No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - VPN 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Configuration Guide - VPN
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring a Local CCC to Access an L3VPN

Example for Configuring a Local CCC to Access an L3VPN

A local Circuit Cross Connect (CCC) can be configured to access an L3VPN through a VE-Group.

Networking Requirements

As shown in Figure 10-11, the local CCC that is configured on PE1 accesses the L3VPN between PE1 and PE2.

Figure 10-11 Networking diagram of configuring a local CCC to access an L3VPN
NOTE:
  • Interfaces 1 through 2 in this example are GE 0/1/0, GE 0/1/1, respectively.



Configuration Roadmap

The configuration roadmap is as follows:

  1. Assign an IP address to each interface.

  2. Configure public network routes between PE1 and PE2 and advertise IP addresses of loopback interfaces.
  3. Enable MPLS and MPLS LDP on PE1 and PE2, and enable MPLS L2VPN on PE1.
  4. Configure a local CCC on PE1.
  5. Configure an L3VPN on PE1 and PE2.

Data Preparation

To complete the configuration, you need the following data:

  • VE-Group ID
  • IP addresses of the interfaces

Procedure

  1. Assign an IP address to each interface. Configuration details are not mentioned here. For details, please check Configuration Files.
  2. Configure public network routes between PE1 and PE2 and advertise IP addresses of loopback interfaces. IS-IS is adopted here, and configuration details are not mentioned. For details, please check Configuration Files.
  3. Enable MPLS and MPLS LDP on PE1 and PE2, and enable MPLS L2VPN on PE1. Configuration details are not mentioned here. For details, please check Configuration Files.
  4. Configure a local CCC on PE1.
    1. Configure an L2VE interface and an L3VE interface on PE1, and add these interfaces to the VE-Group.

      [~PE1] interface virtual-ethernet0/1/0
      [*PE1-Virtual-Ethernet0/1/0] ve-group 1 l2-terminate
      [*PE1-Virtual-Ethernet0/1/0] quit
      [*PE1] interface virtual-ethernet0/1/1
      [*PE1-Virtual-Ethernet0/1/1] ve-group 1 l3-access
      [*PE1-Virtual-Ethernet0/1/1] quit
      [*PE1] commit

      NOTE:
      This example uses Virtual-Ethernet interface to configure L2VPN accessing L3VPN. As a VE interface is bound to only one board, when the board is faulty, services are interrupted. To improve service reliability, create two global virtual interfaces: Global-VE1 and Global-VE2. Global-VE1 is configured as an L2VE interface to terminate L2 services, and the Global-VE2 is configured as an L3VE interface to access an L3 network. Other configurations remain unchanged

    2. Configure a local CCC on PE1, with the inbound interface as the PE1 interface connecting to CE1 and the outbound interface as the L2VE interface.

      [~PE1] interface virtual-ethernet0/1/0.1
      [*PE1-Virtual-Ethernet0/1/0.1] vlan-type dot1q 100
      [*PE1-Virtual-Ethernet0/1/0.1] quit
      [*PE1] ccc ccc-ve interface gigabitethernet 0/1/0 out-interface virtual-ethernet0/1/0.1
      [*PE1] commit

    3. Verify the configuration.Run the display vll ccc command on PE1 to check whether the local CCC is in the Up state.

      [~PE1] display vll ccc
      total  ccc vc : 1
      local  ccc vc : 1,  1 up
      remote ccc vc : 0,  0 up
      
      name: ccc-ve, type: local, state: up,
      intf1: GigabitEthernet0/1/0 (up),access-port: false
      
      intf2: Virtual-Ethernet0/1/0.1 (up),access-port: false
      
      VC last up time : 2013/01/23 15:13:10
      VC total up time:  4 days, 4 hours, 58 minutes, 1 seconds

  5. Configure an L3VPN on PE1 and PE2.
    1. Configure the VPN instance and bind the L3VE interface to the VPN instance.

      # Configure PE1.

      [~PE1] ip vpn-instance VPN1
      [*PE1-vpn-instance-VPN1] ipv4-family
      [*PE1-vpn-instance-VPN1-af-ipv4] route-distinguisher 200:1
      [*PE1-vpn-instance-VPN1-af-ipv4] vpn-target 111:1 both
      [*PE1-vpn-instance-VPN1-af-ipv4] quit
      [*PE1-vpn-instance-VPN1] quit
      [*PE1] interface virtual-ethernet0/1/1.1
      [*PE1-Virtual-Ethernet0/1/1.1] vlan-type dot1q 100
      [*PE1-Virtual-Ethernet0/1/1.1] ip binding vpn-instance VPN1
      [*PE1-Virtual-Ethernet0/1/1.1] ip address 10.1.1.2 24
      [*PE1-Virtual-Ethernet0/1/1.1] quit
      [*PE1] commit

      # Configure PE2.

      [~PE2] ip vpn-instance VPN1
      [*PE2-vpn-instance-VPN1] ipv4-family
      [*PE2-vpn-instance-VPN1-af-ipv4] route-distinguisher 200:1
      [*PE2-vpn-instance-VPN1-af-ipv4] vpn-target 111:1 both
      [*PE2-vpn-instance-VPN1-af-ipv4] quit
      [*PE2-vpn-instance-VPN1] quit
      [*PE2] interface gigabitethernet0/1/1
      [*PE2-GigabitEthernet0/1/1] ip binding vpn-instance VPN1
      [*PE2-GigabitEthernet0/1/1] ip address 10.10.2.2 24
      [*PE2-GigabitEthernet0/1/1] undo shutdown
      [*PE2-GigabitEthernet0/1/1] quit
      [*PE2] commit

    2. Set up EBGP peer relationships between PEs and CEs and import VPN routes.

      # Configure CE1.

      [~CE1] bgp 65010
      [*CE1-bgp] peer 10.1.1.2 as-number 100
      [*CE1-bgp] import-route direct
      [*CE1-bgp] commit

      # Configure CE2.

      [~CE2] bgp 65020
      [*CE2-bgp] peer 10.10.2.2 as-number 100
      [*CE2-bgp] import-route direct
      [*CE2-bgp] commit

      # Configure PE1.

      [~PE1] bgp 100
      [*PE1-bgp] ipv4-family vpn-instance VPN1
      [*PE1-bgp-VPN1] peer 10.1.1.1 as-number 65010
      [*PE1-bgp-VPN1] import-route direct
      [*PE1-bgp-VPN1] quit
      [*PE1] commit

      # Configure PE2.

      [~PE2] bgp 100
      [*PE2-bgp] ipv4-family vpn-instance VPN1
      [*PE2-bgp-VPN1] peer 10.10.2.1 as-number 65020
      [*PE2-bgp-VPN1] import-route direct
      [*PE2-bgp-VPN1] quit
      [*PE2] commit

    3. Set up the MP-IBGP peer relationship between PE1 and PE2.

      # Configure PE1.

      [~PE1] bgp 100
      [*PE1-bgp] peer 2.2.2.2 as-number 100
      [*PE1-bgp] peer 2.2.2.2 connect-interface loopback 0
      [*PE1-bgp] ipv4-family vpnv4
      [*PE1-bgp-af-vpnv4] peer 2.2.2.2 enable
      [*PE1-bgp-af-vpnv4] quit
      [*PE1-bgp] commit

      # Configure PE2.

      [~PE2] bgp 100
      [*PE2-bgp] peer 4.4.4.4 as-number 100
      [*PE2-bgp] peer 4.4.4.4 connect-interface loopback 0
      [*PE2-bgp] ipv4-family vpnv4
      [*PE2-bgp-af-vpnv4] peer 4.4.4.4 enable
      [*PE2-bgp-af-vpnv4] quit
      [*PE2-bgp] commit

  6. Verify the configuration. CE1 and CE2 can ping each other successfully. Take CE1 as an example.

    <CE1> ping 10.10.2.1
      PING 10.10.2.1: 56  data bytes, press CTRL_C to break
        Reply from 10.10.2.1: bytes=56 Sequence=1 ttl=255 time=180 ms
        Reply from 10.10.2.1: bytes=56 Sequence=2 ttl=255 time=60 ms
        Reply from 10.10.2.1: bytes=56 Sequence=3 ttl=255 time=10 ms
        Reply from 10.10.2.1: bytes=56 Sequence=4 ttl=255 time=70 ms
        Reply from 10.10.2.1: bytes=56 Sequence=5 ttl=255 time=60 ms
      --- 10.10.2.1 ping statistics ---
        5 packet(s) transmitted
        5 packet(s) received
        0.00% packet loss
        round-trip min/avg/max = 10/76/180 ms

Configuration Files

  • Configuration file of CE1

    #                                                                               
     sysname CE1                                                              
    #                                                                                                                     
    interface GigabitEthernet0/1/0                                                  
     undo shutdown                                                                  
     ip address 10.1.1.1 255.255.255.0                                              
    #                                                      
    bgp 65010                                                                       
     peer 10.1.1.2 as-number 100                                                    
     #                                                                              
     ipv4-family unicast    
      undo synchronization                                                        
      import-route direct                                                           
      peer 10.1.1.2 enable                                                          
     #                                                                              
    return                  
  • Configuration file of PE1

    #                                                                               
     sysname PE1                                                              
    #                                                                               
    ip vpn-instance VPN1
     ipv4-family
     route-distinguisher 200:1
     vpn-target 111:1 export-extcommunity                                           
     vpn-target 111:1 import-extcommunity                                           
    #                                                                               
     mpls lsr-id 4.4.4.4                                                            
     mpls                                                                           
    #                                                                               
     mpls l2vpn                                                                     
    #                                                                               
    mpls ldp                                                                        
    isis 1                                                                          
     network-entity 10.0000.0000.0004.00                                            
    #                                                                               
    interface GigabitEthernet0/1/1                                                  
     undo shutdown                                                                  
     ip address 10.10.1.1 255.255.255.0                                             
     isis enable 1                                                                  
     mpls                                                                           
     mpls ldp                                                                       
    #                                      
    interface GigabitEthernet0/1/0                                                  
     undo shutdown                                                                  
    #                                             
    interface Virtual-Ethernet0/1/0                                                 
     ve-group 1 l2-terminate                                                        
    #                                                                               
    interface Virtual-Ethernet0/1/0.1                                               
     vlan-type dot1q 100                                                            
    #                                                                               
    interface Virtual-Ethernet0/1/1                                                 
     ve-group 1 l3-access                                                           
    #                                                                               
    interface Virtual-Ethernet0/1/1.1                                               
     vlan-type dot1q 100                                                            
     ip binding vpn-instance VPN1                                                   
     ip address 10.1.1.2 255.255.255.0                                              
    #                                                               
     ccc ccc-ve interface GigabitEthernet0/1/0 out-interface Virtual-Ethernet0/1/0.1
    #                                                                               
    interface LoopBack0                                                             
     ip address 4.4.4.4 255.255.255.255                                             
     isis enable 1                                                                  
    #                                                   
    bgp 100                                                                         
     peer 2.2.2.2 as-number 100                                                     
     peer 2.2.2.2 connect-interface LoopBack0                                       
     #                                                                              
     ipv4-family unicast      
      undo synchronization                                                         
      peer 2.2.2.2 enable                                                           
     #                                                                              
     ipv4-family vpnv4                                                              
      policy vpn-target                                                             
      peer 2.2.2.2 enable                                                           
     #                                                                              
     ipv4-family vpn-instance VPN1                                                  
      import-route direct                                                           
      peer 10.1.1.1 as-number 65010                                                 
    #                                         
    return                                                
  • Configuration file of PE2

    #                                                                               
     sysname PE2                                                              
    #                                            
    ip vpn-instance VPN1
     ipv4-family
     route-distinguisher 200:1                                                      
     vpn-target 111:1 export-extcommunity                                           
     vpn-target 111:1 import-extcommunity                                           
    #                                                                               
     mpls lsr-id 2.2.2.2                                                            
     mpls                                                                           
    #                                                                               
    mpls ldp                                                                        
    #                                              
    isis 1                                                                          
     network-entity 10.0000.0000.0003.00                                            
    #                                    
    interface GigabitEthernet0/1/1                                                  
     undo shutdown                                                                  
     ip binding vpn-instance VPN1                                                   
     ip address 10.10.2.2 255.255.255.0                                             
    #                                   
    interface GigabitEthernet0/1/0                                                  
     undo shutdown                                                                  
     ip address 10.10.1.2 255.255.255.0                                             
     isis enable 1                                                                  
     mpls                                                                           
     mpls ldp                                                                       
    #                                  
    interface LoopBack0                                                             
     ip address 2.2.2.2 255.255.255.255                                             
     isis enable 1                                                                  
    #                                                        
    bgp 100                                                                         
     peer 4.4.4.4 as-number 100                                                     
     peer 4.4.4.4 connect-interface LoopBack0                                       
     #                                                                              
     ipv4-family unicast                                                            
      undo synchronization 
      peer 4.4.4.4 enable                                                           
     #                                                                              
     ipv4-family vpnv4                                                              
      policy vpn-target                                                             
      peer 4.4.4.4 enable                                                           
     #                                                                              
     ipv4-family vpn-instance VPN1                                                  
      import-route direct                                                           
      peer 10.10.2.1 as-number 65020                                                
    #                                     
    return                                     
  • Configuration file of CE2

    #                                                                               
     sysname CE2                                                              
    #                                    
    interface GigabitEthernet0/1/0                                                  
     undo shutdown                                                                  
     ip address 10.10.2.1 255.255.255.0                                             
    #                                       
    bgp 65020                                                                       
     peer 10.10.2.2 as-number 100                                                   
     #                                                                              
     ipv4-family unicast                                                              
      undo synchronization                                                         
      import-route direct                                                           
      peer 10.10.2.2 enable                                                         
    #                                                   
    return                            
Translation
Download
Updated: 2019-01-14

Document ID: EDOC1100058925

Views: 36253

Downloads: 61

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next