beautypg.com

H3C Technologies H3C S10500 Series Switches User Manual

Page 21

background image

10

NOTE:

The ip binding vpn-instance command clears the IP address of the interface on which it is configured. Be
sure to reconfigure an IP address for the interface after configuring the command.

Configuring route-related attributes of a VPN instance

The control process of VPN route advertisement is as follows:

When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a VPN
target extended community attribute list, which is usually the export target attribute of the VPN

instance associated with the site.

The VPN instance determines which routes it can accept and redistribute according to the

import-extcommunity in the VPN target.

The VPN instance determines how to change the VPN targets attributes for routes to be advertised

according to the export-extcommunity in the VPN target.

Follow these steps to configure route related attributes of a VPN instance:

To do…

Use the command…

Remarks

Enter system view

system-view

Enter VPN instance view

ip vpn-instance vpn-instance-name Required

Enter IPv4 VPN view

ipv4-family

Optional

Associate the current VPN instance
with one or more VPN targets

vpn-target vpn-target&<1-8>
[ both | export-extcommunity |
import-extcommunity ]

Required

Configure the maximum number of
routes for the VPN instance

routing-table limit number
{ warn-threshold | simply-alert }

Optional
Not configured by default

Apply an import routing policy to
the current VPN instance

import route-policy route-policy

Optional
By default, all routes permitted by
the import target attribute can be

redistributed into the VPN instance.

Apply an export routing policy to
the current VPN instance

export route-policy route-policy

Optional
By default, all VPN instance routes
permitted by the export target

attribute can be redistributed.

NOTE:

Only when BGP runs between the MCE and PE can the VPN target attribute be advertised to the PE
along with the routing information. In other cases, configuring this attribute makes no sense.

You can configure route related attributes for IPv4 VPNs in both VPN instance view and IPv4 VPN view.
Those configured in IPv4 VPN view take precedence.

A single vpn-target command can configure up to eight VPN targets. You can configure up to 64 VPN
targets for a VPN instance.

You can define the maximum number of routes for a VPN instance to support, preventing too many
routes from being redistributed into the PE.

Before associating a routing policy with a VPN instance, you must first create the routing policy.
Otherwise, the default routing policy is used.