No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - VPN

CloudEngine 12800 and 12800E V200R005C10

This document describes the configurations of VPN, including GRE, BGP/MPLS IP VPN, BGP/MPLS IPv6 VPN, VLL, PWE3, and VPLS.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VPN Tunnel Policy

VPN Tunnel Policy

Introduction to VPN Tunnels

VPN data is transmitted over tunnels, including LSP tunnels and Generic Routing Encapsulation (GRE) tunnels.
  • GRE tunnel

    If PE devices support MPLS functions but P devices on the backbone network provide only IP functions, LSPs cannot serve as tunnels. In this situation, GRE tunnels can be used as the tunnels of the VPN backbone network.

    For details about GRE, see GRE Configuration Guide in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - VPN.

  • LSP

    An LSP forwards packets through label switching and is often used in VPLS. If LSPs are used as public network tunnels, only PE devices need to analyze IP packet headers, and other devices that VPN packets pass do not need to analyze IP packet headers. This reduces VPN packet processing time and packet transmission delay. In addition, MPLS labels are supported by all link layers. An LSP is similar to an ATM virtual circuit (VC) or FR VC in functions and security. If all the devices on the backbone network support MPLS, it is recommended that LSP tunnels be used as public network tunnels.

    For details about LSPs, see MPLS LDP Configuration in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - MPLS.

Tunnel Policy

VPN services are transmitted over tunnels. By default, LSPs are preferred in VPN service transmission, and only one LSP serves one VPN service.

When VPN services need to be transmitted over a specified GRE tunnel or when load balancing needs to be performed among multiple tunnels to fully use network resources, tunnel policies need to be applied to VPNs.

The tunnel type prioritization policy cannot specify the desired tunnels to use when multiple tunnels of the same type are available.

Updated: 2019-04-03

Document ID: EDOC1100075353

Views: 14419

Downloads: 25

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next