Configure Static Routes - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[CE1] interface Ethernet0/0/0
[CE1-Ethernet0/0/0] ip address 21.21.21.2 255.255.255.0
[CE1-Ethernet0/0/0] ipsec policy map
[CE1-Ethernet0/0/0] quit
[CE1] interface Ethernet0/0/1
[CE1-Ethernet0/0/1] ip address 32.32.32.1 255.255.255.0
[CE1-Ethernet0/0/1] quit
# Configure the data stream to be protected by IPSec.
[CE1] acl number 3000
[CE1-acl-adv-3000] rule 0 permit ip source 21.21.21.0 0.0.0.255 destination
51.51.51.0 0.0.0.255
[CE1-acl-adv-3000] quit

# Configure static routes.

[CE1] ip route-static 0.0.0.0 0.0.0.0 21.21.21.1 preference 60
[CE1] ip route-static 33.33.33.0 255.255.255.0 21.21.21.1 preference 60
2) Configure PE1
<PE1> system-view
# Configure MPLS basic capabilities.
[PE1] mpls lsr-id 100.100.100.1
[PE1] mpls
[PE1-mpls] quit
[PE1] mpls ldp
# Configure the VPN instance vrf1.
[PE1] ip vpn-instance vrf1
[PE1-vpn-vrf1] route-distinguisher 100:1
[PE1-vpn-vrf1] vpn-target 100:1 export-extcommunity
[PE1-vpn-vrf1] vpn-target 100:1 import-extcommunity
[PE1-vpn-vrf1] quit
# Configure the VPN instance vrf2.
[PE1] ip vpn-instance vrf2
[PE1-vpn-vrf2] route-distinguisher 100:2
[PE1-vpn-vrf2] vpn-target 100:2 export-extcommunity
[PE1-vpn-vrf2] vpn-target 100:2 import-extcommunity
[PE1-vpn-vrf2] quit
# Configure the IKE peer test1.
[PE1] ike peer test1
[PE1-ike-peer-test1] pre-shared-key huawei
[PE1-ike-peer-test1] remote-address 21.21.21.2
[PE1-ike-peer-test1] quit
3Com Corporation
7-46
Chapter 7 IPSec Configuration