H3C S5820V2H Configuration Manual

Also see for S5830V2 series: Installation guide Configuration guide Security configuration guide Command reference Command reference

Contents

H3C S5820V2H Configuration Manual Manual pdf 13 page image

6Step Command Remarks1. Enter system view. system-view N/A2. Enter VPN instance view. ip vpn-instance vpn-instance-name N/A3. (Optional) Enter IPv4 VPNview. ipv4-family N/A4. Configure route targets for theVPN instance.vpn-target vpn-target&<1-8>[ both | export-extcommunity |import-extcommunity ]By default, no route target isconfigured for the VPN instance.5. (Optional.) Configure themaximum number of routes forthe VPN instance.routing-table limit number{ warn-threshold | simply-alert }By default, the maximum routenumber is not configured.Setting the maximum number ofroutes for a VPN instance is forpreventing too many routes frombeing redistributed into the PE.6. (Optional.) Apply a routingpolicy to filter incoming routesfor the VPN instance.import route-policy route-policyBy default, all routes matching theimport target attribute areaccepted.Make sure the routing policyalready exists. Otherwise, thedevice does not filter receivedroutes.7. (Optional.) Apply a routingpolicy to filter outgoing routesfor the VPN instance.export route-policy route-policyBy default, no routing policy isapplied to filter the routes to beadvertised.Make sure the routing policyalready exists. Otherwise, thedevice does not filter routes to beadvertised.NOTE:• Route related attributes configured in VPN instance view are applicable to both IPv4 VPNs and IPv6VPNs.• You can configure route related attributes for IPv4 VPNs in both VPN instance view and IPv4 VPN view.Those configured in IPv4 VPN view take precedence.Configuring routing on an MCE deviceMCE implements service isolation through route isolation. MCE routing configuration includes:• MCE-VPN site routing configuration• MCE-PE routing configurationConfiguration prerequisitesBefore you configure routing on an MCE, complete the following tasks:• Configure VPN instances, and bind the VPN instances with the interfaces connected to the VPNsites and the PE.