238
NOTE:
•
An OSPF process that is bound with a VPN instance does not use the public network router ID
configured in system view. Therefore, you need to configure a router ID when starting the OSPF process.
All OSPF processes for the same VPN must be configured with the same OSPF domain ID to ensure
correct route advertisement.
•
An OSPF process can belong to only one VPN instance, but one VPN instance can use multiple OSPF
processes to advertise the VPN routes.
•
For more information about OSPF, see
Layer 3—IP Routing Configuration Guide.
Configuring IS-IS between MCE and VPN site
An IS-IS process belongs to the public network or a single VPN instance. If you create an IS-IS process
without binding it to a VPN instance, the process belongs to the public network.
By configuring IS-IS process-to-VPN instance bindings on a MCE, you allow routes of different VPNs to
be exchanged between the MCE and the sites through different IS-IS processes, ensuring the separation
and security of VPN routes.
To configure IS-IS between MCE and VPN site:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create an IS-IS process for a VPN
instance and enter IS-IS view
isis
[
process-id
]
vpn-instance
vpn-instance-name
Required
Perform this configuration on the
MCE. On a VPN site, configure a
normal IS-IS process.
Configure a network entity title
network-entity
net
Required
Not configured by default.
Redistribute remote site routes
advertised by the PE
import-route
{
isis
[
process-id
]
|
ospf
[
process-id
] |
rip
[
process-id
]
|
bgp
[
allow-ibgp
] |
direct
|
static
} [
cost
cost
|
cost-type
{
external
|
internal
} |
[
level-1
|
level-1-2
|
level-2
] |
route-policy
route-policy-name
|
tag
tag
] *
Optional
By default, IS-IS does not
redistribute routes of any other
routing protocol.
If you do not specify the route level
in the command, the command will
redistribute routes to the level-2
routing table by default.
Return to system view
quit
—
Enter interface view
interface
interface-type
interface-number
—
Enable the IS-IS process on the
interface
isis enable
[
process-id
]
Required
Disabled by default.
NOTE:
For more information about IS-IS, see
Layer 3—IP Routing Configuration Guide.
