会员接入指引Word文档格式.docx

1、此类席位可通过拨号接入期货大厦、张江及北京数据中心实现冗余互备。间连席位接入为使用大商所、郑商所或中金所直连线路通过交易所间的互联高速专线实现访问。报盘机多网卡方式应使用如下模式接入：冗余链路：申请两条不同运营商的专线分别接入上期所期货大厦和张江数据中心，第三条专线接入到大商所、郑商所、中金所。多个报盘机（多个网卡）：每个报盘机采用多网卡接入（网卡1配置大厦接入地址；网卡2配置张江接入地址；网卡3配置DCE、CZCE或者CFFEX接入地址）。配置一套相同的报盘机作为备份。NGES交易系统的FENS组件会根据会员报盘机地址返回给报盘机交易前置机的地址列表。多台路由器和交换机：每台路由器连接不同通

2、讯链路；交换机分别接入路由器和报盘机。假设会员远程交易席位以路由器ROUTER-A接入到大厦数据中心；以路由器ROUTER-B直连张江数据中心；以路由器ROUTER-C直连大商所。1.1.1.地址分配会员路由器会员广域网接口地址分配会员局域网地址分配ROUTE-A10.32.1.0/3010.44.1.0/24ROUTE-B10.64.1.0/3010.66.1.0/24ROUTE-C10.2.1.0/3010.2.2.0/241.1.2.网络拓扑图 图表 1 直连+间连席位（报盘机多网卡方式）网络拓扑图1.1.3.路由器配置路由器ROUTE-A的配置如下：Hostname ROUTER-A!

3、广域网配置Interface serial1/0 Description To_SHFE_QHDS_运营商-线路编号Ip address 10.32.1.2 255.255.255.252局域网配置Interface F0/0 Description To_SwitchA_xxxIp address 10.44.1.254 255.255.255.0路由配置Ip route 192.168.11.0 255.255.255.0 Serial1/0 10.32.1.1 name SHFE-DS-FRONTIp route 192.168.9.0 255.255.255.0 Serial1/0 1

4、0.32.1.1 name SHFE-DS-MEMBERIp route 192.168.12.0 255.255.255.0 Serial1/0 10.32.1.1 name SHFE-ZJ-FRONTIp route 192.168.13.0 255.255.255.0 Serial1/0 10.32.1.1 name SHFE-ZJ-MEMBERIP route 192.168.16.0 255.255.255.0 serial1/0 10.32.1.1 name SHFE-BJ-FRONTIp route 192.168.17.0 255.255.255.0 serial1/0 10.

5、32.1.1 name SHFE-BJ-MEMBERIp route 172.30.0.0 255.255.0.0 Serial1/0 10.32.1.1 name CFFEXIp route 129.10.0.0 255.255.0.0 Serial1/0 10.32.1.1 name CZCEIp route 10.10.2.0 255.255.255.0 Serial1/0 10.32.1.1 name DCE/注：静态路由配置时建议同时写上下一跳IP地址和接口名称，防止路由异常。路由器ROUTE-B的配置如下：Hostname ROUTER-B Description To_SHFE_

6、Zhangjiang_运营商-线路编号Ip address 10.64.1.2 255.255.255.252 Description To_SwitchB_xxxIp address 10.66.1.254 255.255.255.0Ip route 192.168.11.0 255.255.255.0 Serial1/0 10.64.1.1 name SHFE-DS-FRONTIp route 192.168.9.0 255.255.255.0 Serial1/0 10.64.1.1 name SHFE-DS-MEMBERIp route 192.168.12.0 255.255.255.

7、0 Serial1/0 10.64.1.1 name SHFE-ZJ-FRONTIp route 192.168.13.0 255.255.255.0 Serial1/0 10.64.1.1 name SHFE-ZJ-MEMBERIP route 192.168.16.0 255.255.255.0 serial1/0 10.64.1.1 name SHFE-BJ-FRONTIp route 192.168.17.0 255.255.255.0 serial1/0 10.64.1.1 name SHFE-BJ-MEMBERIp route 172.30.0.0 255.255.0.0 Seri

8、al1/0 10.64.1.1 name CFFEXIp route 129.10.0.0 255.255.0.0 Serial1/0 10.64.1.1 name CZCEIp route 10.10.2.0 255.255.255.0 Serial1/0 10.64.1.1 name DCE路由器ROUTE-C的配置如下：Hostname ROUTER-C Description To_DCE_运营商-线路编号Ip address 10.2.1.2 255.255.255.252 Description To_SwitchC_xxxIp address 10.2.2.254 255.255

9、.255.0！Ip route 192.168.11.0 255.255.255.0 Serial1/0 10.2.1.1 name SHFE-DS-FRONTIp route 192.168.9.0 255.255.255.0 Serial1/0 10.2.1.1 name SHFE-DS-MEMBERIp route 192.168.12.0 255.255.255.0 Serial1/0 10.2.1.1 name SHFE-ZJ-FRONTIp route 192.168.13.0 255.255.255.0 Serial1/0 10.2.1.1 name SHFE-ZJ-MEMBER

10、IP route 192.168.16.0 255.255.255.0 serial1/0 10.2.1.1 name SHFE-BJ-FRONTIp route 192.168.17.0 255.255.255.0 serial1/0 10.2.1.1 name SHFE-BJ-MEMBERIp route 172.30.0.0 255.255.0.0 Serial1/0 10.2.1.1 name CFFEXIp route 129.10.0.0 255.255.0.0 Serial1/0 10.2.1.1 name CZCEIp route 10.10.2.0 255.255.255.0

11、 Serial1/0 10.2.1.1 name DCE1.2.直连+间连席位接入方式二（NAT+HSRP）报盘机如果采用多网卡方式，报盘机本身路由配置会较为复杂，且无法实现网络层面的自动切换，因此可考虑采用NAT+HSRP方式。通过HSRP组实现网络链路故障的自动冗余切换。NAT+HSRP方式应使用如下模式接入：多个报盘机（二个网卡）：每个报盘机采用双网卡接入（双网卡绑定实现冗余）。直连上期所的两台路由器使用NAT+HSRP技术实现网关冗余切换。直连其他交易所的路由器使用NAT实现互联。NGES交易系统的FENS组件会根据会员报盘机地址返回给报盘机交易前置机的地址列表。1.2.1.地址分配1

12、.2.2.网络拓扑图图表 8 直连+间连席位（NAT+HSRP方式）网络拓扑图1.2.3.路由器配置Ip address 1.1.1.1 255.255.255.0HSRP配置Standby 1 ip 1.1.1.11Standby 1 priority 120Standby 1 track s1/0Standby 1 preemptStandby 2 ip 1.1.1.12Standby 2 priority 80Standby 2 track s1/0Standby 2 preemptNAT配置Ip nat outsideInt f0/0Ip nat insideIp nat inside

13、 source static 1.1.1.101 10.44.1.101Ip nat inside source static 1.1.1.201 10.44.1.201Ip address 1.1.1.2 255.255.255.0Standby 1 priority 80Standby 2 priority 120Ip nat inside source static 1.1.1.101 10.66.1.101Ip nat inside source static 1.1.1.201 10.66.1.201Ip address 1.1.1.254 255.255.255.0Ip nat i

14、nside source static 1.1.1.101 10.2.2.1Ip nat inside source static 1.1.1.201 10.2.2.21.3.交易所推荐接入方式建议会员可根据自身情况选用4.1、4.2节两种接入方式。两种接入方式优缺点比较如下，供会员参考：第一种接入方式会员路由器、交换机配置较为简单，无需NAT，但是报盘机采用多块网卡，且路由配置复杂。网络故障时，报盘机依靠应用侦测实现切换，业务切换速度慢。第二种接入方式会员路由器、交换机配置较为复杂，需要配置NAT和HSRP，但是报盘机只需要使用双网卡配置一个IP地址即可，路由配置简单。网络故障时，依靠网络设

15、备实现冗余切换，网络故障恢复能力强。Member Access GuidelineThis chapter conducts guidance elaboration about member access and backup methods as well as routing configuration combining member remote trading status and the Exchange member access specification.SHFE requires that each seat of a member shall be of directl

16、y-connected dual-line access, so it no longer supports indirectly-connected seat access model. This chapter only provides the configuration reference of two recommended access methods of directly-connected + indirectly-connected seat access （offering machine multi-NIC or router NAT + HSRP method）.Th

17、e configuration examples in this chapter are only for the purposes of illustration and description, and members should conduct personalized configuration based on their own situations of equipment, software and links.1.1 Directly-connected + indirectly-connected seat access method 1 （offering machin

18、e multi-NIC）Directly-connected + indirectly-connected seats are of the member remote trading seats simultaneously directly connected to the SHFE Futures Building, Zhangjiang Data Center and other exchanges. Under normal circumstances, they access the SHFE Futures Building and Zhangjiang Data Center

19、through directly-connected line, and access the SHFE Beijing Data Center using three-exchange united network or CFFEX united network; during the fault occurring to the directly-connected lines, they access SHFE Futures Building Data Center and Zhangjiang Data Center using three-exchange united network or CFFEX united network.Currently, there are three access metho