SR775012常见业务配置手册.docx
《SR775012常见业务配置手册.docx》由会员分享，可在线阅读，更多相关《SR775012常见业务配置手册.docx（14页珍藏版）》请在冰豆网上搜索。
SR775012常见业务配置手册
阿尔卡特-SR7750-12
软件版本rel6.1/b1/R9
1.静态用户-点对点模式
1.1配置端口
首先配置物理端口port属性:
Router>config#info
port1/1/3
description"ToRouter-NameGE"//最长80个字母
ethernet
modeaccess|network//上连路由端口选择network，放入service中的端口选择access
encap-typedot1q
noautonegotiate
speed1000
duplexfull
exit
noshutdown
exit
再将port与三层逻辑端口绑定：
Router>config#info
interface"inf-name"
address2.2.2.1/30
port1/1/3
exit
一个IPInterface名字最长32个字母（包含数字），区分大小写，必须以字母开头；
1.2配置专线业务
7750SR通过IES服务实现专线业务，每个IES配置必须与一个Customer配置绑定。
Router>config>service#info
customer2create//”2”表示customerid，id限制在1..2147483647内
description"customername"//描述用户名称,最大80个字符
exit
//配置用户IP地址：
Router>config>service#info
ies2customer2create
noshutdown
interface"to-customer-A"create//接口名称限制在32个字符内
address2.2.2.2/30
sap1/1/3create//端口1/1/1必须工作在access模式下
exit
exit
exit
1.3配置用户路由到BGP中
policy-options
prefix-list"static-to-bgp"
prefix2.2.2.1/30exact
exit
policy-statement"static-to-bgp"
entry10
from
prefix-list"static-to-bgp"
exit
to
protocolbgp
exit
actionaccept
exit
exit
default-actionreject
exit
commit
exit
Router>config>router>bgp#
preference100
group"PgRR_L2"
export"static-to-bgp"//在BGP中引入上面定义的policy-options
2.静态用户-地址池模式
2.1配置端口
首先配置物理端口port属性:
Router>config#info
port1/1/3
description"ToRouter-NameGE"//最长80个字母
ethernet
modeaccess|network//上连路由端口选择network，放入service中的端口选择access
encap-typedot1q
noautonegotiate
speed1000
duplexfull
exit
noshutdown
exit
2.2配置专线业务
Router>config>service#
customer6create
exit
ies101106customer6create
description"OLT_MGMT"
subscriber-interface"IP_POOL"create
description"OLT_MGMT"
address172.19.6.161/27
group-interface"ChangAN_OLT_mgmt"create
description"ChangAN_OLT_mgmt"
sap1/1/5:
6create
anti-spoofip
static-hostip172.19.6.162create
noshutdown
exit
exit
exit
group-interface"ChaQiao_OLT_mgmt"create
description"ChaQiao_OLT_mgmt"
sap1/1/6:
6create
anti-spoofip
static-hostip172.19.6.163create
noshutdown
exit
exit
exit
exit
noshutdown
exit
2.3配置用户路由到BGP中
route
policy-options
begin
prefix-list"ies2bgp"
prefix172.19.6.160/27exact
exit
policy-statement"ies2bgp"
entry10
from
prefix-list"ies2bgp"
exit
to
protocolbgp
exit
actionaccept
exit
exit
default-actionreject
exit
commit
exit
3.SNMP配置
Router>config>system#
snmp
packet-size9216//采用默认的包大小
exit
exit
Router>config>log#
snmp-trap-group100
trap-target"100"address211.103.28.49snmpv2cnotify-community"n0j0J2S5"
exit
exit
Router>config>system>security#
snmp
community"n0j0J2S5"rversionv2c
exitall
adminsave
4.ACL配置
4.1定义ACL组
config>filter#
ip-filter100create//默认为DENY操作
description"shipinWangZhan"
entry10create
matchprotocoltcp
src-ip120.195.104.0/21
exit
actionforward
exit
entry20create
matchprotocoltcp
src-ip211.103.13.0/24
exit
actionforward
exit
entry30create
matchprotocoltcp
src-ip211.103.14.0/23
exit
actionforward
exit
entry40create
matchprotocoltcp
src-ip211.103.16.0/21
exit
actionforward
exit
entry50create
matchprotocoltcp
src-ip211.103.24.0/22
exit
actionforward
exit
exit
exit
4.2在虚拟端口应用
config>service#
ies1customer2create
interface"TO-LIYUAN3LOU-SERVER"create
address221.178.187.193/26
sap1/2/1create
egress//出方向应用ACL
filterip100
exit
exit
exit
noshutdown
exit
5.VPLS配置（WLAN、小区用户）
5.1定义物理端口
port1/1/1
description"TO-JSWUX-MB-CMNET-RT01-XQ_NE5000E2/0/21G"
ethernet
mtu1600
noautonegotiate
exit
noshutdown
port2/1/1
description"TO-JSWUX-MB-CMNET-RT02-XM_NE5000E2/0/21G"
ethernet
mtu1600
noautonegotiate
exit
noshutdown
exit
5.2在物理端口上启用MPLS和LDP
router>mpls$
interface"system"
exit
interface"TO-JSCHZ-MB-CMNET-XM_NE5000E"
exit
interface"TO-JSCHZ-MB-CMNET-XQ_NE5000E"
exit
noshutdown
exit
router>ldp$
interface-parameters
interface"TO-JSCHZ-MB-CMNET-XM_NE5000E"
exit
interface"TO-JSCHZ-MB-CMNET-XQ_NE5000E"
exit
exit
targeted-session
exit
exit
exit
5.3SDP配置
config>service#
customer20create
exit
sdp5010mplscreate
description"To_XinQu_AK7750"
far-end221.131.124.12
ldp
keep-alive
shutdown
exit
noshutdown
exit
5.4VPLS配置
vpls20090610customer20create
description"To_JiTuan"
stp
shutdown
exit
sap1/2/1:
863create
exit
mesh-sdp5010:
20090610vc-typevlancreate
exit
noshutdown
exit
5.5同一设备上两个端口间启用VPLS（小区宽带认证用）
vpls20090610customer20create
description"To_JiTuan"
stp
noshutdown
exit
sap1/2/1:
863create
exit
sap1/2/2:
863create
exit
noshutdown
exit
//VLAN863穿透SR7750的1/2/1口和1/2/2口，终结在旁挂的5200F上做认证。
6VPRN配置
6.1接口配置
configureport1/1/10//用户接入端口
description"forvprntest"
ethernet
modeaccess
encap-typedot1q//端口封装
noautonegotiate//关闭自动协商
exit
noshutdown
6.2常规配置
configrouter
mpls//端口应用协议
interface"system"
exit
interface"TO-JSWUX-MB-CMNET-XM_NE5000E"
exit
interface"TO-JSWUX-MB-CMNET-XQ_NE5000E"
exit
noshutdown
exit
ldp//端口应用协议
interface-parameters
interface"TO-JSWUX-MB-CMNET-XM_NE5000E"
exit
interface"TO-JSWUX-MB-CMNET-XQ_NE5000E"
exit
exit
targeted-session
exit
bgp//VPN路由协议
group"vpn-rr"
familyvpn-ipv4
hold-time90
keepalive30
next-hop-self
typeinternal
peer-as64800
local-address221.131.124.15
neighbor211.138.205.1
exit
neighbor211.138.205.2
exit
exit
6.3功能配置
configservice
customer30create
description"ForVPRN"
vprn3000011customer30create
ecmp8//负载均衡配置
autonomous-system64800
route-distinguisher64800:
51000011//RD配置
auto-bindldp//绑定LDP协议
vrf-targettarget:
64800:
51000011//RT配置
interface"test"create//创建接口
address172.172.3.1/30
sap1/1/10:
100create//应用端口
exit
exit
noshutdown//激活VPRN
升级会员 