GigabitEthernet2/0/0
VLANIF 20
30.1.1.1/24
Tunnel2/0/0
-
2.2.2.1/24
Switch A
GigabitEthernet1/0/0
VLANIF 20
30.1.1.2/24
GigabitEthernet2/0/0
VLANIF 30
50.1.1.1/24
PE1
Loopback1
-
1.1.1.9/32
GigabitEthernet1/0/0
VLANIF 30
50.1.1.2/24
GigabitEthernet2/0/0
VLANIF 40
110.1.1.1/24
Tunnel1/0/0
-
2.2.2.2/24
PE2
Loopback1
-
3.3.3.9/32
GigabitEthernet1/0/0
VLANIF 40
110.1.1.2/24
GigabitEthernet2/0/0
VLANIF 50
11.1.1.2/24
CE2
GigabitEthernet1/0/0
VLANIF 50
11.1.1.1/24
GigabitEthernet2/0/0
VLANIF 60
41.1.1.2/24
Configuration Roadmap
PE1 and CE1 are indirectly connected. So the VPN instance on PE1 cannot be bound to the
physical interface on PE1. In such a situation, a GRE tunnel is required between CE1 and PE1.
vpn1 on PE1 can then be bound to the GRE tunnel, and CE1 can access the VPN through the
GRE tunnel.
The configuration roadmap is as follows:
1.
Configure OSPF 10 on PE1 and PE2 to implement the interworking between the two
devices, and then enable MPLS.
2.
Configure OSPF 20 on CE1, Switch A, and PE1 to implement the interworking between
the three devices.
3.
Establish a GRE tunnel between CE1 and PE1.
4.
Create VPN instances vpn1 on PE1 and PE2. Then bind the VPN instance on PE1 to the
GRE tunnel interface, and bind the VPN instance on PE2 to the connected physical interface
of CE2.
5.
Configure IS-IS routes between CE1 and PE1, and between CE2 and PE2 to implement
the interworking between the CEs and PEs.
6.
Configure BGP on PEs to implement the interworking between CE1 and CE2.
Data Preparation
To complete the configuration, you need the following data:
l
IP addresses of the interfaces, process ID of the routing protocol, and AS number
l
Source address and destination address of the GRE tunnel
l
VPN instance names, RDs, and VPN targets on PEs
Quidway S7700 Smart Routing Switch
Configuration Guide - VPN
2 GRE Configuration
Issue 01 (2011-07-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
85