H3C Technologies H3C SR8800 User Manual

Page 295

Advertising
background image

284

A '*' before a Label means the USCB or DSCB is stale

3.

Configure VPN instances on PEs to allow CEs to access.
# Configure PE 1.

[PE1] ip vpn-instance vpn1

[PE1-vpn-instance-vpn1] route-distinguisher 100:1

[PE1-vpn-instance-vpn1] vpn-target 111:1

[PE1-vpn-instance-vpn1] quit

[PE1] ip vpn-instance vpn2

[PE1-vpn-instance-vpn2] route-distinguisher 100:2

[PE1-vpn-instance-vpn2] vpn-target 222:2

[PE1-vpn-instance-vpn2] quit

[PE1] interface GigabitEthernet 4/1/1

[PE1-GigabitEthernet4/1/1] ip binding vpn-instance vpn1

[PE1-GigabitEthernet4/1/1] ip address 10.1.1.2 24

[PE1-GigabitEthernet4/1/1] quit

[PE1] interface GigabitEthernet4/1/2

[PE1-GigabitEthernet4/1/2] ip binding vpn-instance vpn2

[PE1-GigabitEthernet4/1/2] ip address 10.2.1.2 24

[PE1-GigabitEthernet4/1/2] quit

# Configure PE 2.

[PE2] ip vpn-instance vpn1

[PE2-vpn-instance-vpn1] route-distinguisher 200:1

[PE2-vpn-instance-vpn1] vpn-target 111:1

[PE2-vpn-instance-vpn1] quit

[PE2] ip vpn-instance vpn2

[PE2-vpn-instance-vpn2] route-distinguisher 200:2

[PE2-vpn-instance-vpn2] vpn-target 222:2

[PE2-vpn-instance-vpn2] quit

[PE2] interface GigabitEthernet 4/1/1

[PE2-GigabitEthernet4/1/1] ip binding vpn-instance vpn1

[PE2-GigabitEthernet4/1/1] ip address 10.3.1.2 24

[PE2-GigabitEthernet4/1/1] quit

[PE2] interface GigabitEthernet 4/1/2

[PE2-GigabitEthernet4/1/2] ip binding vpn-instance vpn2

[PE2-GigabitEthernet4/1/2] ip address 10.4.1.2 24

[PE2-GigabitEthernet4/1/2] quit

# Configure IP addresses for the CEs as required in

Figure 74

. (Details not shown)

After completing the configurations, issue the display ip vpn-instance command on the PEs to view
the configuration of the VPN instance. Use the ping command to test connectivity between the PEs
and their attached CEs. The PEs can ping their attached CEs. The following takes PE 1 and CE 1

as an example:

[PE1] display ip vpn-instance

Total VPN-Instances configured : 2

VPN-Instance Name RD Create time

vpn1 100:1 2009/01/22 13:02:21

vpn2 100:2 2009/01/22 13:02:40

[PE1] ping -vpn-instance vpn1 10.1.1.1

Advertising