Binding an Interface to a VPN Instance

By binding an interface to a VPN instance, you can change the interface to be a VPN interface. Then, packets entering this interface are forwarded according to the forwarding information of the VPN instance.

Context

The configuration on the Hub-PE involves two interfaces or sub-interfaces:

One is bound to VPN-in for receiving the routes advertised by Spoke-PEs.
One is bound to VPN-out for advertising the routes of all the hub sites and spoke sites.

If a Hub-PE and a Hub-CE are connected through a single link, one interface or sub-interface on the Hub-PE is bound to the VPN instance vpnhub.

Perform the following steps on the Hub-PE and all the Spoke-PEs.

Procedure

Run system-view
The system view is displayed.
Run interface interface-type interface-number
The interface view is displayed.
Run ip binding vpn-instance vpn-instance-name
The interface is bound to the VPN instance.

After the ip binding vpn-instance command is run on an interface, the Layer 3 features such as the IP address and routing protocol configured on the interface are deleted.
Run ip address ip-address { mask | mask-length }
An IP address is configured for the interface.
Run quit
Return to the system view.
Run commit
The configuration is committed.