] ExecStart= ExecStart={{vrf_command}}/usr/sbin/sshd -D $SSHD_OPTS