H3C Technologies H3C S10500 Series Switches User Manual

Page 376

365

Configure a VPN instance on the PEs to allow the CEs to access

NOTE:

For the same VPN, the VPN targets for the VPN instance on the PE must match those for the VPN instance
of the ASBR-PE in the same AS. This is not required for PEs in different ASs.

# Configure CE 1.

system-view

[CE1] interface vlan-interface 12

[CE1-Vlan-interface12] ipv6 address 2001:1::1 64

[CE1-Vlan-interface12] quit

# Configure PE 1.

[PE1] ip vpn-instance vpn1

[PE1-vpn-instance-vpn1] route-distinguisher 100:1

[PE1-vpn-instance-vpn1] vpn-target 100:1 both

[PE1-vpn-instance-vpn1] quit

[PE1] interface vlan-interface 12

[PE1-Vlan-interface12] ip binding vpn-instance vpn1

[PE1-Vlan-interface12] ipv6 address 2001:1::2 64

[PE1-Vlan-interface12] quit

# Configure CE 2.

system-view

[CE2] interface vlan-interface 12

[CE2-Vlan-interface12] ipv6 address 2001:2::1 64

[CE2-Vlan-interface12] quit

# Configure PE 2.

[PE2] ip vpn-instance vpn1

[PE2-vpn-instance] route-distinguisher 200:2

[PE2-vpn-instance] vpn-target 100:1 both

[PE2-vpn-instance] quit

[PE2] interface vlan-interface 12

[PE2-Vlan-interface12] ip binding vpn-instance vpn1

[PE2-Vlan-interface12] ipv6 address 2001:2::2 64

[PE2-Vlan-interface12] quit

# Configure ASBR-PE 1, creating a VPN instance and binding the VPN instance to the interface
connected to ASBR-PE 2 (ASBR-PE 1 considers ASBR-PE 2 its attached CE).

[ASBR-PE1] ip vpn-instance vpn1

[ASBR-PE1-vpn-instance-vpn1] route-distinguisher 100:1

[ASBR-PE1-vpn-instance-vpn1] vpn-target 100:1 both

[ASBR-PE1-vpn-instance-vpn1] quit

[ASBR-PE1] interface vlan-interface 12

[ASBR-PE1-Vlan-interface12] ip binding vpn-instance vpn1

[ASBR-PE1-Vlan-interface12] ip address 192.1.1.1 24

[ASBR-PE1-Vlan-interface12] quit

# Configure ASBR-PE 2, creating a VPN instance and binding the VPN instance to the interface
connected to ASBR-PE 1 (ASBR-PE 2 considers ASBR-PE 1 its attached CE).

[ASBR-PE2] ip vpn-instance vpn1