No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Command Reference

CloudEngine 8800, 7800, 6800, and 5800 V200R002C50

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ip vpn-instance

ip vpn-instance


The ip vpn-instance command creates a VPN instance and displays the VPN instance view.

The undo ip vpn-instance command deletes a specified VPN instance.

By default, no VPN instance is configured.


ip vpn-instance vpn-instance-name

undo ip vpn-instance vpn-instance-name


Parameter Description Value
vpn-instance-name Specifies the name of a VPN instance. The value is a string of 1 to 31 case-sensitive characters except spaces. When double quotation marks are used to include the string, spaces are allowed in the string. The value _public_ is reserved and cannot be used as the VPN instance name.


System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When private network data needs to travel across a public network, you need to configure a VPN instance on the PE of the public network. The public network mentioned here is an MPLS backbone network.

VPN instances are required for all L3VPN configurations.


The CE6810LI does not support packet forwarding based on the VPN routing table. In addition, the IP address segment of the interface bound to the VPN instance cannot be the same as the public network IP address segment on the CE6810LI.

After the ip vpn-instance command is run, a virtual routing table is created on the PE and consumes resources on the PE.

After the undo ip vpn-instance command is used to delete a VPN instance, all configurations of this VPN instance are deleted.

Follow-up Procedure

After creating a VPN instance, perform the following configurations in the VPN instance view:

  • Enable the IPv4 or IPv6 address family for the VPN instance. A VPN instance supports both the IPv4 and IPv6 address families. You need to run the ipv4-family (VPN instance view) or ipv6-family (VPN instance view) command to enable the IPv4 or IPv6 address family based on the type of the protocol stack used to advertise VPN routes in the VPN instance.
  • Configure an RD for the IPv4 address family of the VPN instance. You are allowed to perform VPN configurations in the address family view only after using the route-distinguisher command to configure an RD for the address family.
  • Configure a VPN target for the VPN instance using the vpn-targetcommand. The VPN target controls route learning between VPN instances.
  • Bind the VPN instance to the PE or MCE interface connected to the VPN using the ip binding vpn-instancecommand. After an interface is bound to a VPN instance, the interface becomes a part of the VPN. Packets entering the interface will be forwarded based on the VRF table of the VPN.


# Create a VPN instance named vrf1.

<HUAWEI> system-view
[~HUAWEI] ip vpn-instance vrf1
Updated: 2019-03-21

Document ID: EDOC1000166501

Views: 87358

Downloads: 400

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next