TE Tunnel Between VPNs

[ivorvalyov]

Hello!

I got the network as in the picture. I need that traffic for customer-1 devices flows through the blue tunnel and from the customer-2 through the red tunnel. I know how to make tunnels on PE-1 and PE-2, but I can't find out how to devide traffic flows from different VPNs.

Thanks and regards

ilya.

[nkarthikeyan]

Hi Ilya,

interface Tunnel1

description** VPN Tunnel Blue **

bandwidth 100000

ip vrf forwarding

ip address 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip mtu 1500

load-interval 60

tunnel source GigabitEthernet0/0.

tunnel destination  [IP Address]

tunnel protection ipsec profile dmvpn

!

interface Tunnel2

description **VPN Tunnel Red **

ip vrf forwarding

  ip address 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip mtu 1500

load-interval 60

tunnel source GigabitEthernet0/0.

tunnel destination  [IP Address]

tunnel protection ipsec profile dmvpn

!

And on the connected physical interface. You need to map the ACL with the specific permits for the different tunnels.... Also you can have the dynamic routing protocol eigrp/ospf/rip to advertise your LAN subnets from cust 1 and cust 2. If the PE1 knows the route to reach PE2 it will form the tunnel and vice versa. You can restric the blue one to the red by acl and vice versa. I hope you understood the scenarion.

Please do rate if the given information helps.

By

Karthik

[Ivan Krimmel]

Ilya,

have a look at this - http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_tun_select_ps6922_TSD_Products_Configuration_Guide_Chapter.html#wp1056359

Regards,

Ivan.

[nkarthikeyan]

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/DMVPN_2_Phase2.html#wp37281

the above link is a very useful document on the same.

please do rate if the given information helps.

By

Karthik

[Ivan Krimmel · Accepted solution]

Ilya,

this is what you are after:

http://sites.google.com/site/amitsciscozone/home/important-tips/traffic-engineering/per-vrf-mpls-te-tunnels

HTH,

Ivan.

[ivorvalyov]

Thanks to everybody! I will try to configure my network.

At first sight Ivan's answer is the right answer.

Best regards

Ilya

[Muhammed AKYUZ]

How about with same topology. If one customer wants a specific traffic to go on different path.