H3C S5820V2H, Configuration Manual, Page: 12 / 53

5
Creating a VPN instance
You can configure a description for a VPN instance to record its related information, such as its
relationship with a certain VPN.
To create and configure a VPN instance:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Create a VPN instance and
enter VPN instance view.
ip vpn-instance vpn-instance-name
By default, no VPN instance is
created.
3. Configure an RD for the VPN
instance.
route-distinguisher
route-distinguisher
By default, no RD is specified for
the VPN instance.
4. (Optional) Configure a
description for the VPN
instance.
description text
By default, no description is
configured for the VPN instance.
NOTE:
To configure BGP for a VPN instance on the MCE, you must configure an RD for the VPN instance.
Associating a VPN instance with an interface
After configuring a VPN instance, you must associate the VPN instance with the interfaces connected to
the VPN site and the PE.
To associate a VPN instance with an interface:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Associate the current interface
with a VPN instance.
ip binding vpn-instance
vpn-instance-name
By default, no VPN instance is
associated with an interface.
NOTE:
The ip binding vpn-instance command deletes the IP address of the current interface. You must
reconfigure an IP address for the interface after configuring the command.
Configuring route attributes for a VPN instance
The MCE controls VPN route advertisement as follows:
•
When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a route
target extended community attribute list, which is usually the export target attribute list of the VPN
instance associated with the site.
• The VPN instance determines which routes it can accept and redistribute according to the
import-extcommunity in the route target.
•
The VPN instance determines how to change the route target attributes for routes to be advertised
according to the
export-extcommunity in the route target.
To configure route attributes for a VPN instance: