13
Configuring IS-IS between MCE and VPN site
An IS-IS process belongs to the public network or a single VPN instance. If you create an IS-IS process
without binding it to a VPN instance, the process belongs to the public network.
By configuring IS-IS process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different IS-IS processes, ensuring the separation
and security of VPN routes.
For more information about IS-IS, see Layer 3—IP Routing Configuration Guide.
To configure IS-IS between MCE and VPN site:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Create an IS-IS process for a
VPN instance and enter IS-IS
view.
isis [ process-id ] vpn-instance
vpn-instance-name
Perform this configuration on the
MCE. On a VPN site, configure a
normal IS-IS process.
3. Configure a network entity
title.
network-entity net Not configured by default.
4. Redistribute remote site routes
advertised by the PE.
import-route { isis [ process-id ] |
ospf [ process-id ] | rip
[ process-id ] | bgp [ allow-ibgp ] |
direct | static } [ cost cost |
cost-type { external | internal } |
[ level-1 | level-1-2 | level-2 ] |
route-policy route-policy-name |
tag tag ] *
Optional.
By default, IS-IS does not
redistribute routes of any other
routing protocol.
If you do not specify the route level
in the command, the command
redistributes routes to the level-2
routing table by default.
5. Return to system view.
quit N/A
6. Enter interface view.
interface interface-type
interface-number
N/A
7. Enable the IS-IS process on
the interface.
isis enable [ process-id ] Disabled by default.
Configuring EBGP between MCE and VPN site
To use EBGP for exchanging routing information between an MCE and VPN sites, configure a BGP peer
for each VPN instance on the MCE, and redistribute the IGP routes of each VPN instance on the VPN
sites.
If EBGP is used for route exchange, you also can configure filtering policies to filter the received routes
and the routes to be advertised.
1. Configure the MCE:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view.
bgp as-number N/A
3. Enter BGP-VPN instance view.
ipv4-family vpn-instance
vpn-instance-name
N/A