No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Binding an Interface to a VPN Instance

Binding an Interface to a VPN Instance

After an interface is bound to a VPN instance, the interface becomes a part of the VPN. Packets entering the interface will be forwarded based on the virtual routing and forwarding (VRF) table of the VPN.


After a VPN instance is configured on a PE, an interface that belongs to the VPN must be bound to the VPN instance. Otherwise, the interface functions as a public network interface and cannot forward VPN data.

Perform the following steps on the PEs that are connected to CEs:


  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The view of the interface to be bound to a VPN instance is displayed.

  3. Run ip binding vpn-instance vpn-instance-name

    The interface is bound to the VPN instance.

    • Running the ip binding vpn-instance command deletes Layer 3 IPv4 and IPv6 configurations, such as the IP address and routing protocol on the interface. Reconfigure them if needed.
    • An interface cannot be bound to a VPN instance that has no address family enabled.

  4. Run ip address ip-address { mask | mask-length }

    The interface IP address is configured.

Updated: 2019-08-07

Document ID: EDOC1100033725

Views: 142249

Downloads: 357

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next