R3303-HP HSR6800 Routers MPLS Configuration Guide
357
• PE 1 and PE 2 are PE devices on the service provider backbone. Both of them support the nested
VPN function.
• CE 1 and CE 2 are connected to the service provider backbone. Both of them support VPNv4
routes.
• PE 3 and PE 4 are PE devices of the customer VPN. Both of them support MPLS L3VPN.
• CE 3 through CE 6 are CE devices of sub-VPNs for the customer VPN.
The key of nested VPN configuration is to understand the processing of routes of sub-VPNs on the service
provider PEs, which is described as follows:
• When receiving a VPNv4 route from a CE (CE 1 or CE 2 in this example), a service provider PE
replaces the RD of the VPNv4 route with the RD of the MPLS VPN on the service provider network
where the CE resides, adds the export target attribute of the MPLS VPN on the service provider
network to the extended community attribute list, and then forwards the VPNv4 route as usual.
• To implement exchange of sub-VPN routes between customer PEs and service provider PEs,
MP-EBGP peers must be established between service provider PEs and customer CEs.
Figure 94 Network diagram
Device Interface IP address Device Interface IP address
CE 1 Loop0 2.2.2.9/32
CE 2
Loop0
5.5.5.9/32
POS5/1/1 10.1.1.2/24
POS5/1/1 21.1.1.2/24
POS5/1/2 11.1.1.1/24 POS5/1/2 20.1.1.1/24
CE 3 GE2/1
/
1 100.1.1.1/24
CE 4
GE2/1
/
1 120.1.1.1/24
CE 5 GE2/1
/
1 110.1.1.1/24
CE 6
GE2/1
/
1 130.1.1.1/24
PE 1 Loop0 3.3.3.9/32 PE 2 Loop0 4.4.4.9/32
POS5/1/1 11.1.1.2/24
POS5/1/1 30.1.1.2/24
POS5/1/2 30.1.1.1/24
POS5/1/2 21.1.1.1/24
PE 3 Loop0 1.1.1.9/32 PE 4 Loop0 6.6.6.9/32
GE2/1
/
1 100.1.1.2/24
GE2/1
/
1 120.1.1.2/24
GE2/1
/
2 110.1.1.2/24
GE2/1
/
2 130.1.1.2/24
POS5/1/2 10.1.1.1/24 POS5/1/2 20.1.1.2/24
PE 1
CE 3
AS 65410
SUB_VPN 1
PE 2
Customer VPN
PE 3
CE 6
AS 65421
SUB_VPN 2
PE 4
POS5/1/2
POS5/1/1
Carrier VPN
Customer VPN
Loop0
Loop0
POS5/1/1
POS5/1/2
POS5/1/2
POS5/1/1
Loop0
Loop0
CE 1 CE 2
L
o
op0
Loop0
Loop
0
POS5/1/1
POS5/1/2
GE2/1/1
GE2/1/1 GE2/1/1
GE2/1/2
POS5/1/2
POS5/1/2
AS 100
AS 200
VPN 1
AS 200
VPN 1
CE 5
AS 65411
SUB_VPN 2
GE2/1/1
GE2/1/2
CE 4
AS 65420
SUB_VPN 1
GE2/1/1
GE2/1/1