How to communicate between two VPN-Instance

Created: Sep 30, 2018 18:41:05Latest reply: Sep 30, 2018 18:54:09 191 1 2 0

The customer have deployed the MPLS-VPN network, they configure many VPN-instance for the different service, such as the VPN-instance VPNA and the VPNB.

As we know, the routes of different VPN instances are isolated from each other, so the VPNA user can't visit the VPNB server.

Now the customer want that VPNA user access to VPNB server, how to configure it?

We can use the VPN-Target to control the routing between the VPNA and VPNB.

The two VPN-Instance need to import the "import-extcommunity" each other, then the VPNA can learn the routing from the VPNB, also the VPNB can learn the routing from VPNA.

Before the configuration:

#

ip vpn-instance VPNA
ipv4-family
  route-distinguisher 23856:100
  vpn-target 23856:100 export-extcommunity
  vpn-target 23856:100 import-extcommunity
#
ip vpn-instance VPNB
ipv4-family
  route-distinguisher 23856:101
  tnl-policy internet
  vpn-target 23856:101 export-extcommunity
  vpn-target 23856:101 import-extcommunity
#
After modify the configuration:

ip vpn-instance VPNA
ipv4-family
  route-distinguisher 23856:100
  vpn-target 23856:100 export-extcommunity
  vpn-target 23856:100 23856:101 import-extcommunity
#
ip vpn-instance VPNB
ipv4-family
  route-distinguisher 23856:101
  tnl-policy internet
  vpn-target 23856:101 export-extcommunity
  vpn-target 23856:101 23856:101 import-extcommunity
#

 

  • x
  • convention:

Mysterious.color  Visitor   Created Sep 30, 2018 18:54:09 Helpful(0) Helpful(0)

Thanks for sharing such information
i really appreciate your efforts writing good posts
  • x
  • convention:

find what you love and let it kill you.

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top