177 
policies, see Layer 3—IP Routing 
Configuration Guide. 
7.  Apply a tunnel policy to 
the VPN instance. 
tnl-policy 
tunnel-policy-name
 
By default, only one tunnel is 
selected (no load balancing) in 
this order: LSP tunnel, GRE 
tunnel, and CR-LSP tunnel. 
The specified tunnel policy must 
have been created. 
For information about tunnel 
policies, see "Configuring tunnel 
policies."  
 
Configuring routing between a PE and a CE 
You can configure static routing, RIP, OSPF, IS-IS, EBGP, or IBGP between a PE and a CE. 
Configuring static routing between a PE and a CE 
1.  Enter system view. 
N/A 
2. 
route for a  VPN 
instance. 
ip route-static
 
vpn-instance
 
s-vpn-instance-name  dest-address 
{  mask-length  |  mask  }  {  interface-type 
interface-number  [  next-hop-address  ] 
|next-hop-address  [ 
public
  ]  [ 
track 
track-entry-number  ]  | 
vpn-instance
 
d-vpn-instance-name  next-hop-address 
[ 
track 
track-entry-number ] } [ 
permanent
 ] 
[ 
preference
  preference-value  ] [ 
tag
 
tag-value ] [ 
description
 description-text ] 
By default, no static route is 
instance.  
Perform this configuration on 
the PE. On the CE, configure 
a common static route. 
For  more  information about 
static routing, see Layer 
3—IP Routing Configuration 
Guide. 
 
Configuring RIP between a PE and a CE 
A RIP process belongs to the public network or a single VPN instance. If you create a RIP process 
without binding it to a VPN instance, the process belongs to the public network. 
To configure RIP between a PE and a CE: 
 
1.  Enter system view. 
system-view 
N/A 
2.  Create  a  RIP  process  for a 
VPN instance and enter RIP 
view. 
rip 
[  process-id  ]
  vpn-instance
 
vpn-instance-name 
Perform this configuration on the 
PE. On the CE, create a common 
RIP process. 
3.  Enable RIP on the interface 
attached to the specified 
network. 
network 
network-address
 
By default, RIP is disabled on an 
interface. 
 
Configuring OSPF between a PE and a CE 
An  OSPF process that is  bound to a VPN  instance does not use the public network router ID 
configured in system view. Therefore, you must specify a router ID when starting a process or 
configure an IP address for at least one interface of the VPN instance. 
An OSPF process belongs to the public network or a single VPN instance. If you create an OSPF 
process without binding it to a VPN instance, the process belongs to the public network.