Introduction To Multi-Role Host - H3C S9500 Series Operation Manual

Operation Manual – MPLS
H3C S9500 Series Routing Switches
Therefore IETF raised two new OSPF VPN extension drafts, to provide a complete
solution to SPPF problems in BGP/MPLS VPN application when OSPF is used as
PE-CE routing protocol. In this case, PE router must be able to run multiple OSPF
instances, each of which corresponds to one VPN instance, owns an individual
interface, routing table, and sends VPN routing information over MPLS network using
BGP/OSPF interaction.
If supporting OSPF multi-instance, one router can run multiple OSPF processes, which
can be bound to different VPN instances. In practice, you can create one OSPF
instance for each service type. OSPF multi-instance can fully isolate different services
in transmission, which can solve security problems with low cost to meet the needs of
customers. Generally, OSPF multi-instance is run on PEs; The CE running OSPF
multi-instance in the LAN is called multi-VPN-instance CE. At present, isolation of LAN
services implements by VLAN function of the switch. OSPF Multi-VPN-Instance CE
provides schemes of services isolation implemented on routers.
VPN - RED VPN - RED VPN -RED VPN -RED
Site1 Site1
Site1 Site1
OSPF Area0 OSPF Area0
OSPF Area0 OSPF Area0
Area 0 Area 0
OSPF 100 VPN OSPF 100 VPN
OSPF 200 VPN GREEN OSPF 200 VPN GREEN
Area 1 Area 1
VPN-GREEN VPN-GREEN
VPN-GREEN VPN-GREEN
Site1 Site1 Site1 Site1
OSPF Area1 OSPF Area1 OSPF Area1 OSPF Area1
Figure 3-6 OSPF multi-instance application in MPLS/BGP VPN PE
Figure 3-7 Multi-VPN-instance CE application in conventional LAN

3.1.6 Introduction to Multi-Role Host

The VPN attribute of the packets from a CE to its PE lies on the VPN bound with the
ingress interface. This, in fact determines that all the CEs forwarded by the PE through
OSPF Area2 OSPF Area2
CE11 CE11
- -
RED RED
MPLS VPN Backbone MPLS VPN Backbone
MPLS VPN Bac kbone MPLS VPN Bac kbone
- -
PE1 PE1
CE12 CE12
ospf 100 ospf 100
vpn-engineering vpn-engineering
opsf 200 opsf 200
vpn-rd vpn-rd
ospf 300 ospf 300
PE PE
vpn-finances vpn-finances
Chapter 3 BGP/MPLS VPN Configuration
VPN - GREEN VPN - GREEN VPN-GREEN VPN-GREEN
Site2 Site2
Site2 Site2
OSPF Area2 OSPF Area2
CE31 CE31
Area 2 Area 2
PE3 PE3
OSPF 100 VPN - GREEN OSPF 100 VPN - GREEN
CE21 CE21
OSPF 100 VPN - RED OSPF 100 VPN - RED
OSPF 200 VPN - GREEN OSPF 200 VPN - GREEN
PE2 PE2
CE22 CE22
ospf 100 ospf 100
vpn-engineering vpn-engineering
opsf 200 opsf 200
vpn-rd vpn-rd
Multi-VPN-Instance CE Multi-VPN-Instance CE
ospf 300 ospf 300
vpn-finances vpn-finances
3-9
VPN - RED VPN - RED VPN-RED VPN-RED
Site2 Site2 Site2 Site2
OSPF Area1 OSPF Area1
OSPF Area1 OSPF Area1
Area 0 Area 0
Area 1 Area 1