HP 10500 SERIES Configuration Manual page 242

Figure 17 Network diagram for hub and spoke networking scheme
VPN 1
Site 1
Spoke-CE
Spoke-CE
Site 2
VPN 1
In Figure 17, the spoke sites communicate with each other through the hub site. The arrows in the figure
indicate the advertising path of routes from Site 2 to Site 1:
• The hub PE can receive all VPN-IPv4 routes advertised by spoke PEs.
All spoke PEs can receive the VPN-IPv4 routes advertised by the hub PE.
•
The hub PE advertises the routes learned from a spoke PE to the other spoke PEs. The spoke sites can
•
communicate with each other through the hub site.
The import target attribute of any spoke PE is distinct from the export route targets of the other spoke
•
PEs. Therefore, any two spoke PEs can neither directly advertise VPN-IPv4 routes to each other nor
directly access each other.
Extranet networking scheme
Use the extranet networking scheme when some resources in a VPN are to be accessed by users that are
not in the VPN.
In this kind of networking scheme, if a VPN must access a shared site, the export target attribute and the
import target attribute of the VPN must be contained in the import target attribute and the export target
attribute of the VPN instance of the shared site.
VPN 1:
Import: Hub
Export: Spoke
Spoke-PE
Spoke-PE
VPN 1:
Import: Hub
Export: Spoke
VPN 1-out:
Export: Hub
Hub-PE
VPN 1-in:
Import: Spoke
234
Hub-CE
Site 3
VPN 1