Associating A Vpn Instance With An Interface; Configuring Route-Related Attributes Of A Vpn Instance - HP 10500 SERIES Configuration Manual

NOTE:
For easy management, set the same RD for the same VPN instance on the MCE and the PE.

Associating a VPN instance with an interface

After creating and configuring a VPN instance, associate the VPN instance with the interfaces connected
to the VPN sites.
In an MPLS L3VPN application, you also need to associate the VPN instances with the interfaces
connecting the PE.
In a tunneling application, you must associate the VPN instances with the tunnel interfaces connecting
the peer MCE device or CE device.
You can add a management Ethernet interface on the switch to a VPN, so the IP address of the interface
only participates in the route calculation of the specified VPN.
To associate a VPN instance with an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Associate the current interface
with a VPN instance.

Configuring route-related attributes of a VPN instance

The control process of VPN route advertisement is as follows:
When a VPN route learned from a site gets redistributed into BGP, BGP associates it with a VPN
•
target extended community attribute list, which is usually the export target attribute of the VPN
instance associated with the site.
The VPN instance determines which routes it can accept and redistribute according to the
•
import-extcommunity in the VPN target.
The VPN instance determines how to change the VPN targets attributes for routes to be advertised
•
according to the export-extcommunity in the VPN target.
IMPORTANT:
• Only when BGP runs between the MCE and PE can the VPN target attribute be advertised to the PE
along with the routing information. In other cases, configuring this attribute makes no sense.
Before associating a routing policy with a VPN instance, you must first create the routing policy.
•
Otherwise, the default routing policy is used.
Command
system-view
interface interface-type
interface-number
ip binding vpn-instance
vpn-instance-name
9
Remarks
N/A
N/A
No VPN instance is associated
with an interface by default.
After you bind an interface with a
VPN instance by using this
command, the IP address of the
interface is cleared. Be sure to
reconfigure an IP address for the
interface.