No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Feature Description - VPN 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Feature Description - VPN
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Application of MCEs on a Data Center Network

Application of MCEs on a Data Center Network

Networking Description

As shown in Figure 5-47, a data center network consists of the following layers:
  • Gateway layer: provides high-speed forwarding for inbound and outbound data of the data center.

  • Core layer: provides high-speed forwarding for data from the aggregation layer.

  • Aggregation layer: provides functions such as gateway redundancy for servers, load balancing, and firewall.

  • Access layer: provides high-density network interfaces for data center servers.

Figure 5-47 Networking diagram for a data center

VPN services are becoming increasingly refined, and the demand for VPN service security is growing. Carriers must isolate different types of VPN services on data center networks to meet this demand, by configuring devices at the core layer to function as MCEs. The interfaces of an MCE can be bound to different VPNs based on service types, so that the MCE can create and maintain an independent routing and forwarding table for each VPN to completely isolate VPN services.

Feature Deployment

The MCE function is configured on the data center network shown in Figure 5-47 as follows:
  1. Different VPN instances are configured for different VPN services on core-layer devices.

  2. Each interface of a core-layer device is bound to the corresponding VPN instance.

  3. Gateway-layer devices that function as PEs are configured to connect to core-layer devices. The interfaces of gateway-layer devices connecting to core-layer devices are bound to the corresponding VPN instances.

  4. A routing protocol is configured on devices at the gateway and core layers for these devices to communicate.

Updated: 2019-01-14

Document ID: EDOC1100058940

Views: 17046

Downloads: 34

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next