No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Setting Up an L2VPN and an L3VPN Using a GRE Tunnel

Setting Up an L2VPN and an L3VPN Using a GRE Tunnel


The AR100&AR120&AR150&AR160&AR200 series routers cannot be used in this scenario.

Usually, a Multiprotocol Label Switching (MPLS) VPN backbone network uses label switched paths (LSPs) as public network tunnels. If the core devices (P devices) on the backbone network do not support MPLS but the edge devices (PE devices) support MPLS, LSPs cannot be used as public network tunnels. In this scenario, a GRE tunnel can be used instead to provide the Layer 3 virtual private network (L3VPN) or Layer 2 virtual private network (L2VPN) solution on the backbone network.

Label Distribution Protocol (LDP) over GRE enables MPLS LDP packets to be transmitted over a GRE tunnel. After MPLS LDP is enabled on GRE tunnel interfaces, LDP LSPs can be set up over the GRE tunnel.

As shown in Figure 3-8, L2VPN or L3VPN services are deployed on PE1 and PE2 to allow communication between the L2VPN or L3VPN sites of the enterprise. When backbone network devices have MPLS disabled or do not support MPLS, an LDP LSP over a GRE tunnel needs to be set up between PE1 and PE2.

Figure 3-8  LDP over GRE application in an enterprise L3VPN or L2VPN solution (MPLS not supported on the P devices)

As shown in Figure 3-9, MPLS is enabled only on P2 but not P1 on the backbone network. A GRE tunnel can be set up between PE1 and P2, in order to set up an LDP LSP over the GRE tunnel.

Figure 3-9  LDP over GRE application in an enterprise L3VPN or L2VPN solution (MPLS supported only on P2)

Updated: 2019-08-07

Document ID: EDOC1100033725

Views: 141711

Downloads: 357

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next