3Com S7906E - Switch, Configuration Manual

Page: 1539 / 2621

1-24
Follow these steps to associate a VPN instance with an interface:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Associate the current interface
with the VPN instance ip binding vpn-instance
vpn-instance-name
Required
No VPN instance is associated
with an interface by default.
When configured on an interface, the ip binding vpn-instance command clears the IP address of the
interface. Therefore, you must re-configure the IP address of the interface after configuring the
command.
Configuring Route Related Attributes of a VPN Instance
The control process of VPN route advertisement is as follows:
z
When a VPN route learned from a CE gets redistributed into BGP, BGP associates it with a VPN
target extended community attribute list, which is usually the export target attribute of the VPN
instance associated with the CE.
z
The VPN instance determines which routes it can accept and redistribute according to the
import-extcommunity in the VPN target.
z
The VPN instance determines how to change the VPN targets attributes for routes to be
redistributed according to the export-extcommunity in the VPN target.
Follow these steps to configure route related attributes of a VPN instance
To do… Use the command… Remarks
Enter system view system-view —
Enter VPN instance view
ip vpn-instance
vpn-instance-name
Required
Associate the current VPN
instance with one or more VPN
targets vpn-target vpn-target &<1-8>
[ both | export-extcommunity
| import-extcommunity ]
Required
Configure the maximum
number of routes for the VPN
instance routing-table limit number
{ warn-threshold |
simply-alert }
Optional
The default varies by device.
Apply an import routing policy
to the current VPN instance import route-policy
route-policy
Optional
By default, all routes permitted
by the import target attribute
can be redistributed into the
VPN instance.