H3C S5560S-EI Series, Configuration Manual

Page 1: ...ter H3C S5560S SI switch series Release 6310 and later H3C S5500V3 SI switch series Release 6310 and later H3C MS4520V2 switch series MS4520V2 28S and MS4520V2 24TP switches Release 6310 and later H3C...

Page 2: ...H3C Technologies Co Ltd any trademarks that may be mentioned in this document are the property of their respective owners Notice The information in this document is subject to change without notice A...

Page 3: ...at are optional x y Braces enclose a set of required syntax choices separated by vertical bars from which you select one x y Square brackets enclose a set of optional syntax choices separated by verti...

Page 4: ...s a Layer 2 or Layer 3 switch or a router that supports Layer 2 forwarding and other Layer 2 features Represents an access controller a unified wired WLAN module or the access controller engine on a u...

Page 5: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...

Page 6: ...ce commands for MCE 14 MCE configuration examples 14 Example Configuring the MCE that uses OSPF to advertise VPN routes to the PE 14 Example Configuring the MCE that uses EBGP to advertise VPN routes...

Page 7: ...ii Example Configuring IPv6 MCE 34...

Page 8: ...evices Using a common CE for multiple VPNs cannot ensure data security because the VPNs use the same routing table The MCE feature offers balance between cost and security It creates multiple VPN inst...

Page 9: ...e classified into different sets by policies Only the sites in the same set can access each other through the provider network Such a set is called a VPN VPN instance VPN instances implement route iso...

Page 10: ...e global uniqueness for a VPN IPv4 address do not set the Administrator subfield to any private AS number or private IP address Route target attribute MPLS L3VPN uses route target community attributes...

Page 11: ...ment dynamic IP assignment for DHCP clients in private networks you can configure DHCP server or DHCP relay agent on the MCE When the MCE functions as the DHCP server the IP addresses assigned to diff...

Page 12: ...nstance 5 Optional Configure a VPN ID for the VPN instance vpn id vpn id By default no VPN ID is configured for a VPN instance Associating a VPN instance with a Layer 3 interface 1 Enter system view s...

Page 13: ...nity By default no route targets are configured 4 Set the maximum number of active routes routing table limit number warn threshold simply alert By default the number of active routes in a VPN instanc...

Page 14: ...IP process Procedure 1 Enter system view system view 2 Create a RIP process for a VPN instance and enter RIP view rip process id vpn instance vpn instance name A RIP process can belong to only one VPN...

Page 15: ...belongs to any area nor runs OSPF Configuring IS IS between an MCE and a VPN site About IS IS between an MCE and a VPN site Binding IS IS processes to VPN instances can isolate routes of different VP...

Page 16: ...VPN instance view are the same as those in BGP instance view For more information see Layer 3 IP Routing Configuration Guide 4 Configure the VPN site as an EBGP peer peer group name ipv4 address mask...

Page 17: ...f each VPN instance on the VPN site Restrictions and guidelines You must configure a VPN site to advertise VPN network addresses to the connected MCE Configuring the MCE 1 Enter system view system vie...

Page 18: ...eers 6 Redistribute the IGP routes of the VPN into BGP import route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed i...

Page 19: ...or a VPN instance and enter OSPF view ospf process id router id router id vpn instance vpn instance name 3 Disable routing loop detection vpn instance capability simple By default routing loop detecti...

Page 20: ...nterface isis enable process id By default no IS IS process is enabled on the interface Configuring EBGP between an MCE and a PE 1 Enter system view system view 2 Enter BGP instance view bgp as number...

Page 21: ...rt route protocol process id all processes allow direct med med value route policy route policy name By default no routes are redistributed into BGP Display and maintenance commands for MCE Execute di...

Page 22: ...10 to VPN instance vpn1 and configure an IP address for the VLAN interface MCE interface vlan interface 10 MCE Vlan interface10 ip binding vpn instance vpn1 MCE Vlan interface10 ip address 10 214 10 3...

Page 23: ...0 2 Bind the static route to VPN instance vpn1 MCE ip route static vpn instance vpn1 192 168 0 0 24 10 214 10 2 On the MCE display the routing information maintained for VPN instance vpn1 MCE display...

Page 24: ...Direct 0 0 10 214 20 3 Vlan20 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoo...

Page 25: ...lity simple Set the domain ID to 10 MCE ospf 10 domain id 10 On the MCE advertise subnet 30 1 1 0 in area 0 and redistribute the static route of VPN 1 MCE ospf 10 area 0 MCE ospf 10 area 0 0 0 0 netwo...

Page 26: ...rect 0 0 40 1 1 2 Vlan40 40 1 1 2 32 Direct 0 0 127 0 0 1 InLoop0 40 1 1 255 32 Direct 0 0 40 1 1 2 Vlan40 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1...

Page 27: ...10 router id 10 10 10 1 vpn instance vpn1 MCE ospf 10 area 0 MCE ospf 10 area 0 0 0 0 network 10 214 10 0 0 0 0 255 MCE ospf 10 area 0 0 0 0 quit MCE ospf 10 quit Display the routing table of VPN 1 on...

Page 28: ...32 Direct 0 0 10 214 20 3 Vlan20 10 214 20 3 32 Direct 0 0 127 0 0 1 InLoop0 10 214 20 255 32 Direct 0 0 10 214 20 3 Vlan20 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 I...

Page 29: ...2 Vlan30 127 0 0 0 8 Direct 0 0 127 0 0 1 InLoop0 127 0 0 0 32 Direct 0 0 127 0 0 1 InLoop0 127 0 0 1 32 Direct 0 0 127 0 0 1 InLoop0 127 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 192 168 0 0 24 BG...

Page 30: ...23 255 255 255 255 32 Direct 0 0 127 0 0 1 InLoop0 The MCE has redistributed the OSPF routes of the two VPN instances into the EBGP routing tables of PE 1...

Page 31: ...routing protocols to save system resources IPv6 MCE tasks at a glance To configure IPv6 MCE perform the following tasks 1 Configuring VPN instances Perform the following VPN instance tasks on PEs and...

Page 32: ...e with an interface or disassociating a VPN instance from an interface will clear the IP address and routing protocol settings of the interface Configuration of this command deletes the IPv6 address o...

Page 33: ...MCE and a VPN site About IPv6 static routing between an MCE and a VPN site An MCE can reach a VPN site through an IPv6 static route IPv6 static routing on a traditional CE is globally effective and d...

Page 34: ...tes are redistributed into RIPng 4 Return to system view quit 5 Enter interface view interface interface type interface number 6 Enable RIPng on the interface ripng process id enable By default RIPng...

Page 35: ...ration on the MCE On a VPN site configure common IPv6 IS IS Procedure 1 Enter system view system view 2 Create an IPv6 IS IS process for a VPN instance and enter IS IS view isis process id vpn instanc...

Page 36: ...unicast 6 Enable BGP to exchange IPv6 unicast routes with the specified peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 7 Redi...

Page 37: ...nge IPv6 unicast routes with the peer peer group name ipv6 address prefix length enable By default BGP does not exchange IPv6 unicast routes with any peer 7 Optional Configure the local device as the...

Page 38: ...een the MCE and the PE Perform the following configurations on the MCE For information about configuring the PE see the documentation for the PE Configuring IPv6 static routing between an MCE and a PE...

Page 39: ...t route protocol as number process id all processes allow ibgp allow direct cost cost value nssa only route policy route policy name tag tag type type By default no routes are redistributed into OSPFv...

Page 40: ...r BGP VPN instance view ip vpn instance vpn instance name 4 Configure the PE as an EBGP peer peer group name ipv6 address prefix length as number as number 5 Enter BGP VPN IPv6 unicast address family...

Page 41: ...no routes are redistributed into BGP Display and maintenance commands for IPv6 MCE Execute display commands in any view Task Command Display VPN instance information display ip vpn instance instance...

Page 42: ...stance vpn2 quit Bind VLAN interface 10 to VPN instance vpn1 and configure an IPv6 address for the VLAN interface MCE interface vlan interface 10 MCE Vlan interface10 ip binding vpn instance vpn1 MCE...

Page 43: ...ng 2001 1 1 VR1 system view VR1 ipv6 route static 0 2001 1 1 On the MCE configure an IPv6 static route to 2012 1 64 with the next hop 2001 1 2 Bind the static route to VPN instance vpn1 MCE ipv6 route...

Page 44: ...erence 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 MCE display ipv6 routing table vpn instance vpn2 Destinations 6 Routes 6 Destination 1 12...

Page 45: ...e PE1 interface vlan interface 30 PE1 Vlan interface30 ip binding vpn instance vpn1 PE1 Vlan interface30 ipv6 address 30 2 64 PE1 Vlan interface30 quit Bind VLAN interface 40 to VPN instance vpn2 and...

Page 46: ...rface InLoop0 Cost 0 Destination 30 64 Protocol Direct NextHop Preference 0 Interface Vlan30 Cost 0 Destination 30 2 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Destination 201...

Page 47: ..._ASE2 NextHop FE80 200 FF FE0F 5 Preference 150 Interface Vlan40 Cost 1 Destination FE80 10 Protocol Direct NextHop Preference 0 Interface NULL0 Cost 0 Destination FF00 8 Protocol Direct NextHop Prefe...