Huawei Quidway NetEngine80E Configuration Manual page 59

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
l
l
After receiving the IPv4 direct routes with the same prefix from the master and backup RSGs,
CSGs can select an optimal one based on the cost. Therefore, the CSGs can transmit data
encrypted using IPSec to the correct RSG.
Pre-configuration Tasks
Before configuring the association between IPv4 direct routes and IPSec instance status,
configure link layer protocol parameters and IP addresses for interfaces and ensure that the link
layer protocol of each interface is Up.
Data Preparation
To complete the configuration, you need the following data:
No.
1
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface tunnel interface-number
A tunnel interface is created, and the tunnel interface view is displayed.
Step 3 Run:
tunnel-protocol ipsec
The encapsulation protocol is set to IPSec on the tunnel interface.
Step 4 Run:
direct-route track ipsec-instance degrade-cost cost
The association between IPv4 direct routes and IPSec instance status is configured.
----End
Issue 02 (2014-09-30)
If the IPSec instance status is master on an IPSec tunnel interface, the cost of the IPv4 direct
routes generated on the interface is 0.
If the IPSec instance status is backup on an IPSec tunnel interface or the system cannot
detect the IPSec instance status, the cost of the IPv4 direct routes generated on the interface
is the cost configured on the interface.
Data
Cost for IPv4 direct routes generated on each IPSec tunnel interface
NOTE
If the IPSec tunnel interface uses the IP address of another interface, the association between the cost of
IPv4 direct routes and the IPSec instance status cannot be configured on this IPSec tunnel interface.
The cost of local IPv4 direct routes that are not to be advertised cannot be associated with the IPSec instance
status.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 IP Routing Basic Configuration
34