MPLS VPN

Hi,

There are several solutions.

Solution 1: 

The PE is connected to the CE through dual-link. One interface on the PE is added to a VPN instance, and the other interface on the PE still belongs to the global routing table. VPN routes are exchanged with the CE through the interface of the VPN instance, and the CE accesses the Internet through the interface that belongs to the global routing table. Each CE can access the Internet independently. 

Solution 2: 

The PE is connected to the CE through a single link. Configure the default static route on the VPN instance of the PE, add the keyword Public, and specify the next-hop address as the public network address. 

Example: ip route-static vpn-instance vrf 0.0.0.0 0 10.1.12.2 public 

When an interface in a VPN instance receives a packet and matches the packet with the routing entry, the interface sends the packet to the public IP address next-hop address. Each CE can access the Internet independently. 

Solution 3: 

The Internet traffic of all sites in the user VPN is forwarded to a central site, and then the central site forwards the traffic to the Internet.