H3C S9500 Series Operation Manual page 677

Operation Manual – MPLS
H3C S9500 Series Routing Switches
Caution:
If the VRRP protocol is enabled on the VLAN port to which the source port of MPLS
VPN redirection belongs, you must configure another ACL rule to redirect the packets
whose destination address is the virtual MAC address of VRRP, so that ICMP packets
whose destination address is the virtual MAC address of VRRP can be processed
normally.
# Configure VLAN interface.
[PE1] vlan 10
[PE1-vlan10] interface vlan-interface 10
[PE1-vlan-interface10] quit
# Configure redirection on ports.
[PE1] interface Ethernet 3/1/1
[PE1-Ethernet3/1/1] flow-template user-defined
[PE1-Ethernet3/1/1] traffic-redirect inbound ip-group 2000 rule 0 link-group
4000 rule 0 interface GigabitEthernet 2/1/1 10 l3-vpn
[PE1-Ethernet3/1/1] quit
# Bind VPN A to the VLAN port connecting PE1 and CE1.
[PE1] interface vlan-interface 10
[PE1-vlan-interface10] ip binding vpn-instance vpna
[PE1-vlan-interface10] ip address 10.10.10.1 255.255.255.0
[PE1-vlan-interface10] quit
# Establish EBGP neighbor relationship between PE1 and CE1 and import the interface
routes of VPN-instance.
[PE1] bgp 100
[PE1-bgp] ipv4-family vpn-instance vpna
[PE1-bgp-af-vpn-instance] group vpna external
[PE1-bgp-af-vpn-instance] peer 10.10.10.10 group vpna as-number 65410
[PE1-bgp-af-vpn-instance] import-route direct
[PE1-bgp-af-vpn-instance] quit
[PE1-bgp] quit
# Establish MBGP neighbor relationship between PE and PE to exchange the VPN
routing information between the PEs and activate IBGP peers in VPNv4 address family
view.
[PE1] bgp 100
[PE1-bgp] group 100
[PE1-bgp] peer 2.2.2.2 group 100
Chapter 5 Card Intermixing for MPLS Support
5-10