Table of Contents
Advertisement
JunosE 11.3.x IP Services Configuration Guide
82
Figure 9: Cross-VRF Example
VRF11 is the local (this PE) representation of the MPLS VPN and connects enterpriseA
to the VPN. Enterprise A communicates to VRFs in other PE devices (the rest of the VPN)
through RFC2547bis (MPLS VPNs). VR1, of which the VRF is administratively a member,
represents the public network. The interface to EnterpriseA is marked as an inside
interface. The normal steps for configuring inside source translation are applied. A
subscriber interface is created off the uplink to the core network and anchored in the
VRF. A DA-based demultiplexer matching the inside global address range is configured
on the subscriber interface. The subscriber interface is marked as an outside interface.
To configure this example:
Enter the correct virtual routing and forwarding instance.
1.
host1(config)#virtual-router vr1:vrf11
Mark the inside interfaces.
2.
host1:vr1:vrf11(config)#interface fast-ethernet 6/1
host1:vr1:vrf11 (config-interface)#ip nat inside
host1:vr1:vrf11 (config-interface)#exit
Set the primary interface to DA-type demultiplexer (for subsequent shared interfaces).
3.
host1:vr1(config)#interface atm 12/0.101
host1:vr1(config-interface)#ip demux-type da-prefix
host1:vr1(config-interface)#exit
Create the address pool for dynamic translations.
4.
host1:vr1(config)#virtual-router vr1:vrf11
host1:vr1:vrf11(config)#ip nat pool entApool 128.13.44.0 128.13.44.255 prefix-length
24
Create the access list for addresses eligible for dynamic translation.
5.
host1:vr1:vrf11(config)#access-list entA permit 10.16.5.0 0.0.0.255
Create the dynamic translation rule.
6.
host1:vr1:vrf11(config)#ip nat inside source list entA pool entApool
Create the subscriber interface off the uplink.
7.
host1:vr1:vrf11(config)#interface ip vrf11vr1
host1:vr1:vrf11(config-interface)#ip share-interface atm 12/0.101
host1:vr1:vrf11(config-interface)#ip unnumbered loopback 1
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
