No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring a VPN Instance

Configuring a VPN Instance


The following configurations are performed on the MCE device.

Similar configurations must be performed on the PE devices. The PE configuration procedure and commands used vary in devices from different vendors and different product models. For detailed configuration, see the documentation of the PE devices.


  1. Enable IPv6 globally
    1. Run system-view

      The system view is displayed.

    2. Run ipv6

      IPv6 is enabled globally.

  2. Create VPN instance
    1. Run ip vpn-instance vpn-instance-name

      A VPN instance is created, and its view is displayed.


      A VPN instance name is case sensitive. For example, vpn1 and VPN1 are different VPN instances.

      No default VPN instance is defined on an MCE device, and you can create multiple VPN instances on the MCE device.

    2. (Optional) Run description description-information

      The description is configured for the VPN instance.

      The description is similar to that of the host name and interface, which can be used to record information about the relationship between a VPN instance and a VPN.

    3. (Optional) Run service-id service-id

      A service ID is created for the VPN instance.

      A service ID is unique on a device. It distinguishes a VPN service from other VPN services on the network.

    4. Run ipv6-family

      The IPv6 address family is enabled for the VPN instance, and the VPN instance IPv6 address family view is displayed.

      VPN instances support both the IPv4 and IPv6 address families. Configurations in a VPN instance can be performed only after an address family is enabled for the VPN instance based on the advertised route and forwarding data type.

    5. Run route-distinguisher route-distinguisher

      An RD is configured for the VPN instance IPv6 address family.

      A VPN instance IPv6 address family takes effect only after being configured with an RD. The RDs of different VPN instances on a PE must be different.

      • An RD can be modified or deleted only after the VPN instance is deleted or the VPN instance IPv6 address family is disabled.

  3. Bind the VPN instance to an interface.
    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. Run ip binding vpn-instance vpn-instance-name

      The VPN instance is bound to the interface.

      By default, no VPN instance is bound to an interface.

      When you run the ip binding vpn-instance command on an interface, all configurations of Layer 3 features on the interface, such as the IP address and routing protocol, are deleted. To use these features, reconfigure them.

    4. Run ipv6 enable

      IPv6 is enabled on the interface.

    5. Run ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }

      An IPv6 address is configured for the interface.

Updated: 2019-08-07

Document ID: EDOC1100033725

Views: 143591

Downloads: 361

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next