Got it

Interconnect between VPN-Instantces

Created: Feb 17, 2020 09:55:33Latest reply: Feb 18, 2020 07:11:01 415 3 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi,


i need to know how to configure a deafult route fom a vpn-instance pointing to another vpn-instance.


I understand the syntax is:

ip route-static vpn-instance "vpn1" 0.0.0.0 0.0.0.0 vpn-instance "vpn2" x.x.x.x

Questions:

- vpn1 stands for the vpn that should be able to reach the gateway in vpn2? Like the source-vpn?

- vpn 2 is the target in which the gateway resides?

- do i need a route back from vpn2 to vpn 1?

- wht should be the gateway adress? the peer-adress of the remote peer?


Thanks a lot for any help regarding this, i'm trying different things...


Christian

Featured Answers

Recommended answer

chenhui
Admin Created Feb 17, 2020 10:04:15

Hi @poperator
Yes, the backward static route is required on the vpn-instance vpn2, and the destination address should be the source IPs those need to access the vpn2.

please refer the example below:


R1---------(vpn-instance vpn1  G0/0/0) R2 (G0/0/1  vpn-instance vpn2)----------R3


R2:

#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 vpn-instance vpn2 10.2.2.2     
ip route-static vpn-instance vpn2 0.0.0.0 0.0.0.0 vpn-instance vpn1 10.1.1.2 
#


View more
  • x
  • convention:

All Answers

Hi @poperator
Yes, the backward static route is required on the vpn-instance vpn2, and the destination address should be the source IPs those need to access the vpn2.

please refer the example below:


R1---------(vpn-instance vpn1  G0/0/0) R2 (G0/0/1  vpn-instance vpn2)----------R3


R2:

#
ip route-static vpn-instance vpn1 0.0.0.0 0.0.0.0 vpn-instance vpn2 10.2.2.2     
ip route-static vpn-instance vpn2 0.0.0.0 0.0.0.0 vpn-instance vpn1 10.1.1.2 
#


View more
  • x
  • convention:

Hello,
Please refer to the link below
how to import the route between the two VPN-Instance?
https://forum.huawei.com/enterprise/en/how-to-import-the-route-between-the-two-vpn-instance/thread/479253-863
Thanks
View more
  • x
  • convention:

Hello Guys!

Pelase, if you need to  configure the two default  static routes in the VPNs , pointing to each other - be very carefull with this configuration - You can easily get the routing loop.
As a rule of Thumb, Static routes from one VPN to another one are created for more specific routes  - not one Deafult route pointing to  another default route.

Take care and have a great day!
Viktor
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.