General Configuration for VPN Routing

The configuration described in this section applies to all types of VPNs.

To configure interfaces for VPN routing, include the interface statement:

interface interface-name; 

You can include the interface statement at the following hierarchy levels:

• [edit routing-instances routing-instance-name]
• [edit logical-routers logical-router-name routing-instances routing-instance-name]

Specify both the physical and logical portions of the interface name, in the following format:

physical.logical

For example, in at-1/2/1.2, at-1/2/1 is the physical portion of the interface name and 2 is the logical portion. If you do not specify the logical portion of the interface name, 0 is set by default.

A logical interface can be associated with only one routing instance. If you enable a routing protocol on all instances by specifying interfaces all when configuring the master instance of the protocol at the [edit protocols] hierarchy level, and if you configure a specific interface for VPN routing at the [edit routing-instances routing-instance-name] hierarchy level or at the [edit logical-routers logical-router-name routing-instances routing-instance-name] hierarchy level, the latter interface statement takes precedence and the interface is used exclusively for the VPN.

If you explicitly configure the same interface name at the [edit protocols] hierarchy level and at either the [edit routing-instances routing-instance-name] or [edit logical-routers logical-router-name routing-instances routing-instance-name] hierarchy levels, an attempt to commit the configuration fails.