M6000设备业务开通配置实例
郑州处 原延飞
拓扑图
SR-1VLAN .199,256-999/3001;VLAN 199,256-999/3002;VLAN 199,256-999/3003;VLAN 199,256-999/3004;VLAN 4005;VLAN 4006;或者VLAN 4006/3004gei-0/0/0/7gei-0/0/0/1CRSPPPOE业务:VLAN 199,256-999/3003;(QinQ直接透传至BRAS)PPPOE业务:VLAN 199,256-999/3004;(QinQ直接透传至BRAS)L3VPN业务:VLAN 4006;或者VLAN 4006/3004;(以SR-1为网关,透传至SR-1)L3VPN业务:VLAN3200、3211;或者VLAN 3200、3211/3004(以SR-M6000为网关,终结VLAN上L3VPN)BRASsmartgroup1.1SR-M6000gei-0/0/0/6gei-0/0/0/5PPPOE业务:VLAN 199,256-999;(打上外层VLAN3002透传至BRAS)gei-0/0/0/4L3VPN业务:VLAN 4005;(以SR-1为网关,透传至SR-1)8912-SW1L3VPN业务:VLAN3000、3111;(以SR-M6000为网关,终结VLAN上L3VPN)PPPOE业务:VLAN 199,256-999;(打上外层VLAN3001透传至BRAS)AG-1PPPOE业务:VLAN 199,256-999;(打上外层VLAN3004透传至M6000)DSLAM-1DSLAM-2AG-2PPPOE业务:VLAN 199,256-999;(打上外层VLAN3003透传至M6000)L3VPN业务:VLAN 4006;(透传至M6000/或者打上外层VLAN3004)L3VPN业务:VLAN3200、3211;(透传至M6000/或者打上外层VLAN3004)
一、 M6000直挂光纤用户
1.IP:218.28.90.1/29 端口gei-0/0/1/1 (不封装VLAN)
2.IP:218.28.90.1/29 端口gei-0/0/1/2用218.28.90.2(不封装VLAN) 端口gei-0/0/1/3用218.28.90.3(不封装VLAN)(如果数据上不能这样做 标注下就行
如不采用supervlan方式接入无法将一个地址段分配给多个接口使用,反之则可以
A、一个地址段分配给单一接口配置方法: Interface gei-0/0/1/1
Ip add 218.28.90.1 255.255.255.248
B、一个地址段分配给多个物理接口配置方法(supervlan): interface supervlan4000 建立supervlan接口(vlan id号根据规划进行配置,本例采用4000) ip address 218.28.90.1 255.255.255.248 在supervlan在配置地址段
supervlan 进入supervlan配置模式绑定supervlan下相关接口 Interface gei-0/0/1/2 绑定相关业务端口0/0/1/2
supervlan 4000
vlanpool 218.28.90.2 218.28.90.2 绑定此端口所分配的IP地址 Interface gei-0/0/1/3 绑定相关业务端口0/0/1/3 supervlan 4000
vlanpool 218.28.90.3 218.28.90.3 绑定此端口所分配的IP地址
3.IP:218.28.90.1/29 vlan:100 端口gei-0/0/1/4 A、建立相关业务子接口,配置IP
Interface gei-0/0/1/4.100 (子接口号可根据规划配置,本例采用和vlan id号一致) Ip address 218.28.90.1 255.255.255.248
B、在vlan配置模式下配置相关vlan信息并关联相关子接口 vlan-configuration
interface gei-0/0/1/4.100 encapsulation-dot1q 100
4.IP:218.28.90.1/29 汇聚VLAN:100 子VLAN:101-102 端口gei-0/0/1/5 vlan用101 IP用 218.28.90.2 端口gei-0/0/1/6 vlan用102 IP用 218.28.90.3
此例需要使用supervlan加子接口方式实现
A、 建立相关业务子接口(建议添加子接口业务描述)
Interface gei-/0/0/1/5.101 Interface gei-/0/0/1/6.102
B、Vlan配置模式下封装相关子接口vlan vlan-configuration
interface gei-0/0/1/5.101 encapsulation-dot1q 101 vlan-configuration
interface gei-0/0/1/6.102 encapsulation-dot1q 102
C、创建supervlan接口并配置IP地址
interface supervlan100 建立supervlan接口(vlan id采用100)
ip address 218.28.90.1 255.255.255.248 在supervlan在配置地址段
D、在supervlan配置模式下绑定相关子接口和supervlan supervlan 进入supervlan配置模式
Interface gei-0/0/1/5.101 进入子接口0/0/1/5.101 Supervlan100 绑定supervlan100
Interface gei-0/0/1/6.102 进入子接口0/0/1/5.101 Supervlan100 绑定supervlan100
二、 M6000直挂交换机
下挂交换机 透传VLAN 100 200 300 端口gei-0/0/0/3
A、启用子接口封装相关vlan(子接口ID号根据规划进行配置) Interface gei-0/0/0/3.100 启用子接口ID号可灵活分配 description TO-XingXing 建议添加业务描述信息 Interface gei-0/0/0/3.200 启用子接口ID号可灵活分配 Interface gei-0/0/0/3.300 启用子接口ID号可灵活分配 B、 在vlan-config模式下封装相关子接口vlan信息
Vlan-config
interface gei-0/0/0/3.100 encapsulation-dot1q 100
interface gei-0/0/0/3.200 encapsulation-dot1q 200
interface gei-0/0/0/3.300 encapsulation-dot1q 300
注:也可以在1个子接口中封装多个连续的,如下 vlan interface gei-0/0/0/3.100
encapsulation-dot1q range 100-300 encapsulation-dot1q range 500-600
三、 M6000与BRAS进行链路聚合绑定 端口gei-0/0/0/6
端口gei-0/0/0/7 绑定聚合 并透传SVLAN 3001 3002 A、smartgroup配置(BAS--SR)
interface smartgroup 1 建立链路聚合组,建议在smartgroup下添加描述信息 lacp 进入链路聚合配置模式,绑定聚合端口 interface gei-0/0/0/6
smartgroup 1 mode on
interface gei-0/0/0/7
smartgroup 1 mode on
b、封装SVLAN 3001 3002
interface smartgroup1.1 建立smartgroup子接口,ID号根据规划配置 !
vlan-configuration 在vlan配置模式下封装相关svlan信息 interface smartgroup1.1
encapsulation-dot1q range 3001-3002
c、采用vpls 2层vpn方式透传svlan
mpls l2vpn enable 全局模式下企业2层vpn
vpls zte1 qualified 建立vpls实例,实例名称根据规划配置 sac smartgroup1.1 绑定相关子接口至vpls service-define ethernet 指定接口类型
四、 M6000直挂PPPOE DSLAM 1.下挂纯拨号DSLAM 端口:gei-0/0/0/4 SVLAN :3001 内层管理VLAN:199 业务VLAN:256-999 2.下挂带有VPN用户的DSLAM 端口:gei-0/0/0/5 SVLAN :2333; 内层管理VLAN:199; 业务VLAN:256-1500; VPN用户VLAN:300 3111 4005(VPN用户网关在M6000上)--此例见六
MS-JZ-MZS-ZTEM6000-001(config)#$g-config-interface gei-0/0/0/13.2342 !
interface gei-0/0/0/13.2342 $
! !
vlan-configuration
interface gei-0/0/0/13.2342
encapsulation-dot1q range 199
encapsulation-dot1q range 256-1500 $ $
! !
vpls dslam multi-mac-spaces access-point gei-0/0/0/13.2342 access-params ethernet ingress-adjust push 2342 $
五、 M6000组3层MPLS VPN 网络
VRF 名称 : test RD: 377:1008 RT:377:1008 中心端互联端口:gei-0/0/1/7 互联IP:10.1.1.1/30
静态路由 172.16.1.0 255.255.255.0 NEXT-HOST 10.1.1.2 用户网点端口:gei-0/0/1/8 网点IP:10.1.2.1/24
ip vrf test 建立VPN实例 description TO-MPLS-VPN-TEST
rd 377:1008 配置RD值,要求和全网规划一致 route-target import 377:1008 route-target export 377:1008
address-family ipv4 指定地址格式 $
Interface gei-0/0/1/7 关联业务上联端口 ip vrf forwarding test
ip add 10.1.1.1 255.255.255.252
Interface gei-0/0/1/8 关联业务下联端口
ip vrf forwarding test
ip add 10.1.2.1 255.255.255.252
ip route vrf test 172.16.1.0 255.255.255.0 10.1.1.2 配置静态VPN路由
router bgp 65147 $
address-family ipv4 vrf test 在BGP内引入直连、静态路由
redistribute connected redistribute static 六、
M6000组2层VPLS VPN 网络
基于以上7750设备VPLS 方式跨PE透传宽带PPP业务vlan及VPN vlan在M6000上数据该如何配?(gei-0/0/0/5下挂DSLAM vpn vlan-3000-3001,宽带svlan3002(199,256-999)
VPLS PE邻居配置(要求全网规划vcid要一致) vpls zhongshihua default-vcid 1 mtu 1518 sdu sdu2
neighbour 61.168.69.62 1 encapsulation tagged $ sdu sdu1
neighbour 61.168.69.61 1 encapsulation tagged
$
…… //其他PE邻居配置同上 用户侧接口及VLAN配置 interface gei-0/0/0/5.3002 description to-dslam-pppoe interface gei-0/0/0/5.3000 description to-dslam-vpn !
vlan-configuration
interface gei-0/0/0/5.3002
encapsulation-dot1q range 256-999 encapsulation-dot1q range 199 interface gei-0/0/0/5.3000
encapsulation-dot1q range 3000-3001
vpls zhongshihua qualified //2层vpn用户接入中石化vpls sac gei-0/0/0/5.3000 service-define ethernet $
vpls zte1 qualified //vpls方式透传2层vlan
sac gei-0/0/0/5.3002 service-define ethernet ingress-adjust push 3002 //用户接入侧添加外层标签3002
sac smartgroup1.3002 //BAS互联接口 service-define ethernet
当前最常用的2种业务又该如何配置?
A、 如DSLAM下vlan3000、3111等3层VPN用户网关在M6000上(单层标签终结在M6000),且DSLAM下PPPOE宽带业务vlan199、256-999等打上外层标签3002透传至BAS方向,M6000与BAS互联端口为smartgroup1.1,下挂DSLAM设备端口为gei-0/0/0/48该如何配置?
3层VPN用户vlan终结在m6000
interface gei-0/0/0/48.3000 //3层VPN配置请参考例五 ip address X.X.X.X *.*.*.*
encapsulation-dot1q range 3000-3001
PPP宽带业务配置
nterface gei-0/0/0/48.3002 //用户侧ppp宽带接口 interface smartgroup1.3000 //与BAS互联口
ip vrf forwarding test
interface gei-0/0/0/48.3000
vlan-configuration
interface gei-0/0/0/48.3002
encapsulation-dot1q range 256-999
vpls方式实现二层vlan透传
encapsulation-dot1q range 199-199
vpls test1 qualified
sac smartgroup1.3000
service-define ethernet
sac gei-0/0/0/48.3002
service-define ethernet
$
ingress-adjust push 3002
B、如DSLAM下VPN用户网关在与M6000互联的另外一台3层设备上(要求M6000将vpn用户
vlan3000-3001透传至另外一台3层设备,互联端口gei-0/0/0/4),且同时需要将DSLAM PPPOE宽带业务VLAN 199,256-999打上外层标签3002透传至BAS(gei-0/0/0/48下联dslam),与BAS互联端口smartgroup1.3002--该如何配置?
PPP宽带业务配置
interface gei-0/0/0/48.3002 //用户侧ppp宽带接口 interface smartgroup1.3002 //与BAS互联口
vlan-configuration
interface gei-0/0/0/48.3002
encapsulation-dot1q range 256-999
vpls方式实现二层vlan透传
encapsulation-dot1q range 199-199
vpls test1 qualified
sac smartgroup1.3002
service-define ethernet
sac gei-0/0/0/48.3002
service-define ethernet
$
Vpn用户透传至另外一3层设备配置 Interface gei-0/0/0/4.3000 Des TO-ASBR-TEST
Interface gei-0/0/0/48.3000 Des TO-DSLAM-VPN
vlan-configuration
encapsulation-dot1q range 3000-3001 encapsulation-dot1q range 3000-3001
vpls方式实现二层vlan透传
ingress-adjust push 3002
interface gei-0/0/0/48.3000
interface gei-0/0/0/4.3000
vpls test1 qualified
sac Interface gei-0/0/0/4.3000
service-define ethernet
sac gei-0/0/0/48.3000
service-define ethernet
七、 设备上联CRS数据
端口:gei-0/0/0/1 互联IP: 222.142.161.18/30 M6000 SR上联CRS 路由数据配置(BGP、OSPF) A、 上联接口数据配置 interface gei-0/0/0/1
description ny-xx-m6000-001 (gei-0/0/0/1):GE:001_to_ny-xdl-crs-001(G0/9/0/8) no shutdown
ip address 222.142.161.18 255.255.255.252 mpls ldp instance 1 interface gei-0/0/0/1 pmconfig
interface gei-0/0/0/1
negotiation negotiation-force
B、BGP路由数据配置 router bgp 65147 no synchronization maximum-paths ibgp 8 redistribute connected redistribute static
neighbor ha-ny peer-group
neighbor ha-ny remote-as 65147 neighbor ha-ny activate
neighbor ha-ny password password
neighbor ha-ny route-map setcommunity out neighbor ha-ny send-community
neighbor ha-ny update-source loopback1 neighbor ha-ny-vpn peer-group
neighbor ha-ny-vpn remote-as 65147 no neighbor ha-ny-vpn activate
neighbor ha-ny-vpn password password neighbor ha-ny-vpn send-community
neighbor ha-ny-vpn update-source loopback10 neighbor 61.168.255.224 peer-group ha-ny
neighbor 61.168.255.224 description ny-xdl-r-001 neighbor 61.168.255.225 peer-group ha-ny
neighbor 61.168.255.225 description ny-gyl-r-001 neighbor 61.168.232.224 peer-group ha-ny-vpn neighbor 61.168.232.224 description ny-xdl-r-001 neighbor 61.168.232.225 peer-group ha-ny-vpn neighbor 61.168.232.225 description ny-gyl-r-001 address-family vpnv4
neighbor ha-ny-vpn activate
C、OSPF路由配置 router ospf 100
router-id 222.142.163.68 maximum-paths 8 interface gei-0/0/0/1 mtu-ignore
network point-to-point $
interface gei-0/0/0/2 mtu-ignore
network point-to-point $
network 222.142.161.16 0.0.0.3 area 0.0.1.121 network 222.142.161.36 0.0.0.3 area 0.0.1.121 network 222.142.163.68 0.0.0.0 area 0.0.1.121 network 222.142.164.68 0.0.0.0 area 0.0.1.121
show runn 运行配置查看
show process cpu查看
sho logging alarm 告警查看
sho logfile 操作记录查看
show running-config-interface gei-0/0/0/1 接口配置查看
show running-config bgp bgp路由查看
show running-config ospf ospf路由查看
sho interface-vlan dot1q 接口vlan查看
sho ip interface brief 设备接口状态查看
sho interface description 接口描述查看
sho ip forwarding route 全局路由表查看
sho ip forwarding route vrf zhongshihua 中石化vpn路由查看
sho l2vpn brief 2层vpn查看
show running-config supervlan supervlan配置查看