Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Centralize internet access in MPLS VPN

Can i implement Centralize internet access (the Hub CE Router to performs NAT) in cisco MPLS VPN solution?

If so, is there any example about that? i can't find it at CCO~

Thanks a lot~

New Member

Re: Centralize internet access in MPLS VPN


it is possible, You can write default route to CE that will do NAT. then at the same PE router below the address-family for vpn, you must specify default information originate. with that config defaul route is sent to other PEs. so every VPN's leg can reach out of VPN via default route with NAT.



New Member

Re: Centralize internet access in MPLS VPN

If you run dynamic routing protocol in PE-CE,like rip2,ospf,bgp,do the following task.

1:set a default route in HUB CE;and generate the default route under its dynamic protocol.

2:in other CEs, make sure they can learn this route.

If you run static route and vrf static route between CE and PE,do the following task.

1.set default route in HUB CE, and set default route in other CEs.

2.In all PEs,redistribute the connected and static rotues to address-family ipv4 of customer vrf.

3.set the customer vrf default route in all PE which connected your all CEs.

Note: make sure all PEs can reach the GW address of vrf deafult route. GW IP address is the interface of which HUB CE towards PE.

command: "ip route vrf global.


CreatePlease login to create content