HP 6125XLG R2306-HP 6125XLG Blade Switch MCE Configuration Guide - Page 8

Creating a VPN instance, Associating a VPN instance with an interface

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 8 highlights

Creating a VPN instance You can configure a description for a VPN instance to record its related information, such as its relationship with a certain VPN. To create and configure a VPN instance: Step 1. Enter system view. 2. Create a VPN instance and enter VPN instance view. 3. Configure an RD for the VPN instance. 4. (Optional.) Configure a description for the VPN instance. Command system-view ip vpn-instance vpn-instance-name route-distinguisher route-distinguisher description text Remarks N/A By default, no VPN instance is created. By default, no RD is specified for the VPN instance. By default, no description is configured for the VPN instance. NOTE: To configure BGP for a VPN instance on the MCE, you must configure an RD for the VPN instance. Associating a VPN instance with an interface After configuring a VPN instance, you must associate the VPN instance with the interfaces connected to the VPN site and the PE. To associate a VPN instance with an interface: Step 1. Enter system view. Command system-view 2. Enter interface view. interface interface-type interface-number 3. Associate the current interface ip binding vpn-instance with a VPN instance. vpn-instance-name Remarks N/A N/A By default, no VPN instance is associated with an interface. NOTE: The ip binding vpn-instance command deletes the IP address of the current interface. You must reconfigure an IP address for the interface after configuring the command. Configuring route attributes for a VPN instance The MCE controls VPN route advertisement as follows: 1. When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a route target extended community attribute list, which is usually the export target attribute list of the VPN instance associated with the site. 2. The VPN instance determines which routes it can accept and redistribute according to the import-extcommunity in the route target. 3. The VPN instance determines how to change the route target attributes for routes to be advertised according to the export-extcommunity in the route target. To configure route attributes for a VPN instance: 5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
5
Creating a VPN instance
You can configure a description for a VPN instance to record its related information, such as its
relationship with a certain VPN.
To create and configure a VPN instance:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a VPN instance and
enter VPN instance view.
ip vpn-instance
vpn-instance-name
By default, no VPN instance is
created.
3.
Configure an RD for the VPN
instance.
route-distinguisher
route-distinguisher
By default, no RD is specified for
the VPN instance.
4.
(Optional.) Configure a
description for the VPN
instance.
description
text
By default, no description is
configured for the VPN instance.
NOTE:
To configure BGP for a VPN instance on the MCE, you must configure an RD for the VPN instance.
Associating a VPN instance with an interface
After configuring a VPN instance, you must associate the VPN instance with the interfaces connected to
the VPN site and the PE.
To associate a VPN instance with an interface:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Associate the current interface
with a VPN instance.
ip binding vpn-instance
vpn-instance-name
By default, no VPN instance is
associated with an interface.
NOTE:
The
ip binding vpn-instance
command deletes the IP address of the current interface. You must
reconfigure an IP address for the interface after configuring the command.
Configuring route attributes for a VPN instance
The MCE controls VPN route advertisement as follows:
1.
When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a route
target extended community attribute list, which is usually the export target attribute list of the VPN
instance associated with the site.
2.
The VPN instance determines which routes it can accept and redistribute according to the
import-extcommunity
in the route target.
3.
The VPN instance determines how to change the route target attributes for routes to be advertised
according to the
export-extcommunity
in the route target.
To configure route attributes for a VPN instance: