Configuring Nested Vpn - HP MSR2000 Configuration Manual

# Verify that the public network routing table contains the internal routes of the customer carrier
network.
[PE3] display ip routing-table
Routing Tables: Public
Destination/Mask
1.1.1.9/32
2.2.2.9/32
5.5.5.9/32
6.6.6.9/32
10.1.1.0/24
10.1.1.1/32
10.1.1.2/32
11.1.1.0/24
20.1.1.0/24
21.1.1.0/24
21.1.1.2/32
127.0.0.0/8
127.0.0.1/32
# Verify that the VPN routing table contains the route to the remote VPN customer.
[PE3] display ip routing-table vpn-instance vpn1
Routing Tables: vpn1
Destination/Mask
100.1.1.0/24
100.1.1.2/32
120.1.1.0/24
4. Verify that PE 3 and PE 4 can ping each other. (Details not shown.)
5. Verify that CE 3 and CE 4 can ping each other. (Details not shown.)

Configuring nested VPN

Network requirements
The service provider provides nested VPN services for users, as shown in
PE 1 and PE 2 are PE devices on the service provider backbone. Both of them support the nested
•
VPN function.
CE 1 and CE 2 are provider CEs connected to the service provider backbone. Both of them support
•
VPNv4 routes.
• PE 3 and PE 4 are PE devices of the customer VPN. Both of them support MPLS L3VPN.
CE 3 through CE 6 are CE devices of sub-VPNs in the customer VPN.
•
The key of nested VPN configuration is to understand the processing of routes of sub-VPNs on the service
provider PEs:
When receiving a VPNv4 route from a provider CE (CE 1 or CE 2, in this example), a provider PE
•
does the following:
a. Replaces the RD of the VPNv4 route with the RD of the MPLS VPN on the service provider
network.
Destinations : 11
Proto Pre
Direct 0
ISIS 15
ISIS 15
ISIS 15
Direct 0
Direct 0
Direct 0
ISIS 15
ISIS 15
ISIS 15
ISIS 15
Direct 0
Direct 0
Destinations : 3
Proto Pre
Direct 0
Direct 0
BGP 255
Routes : 11
Cost NextHop
0 127.0.0.1
10 10.1.1.2
84 10.1.1.2
84 10.1.1.2
0 10.1.1.1
0 127.0.0.1
0 10.1.1.2
20 10.1.1.2
84 10.1.1.2
84 10.1.1.2
84 10.1.1.2
0 127.0.0.1
0 127.0.0.1
Routes : 3
Cost NextHop
0 100.1.1.2
0 127.0.0.1
0 6.6.6.9
263
Interface
InLoop0
POS2/1/1
POS2/1/1
POS2/1/1
POS2/1/1
InLoop0
POS2/1/1
POS2/1/1
POS2/1/1
POS2/1/1
POS2/1/1
InLoop0
InLoop0
Interface
GE2/1/1
InLoop0
NULL0
Figure 70.