Configuration Task Summary
After basic BGP/MPLS IP VPN configurations are complete, a simple VPN network can be established using MPLS technology. To deploy special BGP/MPLS IP VPN networking, perform other configuration tasks according to the reference sections provided in the following table.
Table 2-3 lists the BGP/MPLS IP VPN configuration tasks.
Scenario |
Description |
Task |
|---|---|---|
Configure basic BGP/MPLS IP VPN functions |
This configuration establishes a simple BGP/MPLS IP L3VPN network with basic functions. |
|
Configure BGP/MPLS IP VPN in various networking modes |
You adjust the basic BGP/MPLS IP L3VPN configurations in
different networking mode to implement flexible communication and
isolation between VPNs:
|
|
Configure inter-AS VPN |
Configure inter-AS VPN if the backbone network
spans multiple ASs. Three inter-AS VPN solutions are available, applicable
to different scenarios:
|
|
Configure an MCE device |
An MCE device can connect to multiple VPNs. The MCE solution isolates services of different VPNs while reducing cost of CE devices. |
|
Configure HVPN |
On an HVPN, PEs play different roles and provide different functions. These PEs form a hierarchical architecture to provide functions that are provided by one PE on a non-hierarchical VPN. HVPNs lower the performance requirements for PEs. |
|
Configure OSPF sham links |
To ensure that VPN traffic is forwarded over the backbone network but not through backdoor routes, configure OSPF sham links between PE devices. Then routes on the MPLS VPN backbone network change into intra-area OSPF routes and can be preferred in VPN traffic forwarding. |
|
Configure BGP/MPLS IP VPN reliability |
To improve VPN network reliability, you can deploy a VPN networking with full-mesh connections on the backbone network, nested PE devices on the MPLS network, and CE dual-homing (or multi-homing) on the access layer. In this networking, a BGP route reflector (RR) can be configured to reduce the number of MP-IBGP connections. This configuration mitigates loads on the network devices and facilitates device maintenance and management. The following technologies can also be used to improve VPN network reliability:
|
Configuring Route Reflection to Optimize the VPN Backbone Layer |
Configure VPN tunnel policies |
When VPN services need to be transmitted over a specified traffic engineering (TE) tunnel or when load balancing needs to be performed among multiple tunnels to fully use network resources, configure VPN tunnel policies. |
|
Connect VPNs to the Internet |
If users in a VPN need to connect to the Internet, configure interconnection between the VPN and the Internet. |
Previous
