![Huawei Quidway NetEngine40E Configuration Manual - Reliability Download Page 1183](http://html.mh-extra.com/html/huawei/quidway-netengine40e/quidway-netengine40e_configuration-manual-reliability_1694531183.webp)
3.
Run:
protect
ip-vpn-instance
vpn-instance-name
peer-ip
ip-address
[
interface
interface-type
interface-number
]
The protection tunnel is configured for VPN users. You need to specify the VPN
instance name. The peer IP address is the IP address of the loopback interface that is
bind to the VPN instance on the peer device. In this case, the tunnel type cannot be
specified. Instead, the tunnel is automatically selected by the device. The outbound
interface is optional.
4.
Run either of the following commands:
–
To bind the primary address pool to the RBS for IPv4 users, run the
ip-pool
pool-
name
[
metric
metric-num
] command.
–
To bind the primary address pool to the RBS for IPv6 users, run the
ipv6-pool
pool-name
[
metric
metric-value
] command.
l
Configure a public and VPN protection tunnel template.
1.
Run:
system-view
The system view is displayed.
2.
Run:
remote-backup-service
service-name
The remote backup service view is displayed.
3.
Run:
protect lsp-tunnel for-all-instance peer-ip
ip-address
A public and VPN protection tunnel template is configured.
4.
Run either of the following commands:
–
To bind the primary address pool to the RBS for IPv4 users, run the
ip-pool
pool-
name
[
metric
metric-num
] command.
–
To bind the primary address pool to the RBS for IPv6 users, run the
ipv6-pool
pool-
name
[
metric
metric-value
] command.
NOTE
The
protect lsp-tunnel for-all-instance peer-ip
command configures a protection tunnel template
for both the public network and VPNs. After the command is run, a public protection tunnel is
automatically created, and a VPN protection tunnel is triggered by user login, without needing to
configure a protection tunnel for each VPN. This function simplifies tunnel configuration.
To configure a specific public protection tunnel, run the
protect
tnl-policy
policy-name
peer-ip
ip-
address
[
interface
interface-type
interface-number
] command; to configure a specific VPN
protection tunnel, run the
protect
ip-vpn-instance
vpn-instance-name
peer-ip
ip-address
[
interface
interface-type
interface-number
] command. These two commands can be configured
together with the
protect lsp-tunnel for-all-instance peer-ip
command, but take precedence over
the latter and therefore take effect.
----End
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
11 Multi-node Backup Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1166