M6000设备业务开通配置实例 下载本文

M6000设备业务开通配置实例

郑州处 原延飞

拓扑图

SR-1VLAN .199,256-999/3001;VLAN 199,256-999/3002;VLAN 199,256-999/3003;VLAN 199,256-999/3004;VLAN 4005;VLAN 4006;或者VLAN 4006/3004gei-0/0/0/7gei-0/0/0/1CRSPPPOE业务:VLAN 199,256-999/3003;(QinQ直接透传至BRAS)PPPOE业务:VLAN 199,256-999/3004;(QinQ直接透传至BRAS)L3VPN业务:VLAN 4006;或者VLAN 4006/3004;(以SR-1为网关,透传至SR-1)L3VPN业务:VLAN3200、3211;或者VLAN 3200、3211/3004(以SR-M6000为网关,终结VLAN上L3VPN)BRASsmartgroup1.1SR-M6000gei-0/0/0/6gei-0/0/0/5PPPOE业务:VLAN 199,256-999;(打上外层VLAN3002透传至BRAS)gei-0/0/0/4L3VPN业务:VLAN 4005;(以SR-1为网关,透传至SR-1)8912-SW1L3VPN业务:VLAN3000、3111;(以SR-M6000为网关,终结VLAN上L3VPN)PPPOE业务:VLAN 199,256-999;(打上外层VLAN3001透传至BRAS)AG-1PPPOE业务:VLAN 199,256-999;(打上外层VLAN3004透传至M6000)DSLAM-1DSLAM-2AG-2PPPOE业务:VLAN 199,256-999;(打上外层VLAN3003透传至M6000)L3VPN业务:VLAN 4006;(透传至M6000/或者打上外层VLAN3004)L3VPN业务:VLAN3200、3211;(透传至M6000/或者打上外层VLAN3004)

一、 M6000直挂光纤用户

1.IP:218.28.90.1/29 端口gei-0/0/1/1 (不封装VLAN)

2.IP:218.28.90.1/29 端口gei-0/0/1/2用218.28.90.2(不封装VLAN) 端口gei-0/0/1/3用218.28.90.3(不封装VLAN)(如果数据上不能这样做 标注下就行

如不采用supervlan方式接入无法将一个地址段分配给多个接口使用,反之则可以

A、一个地址段分配给单一接口配置方法: Interface gei-0/0/1/1

Ip add 218.28.90.1 255.255.255.248

B、一个地址段分配给多个物理接口配置方法(supervlan): interface supervlan4000 建立supervlan接口(vlan id号根据规划进行配置,本例采用4000) ip address 218.28.90.1 255.255.255.248 在supervlan在配置地址段

supervlan 进入supervlan配置模式绑定supervlan下相关接口 Interface gei-0/0/1/2 绑定相关业务端口0/0/1/2

supervlan 4000

vlanpool 218.28.90.2 218.28.90.2 绑定此端口所分配的IP地址 Interface gei-0/0/1/3 绑定相关业务端口0/0/1/3 supervlan 4000

vlanpool 218.28.90.3 218.28.90.3 绑定此端口所分配的IP地址

3.IP:218.28.90.1/29 vlan:100 端口gei-0/0/1/4 A、建立相关业务子接口,配置IP

Interface gei-0/0/1/4.100 (子接口号可根据规划配置,本例采用和vlan id号一致) Ip address 218.28.90.1 255.255.255.248

B、在vlan配置模式下配置相关vlan信息并关联相关子接口 vlan-configuration

interface gei-0/0/1/4.100 encapsulation-dot1q 100

4.IP:218.28.90.1/29 汇聚VLAN:100 子VLAN:101-102 端口gei-0/0/1/5 vlan用101 IP用 218.28.90.2 端口gei-0/0/1/6 vlan用102 IP用 218.28.90.3

此例需要使用supervlan加子接口方式实现

A、 建立相关业务子接口(建议添加子接口业务描述)

Interface gei-/0/0/1/5.101 Interface gei-/0/0/1/6.102

B、Vlan配置模式下封装相关子接口vlan vlan-configuration

interface gei-0/0/1/5.101 encapsulation-dot1q 101 vlan-configuration

interface gei-0/0/1/6.102 encapsulation-dot1q 102

C、创建supervlan接口并配置IP地址

interface supervlan100 建立supervlan接口(vlan id采用100)

ip address 218.28.90.1 255.255.255.248 在supervlan在配置地址段

D、在supervlan配置模式下绑定相关子接口和supervlan supervlan 进入supervlan配置模式

Interface gei-0/0/1/5.101 进入子接口0/0/1/5.101 Supervlan100 绑定supervlan100

Interface gei-0/0/1/6.102 进入子接口0/0/1/5.101 Supervlan100 绑定supervlan100

二、 M6000直挂交换机

下挂交换机 透传VLAN 100 200 300 端口gei-0/0/0/3

A、启用子接口封装相关vlan(子接口ID号根据规划进行配置) Interface gei-0/0/0/3.100 启用子接口ID号可灵活分配 description TO-XingXing 建议添加业务描述信息 Interface gei-0/0/0/3.200 启用子接口ID号可灵活分配 Interface gei-0/0/0/3.300 启用子接口ID号可灵活分配 B、 在vlan-config模式下封装相关子接口vlan信息

Vlan-config

interface gei-0/0/0/3.100 encapsulation-dot1q 100

interface gei-0/0/0/3.200 encapsulation-dot1q 200

interface gei-0/0/0/3.300 encapsulation-dot1q 300

注:也可以在1个子接口中封装多个连续的,如下 vlan interface gei-0/0/0/3.100

encapsulation-dot1q range 100-300 encapsulation-dot1q range 500-600

三、 M6000与BRAS进行链路聚合绑定 端口gei-0/0/0/6

端口gei-0/0/0/7 绑定聚合 并透传SVLAN 3001 3002 A、smartgroup配置(BAS--SR)

interface smartgroup 1 建立链路聚合组,建议在smartgroup下添加描述信息 lacp 进入链路聚合配置模式,绑定聚合端口 interface gei-0/0/0/6

smartgroup 1 mode on

interface gei-0/0/0/7

smartgroup 1 mode on

b、封装SVLAN 3001 3002

interface smartgroup1.1 建立smartgroup子接口,ID号根据规划配置 !

vlan-configuration 在vlan配置模式下封装相关svlan信息 interface smartgroup1.1

encapsulation-dot1q range 3001-3002

c、采用vpls 2层vpn方式透传svlan

mpls l2vpn enable 全局模式下企业2层vpn

vpls zte1 qualified 建立vpls实例,实例名称根据规划配置 sac smartgroup1.1 绑定相关子接口至vpls service-define ethernet 指定接口类型

四、 M6000直挂PPPOE DSLAM 1.下挂纯拨号DSLAM 端口:gei-0/0/0/4 SVLAN :3001 内层管理VLAN:199 业务VLAN:256-999 2.下挂带有VPN用户的DSLAM 端口:gei-0/0/0/5 SVLAN :2333; 内层管理VLAN:199; 业务VLAN:256-1500; VPN用户VLAN:300 3111 4005(VPN用户网关在M6000上)--此例见六

MS-JZ-MZS-ZTEM6000-001(config)#$g-config-interface gei-0/0/0/13.2342 !

interface gei-0/0/0/13.2342 $

! !

vlan-configuration

interface gei-0/0/0/13.2342

encapsulation-dot1q range 199

encapsulation-dot1q range 256-1500 $ $

! !

vpls dslam multi-mac-spaces access-point gei-0/0/0/13.2342 access-params ethernet ingress-adjust push 2342 $

五、 M6000组3层MPLS VPN 网络

VRF 名称 : test RD: 377:1008 RT:377:1008 中心端互联端口:gei-0/0/1/7 互联IP:10.1.1.1/30

静态路由 172.16.1.0 255.255.255.0 NEXT-HOST 10.1.1.2 用户网点端口:gei-0/0/1/8 网点IP:10.1.2.1/24

ip vrf test 建立VPN实例 description TO-MPLS-VPN-TEST

rd 377:1008 配置RD值,要求和全网规划一致 route-target import 377:1008 route-target export 377:1008

address-family ipv4 指定地址格式 $

Interface gei-0/0/1/7 关联业务上联端口 ip vrf forwarding test

ip add 10.1.1.1 255.255.255.252

Interface gei-0/0/1/8 关联业务下联端口

ip vrf forwarding test

ip add 10.1.2.1 255.255.255.252

ip route vrf test 172.16.1.0 255.255.255.0 10.1.1.2 配置静态VPN路由

router bgp 65147 $

address-family ipv4 vrf test 在BGP内引入直连、静态路由

redistribute connected redistribute static 六、

M6000组2层VPLS VPN 网络

基于以上7750设备VPLS 方式跨PE透传宽带PPP业务vlan及VPN vlan在M6000上数据该如何配?(gei-0/0/0/5下挂DSLAM vpn vlan-3000-3001,宽带svlan3002(199,256-999)

VPLS PE邻居配置(要求全网规划vcid要一致) vpls zhongshihua default-vcid 1 mtu 1518 sdu sdu2

neighbour 61.168.69.62 1 encapsulation tagged $ sdu sdu1

neighbour 61.168.69.61 1 encapsulation tagged

$

…… //其他PE邻居配置同上 用户侧接口及VLAN配置 interface gei-0/0/0/5.3002 description to-dslam-pppoe interface gei-0/0/0/5.3000 description to-dslam-vpn !

vlan-configuration

interface gei-0/0/0/5.3002

encapsulation-dot1q range 256-999 encapsulation-dot1q range 199 interface gei-0/0/0/5.3000

encapsulation-dot1q range 3000-3001

vpls zhongshihua qualified //2层vpn用户接入中石化vpls sac gei-0/0/0/5.3000 service-define ethernet $

vpls zte1 qualified //vpls方式透传2层vlan

sac gei-0/0/0/5.3002 service-define ethernet ingress-adjust push 3002 //用户接入侧添加外层标签3002

sac smartgroup1.3002 //BAS互联接口 service-define ethernet

当前最常用的2种业务又该如何配置?

A、 如DSLAM下vlan3000、3111等3层VPN用户网关在M6000上(单层标签终结在M6000),且DSLAM下PPPOE宽带业务vlan199、256-999等打上外层标签3002透传至BAS方向,M6000与BAS互联端口为smartgroup1.1,下挂DSLAM设备端口为gei-0/0/0/48该如何配置?

3层VPN用户vlan终结在m6000

interface gei-0/0/0/48.3000 //3层VPN配置请参考例五 ip address X.X.X.X *.*.*.*

encapsulation-dot1q range 3000-3001

PPP宽带业务配置

nterface gei-0/0/0/48.3002 //用户侧ppp宽带接口 interface smartgroup1.3000 //与BAS互联口

ip vrf forwarding test

interface gei-0/0/0/48.3000

vlan-configuration

interface gei-0/0/0/48.3002

encapsulation-dot1q range 256-999

vpls方式实现二层vlan透传

encapsulation-dot1q range 199-199

vpls test1 qualified

sac smartgroup1.3000

service-define ethernet

sac gei-0/0/0/48.3002

service-define ethernet

$

ingress-adjust push 3002

B、如DSLAM下VPN用户网关在与M6000互联的另外一台3层设备上(要求M6000将vpn用户

vlan3000-3001透传至另外一台3层设备,互联端口gei-0/0/0/4),且同时需要将DSLAM PPPOE宽带业务VLAN 199,256-999打上外层标签3002透传至BAS(gei-0/0/0/48下联dslam),与BAS互联端口smartgroup1.3002--该如何配置?

PPP宽带业务配置

interface gei-0/0/0/48.3002 //用户侧ppp宽带接口 interface smartgroup1.3002 //与BAS互联口

vlan-configuration

interface gei-0/0/0/48.3002

encapsulation-dot1q range 256-999

vpls方式实现二层vlan透传

encapsulation-dot1q range 199-199

vpls test1 qualified

sac smartgroup1.3002

service-define ethernet

sac gei-0/0/0/48.3002

service-define ethernet

$

Vpn用户透传至另外一3层设备配置 Interface gei-0/0/0/4.3000 Des TO-ASBR-TEST

Interface gei-0/0/0/48.3000 Des TO-DSLAM-VPN

vlan-configuration

encapsulation-dot1q range 3000-3001 encapsulation-dot1q range 3000-3001

vpls方式实现二层vlan透传

ingress-adjust push 3002

interface gei-0/0/0/48.3000

interface gei-0/0/0/4.3000

vpls test1 qualified

sac Interface gei-0/0/0/4.3000

service-define ethernet

sac gei-0/0/0/48.3000

service-define ethernet

七、 设备上联CRS数据

端口:gei-0/0/0/1 互联IP: 222.142.161.18/30 M6000 SR上联CRS 路由数据配置(BGP、OSPF) A、 上联接口数据配置 interface gei-0/0/0/1

description ny-xx-m6000-001 (gei-0/0/0/1):GE:001_to_ny-xdl-crs-001(G0/9/0/8) no shutdown

ip address 222.142.161.18 255.255.255.252 mpls ldp instance 1 interface gei-0/0/0/1 pmconfig

interface gei-0/0/0/1

negotiation negotiation-force

B、BGP路由数据配置 router bgp 65147 no synchronization maximum-paths ibgp 8 redistribute connected redistribute static

neighbor ha-ny peer-group

neighbor ha-ny remote-as 65147 neighbor ha-ny activate

neighbor ha-ny password password

neighbor ha-ny route-map setcommunity out neighbor ha-ny send-community

neighbor ha-ny update-source loopback1 neighbor ha-ny-vpn peer-group

neighbor ha-ny-vpn remote-as 65147 no neighbor ha-ny-vpn activate

neighbor ha-ny-vpn password password neighbor ha-ny-vpn send-community

neighbor ha-ny-vpn update-source loopback10 neighbor 61.168.255.224 peer-group ha-ny

neighbor 61.168.255.224 description ny-xdl-r-001 neighbor 61.168.255.225 peer-group ha-ny

neighbor 61.168.255.225 description ny-gyl-r-001 neighbor 61.168.232.224 peer-group ha-ny-vpn neighbor 61.168.232.224 description ny-xdl-r-001 neighbor 61.168.232.225 peer-group ha-ny-vpn neighbor 61.168.232.225 description ny-gyl-r-001 address-family vpnv4

neighbor ha-ny-vpn activate

C、OSPF路由配置 router ospf 100

router-id 222.142.163.68 maximum-paths 8 interface gei-0/0/0/1 mtu-ignore

network point-to-point $

interface gei-0/0/0/2 mtu-ignore

network point-to-point $

network 222.142.161.16 0.0.0.3 area 0.0.1.121 network 222.142.161.36 0.0.0.3 area 0.0.1.121 network 222.142.163.68 0.0.0.0 area 0.0.1.121 network 222.142.164.68 0.0.0.0 area 0.0.1.121

show runn 运行配置查看

show process cpu查看

sho logging alarm 告警查看

sho logfile 操作记录查看

show running-config-interface gei-0/0/0/1 接口配置查看

show running-config bgp bgp路由查看

show running-config ospf ospf路由查看

sho interface-vlan dot1q 接口vlan查看

sho ip interface brief 设备接口状态查看

sho interface description 接口描述查看

sho ip forwarding route 全局路由表查看

sho ip forwarding route vrf zhongshihua 中石化vpn路由查看

sho l2vpn brief 2层vpn查看

show running-config supervlan supervlan配置查看