398
Configuring routing between MCE and VPN site
Configuring static routing between MCE and VPN site
An MCE can reach a VPN site through a static route. Static routing on a traditional CE is globally
effective and thus does not support address overlapping among VPNs. An MCE supports binding a static
route with a VPN instance, so that the static routes of different VPN instances can be isolated from each
other.
To configure static routing between MCE and VPN site:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure a static route
for a VPN instance.
•
ip
route-static
dest-address
{
mask
|
mask-length
}
{
gateway-address
|
interface-type
interface-number
[
gateway-address
] |
vpn-instance
d-vpn-instance-name
gateway-address
} [
preference
preference-value
]
[
tag
tag-value
] [
description
description-text
]
•
ip route-static
vpn-instance
s-vpn-instance-name&
<1-6
>
dest-address
{
mask
|
mask-length
} {
gateway-address
[
public
] |
interface-type interface-number
[
gateway-address
] |
vpn-instance
d-vpn-instance-name gateway-address
}
[
preference
preference-value
] [
tag
tag-value
]
[
description
description-text
]
Use either command.
Perform this
configuration on the
MCE. On a VPN site,
configure a normal
static route.
3.
Configure the default
precedence for static
routes.
ip route-static default-preference
default-preference-value
Optional.
60 by default.
Configuring RIP between MCE and VPN site
A RIP process belongs to the public network or a single VPN instance. If you create a RIP process without
binding it to a VPN instance, the process belongs to the public network. By configuring RIP
process-to-VPN instance bindings on a IPv6 MCE, you allow routes of different VPNs to be exchanged
between the MCE and the sites through different RIP processes, ensuring the separation and security of
VPN routes.
For more information about RIP, see
Layer 3—IP Routing Configuration Guide
.
To configure RIP between MCE and VPN site:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a RIP process for a
VPN instance and enter RIP
view.
rip
[
process-id
]
vpn-instance
vpn-instance-name
Perform this configuration on the
MCE. On a VPN site, create a
normal RIP process.
3.
Enable RIP on the interface
attached to the specified
network.
network
network-address
By default, RIP is disabled on an
interface.
