Huawei AR1200 series Configuration Manual page 43

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
Figure 1-8 Networking diagram in which CEs access a VPN through the GRE tunnel of the
public network
CE1
Router
CE1
CE1
CE1
R1
R1
PE1
PE1
PE1
PE1
PE2
PE2
PE2
CE2
CE2
Configuration Roadmap
PE1 and CE1 are indirectly connected. So the VPN instance on PE1 cannot be bound to the
physical interface on PE1. In such a situation, a GRE tunnel is required between CE1 and PE1.
vpn1 on PE1 can then be bound to the GRE tunnel, and CE1 can access the VPN through the
GRE tunnel.
The configuration roadmap is as follows:
1.
2.
3.
Issue 01 (2012-04-20)
R1
GE1/0/0
GE2/0/0
Tunnel0/0/1
GE1/0/0
PC1
Interface
GE1/0/0
GE2/0/0
Tunnel0/0/1
GE1/0/0
GE2/0/0
Loopback1
GE1/0/0
GE2/0/0
Tunnel0/0/1
Loopback1
GE1/0/0
GE2/0/0
GE1/0/0
GE2/0/0
Configure OSPF10 on PE1 and PE2 to implement the interworking between the two
devices, and then enable MPLS.
Configure OSPF20 on CE1, R1, and PE1 to implement the interworking between the three
devices.
Establish a GRE tunnel between CE1 and PE1.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Loopback1
GE1/0/0 GE2/0/0
GE2/0/0
PE1
Tunnel0/0/1
1 GRE Configuration
Loopback1
MPLS
PE2
GE1/0/0
GE2/0/0
GE1/0/0
GE2/0/0
PC2
IP address
21.1.1.2/24
30.1.1.1/24
2.2.2.1/24
30.1.1.2/24
50.1.1.1/24
1.1.1.9/32
50.1.1.2/24
110.1.1.1/24
2.2.2.2/24
3.3.3.9/32
110.1.1.2/24
11.1.1.2/24
11.1.1.1/24
41.1.1.2/24
CE2
32