Configuring And Applying Pbr; Configuring A Static Route; Configuring Hovpn - HP HPE FlexNetwork MSR Router Series Configuration Manual

Configuring and applying PBR

Step
1. Enter system view.
2. Create a policy node and
enter policy node view.
3. Configure match criteria for
the node.
4. Specify the VPN instances
for forwarding the matching
packets.
5. Return to system view.
6. Enter the view of the
interface connected to the
CE.
7. Apply the policy to the
interface.

Configuring a static route

Step
1. Enter system
view.
2. Configure a static
route for a VPN
instance to reach
the multirole host.

Configuring HoVPN

In a HoVPN networking scenario, perform basic MPLS L3VPN settings on UPE and SPE. In addition,
configure the following settings on the SPE:
Command
system-view
policy-based-route policy-name
{ deny | permit } node
node-number
See Layer 3—IP Routing
Configuration Guide.
apply access-vpn vpn-instance
vpn-instance-name&<1-n>
quit
interface interface-type
interface-number
ip policy-based-route
policy-name
Command
system-view
ip route-static vpn-instance
s-vpn-instance-name dest-address
{ mask-length | mask } vpn-instance
d-vpn-instance-name next-hop-address [ track
track-entry-number ] [ permanent ]
[ preference preference-value ] [ tag
tag-value ] [ description description-text ]
226
Remarks
N/A
By default, no policy node is
created.
By default, no match criterion is
configured. All packets match the
criteria for the node.
This step matches packets from
the multirole host.
By default, no VPN instance is
specified.
You must specify multiple VPN
instances for the node. The first
one is the VPN instance to which
the multirole host belongs, and
others are the VPN instances to
be accessed by the multirole host.
A matching packet is forwarded
according to the routing table of
the first VPN instance that has a
matching route for that packet.
N/A
N/A
By default, no policy is applied to
the interface.
Remarks
N/A
By default, no static route is
configured.
The d-vpn-instance-name
argument represents the VPN
instance to which the multirole
host belongs. The
next-hop-address argument
represents the IP address of
the CE in the site where the
multirole host resides.