H3C Technologies H3C SR8800 User Manual

Page 295

284

A '*' before a Label means the USCB or DSCB is stale

Configure VPN instances on PEs to allow CEs to access.
# Configure PE 1.

[PE1] ip vpn-instance vpn1

[PE1-vpn-instance-vpn1] route-distinguisher 100:1

[PE1-vpn-instance-vpn1] vpn-target 111:1

[PE1-vpn-instance-vpn1] quit

[PE1] ip vpn-instance vpn2

[PE1-vpn-instance-vpn2] route-distinguisher 100:2

[PE1-vpn-instance-vpn2] vpn-target 222:2

[PE1-vpn-instance-vpn2] quit

[PE1] interface GigabitEthernet 4/1/1

[PE1-GigabitEthernet4/1/1] ip binding vpn-instance vpn1

[PE1-GigabitEthernet4/1/1] ip address 10.1.1.2 24

[PE1-GigabitEthernet4/1/1] quit

[PE1] interface GigabitEthernet4/1/2

[PE1-GigabitEthernet4/1/2] ip binding vpn-instance vpn2

[PE1-GigabitEthernet4/1/2] ip address 10.2.1.2 24

[PE1-GigabitEthernet4/1/2] quit

# Configure PE 2.

[PE2] ip vpn-instance vpn1

[PE2-vpn-instance-vpn1] route-distinguisher 200:1

[PE2-vpn-instance-vpn1] vpn-target 111:1

[PE2-vpn-instance-vpn1] quit

[PE2] ip vpn-instance vpn2

[PE2-vpn-instance-vpn2] route-distinguisher 200:2

[PE2-vpn-instance-vpn2] vpn-target 222:2

[PE2-vpn-instance-vpn2] quit

[PE2] interface GigabitEthernet 4/1/1

[PE2-GigabitEthernet4/1/1] ip binding vpn-instance vpn1

[PE2-GigabitEthernet4/1/1] ip address 10.3.1.2 24

[PE2-GigabitEthernet4/1/1] quit

[PE2] interface GigabitEthernet 4/1/2

[PE2-GigabitEthernet4/1/2] ip binding vpn-instance vpn2

[PE2-GigabitEthernet4/1/2] ip address 10.4.1.2 24

[PE2-GigabitEthernet4/1/2] quit

# Configure IP addresses for the CEs as required in

Figure 74

. (Details not shown)

After completing the configurations, issue the display ip vpn-instance command on the PEs to view
the configuration of the VPN instance. Use the ping command to test connectivity between the PEs
and their attached CEs. The PEs can ping their attached CEs. The following takes PE 1 and CE 1

as an example:

[PE1] display ip vpn-instance

Total VPN-Instances configured : 2

VPN-Instance Name RD Create time

vpn1 100:1 2009/01/22 13:02:21

vpn2 100:2 2009/01/22 13:02:40

[PE1] ping -vpn-instance vpn1 10.1.1.1

This manual is related to the following products:

H3C SR6600-X H3C SR6600 H3C S12500 Series Switches H3C S9500E Series Switches H3C MSR 5600 H3C MSR 50 H3C MSR 3600 H3C MSR 30 H3C MSR 2600 H3C MSR 20-2X[40] H3C MSR 20-1X H3C MSR 930 H3C MSR 900