281
Step Command
3.
Enter BGP VPN instance view.
ipv4-family vpn-instance
vpn-instance-name
4.
Redistribute direct routes into BGP (to
redistribute the loopback interface route into
BGP).
import-route direct
[
med
med-value
|
route-policy
route-policy-name
] *
5.
Redistribute OSPF VPN routes.
import-route ospf
[ {
process-id
|
all-processes
}
[
allow-direct
|
med
med-value
|
route-policy
route-policy-name
] * ]
Creating a sham link
Follow these guidelines when you create a sham link:
•
If you start OSPF but do not configure the router ID, the system automatically elects one.
However, the same election rules produce the same router ID. As a best practice, configure the
router ID when starting an OSPF process. For the election rules, see
Layer 3—IP Routing
Configuration Guide
.
•
If you configure multiple OSPF VPN instances but do not configure the route tag, the system
automatically creates one based on the AS number configured. If you do not configure BGP, the
tag will be 0. However, the same calculation rule produces the same tag, and hence the same
tag is created for multiple OSPF VPN instances on the same PE or PEs with the same AS
number. As a best practice, configure different tags for different OSPF VPN instances.
•
Modifying MD5/HMAC-MD5 keys support MD5 smooth rollovers. For more information, see
Layer 3—IP Routing Configuration Guide
.
To create a sham link:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter OSPF view.
ospf
[
process-id
|
router-id
router-id
|
vpn-instance
vpn-instance-name
] *
N/A
3.
Configure the external route
tag for imported VPN routes.
route-tag
tag-value
N/A
4.
Enter OSPF area view.
area
area-id
N/A
5.
Configure a sham link.
sham-link
source-ip-address
destination-ip-address
[
cost
cost
|
dead
dead-interval
|
hello
hello-interval
|
retransmit
retrans-interval
|
trans-delay
delay
| {
simple
[
cipher
|
plain
]
password
| {
md5
|
hmac-md5
}
key-id
[
cipher
|
plain
]
password
} ]*
By default, no sham link is
configured.
Configuring routing on an MCE
MCE implements service isolation through route isolation. MCE routing configuration includes:
•
MCE-VPN site routing configuration
•
MCE-PE routing configuration