Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Full-Mesh VPNs

    In a full-mesh VPN, each site in the VPN can communicate with every other site in that same VPN. For example, in Figure 1, each site in VPN A can communicate with all other VPN A sites but not with the sites in VPN B.

    Figure 1: Site Connectivity in a Full-Mesh VPN

    Site Connectivity in a Full-Mesh VPN

    Figure 2 illustrates how you can configure the VRF import and export route targets to build a full-mesh VPN. Each VRF in VPN A has the same route target, 100:10, in their import list and export list. Each VPN A VRF accepts only received routes that have this route target attached. Because this route target is attached to each route advertised by VPN A VRFs, every site in VPN A accepts routes only from other sites in VPN A. The same principle applies to VPN B.

    Figure 2: Route Target Configuration for a Full-Mesh VPN

    Route Target Configuration for a Full-Mesh
VPN

    Published: 2014-08-18