No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Feature Description - VPN 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Feature Description - VPN
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Tunnel Policy Selector

Tunnel Policy Selector


On a BGP/MPLS IP VPN in inter-AS VPN Option B or inter-AS VPN Option C mode, the VPN routes that an autonomous system boundary router (ASBR) or PE receives are iterated only to LDP LSPs within an AS. Iteration is considered failed so long as LDP LSPs do not exist, no matter whether other types of tunnels exist. This implementation strictly confines the types of iteration tunnels, making network deployment inflexible. In addition, customers cannot use MPLS TE channels to guarantee the transmission quality by means of traffic engineering. To break the restriction of tunnel types, tunnel policy selectors are introduced.

Tunnel policy selectors achieve on-demand iteration by matching the route distinguisher (RD) and next hop of a route, facilitating tunnel selection. Tunnel policy selectors can use various tunnel policies for VPN routes to be iterated to different types of tunnels, better meeting customer requirements.

Figure 4-2 shows the networking diagram for a BGP/MPLS IP VPN in inter-AS VPN Option B mode.

If no tunnel policy selector is configured on ASBR1, the VPN routes received by ASBR1 can only be iterated to the LDP LSP between ASBR1 and PE1, PE2, or ASBR2.

After a tunnel policy selector is configured on ASBR1, the VPN routes received by ASBR1 can be iterated to any type of tunnel between ASBR1 and PE1, PE2, or ASBR2. This implementation allows flexible networking. After you configure tunnel policy selectors to select TE tunnels for route iteration, the bandwidth for data transmission can be ensured.

Figure 4-2 Networking for a BGP/MPLS IP VPN in inter-AS VPN Option B mode


A tunnel policy selector consists of one or more nodes, and the relationship between these nodes is "OR". The system checks the nodes according to index numbers. If a route matches a node in the tunnel policy selector, the route stops the matching process.

Each node comprises a set of if-match and apply clauses:

  • The if-match clauses define the matching rules that are used to match certain route attributes, such as the next hop and RD. The relationship between the if-match clauses of a node is "AND". A route matches a node only when the route meets all the matching rules specified by the if-match clauses of the node.

  • The apply clauses specify actions. When a route matches a node, the apply clauses select a corresponding tunnel policy for the route. This tunnel policy can select other types of tunnels to carry services by means of prioritizing or tunnel binding.

The node matching modes of a tunnel policy selector are as follows:

  • Permit: If a route matches all the if-match clauses of a node, the route matches the tunnel policy selector and all the actions defined by apply clauses are performed on the route. If a route does not match any if-match clauses of a node, the route continues to match the next node.

  • Deny: In this mode, the apply clauses are not implemented. If a route meets all the if-match clauses of the node, the route is denied and no longer matches other nodes of the tunnel policy selector.

Usage Scenario

Tunnel policy selectors apply to BGP/MPLS IP VPNs in inter-AS VPN Option B or inter-AS VPN Option C mode.


Tunnel policy selectors offer the following benefits:
  • Routes can be iterated to other types of tunnels besides LDP LSPs, allowing flexible networking.
  • MPLS TE tunnels can be used for route iteration to support QoS.
Updated: 2019-01-14

Document ID: EDOC1100058940

Views: 18820

Downloads: 34

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next