In this example, VPN and Internet traffic are routed through different interfaces. The CE router sends the VPN traffic through the VPN interface and sends the Internet traffic through a separate interface that is part of the main routing table on Router PE1 (the CE router can use either one physical interface with two logical units or two physical interfaces). NAT also occurs on the CE router (see Figure 35).
Figure 35: Routing VPN and Internet Traffic Through Different Interfaces
The PE router is configured to install and advertise the public IP address pool for the VPN to other core routers (for return traffic). The VPN traffic is routed normally. Figure 36 illustrates the PE router’s VPN configuration.
Figure 36: Example of Internet Traffic Routed Through Separate Interfaces
The configuration in this example has the following features:
You can configure Router CE1 with a static default route pointing to its public interface for everything else.
The following sections show how to route VPN and Internet traffic through different interfaces:
 | Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |