S9300-A GigabitEthernet1/0/0 VLANIF 20 30.1.1.2/24
GigabitEthernet2/0/0 VLANIF 30 50.1.1.1/24
PE1 Loopback1 - 1.1.1.9/32
GigabitEthernet1/0/0 VLANIF 30 50.1.1.2/24
GigabitEthernet2/0/0 VLANIF 40 110.1.1.1/24
Tunnel1/0/0 - 2.2.2.2/24
PE2 Loopback1 - 3.3.3.9/32
GigabitEthernet1/0/0 VLANIF 40 110.1.1.2/24
GigabitEthernet2/0/0 VLANIF 50 11.1.1.2/24
CE2 GigabitEthernet1/0/0 VLANIF 50 11.1.1.1/24
GigabitEthernet2/0/0 VLANIF 60 41.1.1.2/24
Configuration Roadmap
PE1 and CE1 are indirectly connected. So the VPN instance on PE1 cannot be bound to the
physical interface on PE1. In such a situation, a GRE tunnel is required between CE1 and PE1.
vpn1 on PE1 can then be bound to the GRE tunnel, and CE1 can access the VPN through the
GRE tunnel.
The configuration roadmap is as follows:
1. Configure OSPF 10 on PE1 and PE2 to implement the interworking between the two
devices, and then enable MPLS.
2. Configure OSPF 20 on CE1, S9300-A, and PE1 to implement the interworking between
the three devices.
3. Establish a GRE tunnel between CE1 and PE1.
4. Create VPN instances vpn1 on PE1 and PE2. Then bind the VPN instance on PE1 to the
GRE tunnel interface, and bind the VPN instance on PE2 to the connected physical interface
of CE2.
5. Configure IS-IS routes between CE1 and PE1, and between CE2 and PE2 to implement
the interworking between the CEs and PEs.
6. Configure BGP on PEs to implement the interworking between CE1 and CE2.
Data Preparation
To complete the configuration, you need the following data:
l IP addresses of the interfaces, process ID of the routing protocol, and AS number
l Source address and destination address of the GRE tunnel
l VPN instance names, RDs, and VPN targets on PEs
Procedure
Step 1 Configure the IP address for each VLANIF interface and the routing protocol for the MPLS
backbone network.
Quidway S9300 Terabit Routing Switch
Configuration Guide - VPN 2 GRE Configuration
Issue 03 (2009-08-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2-25
To Next Page
Loading...
