User's Manual

407
Chapter 56 Configuring VRF
56.1 Overview
One of the key of VPN is to keep safe and isolate data; it must be able to prevent communication of
stations which belongs not to a same VPN. In order to differentiate VPN user route sent by which local interface
on PE device, create virtual routes on PE device. Every virtual route has its own routing table and forwarding
table. These routing tables and forwarding tables are called VRF(VPN Routing and Forwarding instances).
One VRF includes the same station related routing table, interface (sub-interface), routing instances and
routing policies. On PE, the physical port or the logic port with the same VPN corresponds to one VRF.
56.2 VRF Configuration Task List
If you would like to configure the VRF, the following tasks are necessary.
1) Creating VRF Table
2) Relating the interface to VRF
3) Configuring the Target VPN Expansion Attribute of VRF
4) Configuring Description of VRF
5) Configuring Static Route of VRF
6) Monitoring VRF
7) Maintaining VRF
8) Example of the VRF Configuration
56.3 Configuration Task
56.3.1 Creating VRF Table
To create VPN routing and forwarding table, do as follows in the global configuration mode:
Command Purpose
PE_config#ip vrf ce
Enters VRF configuration mode, define VRF
table.
PE_config_vrf_ce#rd ASN:nn or IP-
address:nn
Designate the routing tag of VRF, create
VRF routing and forwarding table
PE_config_vrf_ce#route-target [export |
import | both ] ASN:nn or IP-address:nn
Create input of VRF and output target VPN
expansion attribute
56.3.2 Relating the interface to VRF
Relate the interface to VRF, do as follows:
Command Purpose