3Com 3C13636 Configuration Manual page 1152

3Com Router 3000 Ethernet Family
Configuration Guide
# Configure the data stream to be protected by IPSec.
[PE1] acl number 3000
[PE1-acl-adv-3000] rule 0 permit ip source 51.51.51.0 0.0.0.255 destination
21.21.21.0 0.0.0.255
[PE1-acl-adv-3000] quit
[PE1] acl number 3001
[PE1-acl-adv-3001] rule 0 permit ip source 61.61.61.0 0.0.0.255 destination
31.31.31.0 0.0.0.255
[PE1-acl-adv-3001] quit
# Establish MP-IBGP neighbors between PE1 and PE2. Activate the MP-IBGP peers in
VPNv4 address family view.
[PE1] bgp 100
[PE1-bgp] undo synchronization
[PE1-bgp] group g1 internal
[PE1-bgp] peer 100.100.100.2 group g1
[PE1-bgp] peer 100.100.100.2 connect-interface LoopBack0
[PE1-bgp] ipv4-family vpnv4
[PE1-bgp-af-vpn] peer g1 enable
[PE1-bgp-af-vpn] peer 100.100.100.2 group g1
[PE1-bgp-af-vpn] quit
# Redistribute the private network routes of CE1 and CE2.
[PE1-bgp] ipv4-family vpn-instance vrf1
[PE1-bgp-af-vpn-instance] import-route direct
[PE1-bgp-af-vpn-instance] undo synchronization
[PE1-bgp-af-vpn-instance] quit
[PE1-bgp] ipv4-family vpn-instance vrf2
[PE1-bgp-af-vpn-instance] import-route direct
[PE1-bgp-af-vpn-instance] undo synchronization
[PE1-bgp-af-vpn-instance] quit
# Enable OSPF on the interfaces and loopback interfaces that connect PE1 and PE2
for the interconnectivity inside the AS.
[PE1] ospf 1
[PE1-ospf-1] area 0.0.0.0
[PE1-ospf-1] network 41.41.41.0 0.0.0.255
[PE1-ospf-1] network 100.100.0.0 0.0.255.255
[PE1-ospf-1] quit
# Configure private network static routes.
[PE1] ip route-static vpn-instance vrf1 32.32.32.0 255.255.255.0 21.21.21.2
preference 60
3Com Corporation
7-48
Chapter 7 IPSec Configuration