PLANET XGS3-24042 - Manual (Page 704)

82-58
82.1.2 VRF Internet Access Mode 3
In VRF Internet Access Mode 3, as demonstrated in the next figure, VPN site access the Internet via private
network connections between PE and CE. The VRF route tabl eof PE routers contain Internet routes, which
are learnt via the PE routers conencted with the Internet gateway (Internet PE). Internet PE will create an
Internet VRF, and connect withe Internet gateway withe the interface bound with the Internet VRF. Thus , the
Internet gateway will be able to advertise Inernet routes to the VRF route table of the Internet PE. There
routes then will be advertised to VRF of other PE routers as VPNv4 routes. PE routers connected with the
VPN sites needing to access the internet will advertise correspondng VRF routes (only those routes whose
destiatnion segments are globally registered IP addess sub-net in the VPN) to Internet PE via VPNv4 route.
These routes will be added into the Internet VRF and then advertised to Internet by the Internet gateway. The
import and export policy of these routes depend on the route-target configuration of MBGP and vrf. Please
notice that, in this mode, no overlap of address or route is allowed between the VPN sites capable of
accessing the Internet.
It is not recommended for users to access the public network in this mode, for a large number of Internet
routes will be imported to PE.
Figure 81-2 VRF Internet Access Mode 3
82.2 Public Network Access Configuration
Public Network Access Configuration Task Sequence:
1) Configure non-VRP Internet access mode
(1) Configure regular L3VPN
(2) Add a public connection between CE and PE, the connection interface is a non-VRF one.
(3) Filter routes on CE; advertise public network routes to PE via the public network connection.
PE1 P1
CE1
CE3
CE2
E0
E1
E3
E2
VRFA
VRFB
PE2
CE4
PE3
E0
E1
E3
VRFA
CE5
E2
VRFB
MPLS Domain
Internet
Internet PE
Internet
VRF
IGW
export i:i
import a:a
import b:b
import i:i
import b:b
export b:b
import i:i
import a:a
Export a:a