Cisco 10000 - Manual (Page 110)

3-28
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 3 Configuring Remote Access to MPLS VPN
Configuration Tasks for RA to MPLS VPN
Example 3-9 assigns a VPN ID to the VRF named vpn1.
Example 3-9 Configuring a VPN ID
Router(config)# ip vrf vpn1
Router(config-vrf)# vpn id al:3f6c
Router(config-vrf)# end
Configuring and Associating Virtual Private Networks
To add a virtual private network (VPN) service to your MPLS configuration, you perform the following
tasks:
• Configure VPNs
• Associate VPNs with a virtual template interface
Configuring Virtual Private Networks
To configure dial-in and dial-out virtual private networks (VPNs), perform the following tasks:
• Enable a VPN tunnel
• Configure VPN tunnel authentication
For more information about configuring virtual private networks, see the “Configuring Virtual Private
Networks” chapter in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2. This chapter
describes the procedures used to configure, verify, monitor, and troubleshoot VPNs and also provides
configuration examples.
Associating VPNs with a Virtual Template Interface
After you configure the VPNs, associate each one with a virtual template interface. To do this
association, perform the following tasks:
• Creating a VRF Configuration for a VPN, page 3-28
• Associating a VRF Configuration for a VPN with a Virtual Template Interface, page 3-29
Note Do not enable VPN service on the fa0/0/0 management interface. The configuration for this
interface is included in the configuration file.
Creating a VRF Configuration for a VPN
To create a VRF configuration for a VPN, enter the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Router(config)# ip vrf vrf-name Enters VRF configuration mode and defines the VPN routing
instance by assigning a VRF name.
Step 2 Router(config-vrf)# rd route-distinguisher Creates routing and forwarding tables.