R3303-HP HSR6800 Routers MPLS Configuration Guide

288
To configure nested VPN:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view.
bgp as-number N/A
3. Enter BGP VPN instance view.
ipv4-family vpn-instance
vpn-instance-name
N/A
4. Configure a CE peer or peer
group.
peer { group-name |
peer-address } as-number number
N/A
5. Return to BGP view.
quit N/A
6. Enter BGP-VPNv4 subaddress
family view.
ipv4-family vpnv4 N/A
7. Enable nested VPN.
nesting-vpn Disabled by default.
8. Activate a nested VPN peer or
peer group, and enable the
BGP-VPNv4 route exchange
capability.
peer { group-name |
peer-address } vpn-instance
vpn-instance-name enable
By default, only IPv4 routes and no
BGP-VPNv4 routes can be
exchanged between nested VPN
peers/peer groups.
9. Add a peer to the nested VPN
peer group.
peer peer-address vpn-instance
vpn-instance-name group
group-name
Optional.
By default, a peer is not in any
nested VPN peer group.
10. Apply a routing policy to
routes received from a nested
VPN peer or peer group.
peer { group-name |
peer-address } vpn-instance
vpn-instance-name route-policy
route-policy-name import
Optional.
By default, no routing policy is
applied to routes received from a
nested VPN peer or peer group.
NOTE:
Nested VPN does not support multi-hop EBGP. A service provider PE and its peer must use the addresses
of the directly connected interfaces to establish neighbor relationship.
Configuring multi-role host
To configure the multi-role host feature, configure policy-based routing on the PE connecting the CE, and
configure static routing between the PE and the CE.
For information about policy-based routing, see Layer 3—IP Routing Configuration Guide.
Before you configure the multi-role host feature, complete the following tasks:
• Create VPN instances for the VPNs.
• Configure basic MPLS L3VPN.
Configuring and applying policy routing
Ste
p
Command
1. Enter system view.
system-view