CX600配置手册Word格式文档下载.docx

1、 authentication-mode local radius # authorization-scheme default accounting-scheme default0 accounting-scheme default1 domain default0 domain default1 domain default_admin1.3 NTP配置NTP配置:配置ntp server ；ntp server指向所连的B设备；要求在设备上调整为北京时区东8区：ntp-service access peer 2004ntp-service unicast-server 120.40.64

2、.126 source-interface LoopBack0 preferencentp-service unicast-server 120.40.64.127 source-interface LoopBack0clock timezone TIME add 8 /配置系统时区clock datetime 09:10:00 2012-05-10 1.4 SNMP配置SNMP配置:配置基本snmp命令；配置snmp RO和RW方式（实际配置由网管下发）；Community全省统一且不区分设备:snmp-agentsnmp-agent sys-info version allsnmp-age

3、nt mib-view included iso-view isosnmp-agent community read cipher Huawei123! mib-view iso-viewsnmp-agent community write cipher Huawei123 mib-view iso-viewsnmp-agent trap enable snmp-agent trap source LoopBack32 snmp-agent target-host trap address udp-domain 4.60.9.4 params securityname Huawei123 v2

4、c private-netmanager ext-vbset net-manager vpn-instance CTVPN193-GX1.5 设备管理配置设备管理配置:开启telnet服务：user-interface maximum-vty 15user-interface vty 0 14 authentication-mode aaa user privilege level 3 idle-timeout 5 02. 接口配置2.1 ip地址配置ip地址配置:基本ipv4地址配置命令;接口命名描述:interface GigabitEthernet1/0/5.3 vlan-type do

5、t1q 3 description dT:NN-WXP-A-1.MCN.ATN950（）GE2/0/0 undo shutdown ip address 3.61.3.61 255.255.255.252 2.2 mtu配置mtu配置:说明厂家默认接口mtu大小；以及mtu配置命令:interface GigabitEthernet1/0/5MTU 20003. ISIS路由协议3.1 isis进程isis进程:B设备配置一个isis进程、进程号115；isis运行在level-2环境中；NetID参见越河电信ip-ran部署策略规范指导isis部分;lsp generation interv

6、al/LSP wait:max:1s、initial 1ms、second 20ms;SPF dealy / interval / wait timer: Max:1s ; initial:100ms; second: LSP Life Time/Maxage: 65535:LSP refresh interval:32768s:isis 100 is-level level-2 cost-style wide timer lsp-generation 1 1 20 level-2 flash-flood 15 level-2 network-entity 86.4603.0591.1200.

7、4006.4097.00 is-name FZ-GL-HL-ASG-1.M2N.CX600 preference 25 timer spf 1 100 100 log-peer-change timer lsp-max-age 65535 timer lsp-refresh 32768 set-overload on-startup 3003.2 isis metricisis metric:ER-ER设备：100；B-ER设备：1500:Interface Eth-trunk1 / B-ERIsis cost 1500Interface Eth-trunk2 /ER-ERIsis cost

8、1003.3 isis接口isis接口:loopback接口通过passive方式公告；在需要建立isis邻居接口上使能isis协议；:Inteface loopback10Isis Isis silentIsis circuit-level level-24. BGP 路由协议4.1 AS号AS号:ER设备AS号采用南宁 AS 64820:bgp 64820 router-id 120.40.64.974.2 BGP neighbor配置1、RR配置BGP neighbor:ER设备与同城网内的B和EPC CE设备建立VPNV4邻居，不建立IPV4邻居，以64640作为Cluster-id，

9、对同城网内的B和EPC CE设备启用路由反射器配置。ER与同城另一台ER之间互为IBGP邻居且互为RR的Client。关闭Dampen加快收敛；Timer ： keeplive 30s，hold time 90s；打开BGP多路径E/IGP maximum-path8router-id 120.40.64.97peer pgB enable peer pgB route-policy rp_toSR export peer pgB reflect-client /创建对等体组，且配置反射器客户端属性，此对等体组主要用户 CR 与 SR 的建 IBGP 用。peer pgB next-hop-l

10、ocal peer 120.40.64.122 enable peer 120.40.64.122 group pgB# ipv4-family unicast undo synchronizationreflector cluster-id 64820 undo peer 120.40.64.122 enable ipv4-family vpnv4peer 120.40.64.122 next-hop-local peer 120.40.64.122 advertise-community # ipv4-family vpn-instance CTVPN193-GX import-route

11、 direct import-route ospf 32ipv4-family vpn-instance CDMA-RAN import-route static2、EBGP配置在IPV4 vrf下使用loopback100与CN2建立EBGP连接，loopback100地址间互通配置采用BFD+静态路由；启用BFD关联EBGP实现快速故障发现；EPC CE/ER按白名单方式向CN2 VPN发本地VPN汇总路由A，按需发送明细路由；实现流量流向调整EPC CE/ER按黑名单方式拒收缺省路由，按需增加黑名单路由；EBGP不做MD5认证; EBGP设置 ebgp-multihop 2bfd toC

12、N2 bind peer-ip 10.11.21.2 vpn-instance IPRAN source-ip 10.11.21.1 discriminator local 300 discriminator remote 300 commitip ip-prefix nodefault index 10 deny 0.0.0.0 0 ip ip-prefix nodefault index 20 permit 0.0.0.0 0 less-equal 32 route-policy nodefault permit node 10 if-match ip-prefix nodefaultip

13、 ip-prefix aggregate index 10 permit 192.168.1.0 23 greater-equal 23 less-equal 32route-policy aggregate permit node 10 if-match ip-prefix aggregateip route-static vpn-instance IPRAN 21.21.21.21 255.255.255.255 10.11.21.2 track bfd-session toCN2 peer X.X.X.X connect-interface loopback100 peer X.X.X.

14、X as-number X peer X.X.X.X ebgp-max-hop 2peer X.X.X.X route-policy nodefault import aggregate 192.168.0.0 255.255.0.0 detail-suppressed suppress-policy aggregate peer X.X.X.X connect-interface loopback100peer X.X.X.X ebgp-max-hop 2第二部分：设备业务配置5. MPLS VPN配置5.1 mpls基本配置mpls基本配置:启用mpls协议;mpls标签协议采用ldp;m

15、pls标签分配只针对设备loopback地址;RAN VPN RD 4134:3050 和4134：3150,export/import 均为4134:305000;CTVPN193-GX 做为A/B设备的网管通道越河省RD为4134:1621B设备做为分支节点RT设置如下：import 4134:162100 export 4134:162101CTVPN194做为基站动环监控互联； RD为4134:3070307000 export 4134:307001:在相应的vpn接口下配置vpn实例;bfd for LDP检测时间间隔为3*50ms:ip vpn-instance CTVPN193

16、-GX ipv4-family route-distinguisher 4134: 1621 vpn-target 4134: 162100 export-extcommunity 162101 import-extcommunityip vpn-instance CDMA-RAN /双RD 另一侧的B设备rd为4134：3150 3050305000 export-extcommunity305000 import-extcommunity apply-label per-instancempls lsr-id 120.40.64.97mpls mpls te label advertise

17、 non-null mpls bfd enable mpls bfd-trigger fec-list RSG mpls bfd min-tx-interval 50 min-rx-interval 50mpls ldp5.2 mpls接口启用mpls接口启用:在设备互联接口上启用mpls协议:Interface G1/0/1MplsMpls ldp6. BFD配置6.1 vpn实例接口Bfd for isis:isis邻居bfd检测时间间隔为3*50ms:Isis 115bfd all-interfaces enablebfd all-interfaces min-tx-interval 30 min-rx-interval 30 frr-binding