HP 10500 SERIES Configuration Manual page 21

Configuring IS-IS between MCE and VPN site
An IS-IS process belongs to the public network or a single VPN instance. If you create an IS-IS process
without binding it to a VPN instance, the process belongs to the public network.
By configuring IS-IS process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different IS-IS processes, ensuring the separation
and security of VPN routes.
For more information about IS-IS, see Layer 3—IP Routing Configuration Guide.
To configure IS-IS between MCE and VPN site:
Step
1. Enter system view.
2. Create an IS-IS process for a
VPN instance and enter IS-IS
view.
3. Configure a network entity
title.
4. Redistribute remote site routes
advertised by the PE.
5. Return to system view.
6. Enter interface view.
7. Enable the IS-IS process on
the interface.
Configuring EBGP between MCE and VPN site
To use EBGP for exchanging routing information between an MCE and VPN sites, configure a BGP peer
for each VPN instance on the MCE, and redistribute the IGP routes of each VPN instance on the VPN
sites.
If EBGP is used for route exchange, you also can configure filtering policies to filter the received routes
and the routes to be advertised.
Configure the MCE:
1.
Step
1. Enter system view.
2. Enter BGP view.
3. Enter BGP-VPN instance view.
Command
system-view
isis [ process-id ] vpn-instance
vpn-instance-name
network-entity net
import-route { isis [ process-id ] |
ospf [ process-id ] | rip
[ process-id ] | bgp [ allow-ibgp ] |
direct | static } [ cost cost |
cost-type { external | internal } |
[ level-1 | level-1-2 | level-2 ] |
route-policy route-policy-name |
tag tag ] *
quit
interface interface-type
interface-number
isis enable [ process-id ]
Command
system-view
bgp as-number
ipv4-family vpn-instance
vpn-instance-name
13
Remarks
N/A
Perform this configuration on the
MCE. On a VPN site, configure a
normal IS-IS process.
Not configured by default.
Optional.
By default, IS-IS does not
redistribute routes of any other
routing protocol.
If you do not specify the route level
in the command, the command
redistributes routes to the level-2
routing table by default.
N/A
N/A
Disabled by default.
Remarks
N/A
N/A
N/A