HP MSR2000/3000/4000 Router Series MPLS Configuration Guide

109
For more information about GRE, see Layer-3 IP Services Configuration Guide.
MPLS L3VPN networking schemes
In MPLS L3VPNs, route target attributes are used to control the advertisement and reception of VPN
routes between sites. They work independently and can be configured with multiple values to support
flexible VPN access control and implement multiple types of VPN networking schemes.
Basic VPN networking scheme
In the simplest case, all users in a VPN form a closed user group. They can forward traffic to each other
but cannot communicate with any user outside the VPN.
For the basic VPN networking scheme, you must assign a route target to each VPN for identifying the
export target attribute and import target attribute of the VPN. Moreover, this route target cannot be used
by any other VPNs.
Figure 33 Network diagram for basic VPN networking scheme
In Figure 33, the route target for VPN 1 is 100:1, while that for VPN 2 is 200:1. The two VPN 1 sites can
communicate with each other, and the two VPN 2 sites can communicate with each other. However, the
VPN 1 sites cannot communicate with the VPN 2 sites.
Hub and spoke networking scheme
The hub and spoke networking scheme is suitable for a VPN where all users must communicate with each
other through an access control device.
In a hub and spoke network as shown in Figure 34, co
nfigure route targets as follows:
• On spoke PEs (PEs connected to spoke sites), set the export target to Spoke and the import target to
Hub.
• On the hub PE (PE connected to the hub site), use two interfaces or subinterfaces that each belong
to a different VPN instance to connect the hub CE. One VPN instance receives routes from spoke PEs
and has the import target set to Spoke, and the other VPN instance advertises routes to spoke PEs
and has the export target set to Hub.
These route targets rules produce the following results:
CE
CE CE
CE
PE PEP
Site 2
Site 1 Site 3
Site 4
VPN 1
VPN 1
VPN 2
VPN 2
VPN 1:
Import: 100:1
Export: 100:1
VPN 2:
Import: 200:1
Export: 200:1
VPN 2:
Import: 200:1
Export: 200:1
VPN 1:
Import: 100:1
Export: 100:1