HP MSR2000 series Configuration Manual page 413

Step
5. Configure the external route
tag for imported VPN routes.
6. Redistribute remote site routes
advertised by the PE.
7. Configure OSPF to
redistribute the default route.
8. Create an OSPF area and
enter OSPF area view.
9. Enable OSPF on the interface
attached to the specified
network in the area.
Configuring IS-IS between MCE and VPN site
An IS-IS process belongs to the public network or a single VPN instance. If you create an IS-IS process
without binding it to a VPN instance, the process belongs to the public network.
By configuring IS-IS process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different IS-IS processes, ensuring the separation
and security of VPN routes.
For more information about IS-IS, see Layer 3—IP Routing Configuration Guide.
To configure IS-IS between MCE and VPN site:
Step
1. Enter system view.
2. Create an IS-IS process for a
VPN instance and enter IS-IS
view.
Command
route-tag tag-value
import-route protocol [ process-id
| allow-ibgp ] [ cost cost | type
type | tag tag | route-policy
route-policy-name ] *
default-route-advertise summary
cost cost
area area-id
network ip-address wildcard-mask
Command
system-view
isis [ process-id ] vpn-instance
vpn-instance-name
400
Remarks
Optional.
By default, no route tag is
configured.
In some networks, a VPN might be
connected to multiple MCEs.
When one MCE advertise the
routes learned from BGP to the
VPN, the other MCEs might learn
the routes, resulting in routing
loops. To avoid such routing loops,
you can configure route tags for
VPN instances on an MCE. HP
recommends configuring the same
route tag for the same VPN on the
MCEs.
By default, no route of any other
routing protocol is redistributed
into OSPF.
Optional.
By default, OSPF does not
redistribute the default route.
This command redistributes the
default route in a Type-3 LSA. The
MCE advertises the default route to
the site.
By default, no OSPF area is
created.
By default, an interface neither
belongs to any area nor runs
OSPF.
Remarks
N/A
Perform this configuration on the
MCE. On a VPN site, configure a
normal IS-IS process.