In the networking of Hub and Spoke, you can configure VPN targets on the Hub-PE and Spoke PEs to control the advertisement of VPN routes. The import VPN target configured on the Hub-PE must contain the export VPN targets configured on all the Spoke-PEs. The export VPN target list configured on the Hub-PE must contain the import VPN targets configured on all the Spoke-PEs.
Controlling the acceptance of routes to be imported by the VPN instance IPv6 address family by configuring VPN targets is also a key part of the hub-spoke solution.
The system view is displayed.
The VPN instance view of VPN-in is displayed.
The VPN instance IPv6 address family view is displayed.
One or multiple import VPN targets are configured for the VPN instance IPv6 address family to receive the VPNv6 routes advertised by all the Spoke-PEs.
The vpn-target1 list must contain all export vpn-target values of the Spoke-PEs.
An import route-policy for importing VPN routes is configured for the VPN instance IPv6 address family.
In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an import route-policy can be configured to better control the acceptance of VPN routes. An import route-policy can be used to filter the routes to be imported to the VPN instance IPv6 address family or modify route attributes.
An export route-policy for advertising VPN routes is configured for the VPN instance IPv6 address family.
In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an export route-policy can be configured to better control the advertisement of VPN routes. An export route-policy can be used to filter the routes advertised by the VPN instance IPv6 address family or modify route attributes.
By default, export VPN targets are added to VPN routes after these routes match an export route-policy. If the export route-policy contains VPN target-related filter rules, the route-policy cannot apply to these routes. If you want to apply the route target-related filter rules defined in an export route-policy to VPN routes, configure the add-ert-first parameter to configure the system to add export VPN targets to VPN routes before matching these routes against the export route-policy.
Return to the system view.
The VPN instance view of VPN-out is displayed.
The VPN instance IPv6 address family view is displayed.
One or multiple export VPN targets are configured for the VPN instance IPv6 address family to advertise the routes of all the Hub sites and Spoke sites.
The vpn-target2 list must contain all import vpn-target values of Hub-PEs.
An import route-policy for importing VPN routes is configured for the VPN instance IPv6 address family. In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an import route-policy can be configured to better control the advertisement of VPN routes. An import route-policy can be used to filter the routes to be imported to the VPN instance IPv6 address family or modify route attributes.
An export route-policy for advertising VPN routes is configured for the VPN instance IPv6 address family.
In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an export route-policy can be configured to better control the advertisement of VPN routes.
By default, export VPN targets are added to VPN routes after these routes match an export route-policy. If the export route-policy contains VPN target-related filter rules, the route-policy cannot apply to these routes. If you want to apply the route target-related filter rules defined in an export route-policy to VPN routes, configure the add-ert-first parameter to configure the system to add export VPN targets to VPN routes before matching these routes against the export route-policy.
The configuration is committed.
The system view is displayed.
The VPN instance view of VPN-in is displayed.
The VPN instance IPv6 address family view is displayed.
One or multiple import VPN targets are configured for the VPN instance IPv6 address family to accept the VPNv6 routes advertised by the Hub-PE.
vpn-target2 must be contained in the export vpn-target list of the Hub-PE.
One or multiple export VPN targets are configured for the VPN instance IPv6 address family to send the VPNv6 routes of sites connected to the Spoke PE.
vpn-target1 must be contained in the import vpn-target list of the Hub-PE.
An import route-policy for importing VPN routes is configured for the VPN instance IPv6 address family.
In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an import route-policy can be configured to better control the acceptance of VPN routes. An import route-policy can be used to filter the routes to be imported to the VPN instance IPv6 address family or modify route attributes.
An export route-policy for advertising VPN routes is configured for the VPN instance IPv6 address family.
In addition to using a VPN target to control the advertisement or acceptance of VPN routes, an export route-policy can be configured to better control the advertisement of VPN routes. An export route-policy can be used to filter the routes advertised by the VPN instance IPv6 address family or modify route attributes.
By default, export VPN targets are added to VPN routes after these routes match an export route-policy. If the export route-policy contains VPN target-related filter rules, the route-policy cannot apply to these routes. If you want to apply the route target-related filter rules defined in an export route-policy to VPN routes, configure the add-ert-first parameter to configure the system to add export VPN targets to VPN routes before matching these routes against the export route-policy.
The configuration is committed.