Configure a routing instance on Router PE1. As part of the routing instance configuration, under routing-options, configure a static default route in vpna.inet.0 pointing to the NAT device’s VPN interface (this directs all non-VPN traffic to the NAT device):
- [edit]
- routing-instances {
-
- vpna {
- instance-type vrf;
- interface t3-0/2/0.0;
- interface at-1/3/1.0;
- route-distinguisher 10.255.14.171:100;
- vrf-import vpna-import;
- vrf-export vpna-export;
-
- routing-options {
-
- static {
- route 0.0.0.0/0 next-hop 10.23.0.1;
- }
- }
-
- protocols {
-
- bgp {
-
- group to-CE1 {
- peer-as 63001;
- neighbor 192.168.197.14;
- }
- }
- }
- }
- }
- policy-options {
-
- policy-statement fix-nh {
-
- then {
- next-hop self;
- }
- }
-
- policy-statement redist-static {
-
- term a {
-
- from {
- protocol static;
- route-filter 10.12.1.0/24 exact;
- }
- then accept;
- }
-
- term b {
- from protocol bgp;
- then accept;
- }
-
- term c {
- then accept;
- }
- }
-
- policy-statement vpna-import {
-
- term a {
-
- from {
- protocol bgp;
- community vpna-comm;
- }
- then accept;
- }
-
- term b {
- then reject;
- }
- }
-
- policy-statement vpna-export {
-
- term a {
- from protocol bgp;
-
- then {
- community add vpna-comm;
- accept;
- }
- }
-
- term b {
- then reject;
- }
- }
- community vpna-comm members target:63000:100;
- }