AG开通操作指导书.docVIP

AG开通操作指导书一 简述。 软交换在城域网上承载是用城域网的MPLS VPN来实现的，软交换主要涉及三种业务：媒体，信令和网管。软交换的媒体,信令都是通过NE40E或5200G和软交换侧起MPLS VPN 组建VPN网络.网管由于和DSLAM网管同时管理，暂不起MPLS VPN,NGN具体的网络结构图可参见城域网网管.具体的实施步骤如下:1. 在NE40E下建立各个vpn实例ip vpn-instance cnc_signal 信令 route-distinguisher 65036:21632 apply-label per-instance vpn-target 65036:21632 export-extcommunity vpn-target 65036:21632 import-extcommunity#ip vpn-instance cnc_voice 媒体 route-distinguisher 65036:22632 apply-label per-instance vpn-target 65036:22632 export-extcommunity vpn-target 65036:22632 import-extcommunity#ip vpn-instance cnc_nms route-distinguisher 65036:23632 apply-label per-instance vpn-target 65036:23632 export-extcommunity vpn-target 65036:23632 import-extcommunity注: 网管现在暂时没有用,由于AG的网管暂时用华为的dslam网管.2. 在NE40E下建立各个vpn实例子端口,每个子端口对应一个模块局,按照一个模块局对应一个外层VLAN.在NE40E上,要做VRRP,每个外层VLAN都透传到331和枢纽楼的两个NE40E.1. 端口上要改变端口的模式.interface GigabitEthernet1/0/8 description to 331_S8512_1/1/2 mode user-termination2.建立各个子端口,并起VRRP.interface GigabitEthernet1/0/8.1000 网管可以不用起VRRP control-vid 3160 qinq-termination qinq termination pe-vid 2801 ce-vid 1000 ip binding vpn-instance cnc_nms -暂时不要绑定，这样DSLAM网管可以管理到。 ip address 48 arp-proxy inter-sub-vlan-proxy enable arp broadcast enable网管做成qinq的形式,而且可以用DSLAM网管到#interface GigabitEthernet1/0/8.2801 信令 control-vid 1 qinq-termination qinq termination pe-vid 2801 ce-vid 2801 qinq vrrp pe-vid 2801 ce-vid 2801 ip binding vpn-instance cnc_signal ip address 48 vrrp vrid 1 virtual-ip -VRRP虚拟地址 vrrp vrid 1 priority 105 - VRRP 优先级. vrrp vrid 1 preempt-mode timer delay 100 arp broadcast enable#interface GigabitEthernet1/0/8.2901 媒体 control-vid 2 qinq-termination qinq termination pe-vid 2801 ce-vid 2901 qinq vrrp pe-vid 2801 ce-vid 2901 ip binding vpn-instance cnc_voice ip address 48 vrrp vrid 2 virtual-ip vrrp vrid 2 priority 105 vrrp vrid 2 preempt-mode timer delay 100 traffic-policy Media inbound arp-proxy inter-sub-vlan-proxy enable arp broadcast enable各个区县公司都把VPN实例和子端口做在5200G上.5200G操作1. 建立VPN 实例同NE40Eip vpn-instance cnc_signal - 信令 route-distinguisher 65036:21632 vpn-target 65036:21632 export-extcommunity vpn-target 65036:21632 import-extcommunity#ip vpn-instance cnc_voice -媒体 route-distinguisher 65036:22632vpn-target 65036:22632 export-extcommunity vpn-target 65036:22632 import-extcommunity#ip vpn-instance cnc_nms 网管 route-distinguisher 65036:23632 vpn-target 65036:23632 export-extcommunity vpn-target 65036:23632 import-extcommunity3. 建立子端口,不用做VRRP,但要预留地址以备以后改为VRRP,一般要预留地址段的第二个和第三个地址.版本（(VERSION 5.30)interface GigabitEthernet2/0/1.2801 -信令vlan-type dot1q 2801 qinq-vlan 2801 undo shutdown ip binding vpn-instance cnc_signal ip address interface GigabitEthernet2/0/1.2901 -媒体vlan-type dot1q 2801 qinq-vlan 2901 undo shutdown ip binding vpn-instance cnc_voice ip address interface GigabitEthernet2/0/1.1000 -网管vlanvlan-type dot1q 1001 qinq-vlan 2901 undo shutdown ip binding vpn-instance cnc_voice ip address 版本（(Version 3.30)interface GigabitEthernet2/0/1.2801-信令 qinq-vlan 2551 vlan-type dot1q vid 2801 undo shutdown ip binding vpn-instance cnc_signal ip address 48interface GigabitEthernet2/0/1.2901 -媒体 qinq-vlan 2551 vlan-type dot1q vid 2901 undo shutdown ip binding vpn-instance cnc_voice ip address 488512操作(如果外层VLAN在8512上起)，建议外层VLAN做在模块局，如不支持就做在8512上。同以前的qinq的操作1. acl 制作Link ACL 4087, 2 rules, rule 0 permit s-tag-vlan 2800 to 3000 ingress any egress any rule 1 permit s-tag-vlan 1000 ingress any egress any2.下联的端口上做成hybrid端口，并起灵活的QINQ.port hybrid vlan 1 2801 untagged vlan filter disable flow-template user-defined traffic-redirect inbound link-group 4087 rule 0 nested-vlan 2801模块局39系列交换机（如果不支持qinq，就做在8512上）SwitchA interface Ethernet 1/0/3SwitchA-Ethernet1/0/3 port link-type hybridSwitchA-Ethernet1/0/3-vid-1200 quitSwitchA-Ethernet1/0/3 mac-address-mapping 0 source-vlan 2801 destination-vlan 2201SwitchA-Ethernet1/0/3 mac-address-mapping 1 source-vlan 2901 destination-vlan 2201模块局35系列交换机（如果不支持qinq，就做在8512上）port link-type hybrid undo port hybrid vlan 1 port hybrid vlan 320 331 341 1000 1079 tagged （偷传的VLAN） port hybrid vlan 2201 untagged(外层VLAN) description To_SongZhuangJHD vlan-check disable qinq vid 2201 raw-vlan-id inbound 2801 2901mac-mirroring 1 src-vlan 2801 2901 dest-vl