402
Configuration prerequisites
Before you configure routing on an MCE, complete the following tasks:
•
On the MCE, configure VPN instances, and bind the VPN instances with the interfaces connected
to the VPN sites and those connected to the PE.
•
Configure the link layer and network layer protocols on related interfaces to ensure IP connectivity.
Configuring routing between MCE and VPN site
Configuring static routing between MCE and VPN site
An MCE can reach a VPN site through a static route. Static routing on a traditional CE is globally
effective and thus does not support address overlapping among VPNs. An MCE supports binding a static
route with a VPN instance, so that the static routes of different VPN instances can be isolated from each
other.
Follow these steps to configure static routing between MCE and VPN site:
To do…
Use the command…
Remarks
Enter system view
system-view
—
ip
route-static
dest-address
{
mask
|
mask-length
}
{
gateway-address
|
interface-type interface-number
[
gateway-address
] |
vpn-instance
d-vpn-instance-name
gateway-address
} [
preference
preference-value
] [
tag
tag-value
] [
description
description-text
]
Configure static routes for a
VPN instance
ip route-static
vpn-instance
s-vpn-instance-name&
<1-6
>
dest-address
{
mask
|
mask-length
} {
gateway-address
[
public
] |
interface-type interface-number
[
gateway-address
] |
vpn-instance
d-vpn-instance-name gateway-address
}
[
preference
preference-value
] [
tag
tag-value
]
[
description
description-text
]
Required
Use either command.
Perform this
configuration on the
MCE. On a VPN site,
configure a normal
static route.
Configure the default
precedence for static routes
ip route-static default-preference
default-preference-value
Optional
60 by default
Configuring RIP between MCE and VPN site
A RIP process belongs to the public network or a single VPN instance. If you create a RIP process without
binding it to a VPN instance, the process belongs to the public network. By configuring RIP
process-to-VPN instance bindings on a IPv6 MCE, you allow routes of different VPNs to be exchanged
between the MCE and the sites through different RIP processes, ensuring the separation and security of
VPN routes.
Follow these steps to configure RIP between MCE and VPN site:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RIP process for a VPN
instance and enter RIP view
rip
[
process-id
]
vpn-instance
vpn-instance-name
Required
Perform this configuration on the
MCE. On a VPN site, create a
normal RIP process.
