ME60开局指导.doc

一、数据的配置 1、普通拨号、IPTV、VPDN业务数据的配置 （1）用户认证的过程及认证数据的配置Radius组配置：radius-server group radius-a radius-server authentication 2 1645 weight 0 radius-server authentication 1645 weight 0 radius-server accounting 2 1646 weight 0 radius-server accounting 1646 weight 0 radius-server shared-key 88-89 radius-server timeout 10 radius-server source interface LoopBack0 undo radius-server user-name domain-included地址池：ip pool pppoe-pool-1 local gateway x.x.x.1 section 0 x.x.x.2 x.x.x.254 dns-server 9 dns-server 8 secondary认证、记费及域配置：aaaauthentication-scheme pppoe authentication-mode radius-localaccounting-scheme pppoe accounting interim interval 60domain pppoe authentication-scheme pppoe accounting-scheme pppoe radius-server group radius-a ip-pool pppoe-pool-1domain kdsj authentication-scheme pppoe accounting-scheme pppoe radius-server group vpdn-radius-a ip-pool iptv-pool-1domain l2tp authentication-scheme pppoe accounting-scheme pppoe radius-server group l2tp l2tp-group l2tpVPDN配置l2tp-group l2tp start l2tp tunnel timeout 10 tunnel source LoopBack0 （2）端口数据的配置及用户数据的类型PPPOE：#interface Eth-Trunk1.2 pppoe-server bind Virtual-Template 1 description PPPOE user-vlan 128 1471 QinQ 3801 bas access-type layer2-subscriber default-domain authentication pppoeIPTV：interface Eth-Trunk1.4 pppoe-server bind Virtual-Template 1 description IPTV igmp enable user-vlan 2800 3000 QinQ 2593 bas access-type layer2-subscriber default-domain authentication kdsj multicast copy by-session igmp fast-leaveVPDN：interface Eth-Trunk1.2 pppoe-server bind Virtual-Template 1 description PPPOE user-vlan 128 1471 QinQ 3801 bas access-type layer2-subscriber default-domain authentication l2tp 2、VPN业务数据的配置 （1）VPN业务的种类分为二层VPN及三层VPN，透传业务采用二层VPN。 （2）VPN业务的数据配置方式有哪几种二层VSI配置方式：# mpls lsr-id 0 mpls lsp-trigger all mpls l2vpn#vsi 97-vpn static pwsignal ldp vsi-id 2#相应接口绑定VSI：interface GigabitEthernet2/0/6.201 vlan-type dot1q 3264 description 97-vpn-1 l2 binding vsi 97-vpn#VLAN透传：interface GigabitEthernet2/0/6.100 vlan-type dot1q 3264interface GigabitEthernet2/0/5.100 vlan-type dot1q 2000ccc touchuan interface GigabitEthernet2/0/6.100 out-interface GigabitEthernet2/0/5.100 （3）VPN业务数据配置时的注意事项二层VSI相当于将BAS当做HUB使用，如果VSI内用户存在攻击，会对BAS设备造成影响。 3、固定IP数据的配置 （1）端口的数据配置及数据的类型ip pool nms-pool-1 local gateway x.x.x.65 92 section 0 x.x.x.66 x.x.x.126 excluded-ip-address x.x.x.66 x.x.x.126aaaauthentication-scheme static authentication-mode noneaccounting-scheme static accounting-mode nonedomain static authentication-scheme static accounting-scheme static ip-pool nms-pool-1interface Eth-Trunk1.1 description NMS user-vlan 10 QinQ 2501 bas access-type layer2-subscriber default-domain authentication static authentication-method bind （2）具体IP的设定类型及方法static-user x.x.x.x interface Eth-Trunk1.1 vlan 10 qinq 2501 detect domain-name static 4、ETH-TRUNK数据的配置 （1）数据配置的步骤新建端口：interface eth-trunk 1将端口绑定到具体接口下interface GigabitEthernet1/0/2eth-trunk 1#interface GigabitEthernet1/0/3 eth-trunk 1 （2）具体数据的配置及注意事项接入拔号等用户时只能使用同一块单板上的端口。 5、帐号密码的设定local-aaa-server user admin password cipher admin authentication-type T level 3 6、访问控制列表的添加acl number 2010 description importunr rule 5 permit source 55 rule 10 permit source 55 rule 15 permit source 5user-interface vty 0 4 acl 2010 inbound 7、远程登录的设定aaaauthentication-scheme telnet authentication-mode localaccounting-scheme telnet accounting-mode nonedomain default_admin authentication-scheme telnet accounting-scheme telnetuser-interface vty 0 4authentication-mode aaa 8、限速数据制作scheduler-profile 1.5m car cir 1536 upstream gts cir 1536 qos-profile 1.5mscheduler-profile 1.5m domain pppoe qos profile 1.5m二、系统的日常维护1、状态的检查及注意要点 （1）系统状态（包括cpu、内存、上一次系统启动时间等）display cpudisplay memdisplay version会显示系统启动的时间 （2）板卡状态（包括单板、电源、风扇等）display devicedisplay power display fan以上没有显示failed，均为正常。 （3）物理接口状态display interface GigabitEthernet1/0/0 current state : UPLine protocol current state : UPDescription : TO-XinKaiLu-NE80E/1000M-OLD, Route PortThe Maximum Transmit Unit is 1500 bytesInternet Address is 66/30IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 0018-824a-4cd3the Vendor PN is MXPD-243SPort BW:1G, Transceiver max BW:1G, Transceiver Modes: SingleModeWaveLength:1310nm,Transmission Distance:10kmLoopback:none, full-duplex mode, negotiation: disableStatistics last cleared:2009-12-25 14:40:54 Last 5 minutes input rate: 384031488 bits/sec, 70143 Packets/sec Last 5 minutes output rate: 128388080 bits/sec, 43046 Packets/sec Input: 230068692713935 Bytes, 326162066126 Packets Output: 76238788033315 Bytes, 190057315891 Packets Input: Unicast : 326158635599, Multicast : 3382030 Broadcast : 48497, JumboOctets : 7785 CRC : 8422927, Symbol : 3890 Overrun : 0, InRangeLength : 7846 LongPacket: 0, Jabber : 0, Alignment: 0 Fragment : 0, Undersized Frame: 0 RxPause : 0 Output: Unicast : 190053415088, Multicast : 3847740 Broadcast : 53063, JumboOctets: 0 Lost : 0, Overflow : 0, Underrun: 0 TxPause : 0 （4）pppoe、vpdn、静态在线用户的状态display access-user ip-addess x.x.x.xdisplay access-user username xxxxpppoedisplay access-user username （5）路由协议状态display ip rout statistic （6）地址池状态display ip pool IP address Stat