1.9 Configuration Examples................................................................................................................................1-25

1.9.1 Example for Configuring Tunnel Policies for the L3VPN..................................................................1-25

1.9.2 Example for Binding a Tunnel to the Martini L2VPN.........................................................................1-39

2 GRE Configuration....................................................................................................................2-1

2.1 Introduction to the GRE Protocol....................................................................................................................2-2

2.2 GRE Features Supported by the S9300...........................................................................................................2-2

2.3 Configuring a GRE Tunnel.............................................................................................................................2-3

2.3.1 Establishing the Configuration Task......................................................................................................2-4

2.3.2 Configuring the Tunnel as a GRE Tunnel..............................................................................................2-4

2.3.3 Configuring Routes................................................................................................................................2-5

2.3.4 Checking the Configuration...................................................................................................................2-6

2.4 Configuring a GRE Tunnel Between CE and PE............................................................................................2-7

2.4.1 Establishing the Configuration Task......................................................................................................2-7

2.4.2 Configuring the GRE Tunnel Interface on CE.......................................................................................2-8

2.4.3 Configuring the GRE Tunnel Interface on PE.......................................................................................2-9

2.4.4 Binding the Tunnel with VPN to Which CE belongs on PE................................................................2-10

2.4.5 Checking the Configuration.................................................................................................................2-10

2.5 Configuring the Keepalive Function.............................................................................................................2-11

2.5.1 Establishing the Configuration Task....................................................................................................2-11

2.5.2 Enabling the Keep-alive Function........................................................................................................2-12

2.5.3 Checking the Configuration.................................................................................................................2-13

2.6 Maintaining the GRE Tunnel........................................................................................................................2-13

2.6.1 Resetting the Statistics of a Tunnel Interface.......................................................................................2-14

2.6.2 Monitoring the Operating Status of GRE.............................................................................................2-14

2.6.3 Debugging GRE...................................................................................................................................2-14

2.7 Configuration Examples................................................................................................................................2-15

2.7.1 Example for Configuring Static Routes on the GRE Tunnel...............................................................2-15

2.7.2 Example for Configuring the Dynamic Routing Protocol on the GRE Tunnel...................................2-20

2.7.3 Example for Configuring the CE to Access a VPN Through a GRE Tunnel of the Public Network

.......................................................................................................................................................................2-24

2.7.4 Example for Configuring the Keepalive Function for GRE.................................................................2-32

3 BGP/MPLS IP VPN Configuration.........................................................................................3-1

3.1 Introduction to BGP/MPLS IP VPN...............................................................................................................3-3

3.2 BGP/MPLS IP VPN Supported by the S9300................................................................................................3-3

3.3 Configuring a VPN Instance...........................................................................................................................3-5

3.3.1 Establishing the Configuration Task......................................................................................................3-5

3.3.2 Creating a VPN Instance........................................................................................................................3-6

3.3.3 Configuring the Attributes of a VPN Instance.......................................................................................3-7

3.3.4 (Optional) Applying a Tunnel Policy to a VPN Instance.......................................................................3-8

3.3.5 (Optional) Allocating MPLS Labels Based on VPN Instances..............................................................3-8

3.3.6 Checking the Configuration...................................................................................................................3-9

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - VPN

Issue 03 (2009-08-20)

Table of Contents