中国联通IP承载网B网华为设备配置说明.doc

中国联通IP承载网B网华为设备配置详解中国联合通信有限公司华为公司2007年10月中国联通IP承载网B网华为设备配置详解 目录1CR配置详解32PR配置详解313AR配置详解504RR配置详解73中国联合通信有限公司华为公司第100页 共100页1 CR配置详解# sysname SCCD-CDZ-N5KE-C1配置设备名称为SCCD-CDZ-N5KE-C1# super password level 3 cipher _Y)+WT$aCQ=QMAF41!设置设备的超级密码，并以密文显示# info-center source default channel 2 log level warning设置设备使用2信道，发送warning级别以上的告警到服务器 info-center loghost source LoopBack0设备连接服务器的端口为LoopBack0 info-center loghost 116.79.1.253设置LOG服务器地址为116.79.1.253 info-center loghost 116.79.0.6设置LOG服务器地址为116.79.0.6 info-center loghost 116.79.255.253设置LOG服务器地址为116.79.255.253 info-center logbuffer size 1024设置设备的LOG的缓存为1024K info-center timestamp debugging date设置在进行设备Debug的时候加入系统时间戳# router id 116.79.8.11设置设备的router id为116.79.8.11#hwtacacs-server template default创建hwtacacs的管理模版，命名为default hwtacacs-server authentication 116.79.0.11设置hwtacacs的认证服务器的IP地址 hwtacacs-server authorization 116.79.0.11设置hwtacacs的授权服务器的地址 hwtacacs-server accounting 116.79.0.11设置hwtacacs的审计服务器的地址 hwtacacs-server source-ip 116.79.8.11设置连接hwtacacs服务器的源IP地址 hwtacacs-server shared-key )&Unicom设置与hwtacacs服务器之间通信使用的密钥# mpls lsr-id 116.79.8.11设置设备的MPLS/LDP协议使用的ID Mpls在设备上启用MPLS转发 mpls te在设备上启用MPLS/TE lsp-trigger none在设备上配置不对自己产生的任何路由分配标签 mpls rsvp-te设置设备支持以RSVP为信令的TE mpls te cspf设置设备启用TE的CSPF算法# explicit-path b_cdc1_c2_gzc1_kmp1_p2配置设备支持严格显示路径的MPLS/TE，并且配置严格显示路径，设置路径名称为b_cdc1_c2_gzc1_kmp1_p2 next hop 172.16.11.6配置第一个严格显示路径的下一跳 next hop 172.16.5.13配置第二个严格显示路径的下一跳 next hop 172.16.5.30配置第三个严格显示路径的下一跳 next hop 172.16.69.2配置第四个严格显示路径的下一跳# explicit-path b_cdc1_c2_whc2_c1_bjc2_c1 next hop 172.16.11.6 next hop 172.16.10.13 next hop 172.16.9.1 next hop 172.16.2.1 next hop 172.16.1.1# explicit-path b_cdc1_c2_whc2_xac1 next hop 172.16.11.6 next hop 172.16.10.13 next hop 172.16.10.18 # explicit-path b_cdc1_xac1_whc2_cdc2 next hop 172.16.11.14 next hop 172.16.10.17 next hop 172.16.10.14# explicit-path b_cdc1_xac1_whc2_gzc1_nnp1_p2 next hop 172.16.11.14 next hop 172.16.10.17 next hop 172.16.5.9 next hop 172.16.5.22 next hop 172.16.61.2# explicit-path p_sccd-c1_bjbj-c1 next hop 172.16.1.21# explicit-path p_sccd-c1_gxnn-p2 next hop 172.16.11.22# explicit-path p_sccd-c1_sccd-c2 next hop 172.16.11.6# explicit-path p_sccd-c1_sxxa-c1 next hop 172.16.11.14# explicit-path p_sccd-c1_ynkm-p2 next hop 172.16.11.18#mpls ldp在设备上启用LDP协议 graceful-restart配置LDP协议支持优雅重启动#mpls ldp remote-peer to_bjbj-jm-n5ke-c1配置LDP-OVER-TE的LDP远程进程 remote-ip 116.79.8.1配置远端的LDP邻居的IP地址#mpls ldp remote-peer to_gxnn-eqb-n80e-p2 remote-ip 116.79.8.62#mpls ldp remote-peer to_sccd-sn-n5ke-c2 remote-ip 116.79.8.12#mpls ldp remote-peer to_sxxa-xk-n5ke-c1 remote-ip 116.79.8.13#mpls ldp remote-peer to_ynkm-lt-n80e-p2 remote-ip 116.79.8.70# acl number 2000配置2000号的访问控制列表，用以控制SNMP的服务器源IP地址 rule 10 permit source 116.79.0.0 0.0.0.63定义2000号的访问控制列表的规则，允许源为116.79.0.0 0.0.0.63的地址通过 rule 20 permit source 116.79.22.128 0.0.0.31定义2000号的访问控制列表的规则，允许源为116.79.22.128 0.0.0.31的地址通过#acl number 2001 rule 10 permit source 116.79.0.0 0.0.255.255 rule 20 permit source 172.0.0.0 0.255.255.255#diffserv domain default配置系统缺省的Qos差分服务域，域名为default ip-dscp-outbound af1 green map 8将AF1队列中的绿流量的dscp值更改为8 ip-dscp-outbound af1 yellow map 8将AF1队列中的黄流量的dscp值更改为8 ip-dscp-outbound af1 red map 8将AF1队列中的红流量的dscp值更改为8 ip-dscp-outbound af2 green map 16将AF2队列中的绿流量的dscp值更改为16 ip-dscp-outbound af2 yellow map 16将AF2队列中的黄流量的dscp值更改为16 ip-dscp-outbound af2 red map 16将AF2队列中的红流量的dscp值更改为16 ip-dscp-outbound af3 green map 24将AF3队列中的绿流量的dscp值更改为24 ip-dscp-outbound af3 yellow map 24将AF3队列中的黄流量的dscp值更改为24 ip-dscp-outbound af3 red map 24将AF3队列中的红流量的dscp值更改为24 ip-dscp-outbound af4 green map 32将AF4队列中的绿流量的dscp值更改为32 ip-dscp-outbound af4 yellow map 32将AF4队列中的黄流量的dscp值更改为32 ip-dscp-outbound af4 red map 32将AF4队列中的红流量的dscp值更改为32 ip-dscp-outbound ef green map 40将EF队列中的绿流量的dscp值更改为40# isis 100启用启用进程号为100的ISIS路由协议 graceful-restart启用ISIS的优雅重启 is-level level-2设置进程在LEVEL-2区域运行 cost-style wide设置本进程的ISIS的COST值类型为宽类型 timer lsp-generation 1 50 50 level-2设置LSP的重计算的智能定时器，时间为1s、50ms、50ms flash-flood level-2设置在LEVEL-2区域的快速泛洪 network-entity 03.8351.0028.1160.7900.8011.00设置本设备在ISIS中的网络标识 is-name SCCD-CDZ-N5KE-C1设置本设备的ISIS的动态主机名 preference 21设置本设备的ISIS的协议优先级 timer spf 1 50 50设置本设备的ISIS计算的智能定时器，时间为1s、50ms、50ms traffic-eng level-2设置ISIS支持在LEVEL-2区域运行TE，并提供TE的链路参数 log-peer-change将邻居变化打印出来 is-snmp-traps enable打开ISIS的SNMP告警 set-overload on-startup wait-for-bgp在设备启动时，和BGP收敛时设置OVER-LOAD位# ntp-service authentication enable启用NTP同步的认证 ntp-service authentication-keyid 1 authentication-mode md5 CW0(2H0)aQ=QMAF41!设置NTP同步的第一个密钥 ntp-service authentication-keyid 2 authentication-mode md5 6-A#A%_U/Q=QMAF41!设置NTP同步的第二个密钥 ntp-service unicast-server 116.79.22.2 authentication-keyid 1 source-interface LoopBack0设置针对116.79.22.2这个NTP服务器使用第一个密钥，并且连接服务器的源端口为LoopBack0 ntp-service unicast-server 116.79.22.34 authentication-keyid 2 source-interface LoopBack0 preference设置针对116.79.22.2这个NTP服务器使用第二个密钥，并且连接服务器的源端口为LoopBack0，并且优选此服务器#interface Aux0/0/1设置AUX端口属性 link-protocol pppAUX端口的链路层协议为PPP Shutdown将AUX端口手动关闭#interface Ip-Trunk0设置Ip-Trunk中0号端口的端口属性 mtu 9178将端口MTU调整为9178 description To SCCD-SN-N5KE-C2 TR4进行端口描述 ip address 172.16.11.5 255.255.255.252设置端口的IP地址 isis enable 100将端口加入进程号为100的ISIS协议 isis circuit-level level-2设置本端口的ISIS电路等级为level-2 isis cost 20050 level-2设置本端口在level-2中的COST值为20050 isis small-hello设置本端口发送不进行填充的HELLO报文 Mpls设置本端口支持MPLS标签转发 mpls te设置本端口运行MPLS/TE mpls rsvp-te设置本端口的TE的信令协议为RSVP trust upstream default设置本端口引用default的Qos域配置#interface Ip-Trunk1 mtu 9178 description To SCCD-CDZ-N80E-A1 TR1 ip address 172.16.11.1 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk2 mtu 9178 description TO SCPZH-LT-N40E-A1 TR1 ip address 172.16.11.65 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk3 mtu 9178 description TO SCMY-GXQ-N40E-A1 TR0 ip address 172.16.11.73 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk4 mtu 9178 description To SXXA-XK-N5KE-C1 TR4 ip address 172.16.11.13 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 21100 level-2 isis small-hello mpls mpls te mpls rsvp-te trust upstream default#interface Ip-Trunk5 mtu 9178 description To YNKM-LT-N80E-P2 TR0 ip address 172.16.11.17 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 28000 level-2 isis small-hello mpls mpls te mpls rsvp-te trust upstream default#interface Ip-Trunk6 mtu 9178 description To GXNN-EQB-N80E-P2 TR7 ip address 172.16.11.21 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 28000 level-2 isis small-hello mpls mpls te mpls rsvp-te trust upstream default#interface Ip-Trunk7 mtu 9178 description TO SCCD-CDZ-N40E-E1 TR0 ip address 172.16.11.25 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk8 mtu 9178 description TO SCLZ-LT-N40E-A1 TR1 ip address 172.16.11.37 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk9 mtu 9178 description TO SCNJ-LT-N40E-A1 TR1 ip address 172.16.11.41 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk10 mtu 9178 description TO SCZG-LT-N40E-A1 TR1 ip address 172.16.11.45 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default# interface Ip-Trunk11 mtu 9178 description TO SCZY-LT-N40E-A1 TR 1 ip address 172.16.11.49 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk12 mtu 9178 description TO SCMS-LT-N40E-A1 TR1 ip address 172.16.11.61 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default #interface Ip-Trunk13 mtu 9178 description To BJBJ-JM-N5KE-C1 TR4 ip address 172.16.1.22 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 21100 level-2 isis small-hello mpls mpls te mpls rsvp-te trust upstream default#interface Ip-Trunk14 mtu 9178 description TO SCLS-LT-N40E-A1 TR1 ip address 172.16.11.53 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface Ip-Trunk15 mtu 9178 description To SCYB-XSN-N40E-A1 TR1 ip address 172.16.11.29 255.255.255.252 isis enable 100 isis circuit-level level-2 isis cost 6000 level-2 isis small-hello mpls mpls ldp trust upstream default#interface GigabitEthernet0/0/0 shutdown speed auto duplex auto#interface Pos1/0/0设置物理POS端口 link-protocol hdlc将链路的二层协议设置为HDLC协议 description POS1/0/0 To SCCD-CDZ-N80E-A1 POS1/0/0 10G :1进行端口描述 ip-trunk 1将POS端口加入ip-trunk 1 carrier up-hold-time 3000配置端口延时UP3秒钟 alarm lrdi sensitive配置端口对传输告警敏感 alarm prdi sensitive配置端口对传输告警敏感 alarm pais sensitive配置端口对传输告警敏感 qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound配置端口对于BE队列使用WFQ进行调度，并且承诺1的带宽，如果BE队列带宽超过端口带宽的40，超出流量进行丢弃 qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound配置端口对于CS7队列使用PQ进行调度，并且承诺1的带宽，如果CS7队列带宽超过端口带宽的80，超出流量进行丢弃 qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound配置端口对于CS6队列使用PQ进行调度，并且承诺4的带宽，如果CS6队列带宽超过端口带宽的80，超出流量进行丢弃 qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound配置端口对于AF1队列使用WFQ进行调度，并且承诺4的带宽，如果AF1队列带宽超过端口带宽的40，超出流量进行丢弃 qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound配置端口对于AF3队列使用WFQ进行调度，并且承诺8的带宽，如果AF3队列带宽超过端口带宽的40，超出流量进行丢弃 qos queue ef pir pir-percentage 90 outbound配置端口对于EF队列使用PQ进行调度，如果BE队列带宽超过端口带宽的90，超出流量进行丢弃 qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound配置端口对于AF2队列使用WFQ进行调度，并且承诺12的带宽，如果AF2队列带宽超过端口带宽的40，超出流量进行丢弃 qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound配置端口对于AF4队列使用PQ进行调度，并且承诺60的带宽，如果AF4队列带宽超过端口带宽的90，超出流量进行丢弃#interface Pos3/0/0 link-protocol hdlc description POS3/0/0 To SCCD-SN-N5KE-C2 POS3/0/0 2.5G :4 ip-trunk 0 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos3/0/1 link-protocol hdlc description POS3/0/1 To BJBJ-JM-N5KE-C1 POS10/0/0 2.5G :1 ip-trunk 13 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos6/0/0 link-protocol hdlc description POS6/0/0 To SCCD-SN-N5KE-C2 POS6/0/0 2.5G :4 ip-trunk 0 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos6/0/1 link-protocol hdlc description POS6/0/1 To SXXA-XK-N5KE-C1 POS1/0/2 2.5G :4 ip-trunk 4 carrier down-hold-time 100 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos6/0/2 link-protocol hdlc description POS6/0/2 To YNKM-LT-N80E-P2 POS1/0/0 2.5G :0 ip-trunk 5 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos6/0/3 link-protocol hdlc description POS6/0/3 To GXNN-EQB-N80E-P2 POS1/0/0 2.5G :7 ip-trunk 6 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos8/0/0 link-protocol hdlc description POS8/0/0 TO SCCD-CDZ-N40E-E1 POS1/0/0 155M TR0 ip-trunk 7 carrier down-hold-time 100 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos8/0/1 link-protocol hdlc description POS8/0/1 TO SCLS-LT-N40E-A1 POS1/0/0 155M TR1 ip-trunk 14 carrier down-hold-time 100 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queue cs6 cir cir-percentage 4 pir pir-percentage 80 outbound qos queue af1 cir cir-percentage 4 pir pir-percentage 40 outbound qos queue af3 cir cir-percentage 8 pir pir-percentage 90 outbound qos queue ef pir pir-percentage 90 outbound qos queue af2 cir cir-percentage 12 pir pir-percentage 40 outbound qos queue af4 priority 0 cir cir-percentage 60 pir pir-percentage 90 outbound#interface Pos8/0/2 link-protocol hdlc description POS8/0/2 TO SCYB-XSN-N40E-A1 POS1/0/1 155M ip-trunk 15 carrier down-hold-time 100 carrier up-hold-time 3000 alarm lrdi sensitive alarm prdi sensitive alarm pais sensitive qos queue be cir cir-percentage 1 pir pir-percentage 40 outbound qos queue cs7 cir cir-percentage 1 pir pir-percentage 80 outbound qos queu