Huawei quidway s7700 Configuration Manual page 100

Quidway S7700 Smart Routing Switch
Configuration Guide - VPN
Switch A
PE1
PE2
CE2
Configuration Roadmap
PE1 and CE1 are indirectly connected. So the VPN instance on PE1 cannot be bound to the
physical interface on PE1. In such a situation, a GRE tunnel is required between CE1 and PE1.
vpn1 on PE1 can then be bound to the GRE tunnel, and CE1 can access the VPN through the
GRE tunnel.
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Issue 01 (2011-07-15)
GigabitEthernet2/0/0
Tunnel2/0/0
GigabitEthernet1/0/0
GigabitEthernet2/0/0
Loopback1
GigabitEthernet1/0/0
GigabitEthernet2/0/0
Tunnel1/0/0
Loopback1
GigabitEthernet1/0/0
GigabitEthernet2/0/0
GigabitEthernet1/0/0
GigabitEthernet2/0/0
Configure OSPF 10 on PE1 and PE2 to implement the interworking between the two
devices, and then enable MPLS.
Configure OSPF 20 on CE1, Switch A, and PE1 to implement the interworking between
the three devices.
Establish a GRE tunnel between CE1 and PE1.
Create VPN instances vpn1 on PE1 and PE2. Then bind the VPN instance on PE1 to the
GRE tunnel interface, and bind the VPN instance on PE2 to the connected physical interface
of CE2.
Configure IS-IS routes between CE1 and PE1, and between CE2 and PE2 to implement
the interworking between the CEs and PEs.
Configure BGP on PEs to implement the interworking between CE1 and CE2.
IP addresses of the interfaces, process ID of the routing protocol, and AS number
Source address and destination address of the GRE tunnel
VPN instance names, RDs, and VPN targets on PEs
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
VLANIF 20
-
VLANIF 20
VLANIF 30
-
VLANIF 30
VLANIF 40
-
-
VLANIF 40
VLANIF 50
VLANIF 50
VLANIF 60
2 GRE Configuration
30.1.1.1/24
2.2.2.1/24
30.1.1.2/24
50.1.1.1/24
1.1.1.9/32
50.1.1.2/24
110.1.1.1/24
2.2.2.2/24
3.3.3.9/32
110.1.1.2/24
11.1.1.2/24
11.1.1.1/24
41.1.1.2/24
85