In this example, Internet traffic is routed through a hub CE router. The hub CE router has two interfaces to the hub PE router: a VPN interface and a public interface. It performs NAT on traffic forwarded from the hub PE router through the VPN interface and forwards that traffic from its public interface back to the hub PE router. The hub PE router has a static default route in its VRF table pointing to the hub CE router’s VPN interface. It announces this default route to the rest of the VPN, attracting all non-VPN traffic to the hub CE route. The hub PE router also installs and distributes the VPN’s public IP address space (see Figure 42).
Figure 42: Internet Access Through a Hub CE Router Performing NAT
The configuration for this example is almost identical to that described in Routing Internet Traffic Through a Separate NAT Device. The difference is that Router PE1 is configured to announce a static default route to the other CE routers (see Figure 43).
Figure 43: Internet Access Provided Through a Hub CE Router
The following sections show how to configure centralized Internet access by routing Internet traffic through a hub CE router:
 | Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |