tnl-policy (VPN instance view)

Function

The tnl-policy command associates a tunnel policy with the current VPN instance IPv4 address family.

The undo tnl-policy command dissociates the current VPN instance IPv4 address family from a tunnel policy.

By default, no tunnel policy is associated with a VPN instance IPv4 address family. A tunnel is selected for a VPN in the sequence of conventional LSPs and Local_IfNet tunnels, and load balancing is not performed.

Format

tnl-policy policy-name

undo tnl-policy

Parameters

Parameter	Description	Value
policy-name	Specifies the name of the tunnel policy to be associated with the VPN instance IPv4 address family.	The value is a string of 1 to 39 characters.

Parameter

Description

Value

policy-name

Specifies the name of the tunnel policy to be associated with the VPN instance IPv4 address family.

The value is a string of 1 to 39 characters.

Views

VPN instance view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l3vpn	write

Usage Guidelines

Usage Scenario

By default, a tunnel is selected for a VPN in the sequence of conventional LSPs and Local_IfNet tunnels to forward data on the backbone network and cannot implement multi-path load balancing at the same time. To ensure transmission quality by using a TE tunnel to transmit VPN services or improve transmission efficiency by load balancing VPN services among tunnels, run the tunnel-policy command to configure a tunnel policy and run the tnl-policy command in the IPv4 or IPv6 address family view to apply the tunnel policy.

Prerequisites

An RD has been configured for the VPN instance enabled with the IPv4 or IPv6 address family using the route-distinguisher command.

If the associated tunnel policy does not exist, run the tunnel-policy command to create the tunnel policy first.

Configuration Impact

If the tunnel policy associated with a VPN instance enabled with the IPv4 address family cannot match an existing tunnel on the network, the VPN instance will have routes recurse to tunnels based on the default tunnel policy. If the recursion fails, services will be interrupted.

Precautions

If the address family of a VPN instance changes or the associated tunnel policy is deleted, VPN services will be interrupted for a short time even if tunnels matching the tunnel policy are available on the network. Exercise caution when running the tnl-policy command.

Example

# Associate a tunnel policy named po1 with the VPN instance named vpn2.

<HUAWEI> system-view
[~HUAWEI] tunnel-policy po1
[*HUAWEI-tunnel-policy-po1] tunnel select-seq lsp load-balance-number 2
[*HUAWEI-tunnel-policy-po1] quit
[*HUAWEI] ip vpn-instance vpn2
[*HUAWEI-vpn-instance-vpn2] ipv4-family
[*HUAWEI-vpn-instance-vpn2-af-ipv4] route-distinguisher 100:1
[*HUAWEI-vpn-instance-vpn2-af-ipv4] tnl-policy po1