[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Interfaces Participating in a VPN

Configuring the Services Router interfaces that participate in the VPN is similar to configuring them for other uses, with a few requirements for VPN.

Before following the procedures in this section, make sure you have initially configured the interface as described in Configuring Network Interfaces.

To configure an interface for a VPN:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 87 for each interface involved in the VPN, except Layer 3 loopback interfaces, which do not require other configuration.
  3. Go on to Configuring Protocols Used by a VPN.

Table 87: Configuring an Interface for a VPN

Task

J-Web Configuration Editor

CLI Configuration Editor

Configure IPv4.

(interfaces on all Services Routers)

  1. In the configuration editor hierarchy, select Interfaces.
  2. In the Interface name column, select the interface.
  3. For Layer 2 VPNs on the interface facing a CE router, select an encapsulation type, such as ethernet-ccc from the Encapsulation list. For Fast Ethernet interfaces, you also must select Vlan tagging from the Vlan tag mode list.
  4. In the Interface unit number column, select the logical interface.
  5. In the Family group, select Inet and click Edit.
  6. Next to Address, click Add new entry
  7. In the Source box, type the IPv4 address—for example, 10.49.102.1/30. For a loopback address on a Layer 2 configuration, select Primary.
  8. Click OK to return to the Unit page.
  • For all interfaces except loopback, and a Layer 2 VPN interface facing a CE router:

    From the top of the configuration hierarchy, enter

    edit interfaces interface-name unit logical_interface family inet address ipv4_address

  • For a loopback address on a Layer 2 configuration:

    From the top of the configuration hierarchy, enter

    edit interfaces lo0 unit logical_interfacefamily inet address ipv4_address primary

  • For a Layer 2 VPN interface facing a CE router:

    From the top of the configuration hierarchy, enter

    set interfacesinterface-name vlan-tagging encapsulation vlan-ccc unit logical_interface encapsulation vlan-ccc vlan-id id-number

Configure the MPLS address family.

(for interfaces on a PE or provider Services Router that communicate with a PE or provider Services Router only, and not for loopback addresses)

On the Unit page, select Mpls in the Family group.

At the [edit interfaces interface] level, enter

set unit logical_interfacefamily mpls

For Layer 2 VPNs and circuits, configure encapsulation.

If multiple logical units are configured, the encapsulation type is needed at the interface level only. It is always required at the unit level.

(for interfaces on a PE Services Router that communicate with a CE Services Router)

  1. On the Unit page, select an encapsulation type from the Encapsulation list.
  2. Click OK.
  3. On the Interface page, select an encapsulation type from the Encapsulation list.
  4. Click OK until you see the Configuration Interfaces page displaying all interfaces on the router.
  1. At the [edit interfaces interface] level, enter

    set encapsulation encapsulation_type

  2. Enter

    set unit logical_interfaceencapsulation encapsulation_type


[Contents] [Prev] [Next] [Index] [Report an Error]