Creating A Sham Link; Configuring Routing On An Mce - HP HSR6800 Configuration Manual

Step
3. Enter BGP VPN instance view.
4. Redistribute direct routes into BGP (to
redistribute the loopback interface route into
BGP).
5. Redistribute OSPF VPN routes.

Creating a sham link

Follow these guidelines when you create a sham link:
•
If you start OSPF but do not configure the router ID, the system automatically elects one.
However, the same election rules produce the same router ID. As a best practice, configure the
router ID when starting an OSPF process. For the election rules, see Layer 3—IP Routing
Configuration Guide.
•
If you configure multiple OSPF VPN instances but do not configure the route tag, the system
automatically creates one based on the AS number configured. If you do not configure BGP, the
tag will be 0. However, the same calculation rule produces the same tag, and hence the same
tag is created for multiple OSPF VPN instances on the same PE or PEs with the same AS
number. As a best practice, configure different tags for different OSPF VPN instances.
•
Modifying MD5/HMAC-MD5 keys support MD5 smooth rollovers. For more information, see
Layer 3—IP Routing Configuration Guide.
To create a sham link:
Step
1. Enter system view.
2. Enter OSPF view.
3. Configure the external route
tag for imported VPN routes.
4. Enter OSPF area view.
5. Configure a sham link.

Configuring routing on an MCE

MCE implements service isolation through route isolation. MCE routing configuration includes:
•
MCE-VPN site routing configuration
•
MCE-PE routing configuration
Command
ipv4-family vpn-instance vpn-instance-name
import-route direct [ med med-value |
route-policy route-policy-name ] *
import-route ospf [ { process-id | all-processes }
[ allow-direct | med med-value | route-policy
route-policy-name ] * ]
Command
system-view
ospf [ process-id | router-id
router-id | vpn-instance
vpn-instance-name ] *
route-tag tag-value
area area-id
sham-link source-ip-address
destination-ip-address [ cost cost
| dead dead-interval | hello
hello-interval | retransmit
retrans-interval | trans-delay
delay | { simple [ cipher | plain ]
password | { md5 | hmac-md5 }
key-id [ cipher | plain ]
password } ]*
281
Remarks
N/A
N/A
N/A
N/A
By default, no sham link is
configured.