HP 6125G Configuration Manual page 287

Configuring OSPF between MCE and VPN site
An OSPF process belongs to the public network or a single VPN instance. If you create an OSPF process
without binding it to a VPN instance, the process belongs to the public network.
By configuring OSPF process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different OSPF processes, ensuring the separation
and security of VPN routes.
An OSPF process can belong to only one VPN instance, but one VPN instance can use multiple OSPF
processes to advertise the VPN routes.
An OSPF process that is bound with a VPN instance does not use the public network router ID configured
in system view. Therefore, you must configure a router ID when starting the OSPF process. All OSPF
processes for the same VPN must be configured with the same OSPF domain ID to ensure correct route
advertisement.
For more information about OSPF, see Layer 3—IP Routing Configuration Guide.
To configure OSPF between MCE and VPN site:
Step
1. Enter system view.
2. Create an OSPF process for a
VPN instance and enter OSPF
view.
3. Configure the OSPF domain
ID.
4. Redistribute remote site routes
advertised by the PE.
5. Create an OSPF area and
enter OSPF area view.
6. Enable OSPF on the interface
attached to the specified
network in the area.
Configuring EBGP between MCE and VPN site
To use EBGP for exchanging routing information between an MCE and VPN sites, you must configure a
BGP peer for each VPN instance on the MCE, and redistribute the IGP routes of each VPN instance on
the VPN sites.
If EBGP is used for route exchange, you also can configure filtering policies to filter the received routes
and the routes to be advertised.
Configure the MCE:
1.
Step
1. Enter system view.
Command
system-view
ospf [ process-id | router-id
router-id | vpn-instance
vpn-instance-name ] *
domain-id domain-id [ secondary ]
import-route protocol [ process-id
| allow-ibgp ] [ cost cost | type
type | tag tag | route-policy
route-policy-name ] *
area area-id
network ip-address wildcard-mask
Command
system-view
277
Remarks
N/A
Perform this configuration on the
MCE. On a VPN site, create a
normal OSPF process.
Optional.
0 by default.
Perform this configuration on the
MCE. On a VPN site, perform the
common OSPF configuration.
By default, no route of any other
routing protocol is redistributed
into OSPF.
By default, no OSPF area is
created.
By default, an interface neither
belongs to any area nor runs
OSPF.
Remarks
N/A