No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - VPN

AR650, AR1600, and AR6100 V300R003

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Auto VPN Peer Relationships

Configuring Auto VPN Peer Relationships

After two PEs establish an auto VPN peer relationship, they can exchange auto VPN routes.

Context

On an auto VPN network, two PEs need to establish an auto VPN peer relationship before they can exchange auto VPN routing information.

If no RR is deployed, perform the following steps on each PE. If an RR is deployed, perform the following steps on each PE and the RR.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run bgp as-number

    The BGP view is displayed.

  3. Run peer ipv4-address as-number { as-number-plain | as-number-dot }

    The peer PE is specified as a BGP peer.

  4. Run peer ipv4-address connect-interface interface-type interface-number

    An interface used to establish a TCP connection for a BGP peer relationship is specified.

  5. Run ipv4-family tunnel-encap-ext

    The BGP Tunnel-encap-ext IPv4 address family is enabled, and its view is displayed.

  6. Run peer { ipv4-address | group-name } enable

    The capability to exchange auto VPN routes with the specified peer or peer group is enabled.

  7. (Optional) Run peer ipv4-address group group-name

    The auto VPN peer is added to the peer group.

    Adding auto VPN peers to a peer group simplifies BGP network configuration and management.

  8. (Optional) Run peer { group-name | ipv4-address } route-policy route-policy-name export

    A route-policy is specified for the auto VPN peer or peer group to advertise only specified routes.

    An export route-policy must be configured to precisely control auto VPN routes. An export route-policy filters routes before they are advertised to other auto VPN peers or peer groups.

  9. (Optional) Run peer { ipv4-address | group-name } route-policy route-policy-name import

    A route-policy is specified for the auto VPN peer or peer group to receive only specified routes.

    An import route-policy must also be configured to precisely control auto VPN routes. An import route-policy filters routes that are received from other auto VPN peers or peer groups.

  10. (Optional) Run peer { ipv4-address | group-name } route-limit limit [ percentage ] [ alert-only | idle-forever | idle-timeout minutes ]

    The maximum number of routes that can be received from a peer is specified.

Download
Updated: 2019-04-12

Document ID: EDOC1100041799

Views: 31252

Downloads: 43

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next