Huawei quidway s7700 Configuration Manual page 50

Quidway S7700 Smart Routing Switch
Configuration Guide - VPN
# Configure PE2.
[PE2] ip vpn-instance VPNA
[PE2-vpn-instance-VPNA] route-distinguisher 100:3
[PE2-vpn-instance-VPNA] vpn-target 111:1 both
[PE2-vpn-instance-VPNA] quit
[PE2] ip vpn-instance VPNB
[PE2-vpn-instance-VPNB] route-distinguisher 100:4
[PE2-vpn-instance-VPNB] vpn-target 222:2 both
[PE2-vpn-instance-VPNB] quit
[PE2] interface vlanif 50
[PE2-Vlanif50] ip binding vpn-instance VPNA
[PE2-Vlanif50] ip address 10.3.1.2 30
[PE2-Vlanif50] quit
[PE2] interface vlanif 40
[PE2-Vlanif40] ip binding vpn-instance VPNB
[PE2-Vlanif40] ip address 10.4.1.2 30
[PE2-Vlanif40] quit
# Configure the interface addresses of the VLAN where the CE interface resides and configure
the IP addresses of the VLANIF interfaces according to
is not given.
# By running the display ip vpn-instance verbose command on the PEs, you can see the
configuration of the VPN instances. The PEs can ping the connected CEs successfully.
Step 5 Configure and apply a tunnel policy on the PE.
# Configure the tunnel policy for binding primary tunnel and apply the tunnel policy to VPNA.
# Configure PE1.
[PE1]tunnel-policy policy1
[PE1-tunnel-policy-policy1]tunnel binding destination 2.2.2.2 te tunnel1/0/2
[PE1-tunnel-policy-policy1] quit
[PE1] ip vpn-instance VPNA
[PE1-vpn-instance-VPNA] tnl-policy policy1
[PE1-vpn-instance-VPNA] quit
# Configure PE2.
[PE2] tunnel-policy policy1
[PE2-tunnel-policy-policy1] tunnel binding destination 1.1.1.1 te tunnel1/0/2
[PE2-tunnel-policy-policy1] quit
[PE2] ip vpn-instance VPNA
[PE2-vpn-instance-VPNA] tnl-policy policy1
[PE2-vpn-instance-VPNA] quit
# Configure the tunnel policy that specifies the tunnel selection sequence and apply the tunnel
policy to VPNB.
# Configure PE1.
[PE1] tunnel-policy policy2
[PE1-tunnel-policy-policy2] tunnel select-seq cr-lsp lsp load-balance-number 1
[PE1-tunnel-policy-policy2] quit
[PE1] ip vpn-instance VPNB
[PE1-vpn-instance-VPNB] tnl-policy policy2
[PE1-vpn-instance-VPNB] quit
# Configure PE2.
Issue 01 (2011-07-15)
NOTE
If multiple interfaces on a PE are bound to the same VPN, you must specify the source address when you
run the ping command to ping the connected CE. That is, specify -a source-ip-address in the ping -a
source-ip-address -vpn-instance vpn-instance-name destination-address command; otherwise, the ping
operation may fail.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 VPN Tunnel Management Configuration
Figure 1-2. The configuration procedure
35