H3C Technologies H3C S12500-X Series Switches - Manual (Page 131)

120
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Associate a VPN instance
with the interface. ip binding vpn-instance
vpn-instance-name
By default, no VPN instance is
associated with an interface.
The ip binding vpn-instance
command deletes the IP address of
the current interface. You must
re-configure an IP address for the
interface after configuring the
command.
Configuring route related attributes for a VPN instance
VPN routes are controlled and advertised on a PE by using the following process:
• When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a route
target extended community attribute list, which is typically the export target attribute of the VPN
instance associated with the site.
• The VPN instance determines which routes it can accept and redistribute according to the
import-extcommunity in the route target.
• The VPN instance determines how to change the route target attributes for routes to be advertised
according to the export-extcommunity in the route target.
To configure route related attributes for a VPN instance:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter VPN instance view
or IPv4 VPN view
• Enter VPN instance view:
ip vpn-instance vpn-instance-name
• Enter IPv4 VPN view:
a. ip vpn-instance
vpn-instance-name
b. ipv4-family
Configurations made in VPN
instance view apply to both IPv4
VPN and IPv6 VPN.
IPv4 VPN prefers the
configurations in IPv4 VPN view
over the configurations in VPN
instance view.
3. Configure route targets.
vpn-target vpn-target&<1-8> [ both |
export-extcommunity |
import-extcommunity ]
By default, no route targets are
configured.
4. Set the maximum
number of active routes
allowed.
routing-table limit number
{ warn-threshold | simply-alert }
By default, the number of active
routes allowed for a VPN instance
is not limited.
Setting the maximum number of
active routes for a VPN instance
can prevent the PE from learning
too many routes.