Scribd
Upload
6 views3 pages

Huawei VPN Instance Configuration Guide

The document outlines the configuration for a VPN instance named VRF-NCE-T, including route distinguishers, interface settings, and access control lists (ACLs) for specific IP addresses. It also details SNMP agent settings for trap sources and target hosts, as well as instructions for adding loopback interfaces and modifying IP addresses according to a specified plan. Additionally, it emphasizes the need to replicate the configuration across all network elements (NE).

Uploaded by

yaseen abbas
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
6 views3 pages

Huawei VPN Instance Configuration Guide

The document outlines the configuration for a VPN instance named VRF-NCE-T, including route distinguishers, interface settings, and access control lists (ACLs) for specific IP addresses. It also details SNMP agent settings for trap sources and target hosts, as well as instructions for adding loopback interfaces and modifying IP addresses according to a specified plan. Additionally, it emphasizes the need to replicate the configuration across all network elements (NE).

Uploaded by

yaseen abbas
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd

Script

sys
ip vpn-instance VRF-NCE-T
ipv4-family
route-distinguisher [Link]:4383
apply-label per-instance
vpn-target 17557:1001331 export-extcommunity
vpn-target 17557:1001331 import-extcommunity
#
commit
interface LoopBack2
description *** Management Loopback for NCE-T***
ip binding vpn-instance VRF-NCE-T
ip address [Link] [Link]
#
commit
bgp 17557
ipv4-family vpn-instance VRF-NCE-T
import-route direct
commit

display ip routing-table vpn-instance VRF-NCE-T [Link]


display ip routing-table vpn-instance VRF-NCE-T [Link]
#

acl number 2002


rule 60 permit vpn-instance VRF-NCE-T source [Link] 0
rule 70 permit vpn-instance VRF-NCE-T source [Link] 0

acl number 2001


rule 360 permit vpn-instance VRF-NCE-T source [Link] 0
rule 370 permit vpn-instance VRF-NCE-T source [Link] 0

snmp-agent trap source LoopBack2


snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent trap source LoopBack2
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p
snmp-agent target-host trap address udp-domain [Link] vpn-instance VRF-NCE-T params securityname snmpauth v3 p

acl 2001
rule 360 permit vpn-instance VRF-NCE-T source [Link] 0
rule 370 permit vpn-instance VRF-NCE-T source [Link] 0
rule 380 permit vpn-instance VRF-NCE-T source [Link] 0
rule 390 permit vpn-instance VRF-NCE-T source [Link] 0
rule 400 permit vpn-instance VRF-NCE-T source [Link] 0
rule 410 permit vpn-instance VRF-NCE-T source [Link] 0
rule 420 permit vpn-instance VRF-NCE-T source [Link] 0
rule 430 permit vpn-instance VRF-NCE-T source [Link] 0
rule 440 permit vpn-instance VRF-NCE-T source [Link] 0
rule 450 permit vpn-instance VRF-NCE-T source [Link] 0
rule 460 permit vpn-instance VRF-NCE-T source [Link] 0
rule 470 permit vpn-instance VRF-NCE-T source [Link] 0

acl 2002
rule 90 permit vpn-instance VRF-NCE-T source [Link] 0
rule 100 permit vpn-instance VRF-NCE-T source [Link] 0
rule 110 permit vpn-instance VRF-NCE-T source [Link] 0
rule 120 permit vpn-instance VRF-NCE-T source [Link] 0
rule 130 permit vpn-instance VRF-NCE-T source [Link] 0
rule 140 permit vpn-instance VRF-NCE-T source [Link] 0
rule 150 permit vpn-instance VRF-NCE-T source [Link] 0
rule 160 permit vpn-instance VRF-NCE-T source [Link] 0
rule 170 permit vpn-instance VRF-NCE-T source [Link] 0
rule 180 permit vpn-instance VRF-NCE-T source [Link] 0
rule 191 permit vpn-instance VRF-NCE-T source [Link] 0
rule 200 permit vpn-instance VRF-NCE-T source [Link] 0

sftp client-source -a [Link] -vpn-instance VRF-NCE-T


Remarks

add loopback 0 in RD for each NE to change RD value

change this IP as per IP Plan in Loopback2 column

SNMP Config

Add same config on all NE

You might also like