Got it

Send the traffic coming from the L2VPN into a layer3 sub-interface

Created: Aug 27, 2021 03:12:25Latest reply: Aug 27, 2021 03:43:03 116 3 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hello everyone,

We have an MPLS L2VPN between two MPLS PE routers (AR1 and AR2) and would like to send the traffic coming from the L2VPN into a layer3 sub-interface (GigabitEthernet0/2/1.204 AR2). Sub-interface is configured into a VPN-instance MPLS L3VPN. 

The L2VPN starts at AR1 and terminates in AR2. The layer3 sub-interface (GigabitEthernet0/2/1.204 AR2) is in AR2

What is the best way to accomplish this?

#                   

interface GigabitEthernet0/2/1.203

 vlan-type dot1q 203

 description XXX L2VPN to AR1

 l2 binding vsi XXX

#

interface GigabitEthernet0/2/1.204

 vlan-type dot1q 204

 description YYY L3VPN FOR WIRELESS SSID

 ip binding vpn-instance YYY

 ip address 10.1.1.1 255.255.255.0

 statistic enable

 dhcp select relay

 ip relay address 10.10.5.5


Featured Answers
DDSN
Admin Created Aug 27, 2021 03:13:15

Hi  WDNJSQ,

If you want the traffic from L2VPN goes into L3VPN, you have to use Virtual-Ethernet port instead of the Physical port. For example, the traffic from L2VPN in Virtual-Ethernet0/2/0.204 (vlan-type dot1q 204) will go into the L3VPN in Virtual-Ethernet0/2/1.204(vlan-type dot1q 204), because their main ports Virtual-Ethernet0/2/0(l2-terminate) and Virtual-Ethernet0/2/1(l3-terminate)are bind with the same “ve-group 1”

#

interface GigabitEthernet0/2/1.203

undo l2 binding vsi XXX

#

interface GigabitEthernet0/2/1.204

 undo ip binding vpn-instance YYY

#

interface Virtual-Ethernet0/2/0

 ve-group 1 l2-terminate

 quit

#

interface Virtual-Ethernet0/2/0.204

 vlan-type dot1q 204

 description XXX L2VPN to AR1

 l2 binding vsi XXX

#

interface Virtual-Ethernet0/2/1

 ve-group 1 l3-access

#

interface Virtual-Ethernet0/2/1.204

 vlan-type dot1q 204

 description YYY L3VPN FOR WIRELESS SSID

 ip binding vpn-instance YYY

 ip address 10.38.9.1255.255.255.0

#

You can also refer to:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1000142116&id=dc_vrp_l2-l3_cfg_5008&lang=en


And here refer to UPE, NPE, and PE to understand the network topology and traffic flow:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1000142116&id=dc_vrp_l2-l3_cfg_5025&lang=en

I hope it helps!


View more
  • x
  • convention:

Laiheang
Laiheang Created Aug 27, 2021 03:40:18 (0) (0)
 
All Answers
DDSN
DDSN Admin Created Aug 27, 2021 03:13:15

Hi  WDNJSQ,

If you want the traffic from L2VPN goes into L3VPN, you have to use Virtual-Ethernet port instead of the Physical port. For example, the traffic from L2VPN in Virtual-Ethernet0/2/0.204 (vlan-type dot1q 204) will go into the L3VPN in Virtual-Ethernet0/2/1.204(vlan-type dot1q 204), because their main ports Virtual-Ethernet0/2/0(l2-terminate) and Virtual-Ethernet0/2/1(l3-terminate)are bind with the same “ve-group 1”

#

interface GigabitEthernet0/2/1.203

undo l2 binding vsi XXX

#

interface GigabitEthernet0/2/1.204

 undo ip binding vpn-instance YYY

#

interface Virtual-Ethernet0/2/0

 ve-group 1 l2-terminate

 quit

#

interface Virtual-Ethernet0/2/0.204

 vlan-type dot1q 204

 description XXX L2VPN to AR1

 l2 binding vsi XXX

#

interface Virtual-Ethernet0/2/1

 ve-group 1 l3-access

#

interface Virtual-Ethernet0/2/1.204

 vlan-type dot1q 204

 description YYY L3VPN FOR WIRELESS SSID

 ip binding vpn-instance YYY

 ip address 10.38.9.1255.255.255.0

#

You can also refer to:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1000142116&id=dc_vrp_l2-l3_cfg_5008&lang=en


And here refer to UPE, NPE, and PE to understand the network topology and traffic flow:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1000142116&id=dc_vrp_l2-l3_cfg_5025&lang=en

I hope it helps!


View more
  • x
  • convention:

Laiheang
Laiheang Created Aug 27, 2021 03:40:18 (0) (0)
 
Good one
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.