User Manual
Table Of Contents
- Chapter 1 INTRODUTION
- Chapter 2 INSTALLATION
- Chapter 3 Switch Management
- Chapter 4 Basic Switch Configuration
- Chapter 5 File System Operations
- Chapter 6 Cluster Configuration
- Chapter 7 Port Configuration
- Chapter 8 Port Isolation Function Configuration
- Chapter 9 Port Loopback Detection Function Configuration
- Chapter 10 ULDP Function Configuration
- Chapter 11 LLDP Function Operation Configuration
- Chapter 12 Port Channel Configuration
- Chapter 13 Jumbo Configuration
- Chapter 14 EFM OAM Configuration
- Chapter 15 VLAN Configuration
- Chapter 16 MAC Table Configuration
- Chapter 17 MSTP Configuration
- Chapter 18 QoS Configuration
- Chapter 19 Flow-based Redirection
- Chapter 20 Egress QoS Configuration
- Chapter 21 Flexible QinQ Configuration
- Chapter 22 Layer 3 Forward Configuration
- Chapter 23 ARP Scanning Prevention Function Configuration
- Chapter 24 Prevent ARP, ND Spoofing Configuration
- Chapter 25 ARP GUARD Configuration
- Chapter 26 ARP Local Proxy Configuration
- Chapter 27 Gratuitous ARP Configuration
- Chapter 28 Keepalive Gateway Configuration
- Chapter 29 DHCP Configuration
- Chapter 30 DHCPv6 Configuration
- Chapter 31 DHCP option 82 Configuration
- Chapter 32 DHCPv6 option37, 38
- Chapter 33 DHCP Snooping Configuration
- Chapter 34 Routing Protocol Overview
- Chapter 35 Static Route
- Chapter 36 RIP
- Chapter 37 RIPng
- Chapter 38 OSPF
- Chapter 39 OSPFv3
- Chapter 40 BGP
- 40.1 Introduction to BGP
- 40.2 BGP Configuration Task List
- 40.3 Configuration Examples of BGP
- 40.3.1 Examples 1: configure BGP neighbor
- 40.3.2 Examples 2: configure BGP aggregation
- 40.3.3 Examples 3: configure BGP community attributes
- 40.3.4 Examples 4: configure BGP confederation
- 40.3.5 Examples 5: configure BGP route reflector
- 40.3.6 Examples 6: configure MED of BGP
- 40.3.7 Examples 7: example of BGP VPN
- 40.4 BGP Troubleshooting
- Chapter 41 MBGP4+
- Chapter 42 Black Hole Routing Manual
- Chapter 43 GRE Tunnel Configuration
- Chapter 44 ECMP Configuration
- Chapter 45 BFD
- Chapter 46 BGP GR
- Chapter 47 OSPF GR
- Chapter 48 IPv4 Multicast Protocol
- 48.1 IPv4 Multicast Protocol Overview
- 48.2 PIM-DM
- 48.3 PIM-SM
- 48.4 MSDP Configuration
- 48.4.1 Introduction to MSDP
- 48.4.2 Brief Introduction to MSDP Configuration Tasks
- 48.4.3 Configuration of MSDP Basic Function
- 48.4.4 Configuration of MSDP Entities
- 48.4.5 Configuration of Delivery of MSDP Packet
- 48.4.6 Configuration of Parameters of SA-cache
- 48.4.7 MSDP Configuration Examples
- 48.4.8 MSDP Troubleshooting
- 48.5 ANYCAST RP Configuration
- 48.6 PIM-SSM
- 48.7 DVMRP
- 48.8 DCSCM
- 48.9 IGMP
- 48.10 IGMP Snooping
- 48.11 IGMP Proxy Configuration
- Chapter 49 IPv6 Multicast Protocol
- Chapter 50 Multicast VLAN
- Chapter 51 ACL Configuration
- Chapter 52 802.1x Configuration
- 52.1 Introduction to 802.1x
- 52.2 802.1x Configuration Task List
- 52.3 802.1x Application Example
- 52.4 802.1x Troubleshooting
- Chapter 53 The Number Limitation Function of Port, MAC in VLAN and IP Configuration
- 53.1 Introduction to the Number Limitation Function of Port, MAC in VLAN and IP
- 53.2 The Number Limitation Function of Port, MAC in VLAN and IP Configuration Task Sequence
- 53.3 The Number Limitation Function of Port, MAC in VLAN and IP Typical Examples
- 53.4 The Number Limitation Function of Port, MAC in VLAN and IP Troubleshooting Help
- Chapter 54 Operational Configuration of AM Function
- Chapter 55 TACACS+ Configuration
- Chapter 56 RADIUS Configuration
- Chapter 57 SSL Configuration
- Chapter 58 IPv6 Security RA Configuration
- Chapter 59 VLAN-ACL Configuration
- Chapter 60 MAB Configuration
- Chapter 61 PPPoE Intermediate Agent Configuration
- Chapter 62 SAVI Configuration
- Chapter 63 Web Portal Configuration
- Chapter 64 VRRP Configuration
- Chapter 65 IPv6 VRRPv3 Configuration
- Chapter 66 MRPP Configuration
- Chapter 67 ULPP Configuration
- Chapter 68 ULSM Configuration
- Chapter 69 Mirror Configuration
- Chapter 70 RSPAN Configuration
- Chapter 71 sFlow Configuration
- Chapter 72 SNTP Configuration
- Chapter 73 NTP Function Configuration
- Chapter 74 DNSv4/v6 Configuration
- Chapter 75 Summer Time Configuration
- Chapter 76 Monitor and Debug
- Chapter 77 Reload Switch after Specified Time
- Chapter 78 Debugging and Diagnosis for Packets Received and Sent by CPU
- Chapter 79 MPLS Overview
- Chapter 80 LDP
- Chapter 81 MPLS VPN
- Chapter 82 Public Network Access of MPLS VPN
- Chapter 83 SWITCH OPERATION
- Chapter 84 TROUBLE SHOOTING
- Chapter 85 APPENDEX A
- Chapter 86 GLOSSARY
- EC Declaration of Conformity
81-28
route table and IFIL (Label Forwarding Information Base).
To be specific, the information in VPN instances include: LFIB, IP route table, interfaces bound with VPN
instance, and its management information (including RD, route filter policy, member interface list and etc).
VPN-IPv4 Address
The traditional BGP can’t correctly handle the VPN routes with overlapping address spaces. Assume that
VPN1 and VPN2 both use the segment of 10.110.10.0/24, and advertise separately a route reaching this
segment, BGP will only choose one of the two routes, losing the one reaching the other VPN.
PE routers use MP-BPG to advertise VPN routes between each other and solve the above problem via
VPN-IPv4 address family.
A VPN-IPv4 address consists of 12 bytes, including 8 bytes of RD (Route Distinguisher) and 4 bytes of IPv4
address prefix.
Figure 81-2 VPN-IPv4 Address Structure
After receiving the regular IPv4 routes from CE, PE should advertise these private network VPN routes to the
remote PE. The independency of the private network routes is based on the additional RD patched to them.
SP can independently distribute globally unique RD, thus, even the VPN from different SP networks use the
same IPv4 address space, the PE routers can advertise different routes to them.
It is recommended to allocate a special RD for each VPN instance on the PE to ensure all routes reaching the
same CE uses the same RD. the VPN-IPv4 address whose RD is 0 is a globally unique IPv4 address.
Adding RD is to a specific IPv4 prefix will make the latter globally unique, which is the meaning of RD.
RD may relate with ASN, in which case, it is a combination of an ASN and a random number; it may also
relate with IP address, in which case, it is a combination of an IP address and a random number.
There are two RD formats, differing with each other via 2 bytes of Type filed:
If Type is 0, the Administrator sub-field takes up 2 bytes, Assigned Number sub-field takes up 4
bytes. The format would be: 16 bits of ASN: 32 bits of user-defined number. For example: 100:1
If Type is 0, the Administrator sub-field takes up 2 bytes, Assigned Number sub-field takes up 4
bytes. The format would be: 32 bits of IPv4 address: 16 bits of user-defined number. For example:
172.1.1.1:1
To guarantee the global uniqueness of RD, please don’t set the value of Administrator sub-filed as private
ASN or private IP address.
VPN Target Attribute
BGP/MPLS VPN uses a 32 bit BGP extended community attribute – VPN Target (also called Route Target) to
control the advertisement of VPN route information.
There are two types of VPN Target attribute used by VPN instances on PE routers:
Export Target attribute: the local PE sets the Export Target attribute for the VPN-IPv4 routes it learns
from the sites directly connected to it, before advertising the routes to other PE.
Subfield
Type Field
( 2-Byte )
IPv4 Address Prefix
( 4-Byte )
Administrator
Assigned
Number Subfield
Route Distinguisher ( 8-Byte )