Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Configuring MX Series Router Cloud CPE NAT Services to Route Internet Traffic

This topic describes how to configure routed Internet traffic with the CGN service provided by the PE1 (MX Series) router. A static route is added to the VPN routing instance to send Internet traffic to the NAT inside interface. Site 1 has only one VLAN interface into the PE1 router.

Internet access from Site 2 goes through the NAT gateway in Site 1. A static route configured in the Site 1 VPN routing instance is propagated to the Site 2 VPN routing instance through IBGP.

For this configuration you will:

  1. On PE1, configure a bridge domain, an IRB interface, and a VLAN interface as the VPN internal interface.
  2. On PE1 configure a VPN routing instance that includes the IRB interface.
  3. On PE1 configure two service interfaces for NAT: one as the inside interface and one as the outside interface.
  4. On PE1 configure a next-hop service set that includes the NAT service. If required, you can add the stateful firewall service to the service set.
  5. On PE1 configure a static route to send Internet traffic to the inside interface of the service set.
  6. On PE2 configure a bridge domain, an IRB interface, and a VLAN interface.
  7. On PE2 configure a VPN routing instance that includes the IRB interface.

Before you begin, make sure you have completed the steps for the cCPE common configuration. See Configuring the Common Configuration for MX Series Router Cloud CPE Services.

Then complete the following tasks to configure CPE-based single Ethernet:

  1. Configure the PE1 router. See Configuring MX Series Router Cloud CPE NAT Services on the PE1 Router to Route Internet Traffic.
  2. Configure the PE2 router. See Configuring the PE2 Router to Route Internet Traffic Using MX Series Router Cloud CPE NAT Services
 

Related Documentation

 

Modified: 2015-10-29

Previous Page Next Page