HP 5500 Ei 5500 Si Switch Series Configuration Guide

 402 
BGP checks routing loops by examining AS numbers. When EBGP is used, the MCE advertises routing 
information carr ying the local AS number to the site and then receives routing updates from the site. The 
routing updates carry the AS number of the MCE, so  the MCE discards them to avoid routing loops. To 
enable the MCE to receive such routes, configure the MCE to allow routing loops. 
Routes redistributed from OSPF to BGP on the MCE have their OSPF attributes removed. To enable BGP 
to distinguish...

 403 
Step Command Remarks 
8.  Configure a filtering policy to 
filter the received routes.  filter-policy 
{ acl-number  | 
ip-prefix ip-prefix-name  } import Optional. 
By default, BGP does not filter the 
received routes. 
 
 
NOTE: 
After you configure a VPN site as an IBGP peer of the MCE, the MCE does not advertise the BGP routes 
learned from the VPN site to other IBGP peers, incl uding VPNv4 peers. Only when you configure the VPN
site as a client of the RR (the MCE), does the MCE adv ertise...

 404 
Step Command Remarks 
2.  Configure a static route for a 
VPN instance. 
• ip  route-static  dest-address  { mask | 
mask-length  } { gateway-address  | 
interface-type interface-number  
[ gateway-address  ] | vpn-instance 
d-vpn-instance-name  gateway-address } 
[  preference  preference-value  ] [ tag tag-value  ] 
[ description  description-text  ] 
• ip route-static  vpn-instance  
s-vpn-instance-name&  dest-address  
{  mask  | mask-length  } { gateway-address  
[ public  ] | interface-type...

 405 
Step Command Remarks 
3.  Disable routing loop 
detection.  vpn-instance-capability simple  Disabled by default. 
You must disable routing loop 
detection for a VPN OSPF process on 
the MCE. Otherwise, the MCE 
cannot receive OSPF routes from the 
PE. 
4.
  Configure the OSPF 
domain ID.  domain-id 
domain-id [ secondary ] Optional. 
0 by default. 
5.  Redistribute the VPN 
routes.  import-route 
protocol [ process-id  | 
allow-ibgp  ] [ cost  cost  | type  type  | 
tag  tag  | route-policy...

 406 
Step Command Remarks 
5.  Configure a filtering 
policy to filter 
advertised routes.  filter-policy { acl-number
 | ip-prefix  
ip-prefix-name  | route-policy  
route-policy-name  } export [  isis 
process-id  | ospf  process-id  | rip 
process-id  | bgp  | direct |  static ]  Optional. 
By default, IS-IS does not filter 
advertised routes. 
6.
  Return to system view. 
quit  N/A 
7.  Enter interface view. 
interface interface-type interface-number N/A 
8.  Enable the IS-IS process 
on the...

 407 
Step Command Remarks 
5.  Redistribute the VPN routes 
of the VPN site.  import-route 
protocol [ process-id  | 
all-processes  ] [ med  med-value  | 
route-policy route-policy-name ] *  By default, no route 
redistribution is configured. 
6.
  Configure the egress router 
of the site as a client of the 
route reflector.  peer 
{ group-name |  ip-address } 
reflect-client  Optional. 
By default, no route reflector or 
client is configured. 
7.
  Enable route reflection 
between clients.  reflect...

 408 
Displaying and maintaining MCE 
 
Task Command  Remarks 
Display information about the 
routing table associated with a 
VPN instance. display ip routing-table vpn-instance 
vpn-instance-name
 [ verbose ] [ verbose  ] 
[ |  { begin  | exclude |  include } 
regular-expression  ]  Available in any view
 
Display information about a 
specific VPN instance or all VPN 
instances.  display ip vpn-instance
 [ instance-name 
vpn-instance-name  ] [ | { begin |  exclude | 
include  } regular-expression ]...

 409 
Task Command  Remarks 
Display the BGP VPNv4 routing 
information of a specific VPN 
instance. display bgp vpnv4 vpn-instance
 
vpn-instance-name  routing-table 
[ [ network-address  [ {  mask  | mask-length  } 
[ longer-prefixes  ] ] | as-path-acl 
as-path-acl-number  | cidr  | community 
[  aa:nn ]& [  no-advertise | 
no-export  | no-export-subconfed  ] * 
[ whole-match  ] | community-list 
{  basic-community-list-number  
[ whole-match  ] | 
adv-community-list-number  }& | 
dampened  | dampening...

 410 
Figure 129 Network diagram 
 
 
Configuration procedure 
Assume that the system name of the MCE device is MCE, the system names of the edge devices of VPN 
1 and VPN 2 are VR1 and VR2, respectively, and the system name of PE 1 is PE1. 
1. Configure the VPN instances on the MCE and PE 1: 
# On the MCE, configure VPN instances  vpn1 and  vpn2, and specify an RD and route targets for 
each VPN instance.  
 system-view 
[MCE] ip vpn-instance vpn1 
[MCE-vpn-instance-vpn1] route-distinguisher 10:1...

 411 
[MCE-Vlan-interface10] ip address 10.214.10.3 24  
# Configure VLAN 20, add port GigabitEthernet 1/0/2 to VLAN 20, bind VLAN-interface 20 with 
VPN instance  vpn2, and specify an IP address for VLAN-interface 20.  
[MCE-Vlan-interface10] quit 
[MCE] vlan 20 
[MCE-vlan20] port gigabitethernet 1/0/2 
[MCE-vlan20] quit 
[MCE] interface vlan-interface 20 
[MCE-Vlan-interface20] ip binding vpn-instance vpn2 
[MCE-Vlan-interface20] ip address 10.214.20.3 24 
[MCE-Vlan-interface20] quit 
# On PE 1,...