UA5000(高密)IPMB宽带开局配置指导.doc

UA5000（高密）宽带开局配置指导一、网络组网图：MA5200F(宽带接入服务器) FE(100M全双工)UA5000(IPMB)(MA5200F直接挂UA5000IPMB主控板的以太网端口，远端局点中间需要通过光电转换器转接）二、需要协商的配置数据： 1、UA5000管理地址、网关和网管VLAN;（例如下面配置中的：管理地址192.168.17.144 255.255.255.0 网管vlan：17）2、业务VLAN(按照电信端口绑定业务需求，正常是一个端口一个业务VLAN);（例如下面配置中的：10511066为业务VLAN）3、如果客户需要N2000网管上增加图标，需要协商网管参数（配置见开局配置八）（需要协商网管的团体名和访问权限，和网管地址，每个地市的参数都不相同）4、开局时还需要和客户协商配置那些ADSL线路速率模板，端口默认开多大带宽）（一般需要按照顺序配置512K、1M、2M、3M和4M）5、访问控制列表（访问控制的配置九）；（为了网络安全，和客户协商允许那些地址段访问该设备，必须加入网关地址和网管地址）三、开局配置步骤：（注意：以下红色字体为提示性文字，蓝色的内容为实际配置时需要修改的内容）UA5000初始用户名及密码：用户名：root 密码：admin一、登录系统，单板确认并命名：UA5000 /普通用户模式UA5000enable /进入特权用户模式UA5000#config /进入全局配置模式UA5000(config)#board confirm 0/2 /确认主控板及用户板UA5000(config)#hostname XM_ZongLvCheng_UA5000 /注意命名规范二、添加网管vlan并建立设备的IP地址XM_ZongLvCheng_UA5000(config)#vlan 17 /17为网管vlan， vlantype|to :standard XM_ZongLvCheng_UA5000 (config)#interface vlanif 17 XM_ZongLvCheng_UA5000(config-if-Vlanif17)#ip address 192.168.17.144 255.255.255.0 Command: ip address 192.168.17.144 255.255.255.0XM_ZongLvCheng_UA5000 (config)#port vlan /指定网管vlan的上行口为0/2/0 vlanid :17 frame/slot|to :0/2 /主控板IPMB插在第二槽，故为0/2 portlist :0 /使用IPMB板的第一个口，故为0设置上行端口的模式（100M 全双工）CZ_SSRJ_UA5000(config)#interface ipm 0/2 CZ_SSRJ_UA5000(config-if-ipm-0/2)#speed 0 100mCZ_SSRJ_UA5000(config-if-ipm-0/2)#duplex 0 full三、配置网管路由XM_ZongLvCheng_UA5000 (config)#ip route-static 0.0.0.0 0.0.0.0 192.168.17.1此时，如果光路正常且上层已经正常配置的话，网关应该可以ping通，直接在设备上ping 192.168.17.1六、配置业务vlan及上、下行端口XM_ZongLvCheng_UA5000(config)#vlan 1051 to 1066 /1051-1066为局方分配业务vlan vlantype|to : mux XM_ZongLvCheng_UA5000(config)#port vlan 1051 to 1066 0/2 0 /指定业务vlan的上行口为0/2/0配置虚接口，业务VLAN 和端口的对应：service-port vlan 1051 adsl 0/6/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1052 adsl 0/6/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1053 adsl 0/6/2 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1054 adsl 0/6/3 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1055 adsl 0/6/4 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1056 adsl 0/6/5 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1057 adsl 0/6/6 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1058 adsl 0/6/7 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1059 adsl 0/6/8 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1060 adsl 0/6/9 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1061 adsl 0/6/10 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1062 adsl 0/6/11 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1063 adsl 0/6/12 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1064 adsl 0/6/13 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 service-port vlan 1065 adsl 0/6/14 vpi 0 vci 35 rx-cttr 6 tx-cttr 6service-port vlan 1066 adsl 0/6/15 vpi 0 vci 35 rx-cttr 6 tx-cttr 6五、配置ADSL线路模板:CZ_SSRJ_UA5000(config)#adsl line-profile add 50 Start adding profile Press Q to quit the current configuration and new configuration will be neglected Do you want to name the profile (y/n) n:n Please choose default value type 0-adsl 1-adsl2+ (01) 0: Will you set basic configuration for modem? (y/n)n:y Note: Setting to these mode of G992.35 will lead that the adsl ports that are not support adsl2+ not be activated ADSL transmission mode: 0: All (G992.15,T1.413) 1: Full rate(G992.1/3/5 or T1.413) 2: g.lite(G992.2/4) (ADSL over ISDN board doesnt support g.lite mode) 3: T1.413(ADSL over ISDN board doesnt support T1.413 mode) 4: g.dmt (G992.1/3/5) 5: g.hs (G992.15, G992.5 is prior) 6: G992.1 7: G992.2 Please select (07) 0: Trellis mode 0-disable 1-enable (01) 1: Downstream channel bit swap 0-disable 1-enable (01) 0: Upstream channel bit swap 0-disable 1-enable (01) 0: Please select channel mode 0-interleaved 1-fast (01) 0: Will you set interleaved delay? (y/n)n:y Maximum downstream interleaved delay(0255 ms) 6:16 Maximum upstream interleaved delay(0255 ms) 6: Please select form of transmit rate adaptation in downstream: 0-fixed 1-adaptAtStartup (01) 1: Will you set SNR margin for modem? (y/n)n: Will you set parameters for rate? (y/n)n: y Minimum transmit rate in downstream (328160 Kbps) 32: Maximum transmit rate in downstream (328160 Kbps) 6144: 1024 Minimum transmit rate in upstream (32896 Kbps) 32: Maximum transmit rate in upstream (32896 Kbps) 640: 384 Add profile 50 successfully CZ_SSRJ_UA5000(config)#display adsl line-profile |profile_index : Command: display adsl line-profile - Profile Operating Channel Min Down Max Down Min Up Max Up Index Mode Mode Rate(Kbps) Rate(Kbps) Rate(Kbps) Rate(Kbps) - 1 All Interleaved 32 6144 32 640 2 All Interleaved 32 512 32 384 3 All Interleaved 32 1024 32 384 4 All Interleaved 32 2048 32 384 5 All Interleaved 32 3072 32 384 6 All Interleaved 32 4096 32 384 50 All Interleaved 32 1024 32 384 1000 All Fast 32 6144 32 640 1001 All Interleaved 32 6144 32 640 1002 All Interleaved 32 24544 32 1024 - Total: 35 七、激活端口XM_ZongLvCheng_UA5000 (config)#interface adsl 0/6 /进入第一块用户板，由于第一块用户板插在第六槽位，故为0/6XM_ZongLvCheng_UA5000 (config-if-adsl-0/6)#deactive all /把第一块用户板的所有端口去激活，注意维护时千万不能使用该命令XM_ZongLvCheng_UA5000 (config-if-adsl-0/6)#activate all line-profile index 50 /使用速率模板激活端口XM_ZongLvCheng_UA5000 (config-if-adsl-0/6)#quitXM_ZongLvCheng_UA5000 (config)#相应地把其他用户板的端口激活八、N2000网管配置（例如：滁州电信）snmp-agent community write czwgzx snmp-agent community read ahczdata snmp-agent sys-info contact HuaWei HeFeisnmp-agent sys-info location Chuzhou Telecom ShanShuiRenJia Office snmp-agent sys-info version v1 v2c snmp-agent target-host trap address 202.102.209.197 securityname N2000 snmp-agent target-host trap address 202.102.198.62 securityname ldims_hf snmp-agent target-host trap address 61.190.205.67 securityname publi snmp-agent target-host trap address 61.190.205.68 securityname public snmp-agent trap enable standard snmp-agent trap source Vlanif1050 九、访问控制的配置：acl number 2000 rule 0 deny rule 1 permit source 202.102.209.192 0.0.0.63 rule 2 permit source 202.102.198.62 0 rule 3 permit source 61.190.204.0 0.0.0.255 rule 4 permit source 192.168.17.1 0.0.0.254 rule 5 permit source 61.190.205.0 0.0.0.255 packet-filter inbound ip-group 2000 rule 0 port 0/2/0 packet-filter inbound ip-group 2000 rule 1 port 0/2/0 packet-filter inbound ip-group 20