Huawei Quidway S9300

Networking
The S9300 supports the VPN route exchange between PEs through MP-BGP. To ensure that a
PE and a CE can exchange routes, you can configure the static route, RIP multi-instance, OSPF
multi-instance, IS-IS multi-instance, or EBGP. The S9300 uses VPN targets to control the
transmission of VPN routes; thus, multiple VPN networking topologies including Intranet,
Extranet, and Hub&Spoke can be implemented.
Generally, an LSP or MPLS TE tunnel is used as the tunnel on the VPN backbone network.
Typical Networking
The S9300 supports the following typical VPN networking:
l HoVPN
To prevent the PEs from being overloaded, you can configure the HoVPN. The devices on
the convergence layer or the access layer serve as U-PEs, which work with PEs at the
backbone layer to share loads.
l OSPF virtual links
If OSPF runs between PEs and CEs, OSPF sham links can be adopted to solve the following
problem: The private route passing through the MPLS backbone network is not selected
because the intra-area route passing through the backdoor link takes precedence over the
private route, as shown in Figure 3-2.
Figure 3-2 Networking of sham link
PE2
OSPF 200
Area 1
OSPF 200
backdoor
sham link
MPLS VPN backbone
CE12
VPN1
site1
CE22
VPN1
site3
PE2
Area 1
l Multi-VPN-Instance CE
Currently, different services of a LAN are isolated by VLANs on the switches. However,
the routing capability is a weak point of switches. To ensure that the services of the LAN
are isolated and improve the routing capability in the LAN, you can configure Multi-VPN-
Instance CE to solve the security problem of the LAN with low cost.
Reliability
To improve the reliability of a VPN, generally, the following networking modes are adopted:
3 BGP/MPLS IP VPN Configuration
Quidway S9300 Terabit Routing Switch
Configuration Guide - VPN
3-4 Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 03 (2009-08-20)