No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - VPN

CloudEngine 12800 and 12800E V200R005C10

This document describes the configurations of VPN, including GRE, BGP/MPLS IP VPN, BGP/MPLS IPv6 VPN, VLL, PWE3, and VPLS.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring and Applying a Tunnel Policy

Configuring and Applying a Tunnel Policy

Context

When VPN services need to be transmitted over tunnels or when multiple tunnels need to perform load balancing to fully use network resources, configure and apply a tunnel policy on the PE.

VPN data is transmitted over tunnels. By default, LSP tunnels are used to transmit data, and each service is transmitted by only one LSP tunnel.

After the tunnel policy is configured, the system selects tunnels for applications according to the tunnel type priority sequence configured in the tunnel policy.

NOTE:
  • The device cannot load balance traffic to the GRE tunnel. When the tunnel select-seq gre load-balance-number 1 command is configured in a tunnel policy, it only indicates that the device can transmit VPLS traffic over the GRE tunnel.
  • The device can load balance traffic to the LSP tunnel. When the tunnel select-seq lsp load-balance-number load-balance-number command is configured in a tunnel policy, it indicates that the device can load balance VPLS traffic to the LSP tunnel. However, the device cannot load balance traffic to a GRE tunnel and an LSP tunnel simultaneously.

Perform the following steps on the PEs that need to use a tunnel policy.

Procedure

  1. Configure a tunnel policy.

    By default, no tunnel policy is configured. LSP tunnels are used to transmit VPN data and each VPN service is transmitted over one LSP tunnel.

    1. Run system-view

      The system view is displayed.

    2. Run tunnel-policy policy-name

      A tunnel policy is created, and the tunnel policy view is displayed.

    3. (Optional) Run description description-information

      The description of the tunnel policy is configured.

    4. Run tunnel select-seq { gre | lsp }* load-balance-number load-balance-number

      The sequence in which each type of tunnel is selected and the number of tunnels participating in load balancing are set.

    5. Run commit

      The configuration is committed.

  2. Apply the tunnel policy.
    1. Run system-view

      The system view is displayed.

    2. Run vsi vsi-name [ static ] [ bd-mode ]

      A VSI is created and the VSI view is displayed.

    3. Run tnl-policy policy-name

      Tunnel policies for a VSI are configured.

      By default, no tunnel policy is applied to a VSI.

      If tnl-policy policy-name is not specified in the peer command to import a tunnel policy, you can run this command to import the public network tunnel policy to be used by the VSI.

      The priority of the tunnel policy imported when the peer is configured is higher than the priority of the tunnel policy applied in the VSI view. If different tunnel policies are imported using two methods, the tunnel policy imported when the peer is configured takes effect.

    4. Run commit

      The configuration is committed.

Translation
Download
Updated: 2019-04-03

Document ID: EDOC1100075353

Views: 16501

Downloads: 26

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next