No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S600-E V200R012C00 Configuration Guide - VPN

This document describes the configurations of VPN, including IPSec, MCE.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configure Route Exchange Between an MCE Device and a PE Device

Configure Route Exchange Between an MCE Device and a PE Device

Context

Routing protocols that can be used between an MCE device and a PE device are static routing, RIP, OSPF. Choose one of the following configurations as needed:

Configure Static Routes Between an MCE Device and a PE Device

Perform the following configurations on the MCE device.

Table 3-5  MCE configuration

Action

Command

Description

Enter the system view.

system-view

-

Configure a static route to the PE device.

ip route-static vpn-instance vpn-source-name destination-address { mask | mask-length } vpn-instance vpn-destination-name nexthop-address [ preference preference | tag tag ] *

You must specify the next hop address on the MCE device.

Configure RIP Between an MCE Device and a PE Device

Perform the following configurations on the MCE device.
Table 3-6  MCE configuration

Action

Command

Description

Enter the system view.

system-view

-

Create a RIP process running between the MCE and PE devices and enter the RIP view.

rip process-id vpn-instance vpn-instance-name

A RIP process can be bound to only one VPN instance. If a RIP process is not bound to any VPN instance before it is started, this process becomes a public network process and can no longer be bound to a VPN instance.

Enable RIP on the network segment of the interface to which the VPN instance is bound.

network network-address

-

(Optional) Import VPN routes of the site into the RIP routing table.

import-route { { static | direct | unr } | { { rip | ospf } [ process-id ] } } [ cost cost | route-policy route-policy-name ] *

Perform this step if another routing protocol is running between the MCE device and VPN sites in the VPN instance.

Configure OSPF Between an MCE Device and a PE Device

Perform the following configurations on the MCE device.

Table 3-7  MCE configuration

Action

Command

Description

Enter the system view.

system-view

-

Create an OSPF process running between the MCE and PE devices and enter the OSPF view.

ospf [ process-id | router-id router-id ] * vpn-instance vpn-instance-name

-

(Optional) Import VPN routes of the site into the OSPF routing table.

import-route { limit limit-number | { direct | unr | rip [ process-id-rip ] | static | ospf [ process-id-ospf ] } [ cost cost | type type | tag tag | route-policy route-policy-name ] * }

Perform this step if another routing protocol is running between the MCE device and VPN sites in the VPN instance.

Disable routing loop detection in the OSPF process.

vpn-instance-capability simple

By default, routing loop detection is disabled in an OSPF process. If routing loop detection is not disabled in the OSPF process on the MCE device, the MCE device rejects OSPF routes sent from the PE device.

Configure an OSPF area and enter the OSPF area view.

area { area-id | area-id-address }

-

Enable OSPF on the network segment of the interface to which the VPN instance is bound.

network ip-address wildcard-mask

-

Translation
Download
Updated: 2018-09-01

Document ID: EDOC1100037956

Views: 2531

Downloads: 7

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next