四川电信扩容工程雅安实施方案（雅电版）.doc

四川电信IP城域网三期扩容项目四川电信扩容工程雅安实施方案二零零五年六月 四川电信心网项目-雅安实施方案目录1概述- 1 -2网络现状描述- 2 -2.1雅安节点- 2 -2.1.1GSR12008数据统计- 3 -2.1.2GSR12416数据统计- 7 -2.1.3Cisco 6509数据统计- 7 -2.1.4实施前的网络现状- 26 -3 网络扩容工程内容- 28 -3.1本期工程主要内容包括以下几个部分：- 28 -3.2 新增设备的面板图- 30 -4设备和端口命名及IP地址分配- 32 -4.1设备命名- 32 -5 新安装设备及模块清单- 34 -6工程实施计划- 36 -6.1工程实施步骤- 36 -6.2现场勘查与准备- 37 -6.3初始安装配置- 37 -7割接原则- 38 -8M320城域网核心设备割接- 39 -8.1设备之间的互相光纤连接及基本配置- 39 -8.2 调整Cisco 6509的一条链路到M320-2，并在M320-2引导雅安IP城域网的出流量- 46 -8.3 M320-2 上发布城域网网段，同时关闭GSR12008上宣告路由- 49 -8.4 连接Cisco 6509到M320-1，在上M320-1宣告网段，发布缺省路由- 54 -9、羌江局新增华为5200G- 59 -9.1华为5200G的主要配置- 59 -9.2两台M320的配置- 60 -9.3测试网络数据- 60 -10羌江局新加入7609- 61 -10.1 7609的主要配置- 61 -10.2两台M320的配置- 62 -10.3测试网络数据- 63 -11羌江局新加入沙湾T64C- 64 -11.1两台M320的配置- 65 -11.2测试网络数据- 65 -12羌江局新加入河北T64C- 66 -12.1两台M320的配置- 67 -12.2测试网络数据- 67 -13羌江局BIG6808连接M320- 68 -13.1两台M320的配置- 69 -14羌江局T64C连接M320- 70 -现状态分析- 70 -14.1连接羌江局T64C和M320-1- 70 -两台M320的配置- 71 -14.3测试网络数据- 76 -15羌江局ERX700连接M320- 77 -15.1将羌江局两台ERX700与6509线路断开- 77 -两台M320的配置- 78 -15.2在M320上建立到ERX700的静态路由，添加相映的访问列表到12008和12416上- 78 -15.3测试网络数据- 87 - II - 四川电信扩容项目-雅安实施方案1 概述本方案的目的是提供一份详尽的，并且切实可行的网络实施方案，以保证四川扩容工程的顺利进行。在进行网络过渡的过程中，我们应该考虑诸方面的因素，如网络拓扑的变化和相应政策的影响，以确保网络过渡过程不会对四川电信心网及其广大用户造成任何冲击。本方案是基于中盈优创科技有限公司对现行的四川电信省网运行状态的理解，以及对扩容后网络未来方案的设计而做出的，在整个实施方案的制订过程中，我们一直遵循如下原则：充分保证实施方案整体的可靠性全面考虑网络过渡过程的各方面因素，尽可能地减少对四川电信心网的影响合理利用现有网络设备、网络拓扑结构以及原有中继电路，保证网络过渡过程的平滑性在网络扩容过程中加入必要的测试过程，保证整个网络过渡过程的正确性本方案可依实际情况进行具体分析讨论后作出相应调整。2 网络现状描述经过2004年四川心网及IP城域网扩容工程后，地市城域网分为三种类型：大城域网、路由器型城域网和交换型城域网。甘孜、阿坝与成都市形成一个大城域网，采用路由器运行BGP与骨干连接，属于路由型城域网；广元和巴中、达州和广安形成一个大城域网，采用路由器运行BGP与骨干连接，属于路由型城域网；德阳、泸州、宜宾、眉山、乐山、南充六地市采用路由器运行BGP与骨干连接，属于路由型城域网；绵阳、遂宁、自贡、内江、资阳、雅安、西昌、攀枝花八地市的城域网交换机直接与骨干接入设备连接，属于交换型城域网。如下图所示：2.1 雅安节点雅安城域网属于交换型城域网。分为核心层、汇聚层和接入层，但有部分接入设备直接接到了核心交换机上。核心层为一台Cisco6509多层交换机。CISCO6509通过2条GE与163雅安节点GSR12008、GSR12416连接；华为8016通过2条GE直接与GSR12008、GSR12416连接。汇聚层设备羌江局采用中兴T64C交换机下连川农和各县公司城域网，另一台港湾BIG6808作为会聚节点连接沙湾和河北的T16C接入设备，部分接T64C和BIG6808的用户使用私网地址，通过一台T16C做NAT后连接城域网核心设备6509；原预备作为各县公司城域网接入设备的7609和沙湾和河北接入设备的T64C目前未使用；目前市内BRAS用户是连接到2台ERX700，2台ERX700连接6509。雅安现有IP城域网网络拓扑如下图所示：2.1.1 GSR12008数据统计BGP邻居统计： 4134(本端的AS号)NeighborASRouter Name202.97.32.2124134R1-b-sccd-1202.97.32.2134134ISIS的数据统计interfaces 链路类型 ISIS 进程LEVEL类型METRIC对端邻居Pos0/0155Msichuanlevel-11000R1-b-sccd-1Pos0/1155Msichuanlevel-11000RTR3-C-GSRPos0/2155Msichuanlevel-11000R1-b-sccd-1Pos0/3155Msichuanlevel-11000HuaWei Ne80Pos4/02.5Gsichuanlevel-1600R1-b-sccd-1G3/0Gesichuanlevel-15r2-a-scya-01NET86.0028.2020.9702.9077.00OSPF邻居统计interfaces 本端地址AREAcost端口描述GigabitEthernet2/061.188.2.225/3012200To C6509_1/1FastEthernet1/361.188.1.235/2701000ATM_BACK_UP_TO_CHENGDU（该端口管理down）61.188.4.76/3012Loopback0202.97.29.77/3212161.188.1.25/3212(原loopback0)需要割接到M320上的公告网段network 61.139.1.13 mask 255.255.255.255 network 61.139.52.128 mask 255.255.255.192 network 61.139.52.192 mask 255.255.255.224 network 61.139.53.0 mask 255.255.255.128 network 61.139.107.80 mask 255.255.255.240 network 61.139.107.96 mask 255.255.255.224 network 61.139.107.128 mask 255.255.255.128 network 61.157.119.0 mask 255.255.255.0 network 61.157.220.0 mask 255.255.255.0 network 61.157.222.0 mask 255.255.254.0 network 61.157.224.0 mask 255.255.255.0 network 61.157.225.0 mask 255.255.255.0 network 61.157.226.0 mask 255.255.255.0 network 61.188.1.26 mask 255.255.255.255 network 61.188.1.34 mask 255.255.255.255 network 61.188.2.224 mask 255.255.255.248 network 61.188.14.192 mask 255.255.255.192 network 61.188.168.128 mask 255.255.255.128 network 61.188.169.0 mask 255.255.255.0 network 61.188.170.0 mask 255.255.254.0 network 61.188.172.0 mask 255.255.255.192 network 61.188.199.0 mask 255.255.255.0 network 61.188.245.0 mask 255.255.255.0 network 202.98.138.0 mask 255.255.255.224 network 202.98.141.64 mask 255.255.255.192 network 202.98.141.128 mask 255.255.255.192 network 202.98.141.192 mask 255.255.255.192 network 202.98.152.240 mask 255.255.255.248 network 218.6.134.0 network 218.6.135.0 network 218.88.220.0 mask 255.255.252.0 network 220.166.66.0 mask 255.255.254.0 network 220.166.68.0 mask 255.255.254.0 network 222.208.202.0 network 222.208.203.0 network 222.208.204.0 network 222.208.205.0 network 222.208.206.0 network 222.208.207.0 network 222.208.208.0 network 222.208.209.0 network 222.208.210.0 network 222.208.211.0 network 222.213.224.0 network 222.213.225.0 network 222.213.242.0 mask 255.255.255.252 network 222.213.243.0 mask 255.255.255.224 network 222.213.245.0ip route 61.139.52.128 255.255.255.192 Null0ip route 61.139.53.0 255.255.255.128 Null0ip route 61.139.107.128 255.255.255.128 Null0ip route 61.157.220.0 255.255.255.0 Null0ip route 61.157.225.0 255.255.255.0 Null0ip route 61.157.226.0 255.255.255.0 Null0ip route 61.188.2.224 255.255.255.248 Null0ip route 61.188.170.0 255.255.254.0 Null0ip route 61.188.172.0 255.255.255.192 Null0ip route 202.98.141.32 255.255.255.224 Null0ip route 202.98.141.64 255.255.255.192 Null0ip route 202.98.141.128 255.255.255.192 Null0ip route 218.6.135.0 255.255.255.0 Null0ip route 218.88.220.0 255.255.252.0 Null0ip route 220.166.66.0 255.255.254.0 Null0ip route 220.166.68.0 255.255.254.0 Null0ip route 222.208.211.0 255.255.255.0 Null0ip route 222.208.216.0 255.255.255.0 Null0ip route 222.213.245.0 255.255.255.0 Null02.1.2 GSR12416数据统计BGP邻居统计： 4134(本端的AS号)NeighborASRouter NameISIS的数据统计interfaces 链路类型 ISIS 进程LEVEL类型 METRICG2/0GEsichuanlevel-15NETOSPF邻居统计interfaces 本端地址AREA对端名称G2/1222.213.246.5126509G2/2222.213.246.11276092.1.3 Cisco 6509数据统计涉及割接的OSPF邻居统计interfaces 本端地址AREAcost对端名称GigabitEthernet1/161.188.2.226/3012200r1-v-scya-1GigabitEthernet5/5222.213.246.6/30r2-a-scya-01GigabitEthernet4/361.157.220.13/30121YAAN-C9500GigabitEthernet5/161.157.220.205/30YA-HB-T64C-1GigabitEthernet5/261.157.220.209/30YA-SW-T64C-1连接端口访问列表统计连接GSR12008端口ip access-group 102 inip access-group 120 out连接羌江T64C端口 ip access-group 119 inaccess-list 119 deny ip host 220.166.69.60 any time-range netbaraccess-list 119 deny ip host 220.166.69.62 any time-range netbaraccess-list 119 deny ip host 220.166.69.66 any time-range netbaraccess-list 119 deny ip host 220.166.69.69 any time-range netbaraccess-list 119 deny ip host 61.157.225.198 any time-range netbaraccess-list 119 deny ip host 61.157.225.199 any time-range netbaraccess-list 119 deny ip host 61.157.225.200 any time-range netbaraccess-list 119 deny ip host 61.157.225.201 any time-range netbaraccess-list 119 deny ip host 61.157.225.202 any time-range netbaraccess-list 119 deny ip host 61.157.225.203 any time-range netbaraccess-list 119 deny ip host 61.157.225.204 any time-range netbaraccess-list 119 deny ip host 61.157.225.205 any time-range netbaraccess-list 119 deny ip host 61.157.225.208 any time-range netbaraccess-list 119 deny ip host 61.157.225.209 any time-range netbaraccess-list 119 deny ip host 61.157.225.210 any time-range netbaraccess-list 119 deny ip host 61.157.225.211 any time-range netbaraccess-list 119 deny ip host 61.157.225.212 any time-range netbaraccess-list 119 deny ip host 61.157.225.213 any time-range netbaraccess-list 119 deny ip host 61.157.225.215 any time-range netbaraccess-list 119 deny ip host 61.157.225.218 any time-range netbaraccess-list 119 deny ip host 61.157.225.220 any time-range netbaraccess-list 119 deny ip host 61.157.225.221 any time-range netbaraccess-list 119 deny ip host 61.157.225.222 any time-range netbaraccess-list 119 deny ip host 61.157.225.223 any time-range netbaraccess-list 119 deny ip host 61.157.225.225 any time-range netbaraccess-list 119 deny ip host 61.157.225.227 any time-range netbaraccess-list 119 deny ip host 61.157.225.228 any time-range netbaraccess-list 119 deny ip host 61.157.226.46 any time-range netbaraccess-list 119 deny ip host 61.157.226.66 any time-range netbaraccess-list 119 deny ip host 61.157.224.125 any time-range netbaraccess-list 119 deny ip host 218.88.222.191 any time-range netbaraccess-list 119 deny ip host 218.88.222.181 any time-range netbaraccess-list 119 deny ip host 218.88.222.208 any time-range netbaraccess-list 119 deny ip host 218.88.222.195 any time-range netbaraccess-list 119 deny ip host 218.88.222.192 any time-range netbaraccess-list 119 deny ip host 218.88.222.188 any time-range netbaraccess-list 119 deny ip host 218.88.222.177 any time-range netbaraccess-list 119 deny ip host 218.88.222.189 any time-range netbaraccess-list 119 deny ip host 218.88.222.224 any time-range netbaraccess-list 119 deny ip host 218.88.222.196 any time-range netbaraccess-list 119 deny ip host 61.188.172.26 any time-range netbaraccess-list 119 deny ip host 61.139.107.193 any time-range netbaraccess-list 119 deny ip host 61.139.107.194 any time-range netbaraccess-list 119 deny ip host 61.139.107.195 any time-range netbaraccess-list 119 deny ip host 61.139.107.197 any time-range netbaraccess-list 119 deny ip host 61.139.107.198 any time-range netbaraccess-list 119 deny ip host 61.139.107.210 any time-range netbaraccess-list 119 deny ip host 218.88.222.113 any time-range netbaraccess-list 119 deny ip host 218.88.223.248 any time-range netbaraccess-list 119 deny ip host 218.88.222.133 any time-range netbaraccess-list 119 deny ip host 218.88.222.114 any time-range netbaraccess-list 119 deny ip host 218.88.222.112 any time-range netbaraccess-list 119 deny ip host 218.88.222.122 any time-range netbaraccess-list 119 deny ip host 218.88.222.123 any time-range netbaraccess-list 119 deny ip host 218.88.222.127 any time-range netbaraccess-list 119 deny ip host 218.88.222.140 any time-range netbaraccess-list 119 deny ip host 220.166.68.41 any time-range netbaraccess-list 119 deny ip host 220.166.68.20 any time-range netbaraccess-list 119 deny ip host 220.166.68.46 any time-range netbaraccess-list 119 deny ip host 220.166.68.49 any time-range netbaraccess-list 119 deny ip host 220.166.69.201 any time-range netbaraccess-list 119 deny ip host 220.166.69.202 any time-range netbaraccess-list 119 deny ip host 220.166.69.203 any time-range netbaraccess-list 119 deny ip host 61.157.225.174 any time-range netbaraccess-list 119 deny ip host 61.157.225.175 any time-range netbaraccess-list 119 deny ip host 61.157.225.176 any time-range netbaraccess-list 119 deny ip host 61.157.225.177 any time-range netbaraccess-list 119 deny ip host 61.157.225.178 any time-range netbaraccess-list 119 deny ip host 61.157.225.179 any time-range netbaraccess-list 119 deny ip host 61.157.225.180 any time-range netbaraccess-list 119 deny ip host 61.157.225.182 any time-range netbaraccess-list 119 deny ip host 61.157.225.183 any time-range netbaraccess-list 119 deny ip host 61.157.225.184 any time-range netbaraccess-list 119 deny ip host 61.157.225.185 any time-range netbaraccess-list 119 deny ip host 61.157.225.186 any time-range netbaraccess-list 119 deny ip host 61.157.225.187 any time-range netbaraccess-list 119 deny ip host 61.157.225.188 any time-range netbaraccess-list 119 deny ip host 61.139.53.17 any time-range netbaraccess-list 119 deny ip host 61.139.53.18 any time-range netbaraccess-list 119 deny ip host 61.139.53.19 any time-range netbaraccess-list 119 deny ip host 218.88.223.122 any time-range netbaraccess-list 119 deny ip host 218.88.223.125 any time-range netbaraccess-list 119 deny ip host 218.88.223.128 any time-range netbaraccess-list 119 deny ip host 218.88.223.127 any time-range netbaraccess-list 119 deny ip host 218.88.223.130 any time-range netbaraccess-list 119 deny ip host 218.88.223.132 any time-range netbaraccess-list 119 deny ip host 220.166.68.100 any time-range netbaraccess-list 119 deny ip host 220.166.68.108 any time-range netbaraccess-list 119 deny ip host 61.157.225.161 any time-range netbaraccess-list 119 deny ip host 61.157.225.162 any time-range netbaraccess-list 119 deny ip host 61.157.225.163 any time-range netbaraccess-list 119 deny ip host 61.157.225.164 any time-range netbaraccess-list 119 deny ip host 61.157.225.165 any time-range netbaraccess-list 119 deny ip host 61.157.225.166 any time-range netbaraccess-list 119 deny ip host 61.157.225.167 any time-range netbaraccess-list 119 deny ip host 61.157.225.168 any time-range netbaraccess-list 119 deny ip host 61.157.225.65 any time-range netbaraccess-list 119 deny ip host 61.157.225.66 any time-range netbaraccess-list 119 deny ip host 61.157.225.67 any time-range netbaraccess-list 119 deny ip host 61.157.225.69 any time-range netbaraccess-list 119 deny ip host 61.157.225.70 any time-range netbaraccess-list 119 deny ip host 61.157.225.72 any time-range netbaraccess-list 119 deny ip host 61.157.225.73 any time-range netbaraccess-list 119 deny udp any any eq 1434access-list 119 deny udp any any eq 135access-list 119 deny tcp any any eq 135access-list 119 deny udp any any eq 136access-list 119 deny tcp any any eq 136access-list 119 deny udp any any eq netbios-nsaccess-list 119 deny tcp any any eq 137access-list 119 deny udp any any eq netbios-dgmaccess-list 119 deny tcp any any eq 138access-list 119 deny udp any any eq netbios-ssaccess-list 119 deny tcp any any eq 139access-list 119 deny udp any any eq 445access-list 119 deny tcp any any eq 445access-list 119 deny tcp any any eq 593access-list 119 deny udp any any eq 593access-list 119 deny tcp any any eq 4444access-list 119 deny udp any any eq 389access-list 119 deny tcp any any eq 5554access-list 119 deny tcp any any eq 9996access-list 119 deny tcp any any eq 9995access-list 119 permit ip any anytime-range netbarperiodic daily 0:15 to 3:45涉及割接的静态路由邻居统计interfaces 本端地址对端名称GigabitEthernet4/161.157.220.17/30EXR700_1GigabitEthernet4/861.157.220.253/30ERX700_2指向EXR700_1的静态路由统计ip route 61.139.52.192 255.255.255.224 61.157.220.18ip route 61.157.119.0 255.255.255.0 61.157.220.18ip route 61.157.222.0 255.255.254.0 61.157.220.18ip route 61.157.224.0 255.255.255.0 61.157.220.18ip route 61.188.168.128 255.255.255.128 61.157.220.18ip route 61.188.169.0 255.255.255.0 61.157.220.18ip route 61.188.170.0 255.255.255.0 61.157.220.18ip route 61.188.171.0 255.255.255.0 61.157.220.18ip route 61.188.199.0 255.255.255.0 61.157.220.18ip route 61.188.245.0 255.255.255.0 61.157.220.18ip route 218.88.220.0 255.255.255.0 61.157.220.18ip route 218.88.222.0 255.255.255.0 61.157.220.18ip route 218.88.223.0 255.255.255.0 61.157.220.18ip route 220.166.66.0 255.255.255.0 61.157.220.18ip route 220.166.68.0 255.255.255.0 61.157.220.18ip route 220.166.69.0 255.255.255.0 61.157.220.18ip route 222.208.202.0 255.255.255.0 61.157.220.18ip route 222.208.203.0 255.255.255.0 61.157.220.18ip route 222.208.204.0 255.255.255.0 61.157.220.18ip route 222.208.205.0 255.255.255.0 61.157.220.18ip route 222.208.206.0 255.255.255.0 61.157.220.18ip route 222.213.226.0 255.255.255.0 61.157.220.18连接EXR700_1端口访问列表统计ip access-group 119 inip access-group 120 outaccess-list 119 deny ip host 220.166.69.60 any time-range netbaraccess-list 119 deny ip host 220.166.69.62 any time-range netbaraccess-list 119 deny ip host 220.166.69.66 any time-range netbaraccess-list 119 deny ip host 220.166.69.69 any time-range netbaraccess-list 119 deny ip host 61.157.225.198 any time-range netbaraccess-list 119 deny ip host 61.157.225.199 any time-range netbaraccess-list 119 deny ip host 61.157.225.200 any time-range netbaraccess-list 119 deny ip host 61.157.225.201 any time-range netbaraccess-list 119 deny ip host 61.157.225.202 any time-range netbaraccess-list 119 deny ip host 61.157.225.203 any time-range netbaraccess-list 119 deny ip host 61.157.225.204 any time-range netbaraccess-list 119 deny ip host 61.157.225.205 any time-range netbaraccess-list 119 deny ip host 61.157.225.208 any time-range netbaraccess-list 119 deny ip host 61.157.225.209 any time-range netbaraccess-list 119 deny ip host 61.157.225.210 any time-range netbaraccess-list 119 deny ip host 61.157.225.211 any time-range netbaraccess-list 119 deny ip host 61.157.225.212 any time-range netbaraccess-list 119 deny ip host 61.157.225.213 any time-range netbaraccess-list 119 deny ip host 61.157.225.215 any time-range netbaraccess-list 119 deny ip host 61.157.225.218 any time-range netbaraccess-list 119 deny ip host 61.157.225.220 any time-range netbaraccess-list 119 deny ip host 61.157.225.221 any time-range netbaraccess-list 119 deny ip host 61.157.225.222 any time-range netbaraccess-list 119 deny ip host 61.157.225.223 any time-range netbaraccess-list 119 deny ip host 61.157.225.225 any time-range netbaraccess-list 119 deny ip host 61.157.225.227 any time-range netbaraccess-list 119 deny ip host 61.157.225.228 any time-range netbaraccess-list 119 deny ip host 61.157.226.46 any time-range netbaraccess-list 119 deny ip host 61.157.226.66 any