515
Binding OSPF processes to VPN instances can isolate routes of different VPNs. For more
information about OSPF, see
Layer 3—IP Routing Configuration Guide
.
To configure OSPF between an MCE and a VPN site:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create an OSPF process for
a VPN instance and enter
OSPF view.
ospf
[
process-id
|
router-id
router-id
|
vpn-instance
vpn-instance-name
] *
Perform this configuration on the
MCE. On a VPN site, create a
common OSPF process.
An OSPF process bound to a VPN
instance does not use the public
network router ID configured in
system view. Therefore, configure
a router ID for the OSPF process.
An OSPF process can belong to
only one VPN instance, but one
VPN instance can use multiple
OSPF processes to advertise
VPN routes.
3.
Redistribute remote site
routes advertised by the PE
into OSPF.
import-route
protocol
[
process-id
|
all-processes
|
allow-ibgp
] [
allow-direct
|
cost
cost-value
|
nssa-only
|
route-policy
route-policy-name
|
tag
tag
|
type
type
] *
By default, no routes are
redistributed into OSPF.
4.
Create an OSPF area and
enter OSPF area view.
area
area-id
By default, no OSPF areas exist.
5.
Enable OSPF on the
interface attached to the
specified network in the area.
network
ip-address
wildcard-mask
By default, an interface neither
belongs to any area nor runs
OSPF.
Configuring IS-IS between an MCE and a VPN site
An IS-IS process belongs to the public network or a single VPN instance. If you create an IS-IS
process without binding it to a VPN instance, the process belongs to the public network.
Binding IS-IS processes to VPN instances can isolate routes of different VPNs. For more information
about IS-IS, see
Layer 3—IP Routing Configuration Guide
.
To configure IS-IS between an MCE and a VPN site:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create an IS-IS process for a
VPN instance and enter
IS-IS view.
isis
[
process-id
]
vpn-instance
vpn-instance-name
Perform this configuration on the
MCE. On a VPN site, configure a
common IS-IS process.
3.
Configure a network entity
title.
network-entity
net
By default, no NET is configured.
4.
Create the IS-IS IPv4 unicast
address family and enter its
view.
address-family ipv4
[
unicast
]
By default, the IS-IS IPv4 unicast
address family is not created.
