Centralize internet access in MPLS VPN

[wellsgz]

Can i implement Centralize internet access (the Hub CE Router to performs NAT) in cisco MPLS VPN solution?

If so, is there any example about that? i can't find it at CCO~

Thanks a lot~

[gurkang]

hi,

it is possible, You can write default route to CE that will do NAT. then at the same PE router below the address-family for vpn, you must specify default information originate. with that config defaul route is sent to other PEs. so every VPN's leg can reach out of VPN via default route with NAT.

regards,

Gurkan

[wukunpeng]

If you run dynamic routing protocol in PE-CE,like rip2,ospf,bgp,do the following task.

1:set a default route in HUB CE;and generate the default route under its dynamic protocol.

2:in other CEs, make sure they can learn this route.

If you run static route and vrf static route between CE and PE,do the following task.

1.set default route in HUB CE, and set default route in other CEs.

2.In all PEs,redistribute the connected and static rotues to address-family ipv4 of customer vrf.

3.set the customer vrf default route in all PE which connected your all CEs.

Note: make sure all PEs can reach the GW address of vrf deafult route. GW IP address is the interface of which HUB CE towards PE.

command: "ip route vrf 0.0.0.0 0.0.0.0 global.

TRY