protect ip-vpn-instance

Function

The protect ip-vpn-instance command configures a protection path between the master and slave devices for network-side traffic with the VPN type (for VPN users).

The undo protect ip-vpn-instance command cancels the configured protection path with the VPN type (for VPN users).

By default, no protection path with the VPN type (for VPN users) is configured for network-side traffic.

This command is supported only on the NetEngine 8000 F1A.

Format

protect ip-vpn-instance vpn-instance-name peer-ip ip-address [ interface { interface-name | interface-type interface-number } ]

undo protect ip-vpn-instance vpn-instance-name

Parameters

Parameter	Description	Value
peer-ip ip-address	Specifies the peer IP address.	The value is in dotted decimal format.
interface interface-name	Specifies the interface name of an outbound interface.	The value is a string of 1 to 64 case-sensitive characters, spaces not supported.
interface interface-number	Specifies the interface number of an outbound interface.	The value is a string of 1 to 64 case-sensitive characters, spaces not supported.
interface interface-type	Specifies the interface type of an outbound interface.	-
ip-vpn-instance vpn-instance-name	Specifies the name of an IPv4 VPN instance.	The value is a string of 1 to 31 case-sensitive characters, spaces not supported. In addition, the VPN instance name must not be _public_. When double quotation marks are used around the string, spaces are allowed in the string.

Views

Remote backup service view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
rui	write

Usage Guidelines

Usage Scenario

To configure a protection path between the master and slave devices for network-side traffic, run the protect command. In case of an access-side link fault, the network-to-user traffic can be switched to the slave device over the protection path and then forwarded to users.

For VPN users, MPLS + BGP needs to be deployed between the master and slave devices, and then an LDP path needs to be established for each VPN.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure a protection path for VPN users with the VPN instance named vpna.

<HUAWEI> system-view
[~HUAWEI] remote-backup-service rbs
[*HUAWEI-rm-backup-srv-rbs] commit
[*HUAWEI-rm-backup-srv-rbs] protect ip-vpn-instance vpna peer 2.2.2.2 interface GigabitEthernet 0/1/0