Configuring VPN instances on PEs

Context

Configure the VPN instance on each Spoke-PE and Hub-PE. This section provides only the mandatory configuration for a VPN instance. For the optional configuration of a VPN instance, see Configuring VPN Instances on PEs.

Procedure

Configure a VPN instance on the Hub-PE.
Each Hub-PE is configured with the following two VPN instances:
- VPN-in: receives and maintains all the VPNv6 routes advertised by all the Spoke-PEs.
- VPN-out: maintains the routes of all the Hub stations and Spoke stations and advertises those routes to all the Spoke-PEs.
1. Run system-view
  The system view is displayed.
2. Run ip vpn-instance VPN-in
  The VPN-in instance is created and the VPN-in instance view is displayed.
3. Run ipv6-family
  The IPv6 address family is enabled for the VPN-in instance, and the VPN-in instance IPv6 address family view is displayed.
4. Run route-distinguisher route-distinguisher
  The RD of the VPN-in instance IPv6 address family is configured.
5. Run vpn-target vpn-target1 &<1-8> import-extcommunity
  The VPN target extended community for the VPN-in instance IPv6 address family is created to import the IPv6 routes advertised by all the Spoke-PEs.
  
  vpn-target1 lists the export VPN targets advertised by all the Spoke-PEs.
6. Run quit
  Return to the VPN instance view.
7. Run quit
  Return to the system view.
8. Run ip vpn-instance VPN-out
  The VPN-out instance is created and the VPN-out instance view is displayed.
9. Run ipv6-family
  The IPv6 address family is enabled for the VPN-out instance, and the VPN-out instance IPv6 address family view is displayed.
10. Run route-distinguisher route-distinguisher
  The RD of the VPN-out instance IPv6 address family is configured.
11. Run vpn-target vpn-target2 &<1-8> export-extcommunity
  The VPN target extended community for the VPN-out instance IPv6 address family is created to advertise the routes of all the Hubs and Spokes.
  
  vpn-target2 lists the import VPN targets advertised by all the Spoke-PEs.
Configure the Spoke-PE.
Every Spoke-PE is configured with a VPN instance.
1. Run system-view
  The system view is displayed.
2. Run ip vpn-instance vpn-instance-name
  The VPN instance view of VPN-in is displayed.
3. Run ipv6-family
  The VPN instance IPv6 address family view is displayed.
4. Run route-distinguisher route-distinguisher
  The RD of the VPN instance IPv6 address family is configured.
5. Run vpn-target vpn-target2 &<1-8> import-extcommunity
  The VPN target extended community is configured for the VPN instance IPv6 address family to receive the VPNv6 routes advertised by the Hub-PE.
  
  vpn-target2 must be in the export VPN target list configured on the Hub-PE.
6. Run vpn-target vpn-target1 &<1-8> export-extcommunity
  The VPN target extended community is configured for the VPN instance IPv6 address family to advertise the routes of the sites the Spoke-PEs access.
  
  vpn-target1 must be in the import VPN target list configured on the Hub-PE.