12
Ste
Command
Remarks
5. Configure the default cost
value for the redistributed
routes.
default cost value
Optional.
0 by default.
Configuring OSPF between MCE and VPN site
An OSPF process belongs to the public network or a single VPN instance. If you create an OSPF process
without binding it to a VPN instance, the process belongs to the public network.
By configuring OSPF process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different OSPF processes, ensuring the separation
and security of VPN routes.
For more information about OSPF, see Layer 3—IP Routing Configuration Guide.
To configure OSPF between MCE and VPN site:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Create an OSPF process for a
VPN instance and enter OSPF
view.
ospf [ process-id | router-id
router-id | vpn-instance
vpn-instance-name ] *
Perform this configuration on the
MCE. On a VPN site, create a
normal OSPF process.
An OSPF process can belong to
only one VPN instance, but one
VPN instance can use multiple
OSPF processes to advertise the
VPN routes.
3. Configure the OSPF domain
ID.
domain-id domain-id [ secondary ]
Optional.
0 by default.
Perform this configuration on the
MCE. On a VPN site, perform the
common OSPF configuration.
4. Redistribute remote site routes
advertised by the PE.
import-route protocol [ process-id
| allow-ibgp ] [ cost cost | type
type | tag tag | route-policy
route-policy-name ] *
By default, no route of any other
routing protocol is redistributed
into OSPF.
5. Create an OSPF area and
enter OSPF area view.
area area-id
By default, no OSPF area is
created.
6. Enable OSPF on the interface
attached to the specified
network in the area.
network ip-address wildcard-mask
By default, an interface neither
belongs to any area nor runs
OSPF.
NOTE:
n OSPF process that is bound with a VPN instance does not use the public network router ID confi
ured
in system view. Therefore, you must configure a router ID when starting the OSPF process. All OSPF
processes for the same VPN must be configured with the same OSPF domain ID to ensure correct route
advertisement.
To Next Page
Loading...
