Example For Connecting Vpn And Internet - Huawei AR1200 series Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN

3.18.10 Example for Connecting VPN and Internet

By configuring a proxy service in the VPN, you can enable the VPN to interconnect with the
Internet.
Networking Requirements
As shown in
a proxy server with the public network address is attached with CE1. Thus, users of CE1 can
access Internet through this proxy server. In this example, the P device serves as a substitute for
the Internet.
Figure 3-11 Example of enabling VPN users to access the public network
10.1.1.1/24
Configuration Roadmap
In this configuration, configure the L3VPN first. It needs the following static routes:
1.
2.
3.
Issue 01 (2012-04-20)
rip 200
version 2
network 10.0.0.0
import-route direct
#
return
Figure 3-11, CE1 and CE2 on the private network can mutually access. Meanwhile
Loopback1
1.1.1.1/32
PE1 100.1.1.2/24
GE2/0/0
GE1/0/0
100.1.1.1/24
10.1.1.2/24
GE1/0/0
GE2/0/0
100.3.1.2/24
CE1
vpn1
AS 65410
Add a default route on CE1. The next hop is PE1.
Add a default route from the VPN device to the Internet on PE1. The next hop is P. Thus,
the traffic of the proxy server can reaches the Internet.
Add a static route from the Internet to the proxy server on PE1 and the next hop is CE1.
Use IGP to advertise this route to the Internet, Thus, the traffic of Internet can reaches the
server attached with CE1.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Loopback1
2.2.2.2/32
GE1/0/0
GE1/0/0
100.2.1.2/24
GE2/0/0
100.2.1.1/24
P
Internet
AS100
Agent Server
100.3.1.1/24
3 BGP MPLS IP VPN Configuration
Loopback1
3.3.3.3/32
PE2
GE2/0/0
10.2.1.2/24
GE1/0/0
10.2.1.1/24
CE2
vpn1
AS 65420
226