H3C Technologies H3C S6800 Series Switches - Manual (Page 35)

28
• On the MCE, configure VPN instances, and bind the VPN instances with the interfaces connected
to the VPN sites and those connected to the PE.
• Configure the link layer and network layer protocols on related interfaces to ensure IP connectivity.
Configuring routing between an MCE and a VPN site
You can configure static routing, OSPFv3, EBGP, or IBGP between an MCE and a VPN site.
Configuring static routing between an MCE and a VPN site
An MCE can reach a VPN site through an IPv6 static route. IPv6 static routing on a traditional CE is
globally effective and does not support address overlapping among VPNs. An MCE supports binding an
IPv6 static route with an IPv6 VPN instance, so that the IPv6 static routes of different IPv6 VPN instances
can be isolated from each other.
To configure IPv6 static routing between an MCE and a VPN site:
Step Command Remarks
1. Enter system view. system-view N/A
2. Configure an IPv6 static
route for an IPv6 VPN
instance.
ipv6 route-static vpn-instance s-vpn-instance-name
ipv6-address prefix-length { interface-type
interface-number [ next-hop-address ] |
nexthop-address [ public ] | vpn-instance
d-vpn-instance-name nexthop-address } [ permanent ]
[ preference preference-value ] [ tag tag-value ]
[ description description-text ]
Use either command
as needed.
Perform this
configuration on the
MCE. On a VPN site,
configure normal IPv6
static routes.
3. (Optional.) Configure
the default preference
for IPv6 static routes.
ipv6 route-static default-preference
default-preference-value
The default preference
for IPv6 static routes is
60.
Configuring OSPFv3 between an MCE and a VPN site
An OSPFv3 process belongs to the public network or a single IPv6 VPN instance. If you create an
OSPFv3 process without binding it to an IPv6 VPN instance, the process belongs to the public network.
By configuring OSPFv3 process-to-IPv6 VPN instance bindings on a MCE, you allow routes of different
IPv6 VPNs to be exchanged between the MCE and the sites through different OSPFv3 processes,
ensuring the separation and security of IPv6 VPN routes.
For more information about OSPFv3, see Layer 3—IP Routing Configuration Guide.
To configure OSPFv3 between an MCE and a VPN site:
Step Command Remarks
1. Enter system view. system-view N/A
2. Create an OSPFv3 process for
a VPN instance and enter
OSPFv3 view.
ospfv3 [ process-id | vpn-instance
vpn-instance-name ] *
Perform this configuration on the
MCE. On a VPN site, configure
common OSPFv3.
Deleting a VPN instance also
deletes all related OSPFv3
processes.
3. Set the router ID. router-id router-id N/A