How to communicate between two VPN-Instance

Created Sep 30, 2018 18:41:05Latest reply Sep 30, 2018 18:54:09 169 1 2 0

The customer have deployed the MPLS-VPN network, they configure many VPN-instance for the different service, such as the VPN-instance VPNA and the VPNB.

As we know, the routes of different VPN instances are isolated from each other, so the VPNA user can't visit the VPNB server.

Now the customer want that VPNA user access to VPNB server, how to configure it?

We can use the VPN-Target to control the routing between the VPNA and VPNB.

The two VPN-Instance need to import the "import-extcommunity" each other, then the VPNA can learn the routing from the VPNB, also the VPNB can learn the routing from VPNA.

Before the configuration:

#

ip vpn-instance VPNA
ipv4-family
  route-distinguisher 23856:100
  vpn-target 23856:100 export-extcommunity
  vpn-target 23856:100 import-extcommunity
#
ip vpn-instance VPNB
ipv4-family
  route-distinguisher 23856:101
  tnl-policy internet
  vpn-target 23856:101 export-extcommunity
  vpn-target 23856:101 import-extcommunity
#
After modify the configuration:

ip vpn-instance VPNA
ipv4-family
  route-distinguisher 23856:100
  vpn-target 23856:100 export-extcommunity
  vpn-target 23856:100 23856:101 import-extcommunity
#
ip vpn-instance VPNB
ipv4-family
  route-distinguisher 23856:101
  tnl-policy internet
  vpn-target 23856:101 export-extcommunity
  vpn-target 23856:101 23856:101 import-extcommunity
#

 

  • x
  • convention:

Mysterious.color  Novice   Created Sep 30, 2018 18:54:09 Helpful(0) Helpful(0)

Thanks for sharing such information
i really appreciate your efforts writing good posts
  • x
  • convention:

find what you love and let it kill you.

Responses

Reply
You need to log in to reply to the post Login | Register

Notice:To ensure the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but not limited to politically sensitive content, content concerning pornography, gambling, drug abuse and trafficking, content that may disclose or infringe upon others' intellectual properties, including commercial secrets, trade marks, copyrights, and patents, and personal privacy. Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see“ Privacy Policy.”
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top