H3C S5130S-HI Series Configuration Manual Download Page 6

Page: 6 / 32

Contents

Configuring MCE ··························································································· 1

About MCE ························································································································································· 1

MPLS L3VPN problems solved by MCE ···································································································· 1

Basic MPLS L3VPN architecture ··············································································································· 1

MCE-related MPLS L3VPN concepts ········································································································ 2

MCE working mechanism ·························································································································· 3

Restrictions and guidelines: MCE configuration································································································· 4

MCE tasks at a glance ······································································································································· 4

Configuring VPN instances ································································································································ 5

Creating a VPN instance ···························································································································· 5

Associating a VPN instance with a Layer 3 interface ················································································· 5

Configuring route related attributes for a VPN instance ············································································· 6

Configuring routing between an MCE and a VPN site ······················································································· 6

Configuring static routing between an MCE and a VPN site ······································································ 6

Configuring RIP between an MCE and a VPN site ···················································································· 7

Configuring OSPF between an MCE and a VPN site ················································································ 7

Configuring routing between an MCE and a PE ································································································ 8

About routing between an MCE and a PE ································································································· 8

Configuring static routing between an MCE and a PE ··············································································· 8

Configuring RIP between an MCE and a PE ····························································································· 9

Configuring OSPF between an MCE and a PE·························································································· 9

Display and maintenance commands for MCE ·································································································· 9

MCE configuration examples ··························································································································· 10

Example: Configuring the MCE that uses OSPF to advertise VPN routes to the PE······························· 10

Configuring IPv6 MCE ················································································· 15

About IPv6 MCE··············································································································································· 15

Restrictions and guidelines: IPv6 MCE configuration ······················································································ 15

IPv6 MCE tasks at a glance ····························································································································· 15

Configuring VPN instances ······························································································································ 15

Creating a VPN instance ·························································································································· 15

Associating a VPN instance with a Layer 3 interface ··············································································· 16

Configuring route related attributes for a VPN instance ··········································································· 16

Configuring routing between an MCE and a VPN site ····················································································· 17

Configuring IPv6 static routing between an MCE and a VPN site ···························································· 17

Configuring RIPng between an MCE and a VPN site ·············································································· 18

Configuring OSPFv3 between an MCE and a VPN site ··········································································· 18

Configuring routing between an MCE and a PE ······························································································ 19

About routing between an MCE and a PE ······························································································· 19

Configuring IPv6 static routing between an MCE and a PE ····································································· 19

Configuring RIPng between an MCE and a PE ······················································································· 19

Configuring OSPFv3 between an MCE and a PE ···················································································· 20

Display and maintenance commands for IPv6 MCE ························································································ 20

IPv6 MCE configuration examples ··················································································································· 21

Example: Configuring IPv6 MCE ·············································································································· 21

Summary of Contents for S5130S-HI Series

Page 1: ... H3C S5130S SI switch series Release 6310 and later H3C S5120V2 SI switch series Release 6310 and later H3C S3100V3 EI switch series Release 6309P01 and later H3C E500C switch series Release 6309P01 and later H3C E500D switch series Release 6309P01 and later H3C E128C E152C switches Release 6310 and later New H3C Technologies Co Ltd http www h3c com Software version Release 63xx Document version 6...

Page 2: ...w H3C Technologies Co Ltd any trademarks that may be mentioned in this document are the property of their respective owners Notice The information in this document is subject to change without notice All contents in this document including statements information and recommendations are believed to be accurate but they are presented without warranty of any kind express or implied H3C shall not be l...

Page 3: ...s keywords or arguments that are optional x y Braces enclose a set of required syntax choices separated by vertical bars from which you select one x y Square brackets enclose a set of optional syntax choices separated by vertical bars from which you select one or none x y Asterisk marked braces enclose a set of required syntax choices separated by vertical bars from which you select a minimum of o...

Page 4: ...a generic network device such as a router switch or firewall Represents a routing capable device such as a router or Layer 3 switch Represents a generic switch such as a Layer 2 or Layer 3 switch or a router that supports Layer 2 forwarding and other Layer 2 features Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represent...

Page 5: ...ocumentation To access the most up to date H3C product documentation go to the H3C website at http www h3c com hk To obtain information about installation configuration and maintenance click http www h3c com hk Technical_Documents To obtain software version information such as release notes click http www h3c com hk Software_Download Technical support service h3c com http www h3c com hk Documentat...

Page 6: ... a PE 9 Display and maintenance commands for MCE 9 MCE configuration examples 10 Example Configuring the MCE that uses OSPF to advertise VPN routes to the PE 10 Configuring IPv6 MCE 15 About IPv6 MCE 15 Restrictions and guidelines IPv6 MCE configuration 15 IPv6 MCE tasks at a glance 15 Configuring VPN instances 15 Creating a VPN instance 15 Associating a VPN instance with a Layer 3 interface 16 Co...

Page 7: ...devices Using a common CE for multiple VPNs cannot ensure data security because the VPNs use the same routing table The MCE feature offers balance between cost and security It creates multiple VPN instances on a CE to provide logically separated routing tables and address spaces for the VPNs so the VPNs can share the CE This CE is called the MCE device Basic MPLS L3VPN architecture A basic MPLS L3...

Page 8: ...be classified into different sets by policies Only the sites in the same set can access each other through the provider network Such a set is called a VPN VPN instance VPN instances implement route isolation data independence and data security for VPNs A VPN instance has the following components A separate Label Forwarding Information Base LFIB An IP routing table Interfaces bound to the VPN insta...

Page 9: ...ee global uniqueness for a VPN IPv4 address do not set the Administrator subfield to any private AS number or private IP address Route target attribute MPLS L3VPN uses route target community attributes to control the advertisement of VPN routing information A VPN instance on a PE supports the following types of route target attributes Export target attribute A PE sets the export target attribute f...

Page 10: ...namic IP assignment for DHCP clients in private networks you can configure DHCP server or DHCP relay agent on the MCE When the MCE functions as the DHCP server the IP addresses assigned to different private networks cannot overlap Restrictions and guidelines MCE configuration On the PE disable routing loop detection to avoid route loss during route calculation and disable route redistribution betw...

Page 11: ...instance 5 Optional Configure a VPN ID for the VPN instance vpn id vpn id By default no VPN ID is configured for a VPN instance Associating a VPN instance with a Layer 3 interface 1 Enter system view system view 2 Enter interface view interface interface type interface number This interface connects the device to the CE 3 Associate a VPN instance with the interface ip binding vpn instance vpn inst...

Page 12: ...unity By default no route targets are configured 4 Set the maximum number of active routes routing table limit number warn threshold simply alert By default the number of active routes in a VPN instance is not limited Setting the maximum number of active routes for a VPN instance can prevent the device from learning too many routes 5 Apply an import routing policy import route policy route policy ...

Page 13: ...ommon RIP process Procedure 1 Enter system view system view 2 Create a RIP process for a VPN instance and enter RIP view rip process id vpn instance vpn instance name A RIP process can belong to only one VPN instance 3 Enable RIP on the interface attached to the specified network network network address wildcard mask By default RIP is disabled on an interface 4 Redistribute remote site routes adve...

Page 14: ...Enable OSPF on the interface attached to the specified network in the area network ip address wildcard mask By default an interface neither belongs to any area nor runs OSPF Configuring routing between an MCE and a PE About routing between an MCE and a PE MCE PE routing configuration includes these tasks Binding the MCE PE interfaces to VPN instances Performing route configurations Redistributing ...

Page 15: ...ospf process id router id router id vpn instance vpn instance name 3 Disable routing loop detection vpn instance capability simple By default routing loop detection is enabled and the MCE does not receive OSPF routes from the PE 4 Redistribute the VPN routes import route protocol as number process id all processes allow direct cost cost value nssa only route policy route policy name tag tag type t...

Page 16: ... Network diagram Procedure 1 Configure the VPN instances on the MCE and PE 1 On the MCE configure VPN instances vpn1 and vpn2 and specify an RD and route targets for each VPN instance MCE system view MCE ip vpn instance vpn1 MCE vpn instance vpn1 route distinguisher 10 1 MCE vpn instance vpn1 vpn target 10 1 MCE vpn instance vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguis...

Page 17: ...ce vpn2 quit 2 Configure routing between the MCE and VPN sites The MCE is connected to VPN 1 directly and no routing protocol is enabled in VPN 1 Therefore you can configure static routes On VR 1 assign IP address 10 214 10 2 24 to the interface connected to MCE and 192 168 0 1 24 to the interface connected to VPN 1 Add ports to VLANs correctly Details not shown On VR 1 configure a default route w...

Page 18: ...ystem view VR2 ospf 2 VR2 ospf 2 area 0 VR2 ospf 2 area 0 0 0 0 network 192 168 10 0 0 0 0 255 VR2 ospf 2 area 0 0 0 0 network 10 214 20 0 0 0 0 255 VR2 ospf 2 area 0 0 0 0 quit VR2 ospf 2 quit On the MCE display the routing information maintained for VPN instance vpn2 MCE display ip routing table vpn instance vpn2 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0...

Page 19: ...interface40 ip binding vpn instance vpn2 PE1 Vlan interface40 ip address 40 1 1 2 24 PE1 Vlan interface40 quit Configure the IP address of the interface Loopback 0 as 101 101 10 1 for the MCE and as 100 100 10 1 for PE 1 Specify the loopback interface address as the router ID for the MCE and PE 1 Details not shown Enable OSPF process 10 on the MCE and bind the process to VPN instance vpn1 MCE ospf...

Page 20: ...Vlan30 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that PE 1 has learned the routes of OSPF process 20 in VPN 2 through OSPF PE1 display ip routing table vpn instance vpn2 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 40 1 1 0 24 Direct 0 0 40 ...

Page 21: ...n routing protocols to save system resources IPv6 MCE tasks at a glance To configure IPv6 MCE perform the following tasks 1 Configuring VPN instances Perform the following VPN instance tasks on PEs and MCEs a Creating a VPN instance b Associating a VPN instance with a Layer 3 interface c Optional Configuring route related attributes for a VPN instance 2 Configuring routing between an MCE and a VPN...

Page 22: ...ce with an interface or disassociating a VPN instance from an interface will clear the IP address and routing protocol settings of the interface Configuration of this command deletes the IPv6 address of the current interface You must reconfigure an IPv6 address for the interface after configuring the command Configuring route related attributes for a VPN instance Restrictions and guidelines If you...

Page 23: ...n MCE and a VPN site About IPv6 static routing between an MCE and a VPN site An MCE can reach a VPN site through an IPv6 static route IPv6 static routing on a traditional CE is globally effective and does not support address overlapping among VPNs An MCE supports binding an IPv6 static route with an IPv6 VPN instance so that the IPv6 static routes of different IPv6 VPN instances can be isolated fr...

Page 24: ...re redistributed into RIPng 4 Return to system view quit 5 Enter interface view interface interface type interface number 6 Enable RIPng on the interface ripng process id enable By default RIPng is disabled Configuring OSPFv3 between an MCE and a VPN site About OSPFv3 between an MCE and a VPN site By configuring OSPFv3 process to IPv6 VPN instance bindings on a MCE you allow routes of different IP...

Page 25: ...ing configurations on the MCE For information about configuring the PE see the documentation for the PE Configuring IPv6 static routing between an MCE and a PE 1 Enter system view system view 2 Configure an IPv6 static route for an IPv6 VPN instance ipv6 route static vpn instance s vpn instance name ipv6 address prefix length interface type interface number next hop address nexthop address public ...

Page 26: ... receive OSPFv3 routes from the PE 5 Redistribute VPN routes import route protocol as number process id all processes allow direct cost cost value nssa only route policy route policy name tag tag type type By default no routes are redistributed into OSPFv3 6 Return to system view quit 7 Enter interface view interface interface type interface number 8 Enable the OSPFv3 process on the interface ospf...

Page 27: ...PN instances vpn1 and vpn2 and specify an RD and route targets for each VPN instance MCE system view MCE ip vpn instance vpn1 MCE vpn instance vpn1 route distinguisher 10 1 MCE vpn instance vpn1 vpn target 10 1 MCE vpn instance vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguisher 20 1 CE VPN 1 Site 2 CE VPN 2 Site 1 PE 1 PE 3 PE 2 VPN 2 2012 64 VR 2 VPN 1 2012 1 64 VR 1 MCE...

Page 28: ...VPN sites The MCE is connected to VPN 1 directly and no routing protocol is enabled in VPN 1 Therefore you can configure IPv6 static routes On VR 1 assign IPv6 address 2001 1 2 64 to the interface connected to the MCE and 2012 1 2 64 to the interface connected to VPN 1 Add ports to VLANs Details not shown On VR 1 configure a default route with the next hop being 2001 1 1 VR1 system view VR1 ipv6 r...

Page 29: ...nce 0 Interface Vlan10 Cost 0 Destination 2001 1 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 1 64 Protocol Static NextHop 2001 1 2 Preference 60 Interface Vlan10 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 MCE display ipv6 routing tabl...

Page 30: ...nterface MCE interface vlan interface 40 MCE Vlan interface40 ip binding vpn instance vpn2 MCE Vlan interface40 ipv6 address 40 1 64 MCE Vlan interface40 quit On PE 1 bind VLAN interface 30 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface PE1 interface vlan interface 30 PE1 Vlan interface30 ip binding vpn instance vpn1 PE1 Vlan interface30 ipv6 address 30 2 64 PE1 Vlan int...

Page 31: ...etails not shown Verifying the configuration Verify that PE 1 has learned the private route of VPN 1 through OSPFv3 PE1 display ipv6 routing table vpn instance vpn1 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 30 64 Protocol Direct NextHop Preference 0 Interface Vlan30 Cost 0 Destination 30 2 128 Protocol Direct NextHop 1 Pre...

Page 32: ...rotocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 64 Protocol O_ASE2 NextHop FE80 200 FF FE0F 5 Preference 150 Interface Vlan40 Cost 1 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 The routing information for the two VPNs has been added into the routing tab...

Search results

Summary of Contents for S5130S-HI Series

Reviews:

Related manuals for S5130S-HI Series

Brands by name

Popular brands

H3C S5130S-HI Series, Configuration Manual

Search results

Summary of Contents for S5130S-HI Series

Reviews:

Related manuals for S5130S-HI Series

Brands by name

Popular brands