HP FlexFabric 5940 Configuration Manual Download Page 37

Page: 37 / 52

Figure 7 Network diagram

Configuration procedure

Assume that the system name of the MCE device is MCE, the system names of the edge devices of
VPN 1 and VPN 2 are VR1 and VR2, and the system name of PE 1 is PE1.

Configure the VPN instances on the MCE and PE 1:

# On the MCE, configure VPN instances

vpn1

and

vpn2

, and specify an RD and route targets

for each VPN instance.

<MCE> system-view

[MCE] ip vpn-instance vpn1

[MCE-vpn-instance-vpn1] route-distinguisher 10:1

[MCE-vpn-instance-vpn1] vpn-target 10:1

[MCE-vpn-instance-vpn1] quit

[MCE] ip vpn-instance vpn2

[MCE-vpn-instance-vpn2] route-distinguisher 20:1

[MCE-vpn-instance-vpn2] vpn-target 20:1

[MCE-vpn-instance-vpn2] quit

# Bind VLAN-interface 10 to VPN instance

vpn1

, and configure an IPv6 address for the VLAN

interface.

[MCE] interface vlan-interface 10

[MCE-Vlan-interface10] ip binding vpn-instance vpn1

VPN 1

Site 2

VPN 2

Site 1

PE 1

PE 3

PE 2

VPN 2

2012::/64

VR 2

VPN 1

2012:1::/64

VR 1

MCE

Vlan-int10

2001:1::1/64

Vlan-int30: 30::2/64
Vlan-int40: 40::2/64

Vlan-int30: 30::1/64
Vlan-int40: 40::1/64

Vlan-int20
2002:1::1/64

Vlan-int10
2001:1::2/64

Vlan-int20

2002:1::2/64

Vlan-int11

2012:1::2/64

Vlan-int21

2012::2/64

Summary of Contents for FlexFabric 5940

Page 1: ...HPE FlexFabric 5940 Switch Series MCE Configuration Guide Part number 5200 1024a Software version Release 2508 and later verison Document version 6W101 20161101 ...

Page 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Page 3: ...to the PE 19 Configuring IPv6 MCE 23 IPv6 MPLS L3VPN overview 23 IPv6 MCE overview 23 IPv6 MCE configuration task list 23 Configuring VPN instances 24 Creating a VPN instance 24 Associating a VPN instance with an interface 24 Configuring route related attributes for a VPN instance 25 Configuring routing on an MCE 25 Configuring routing between an MCE and a VPN site 26 Configuring routing between a...

Page 4: ...ice provider network It does not support MPLS Provider edge device A PE device resides at the edge of a service provider network and is connected to one or more CEs All MPLS VPN services are processed on PEs Provider device A P device is a core device on a service provider network It is not directly connected to any CEs A P device has only basic MPLS forwarding capability and does not handle VPN r...

Page 5: ...tance contains the VPN membership and routing rules of associated sites VPN IPv4 address Each VPN independently manages its address space The address spaces of VPNs might overlap For example if both VPN 1 and VPN 2 use the addresses on subnet 10 110 10 0 24 address space overlapping occurs BGP cannot process overlapping VPN address spaces For example if both VPN 1 and VPN 2 use the subnet 10 110 1...

Page 6: ...es a PE can receive routes Like RDs route target attributes can be one of the following formats 16 bit AS number 32 bit user defined number For example 100 1 32 bit IPv4 address 16 bit user defined number For example 172 1 1 1 1 32 bit AS number 16 bit user defined number where the minimum value of the AS number is 65536 For example 65536 1 MCE overview The Multi VPN Instance CE MCE feature allows...

Page 7: ...iguration task list Tasks at a glance Configuring VPN instances Required Creating a VPN instance Required Associating a VPN instance with an interface Optional Configuring route related attributes for a VPN instance Configuring routing on an MCE Required Configuring routing between an MCE and a VPN site Required Configuring static routing between an MCE and a PE Configuring VPN instances VPN insta...

Page 8: ...ociate the VPN instance with the interface connected to the CE To associate a VPN instance with an interface Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Associate a VPN instance with the interface ip binding vpn instance vpn instance name By default an interface is not associated with a VPN instance and belongs to ...

Page 9: ...uting policies see Layer 3 IP Routing Configuration Guide Configuring routing on an MCE MCE implements service isolation through route isolation MCE routing configuration includes the following MCE VPN site routing configuration MCE PE routing configuration On the PE perform the following tasks Disable routing loop detection to avoid route loss during route calculation Disable route redistribution...

Page 10: ...reate a RIP process for a VPN instance and enter RIP view rip process id vpn instance vpn instance name Perform this configuration on the MCE On a VPN site create a common RIP process 3 Enable RIP on the interface attached to the specified network network network address By default RIP is disabled on an interface 4 Redistribute remote site routes advertised by the PE into RIP import route protocol...

Page 11: ...ayer 3 IP Routing Configuration Guide To configure IS IS between an MCE and a VPN site Step Command Remarks 1 Enter system view system view N A 2 Create an IS IS process for a VPN instance and enter IS IS view isis process id vpn instance vpn instance name Perform this configuration on the MCE On a VPN site configure a common IS IS process 3 Configure a network entity title network entity net By d...

Page 12: ...By default BGP does not exchange IPv4 unicast routes with any peer 7 Allow the local AS number to appear in the AS_PATH attribute of routes received from the peer and set the maximum number of repetitions peer group name ipv4 address mask length allow as loop number By default BGP discards incoming route updates that contain the local AS number 8 Redistribute remote site routes advertised by the P...

Page 13: ...ter BGP VPN IPv4 unicast address family view address family ipv4 unicast N A 6 Enable BGP to exchange IPv4 unicast routes with the peer peer group name ipv4 address mask length enable By default BGP does not exchange IPv4 unicast routes with any peer 7 Optional Configure the system to be the RR and specify the peer as the client of the RR peer group name ipv4 address mask length reflect client By ...

Page 14: ...ng configurations on the MCE For information about configuring the PE see the documentation for the PE Configuring static routing between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Configure a static route for a VPN instance ip route static vpn instance s vpn instance name dest address mask length mask interface type interface number next hop address next hop addres...

Page 15: ...By default no OSPF areas exist 6 Enable OSPF on the interface attached to the specified network in the area network ip address wildcard mask By default an interface neither belongs to any area nor runs OSPF Configuring IS IS between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Create an IS IS process for a VPN instance and enter IS IS view isis process id vpn instance...

Page 16: ... any peer 7 Redistribute the VPN routes of the VPN site import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP Configuring IBGP between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number instance instance name multi session thread By defaul...

Page 17: ...ing the MCE that uses OSPF to advertise VPN routes to the PE Network requirements As shown in Figure 4 VPN 2 runs OSPF Configure the MCE device to separate routes from different VPNs and to advertise the VPN routes to PE 1 through OSPF Figure 4 Network diagram Configuration procedure Assume that the system name of the MCE device is MCE the system names of the edge devices of VPN 1 and VPN 2 are VR...

Page 18: ...and specify an RD and route targets for each VPN instance PE1 system view PE1 ip vpn instance vpn1 PE1 vpn instance vpn1 route distinguisher 10 1 PE1 vpn instance vpn1 vpn target 10 1 PE1 vpn instance vpn1 quit PE1 ip vpn instance vpn2 PE1 vpn instance vpn2 route distinguisher 20 1 PE1 vpn instance vpn2 vpn target 20 1 PE1 vpn instance vpn2 quit 2 Configure routing between the MCE and VPN sites Th...

Page 19: ...of VPN instance vpn2 MCE ospf 2 vpn instance vpn2 Advertise subnet 10 214 20 0 MCE ospf 2 area 0 MCE ospf 2 area 0 0 0 0 network 10 214 20 0 0 0 0 255 MCE ospf 2 area 0 0 0 0 quit MCE ospf 2 quit On VR 2 assign IP address 10 214 20 2 24 to the interface connected to MCE and 192 168 10 1 24 to the interface connected to VPN 2 Details not shown Configure OSPF process 2 and advertise subnets 192 168 ...

Page 20: ...1 24 MCE Vlan interface40 quit On PE 1 bind VLAN interface 30 to VPN instance vpn1 and configure an IP address for the VLAN interface PE1 interface vlan interface 30 PE1 Vlan interface30 ip binding vpn instance vpn1 PE1 Vlan interface30 ip address 30 1 1 2 24 PE1 Vlan interface30 quit Bind VLAN interface 40 to VPN instance vpn2 and configure an IP address for the VLAN interface PE1 interface vlan ...

Page 21: ...op0 30 1 1 255 32 Direct 0 0 30 1 1 2 Vlan30 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 0 0 24 O_ASE2 150 1 30 1 1 1 Vlan30 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 Verify that PE ...

Page 22: ...e Run OSPF in both VPN 1 and VPN 2 Run EBGP between the MCE and PE 1 Figure 5 Network diagram Configuration procedure 1 Create VPN instances on the MCE and PE 1 and bind the VPN instances to VLAN interfaces For the configuration procedure see Configuring the MCE that uses OSPF to advertise VPN routes to the PE 2 Configure routing between the MCE and VPN sites Enable an OSPF process on the devices ...

Page 23: ...F process 20 to VPN instance vpn2 to learn the routes of VPN 2 The configuration procedure is similar to that for OSPF process 10 The output shows that the MCE has learned the private route of VPN 2 through OSPF MCE display ip routing table vpn instance vpn2 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 10 214 20 0 24 Direct 0 0...

Page 24: ...ures to configure VPN 2 settings on MCE and PE 1 Details not shown Verifying the configuration Verify that PE 1 has learned the OSPF route of VPN 1 through BGP PE1 display ip routing table vpn instance vpn1 Destinations 13 Routes 13 Destination Mask Proto Pre Cost NextHop Interface 0 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 30 1 1 0 24 Direct 0 0 30 1 1 2 Vlan30 30 1 1 0 32 Direct 0 0 30 1 1 2 Vlan30...

Page 25: ... 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 10 0 24 BGP 255 3 40 1 1 1 Vlan40 224 0 0 0 4 Direct 0 0 0 0 0 0 NULL0 224 0 0 0 24 Direct 0 0 0 0 0 0 NULL0 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 The MCE has redistributed the OSPF routes of the two VPN instances into the EBGP...

Page 26: ...4 Figure 6 Network diagram for the IPv6 MPLS L3VPN model IPv6 MCE overview In IPv6 MPLS L3VPN networks IPv6 MCE advertises IPv6 routes between internal networks and PEs and forwards IPv6 packets The fundamentals of IPv6 MCE are the same as those of MCE For more information see MCE overview IPv6 MCE configuration task list Tasks at a glance Configuring VPN instances Required Creating a VPN instance...

Page 27: ...uisher By default no RD is configured for a VPN instance 4 Optional Configure a description for the VPN instance description text By default no description is configured for a VPN instance The description should contain the VPN instance s related information such as its relationship with a certain VPN 5 Optional Set an ID for the VPN instance vpn id vpn id By default no ID is configured for a VPN ...

Page 28: ...ld simply alert By default the number of active routes in a VPN instance is not limited Setting the maximum number of active routes for a VPN instance can prevent the PE from storing too many routes 5 Apply an import routing policy import route policy route policy By default all routes matching the import target attribute are accepted Make sure the routing policy already exists Otherwise the devic...

Page 29: ...ic route for an IPv6 VPN instance ipv6 route static vpn instance s vpn instance name ipv6 address prefix length interface type interface number next hop address nexthop address public vpn instance d vpn instance name nexthop address permanent preference preference tag tag value description text By default no IPv6 static routes are configured Perform this configuration on the MCE On a VPN site conf...

Page 30: ...ter system view system view N A 2 Create an OSPFv3 process for a VPN instance and enter OSPFv3 view ospfv3 process id vpn instance vpn instance name Perform this configuration on the MCE On a VPN site configure common OSPFv3 Deleting a VPN instance also deletes all related OSPFv3 processes 3 Set the router ID router id router id N A 4 Redistribute remote site routes advertised by the PE import rou...

Page 31: ...g table 6 Return to system view quit N A 7 Enter interface view interface interface type interface number N A 8 Enable the IPv6 IS IS process on the interface isis ipv6 enable process id By default no IPv6 IS IS process is enabled on the interface Configuring EBGP between an MCE and a VPN site To use EBGP between an MCE and IPv6 VPN sites you must configure a BGP peer for each IPv6 VPN instance on...

Page 32: ...CE and a VPN site To use IBGP between an MCE and a VPN site you must configure a BGP peer for each IPv6 VPN instance on the MCE and redistribute the IGP routes of each VPN instance on the VPN site 1 Configure the MCE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number instance instance name multi session thread By default BGP is not enabled 3 Enter BGP ...

Page 33: ...oup name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 6 Redistribute the IGP routes of the VPN into BGP import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP A VPN site must advertise VPN network addresses to the connected MCE Configuring routin...

Page 34: ...Png process on the interface ripng process id enable By default RIPng is disabled on an interface Configuring OSPFv3 between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Create an OSPFv3 process for an IPv6 VPN instance and enter OSPFv3 view ospfv3 process id vpn instance vpn instance name N A 3 Set the router ID router id router id N A 4 Disable routing loop detectio...

Page 35: ...evel 2 routing table 6 Return to system view quit N A 7 Enter interface view interface interface type interface number N A 8 Enable the IPv6 IS IS process on the interface isis ipv6 enable process id By default no IPv6 IS IS process is enabled on the interface Configuring EBGP between an MCE and a PE Step Command Remarks 1 Enter system view system view N A 2 Enter BGP instance view bgp as number i...

Page 36: ...e ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 7 Redistribute the VPN routes of the VPN site import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP Displaying and maintaining IPv6 MCE Execute display commands in any view Task Command Display VPN ...

Page 37: ...ance vpn1 vpn target 10 1 MCE vpn instance vpn1 quit MCE ip vpn instance vpn2 MCE vpn instance vpn2 route distinguisher 20 1 MCE vpn instance vpn2 vpn target 20 1 MCE vpn instance vpn2 quit Bind VLAN interface 10 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface MCE interface vlan interface 10 MCE Vlan interface10 ip binding vpn instance vpn1 CE VPN 1 Site 2 CE VPN 2 Site 1...

Page 38: ... and 2012 1 2 64 to the interface connected to VPN 1 Add ports to VLANs Details not shown On VR 1 configure a default route with the next hop being 2001 1 1 VR1 system view VR1 ipv6 route static 0 2001 1 1 On the MCE configure an IPv6 static route to 2012 1 64 with the next hop 2001 1 2 Bind the static route to VPN instance vpn1 MCE ipv6 route static vpn instance vpn1 2012 1 64 2001 1 2 Run RIPng ...

Page 39: ...tHop 2001 1 2 Preference 60 Interface Vlan10 Cost 0 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 MCE display ipv6 routing table vpn instance vpn2 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2002 1 64 Protocol Dir...

Page 40: ...terface 30 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface PE1 interface vlan interface 30 PE1 Vlan interface30 ip binding vpn instance vpn1 PE1 Vlan interface30 ipv6 address 30 2 64 PE1 Vlan interface30 quit Bind VLAN interface 40 to VPN instance vpn2 and configure an IPv6 address for the VLAN interface PE1 interface vlan interface 40 PE1 Vlan interface40 ip binding vpn ...

Page 41: ...ance vpn1 Destinations 6 Routes 6 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 30 64 Protocol Direct NextHop Preference 0 Interface Vlan30 Cost 0 Destination 30 2 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 2012 1 64 Protocol O_ASE2 NextHop FE80 202 FF FE02 2 Preference 150 Interface Vlan30 Cost 1 Destination FE80...

Page 42: ...terface InLoop0 Cost 0 Destination 2012 64 Protocol O_ASE2 NextHop FE80 200 FF FE0F 5 Preference 150 Interface Vlan40 Cost 1 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 The routing information for the two VPNs has been added into the routing tables on PE 1 ...

Page 43: ...st one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field name...

Page 44: ... Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gatewa...

Page 45: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Page 46: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Page 47: ...umber edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 48: ... site IPv6 IS IS 27 IPv6 MCE VPN site OSPFv3 27 IPv6 MCE VPN site RIPng 26 IPv6 MCE VPN site static routing 26 IPv6 MPLS L3VPN IPv6 MCE VPN site routing 26 MCE 4 14 MCE configuration 1 MCE EBGP VPN route advertisement 19 MCE OSPF VPN route advertisement 14 MCE routing 6 MCE VPN instance 4 MCE VPN instance route related attribute 5 MCE PE EBGP 13 MCE PE IBGP 13 MCE PE IS IS 12 MCE PE OSPF 12 MCE PE...

Page 49: ...ce association 24 IPv6 MPLS L3VPN IPv6 MCE routing configuration 25 IPv6 MCE PE EBGP 32 IPv6 MCE PE IBGP 33 IPv6 MCE PE IPv6 IS IS 32 IPv6 MCE PE IPv6 static routing 30 IPv6 MCE PE OSPFv3 31 IPv6 MCE PE RIPng 31 IPv6 MCE VPN site EBGP 28 IPv6 MCE VPN site IBGP 29 IPv6 MCE VPN site IPv6 IS IS 27 IPv6 MCE VPN site OSPFv3 27 IPv6 MCE VPN site RIPng 26 IPv6 MCE VPN site routing 26 IPv6 MCE VPN site st...

Page 50: ... site IPv6 IS IS 27 IPv6 MCE VPN site OSPFv3 27 IPv6 MCE VPN site RIPng 26 IPv6 MCE VPN site static routing 26 IPv6 MPLS L3VPN IPv6 MCE VPN site routing 26 MCE EBGP VPN route advertisement 19 MCE OSPF VPN route advertisement 14 MCE routing configuration 6 MCE VPN instance 4 MCE VPN instance route related attributes 5 MCE VPN instance interface association 5 MCE PE EBGP 13 MCE PE IBGP configuration...

Page 51: ...guring IPv6 MCE VPN site RIPng 26 configuring IPv6 MCE VPN site static routing 26 configuring IPv6 MPLS L3VPN IPv6 MCE VPN site routing 26 configuring MCE 4 14 configuring MCE EBGP VPN route advertisement 19 configuring MCE OSPF VPN route advertisement 14 configuring MCE routing 6 configuring MCE VPN instance 4 configuring MCE VPN instance route related attribute 5 configuring MCE PE EBGP 13 confi...

Page 52: ...tes advertisement 14 MCE routing configuration 6 MCE PE EBGP 13 MCE PE IBGP configuration 13 MCE PE IS IS 12 MCE PE OSPF 12 MCE PE RIP 11 MCE PE routing configuration 11 MCE PE static routing 11 MCE VPN site EBGP 9 MCE VPN site IBGP 10 MCE VPN site IS IS 8 MCE VPN site OSPF 7 MCE VPN site RIP 7 MCE VPN site routing 6 MCE VPN site static routing 6 MPLS L3VPN BGP route target attributes 3 S site MPL...

Search results

Summary of Contents for FlexFabric 5940

Reviews:

Related manuals for FlexFabric 5940

Brands by name

Popular brands

HP FlexFabric 5940, Configuration Manual

Search results

Summary of Contents for FlexFabric 5940

Reviews:

Related manuals for FlexFabric 5940

Brands by name

Popular brands