TLS VPN Configuration Examples
mpls1
The following command configures the VPN VLAN ncsu for mesh mode. This instructs
the LER to not flood packets received from a TLS tunnel onto any other TLS tunnel.
config mpls tls-tunnel ncsu mode mesh
Each of the following commands configure a TLS tunnel to an LER for which the VLAN
ncsu has a PoP. Each TLS tunnel is represented by a unique VC ID. In order for each
TLS tunnel to become active, a matching TLS tunnel definition with the same VC ID
must be configured on the target LER.
config mpls add tls t12 10.100.100.2 ncsu vcid 12
config mpls add tls t13 10.100.100.3 ncsu vcid 13
config mpls add tls t14 10.100.100.4 ncsu vcid 14
mpls2
config mpls tls-tunnel ncsu mode mesh
config mpls add tls t12 10.100.100.1 ncsu vcid 12
config mpls add tls t23 10.100.100.3 ncsu vcid 23
config mpls add tls t24 10.100.100.4 ncsu vcid 24
mpls3
config mpls tls-tunnel ncsu mode mesh
config mpls add tls t13 10.100.100.1 ncsu vcid 13
config mpls add tls t23 10.100.100.2 ncsu vcid 23
config mpls add tls t34 10.100.100.4 ncsu vcid 34
mpls4
config mpls tls-tunnel ncsu mode mesh
config mpls add tls t14 10.100.100.1 ncsu vcid 14
config mpls add tls t24 10.100.100.2 ncsu vcid 24
config mpls add tls t34 10.100.100.3 ncsu vcid 34
MPLS Module Installation and User Guide
7-13