Full-Mesh VPNs

In a full-mesh VPN, each site in the VPN can communicate with every other site in that same VPN. For example, in Figure 83, each site in VPN A can communicate with all other VPN A sites but not with the sites in VPN B.

Figure 83: Site Connectivity in a Full-Mesh VPN

Site Connectivity in a Full-Mesh VPN

Figure 84 illustrates how you can configure the VRF import and export route targets to build a full-mesh VPN. Each VRF in VPN A has the same route target, 100:10, in their import list and export list. Each VPN A VRF accepts only received routes that have this route target attached. Because this route target is attached to each route advertised by VPN A VRFs, every site in VPN A accepts routes only from other sites in VPN A. The same principle applies to VPN B.

Figure 84: Route Target Configuration for a Full-Mesh VPN

Route Target Configuration for a Full-Mesh
VPN

Related Documentation