Configuring Hub&Spoke - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[PE-B] bgp 100
[PE-B-bgp] group 10
[PE-B-bgp] peer 10.1.1.1 group 10
[PE-B-bgp] peer 10.1.1.1 connect-interface loopback 0
[PE-B-bgp] group 20
[PE-B-bgp] peer 20.1.1.1 group 20
[PE-B-bgp] peer 20.1.1.1 connect-interface loopback 0
[PE-B-bgp] ipv4-family vpnv4
[PE-B-bgp-af-vpn] peer 10 enable
[PE-B-bgp-af-vpn] peer 10.1.1.1 group 10
[PE-B-bgp-af-vpn] peer 20 enable
[PE-B-bgp-af-vpn] peer 20.1.1.1 group 20
[PE-B-bgp-af-vpn] quit
3.4.4 Configuring Hub&Spoke
I. Network requirements
Hub&Spoke networking is also called central server networking. The site in the center
is called hub-site, while the one not in the center is called spoke-site. The hub-site
knows the routes to all other sites in the same VPN, and the spoke-site must send its
traffic first to hub-site and then to the destination.
A bank has its headquarters network and subsidiary networks, and it requires that
subsidiaries cannot exchange data with each other, but through the headquarters
network. Hub&Spoke networking topology is used here: CE2 and CE3 are as
spoke-sites, while CE1 is as the hub-site of the bank data center. CE1 controls
communication between CE1 and CE3.
Set up IBGP adjacency between PE1 and PE2, between PE1 and PE3, but not
between PE2 and PE3, that is, VPN routing information cannot be exchanged
between PE2 and PE3.
Create two VPN-instances on PE1, redistribute VPN routes of VPN-target 100:1,
and set VPN-target for VPN routes advertised as 100:2.
Create one VPN-instance on PE2, redistribute VPN routes of VPN-target 100:2,
set VPN-target for VPN routes advertised as 100:1.
Create one VPN-instance on PE3, redistribute VPN routes of VPN-target 100:2,
set VPN-target for VPN routes advertised as 100:1.
Then PE2 and PE3 can only learn their neighbor's routes through PE1.
Chapter 3 BGP/MPLS VPN Configuration
3Com Corporation
3-48