Huawei AR1200 series Configuration Manual page 180

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
[Spoke-PE2-Ethernet1/0/0] ip binding vpn-instance vpna
[Spoke-PE2-Ethernet1/0/0] ip address 120.1.1.2 24
[Spoke-PE2-Ethernet1/0/0] quit
# Configure Hub-PE.
<Hub-PE> system-view
[Hub-PE] ip vpn-instance vpn_in
[Hub-PE-vpn-instance-vpn_in] ipv4-family
[Hub-PE-vpn-instance-vpn_in-af-ipv4] route-distinguisher 100:21
[Hub-PE-vpn-instance-vpn_in-af-ipv4] vpn-target 100:1 import-extcommunity
[Hub-PE-vpn-instance-vpn_in-af-ipv4] quit
[Hub-PE-vpn-instance-vpn_in] quit
[Hub-PE] ip vpn-instance vpn_out
[Hub-PE-vpn-instance-vpn_out] ipv4-family
[Hub-PE-vpn-instance-vpn_out-af-ipv4] route-distinguisher 100:22
[Hub-PE-vpn-instance-vpn_out-af-ipv4] vpn-target 200:1 export-extcommunity
[Hub-PE-vpn-instance-vpn_out-af-ipv4] quit
[Hub-PE-vpn-instance-vpn_out] quit
[Hub-PE] interface ethernet 2/0/1
[Hub-PE-Ethernet2/0/1] ip binding vpn-instance vpn_in
[Hub-PE-Ethernet2/0/1] ip address 110.1.1.2 24
[Hub-PE-Ethernet2/0/1] quit
[Hub-PE] interface ethernet 1/0/1
[Hub-PE-Ethernet1/0/1] ip binding vpn-instance vpn_out
[Hub-PE-Ethernet1/0/1] ip address 110.2.1.2 24
[Hub-PE-Ethernet1/0/1] quit
# Configure IP addresses of the CE interfaces as shown in
The configuration procedures are not mentioned here.
After the configuration, run the display ip vpn-instance verbose command on the PE devices,
and you can see the configurations of VPN instances. Each PE can ping through its attached CEs
using the ping -vpn-instance vpn-name ip-address command.
Step 4 Establish EBGP peers between the PE and the CE and import the VPN routes.
# Configure Spoke-CE 1.
[Spoke-CE1] bgp 65410
[Spoke-CE1-bgp] peer 100.1.1.2 as-number 100
[Spoke-CE1-bgp] import-route direct
[Spoke-CE1-bgp] quit
# Configure Spoke-PE 1.
[Spoke-PE1] bgp 100
[Spoke-PE1-bgp] ipv4-family vpn-instance vpna
[Spoke-PE1-bgp-vpna] peer 100.1.1.1 as-number 65410
[Spoke-PE1-bgp-vpna] quit
[Spoke-PE1-bgp] quit
# Configure Spoke-CE 2.
[Spoke-CE2] bgp 65420
Issue 01 (2012-04-20)
NOTE
When the interfaces on a PE are bound to the same VPN, you need to specify the source IP address when
you use the ping command to ping the CE connected with the peer PE. That is, you need to specify -a
source-ip-address in the ping -a source-ip-address -vpn-instance vpn-instance-name dest-ip-address
command; otherwise, the ping fails.
NOTE
To accept the routes advertised by Hub-PE, configure the Hub-CE to allow AS number to be repeated once.
You need not allow the AS number to be repeated once on the Spoke-PE because a router does not check
the AS-PATH attribute when the router receives the routes advertised by the IBGP peer.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 BGP MPLS IP VPN Configuration
Figure 3-4.
169