Configuring Vpn Instances - HP 12500 Series Configuration Manual

Configure basic MPLS for the MPLS backbone
•
• Configure MPLS LDP for the MPLS backbone so that LDP LSPs can be established

Configuring VPN instances

By configuring VPN instances on a PE, you can isolate not only VPN routes from public network routes,
but also routes of a VPN from those of another VPN. This feature allows VPN instances to be used in
network scenarios besides MPLS L3VPNs.
All VPN instance configurations are performed on PEs or MCEs.
Creating a VPN instance
A VPN instance is associated with a site. It is a collection of the VPN membership and routing rules of its
associated site. A VPN instance does not necessarily correspond to one VPN.
When you configure a VPN instance, follow these guidelines:
• The reserved VLAN configuration can take effect only when the system works in standard mode. For
more information about system working modes, see Fundamentals Configuration Guide.
When the system works in standard mode, you must configure a reserved VLAN for a created VPN
•
instance in the following cases: a) the VPN instance is connected with no CEs; b) there is no need
to configure the multicast VPN function for the VPN instance; c) there is no need to bind the VPN
instance with an IP tunnel.
To configure a reserved VLAN for a VPN instance, you must configure it before configuring an RD
•
for the VPN instance. Otherwise, the VPN cannot function normally and you must delete the VPN
instance, and then re-create the VPN instance in the right configuration order. Before configuring an
RD, you cannot configure any other parameters for the VPN instance except a reserved VLAN.
Do not configure services on a reserved VLAN. Otherwise, the corresponding MPLS L3VPN will be
•
affected, and you must delete the VPN instance, and then re-create the VPN instance in the right
configuration order.
A reserved VLAN does not implement the common VLAN functions, such as VLAN mapping.
•
• When the system works in standard mode, if a VPN instance is not configured with a reserved
VLAN, you cannot configure URPF on the private network VLAN interface bound with the VPN
instance.
Once established, the association between a VPN instance and its reserved VLAN cannot be
•
removed. To modify the association, you need to delete the VPN instance, recreate it, and then
specify another reserved VLAN for it.
To create and configure a VPN instance:
To do...
Enter system view
Create a VPN instance and enter
VPN instance view
Specify a reserved VLAN for the
VPN instance
Configure an RD for the VPN
instance
Use the command...
system-view
ip vpn-instance vpn-instance-name
reserve-vlan vlan-id
route-distinguisher
route-distinguisher
214
Remarks
—
Required
Required
Required
A VPN instance takes effect only
after you configure an RD for it.