# Hub-and-Spoke VPN on a Single PE-Router

DevFeed: [Hub-and-Spoke VPN on a Single PE-Router](<https://devfeed.tech/articles/hub-and-spoke-vpn-on-a-single-pe-router-11068.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2024/09/hub-spoke-single-pe/>)

Published: 2024-09-17T05:59:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Virtual Private Network](<https://devfeed.tech/topics/vpn.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [BGP](<https://devfeed.tech/topics/bgp.md>), [networking](<https://devfeed.tech/topics/networking.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [containers](<https://devfeed.tech/tags/containers.md>), [design](<https://devfeed.tech/tags/design.md>), [github](<https://devfeed.tech/tags/github.md>), [implement](<https://devfeed.tech/tags/implement.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [route](<https://devfeed.tech/tags/route.md>), [router](<https://devfeed.tech/tags/router.md>), [routing](<https://devfeed.tech/tags/routing.md>), [test](<https://devfeed.tech/tags/test.md>), [vpn](<https://devfeed.tech/tags/vpn.md>)

## AI overview

This tutorial implements and tests a hub-and-spoke VPN design using a single PE router. It configures inter-VRF route leaking, BGP-based PE-CE routing, and AS override, then verifies route exchange and packet traversal with BGP output and traceroute.

## Source excerpt

Yesterday's blog post discussed the traffic flow and the routing information flow in a hub-and-spoke VPN design (a design in which all traffic between spokes flows through the hub site). It's time to implement and test it, starting with the simplest possible scenario: a single PE router using inter-VRF route leaking to connect the VRFs. Read more ...