No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Feature Description - VPN 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Feature Description - VPN
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Connecting Discontinuous Sub-networks to Establish a VPN

Connecting Discontinuous Sub-networks to Establish a VPN

With GRE tunnels, you can connect discontinuous sub-networks to establish a VPN across a WAN.

Assume that two VPN sub-networks, Site 1 and Site 2, are deployed in two different cities. By setting up a GRE tunnel between the PEs, you can connect the two sub-networks to establish a VPN.

GRE, which applies to both L2VPNs and L3VPNs, can be used in either CPE-based VPN or network-based VPN scenarios:

  • In a CPE-based VPN scenario, both ends of the GRE tunnel reside on CEs, as shown in Figure 3-7.

    Figure 3-7 GRE in a CPE-based VPN scenario

  • In a network-based VPN scenario, both ends of the GRE tunnel reside on PEs, as shown in Figure 3-8.

    Figure 3-8 GRE in a network-based VPN scenario

Usually, the VPN backbone network uses label switched paths (LSPs) as public network tunnels. If the core devices (Ps) on the backbone network provide only the IP function whereas the PEs at the network edge provide MPLS functions, LSPs cannot be used as public network tunnels. In this situation, you can use GRE tunnels instead of LSPs in Layer 2 or Layer 3 VPN solutions. Figure 3-9 shows the format of a private network packet transmitted on the VPN backbone network.

Figure 3-9 Format of a GRE packet that contains an MPLS label

GRE tunnels can also be used as non-MPLS VPN backbone tunnels. In this case, the private network packet cannot contain the MPLS label when being transmitted on the VPN backbone network. Figure 3-10 shows the format of such a packet.

Figure 3-10 Format of a GRE packet that does not contain any MPLS label

Updated: 2019-01-14

Document ID: EDOC1100058940

Views: 16546

Downloads: 34

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next