7750典型配置案例(服务、协议、接口).doc

典型配置案例典型配置案例IES业务1VPRN业务2VPLS业务3Epipe业务4BGP配置5OSPF配置5ISIS配置6Policy 配置6QOS配置8SDP配置10LDP配置10Mirror配置10VPRN互通配置11VRRP配置13POS接口配置15LOG配置15基本配置16IES业务SAP点需要access,Ethernet encap-type:qinq/dot1q/nullshow service service-usingshow service id arpshow service id fdbshow port clear port结合QOS案例有qos在ies下的应用， customer 1 create description ChengDu dianxian,shujubu xiaoyang：86502311 exit ies 10 customer 1 create no shutdown interface to-SC create address 172.16.0.1/24 sap 1/1/5:0 create exit exit exit ies 11 customer 1 create subscriber-interface to-ASB create address 172.16.1.1/24 group-interface to-ASB11 create sap 1/1/5:11 create anti-spoof ip host ip 100.100.100.2 host ip 100.100.100.3 egress scheduler-policy to-ASB qos 10 exit exit sap 1/1/6:13 create exit exit group-interface to-ASB21 create sap 1/1/5:12 createingress qos 100exit egress scheduler-policy to-ASB qos 10 exit exit exit exitVPRN业务相关配置:LDP、BGP和IGP,不需要sdpshow router bgp sumshow service service-usingshow route ?show route tunnel-tableshow routes route-table/show route bgp routessvc-ping service ping/traceroute router oam vprn-pingoam vprn-traceshow route ldp， service customer 1 create description Default customer exit vprn 10 customer 1 create description vpn1 route-distinguisher 100:10 auto-bind ldp vrf-target target:100:10 interface vpn1 create address 11.0.0.1/24 loopback exit no shutdown exit vprn 20 customer 1 create description vpn2 route-distinguisher 100:20 auto-bind ldp vrf-target target:100:20 interface vpn2 create address 12.0.0.1/24 loopback exit no shutdown exit exitVPLS业务需要SDP,可以采用GRE或LDPshow service service-usingshow service lablelsshow service fdboam mac-populateoam mac-pingoam mac-ping service destination FF:FF:FF:FF:FF:FFoam mac-traceoam mac-purge， service customer 2 create description Alcatel Customer contact Joe User phone 555-1212 exit sdp 3001 mpls create far-end 10.1.1.1 ldp no shutdown exit sdp 3002 mpls create far-end 10.1.1.2 ldp no shutdown exit vpls 100 customer 2 vpn 100 create stp shutdown exit sap 1/1/4:100 create exit mesh-sdp 3001:100 create exit mesh-sdp 3002:100 create exit no shutdown exit vpls 200 customer 2 vpn 200 create stp shutdown exit sap 1/1/4:200 create exit mesh-sdp 3001:200 create exit mesh-sdp 3002:200 create exit no shutdown exit exitEpipe业务采用spoke-sdpshow serviceoam svc-pingoam mac-*， service customer 11 create exit epipe 117 customer 1 create shutdown sap 1/1/5:117 create exit spoke-sdp 114:117 create exit exit exitBGP配置需要在全局router下配置AS和routerIDshow router bgp ?，autonomous-system 100 router-id bgp router-id 1.1.1.91 peer-as 100 group BGP family ipv4 vpn-ipv4 neighbor 1.1.1.90 exit exit (增加RR的配置) group RR family ipv4 vpn-ipv4 cluster 1.1.1.93 export lp peer-as 100 neighbor 1.1.1.94 exit neighbor 1.1.1.92 exit exit exitOSPF配置在做策略引入的时候，需要asbr指定show router route-table protocol ospfshow router ospf ?，configure router ecmp 2 ospf area 0.0.0.0 interface system exit interface SR91-SR90 exit interface SR91-SR93authentication-type passwordauthentication-key f3iz20JnD7g hash exit exit exitISIS配置Show router ISIS ?， isis export o2i level-capability level-2level 2wide-metrics-onlyexit area-id 49.0001 exit interface to-93interface-type broadcast level 2metric 2000exit exit exitPolicy 配置from 多个条件为并列关系,export 多个策略为顺序关系begin 进入编辑状态，commit提交修改执行， policy-options begin prefix-list d_prefix prefix 11.11.11.0/24 exact exit policy-statement d_to_o entry 10 from prefix-list d_prefix exit to protocol ospf exit action accept type 1 exit exit exit policy-statement i2o entry 1 from protocol isis prefix-list 100 exit to protocol ospf exit action accept exit exit exit policy-statement lp entry 1 from prefix-list d_prefix exit action accept local-preference 200 exit exit exit commit exit协议引入的时候,需要asbrQOS配置可以做分层qos,最多3级。常见：入作fc分类，出做策略。网络侧qos相对较弱show qos show port detail参考E:work-docconfig7750 SR User Guide061106 阿尔卡特7750 QOS部署方案，非常详细， sap-ingress 100 create queue 1 create exit queue 2 create rate 5000 cir 3000 exit queue 11 multipoint create exit fc af create queue 2 exit ip-criteria entry 10 create match protocol tcp dst-port eq 23 exit action fc af exit exit default-fc ef exit-分层qos scheduler-policy to-ASB create tier 1 scheduler a1 create rate 10000 cir 6000 exit exit tier 2 scheduler a21 create rate 4000 cir 2000 exit scheduler a22 create rate 6000 cir 4000 exit exit exit sap-egress 10 create queue 1 create exit queue 2 create parent a21 rate 3000 cir 2000 exit fc be create queue 2 exit exit-进入标记，出端口策略 sap-ingress 10 create queue 1 create exit queue 11 multipoint create exit default-fc ef default-priority high exit network-queue Sig1 create queue 1 create mbs 50 cbs 1 high-prio-only 10 exit queue 2 create rate 100 cir 80 exit queue 9 multipoint create mbs 50 cbs 1 high-prio-only 10 exit fc ef create multicast-queue 9 queue 2 exit exit port 1/1/1 ethernet network queue-policy Sig1 SDP配置与pipe,vpls业务相关，MPLS方式 sdp 114 mpls create far-end 1.1.1.93 ldp keep-alive shutdown exit no shutdown exitGRE方式 sdp 3 create far-end 1.1.1.91 keep-alive shutdown exit no shutdown exitLDP配置需要注意对端使用接口还是system IP， ldp interface-parameters transport-address interface/systeminterface to90 exit exit targeted-session exit exitMirror配置可以mirror本地或者远端，mirror目的为SAP， mirror mirror-dest 1 create description test remote-source far-end 1.1.1.1 exit no shutdown exit mirror-dest 2 create sap 1/1/5:13 create exit no shutdown exit exit VPRN互通配置通过MBGP的community 属性携带RT，进行引入vrf-import 也可以通过vrf-export对出方向RT进行修改， RA: prefix-list a prefix 172.24.1.0/24 exact exit prefix-list b prefix 172.24.2.0/24 exact exit community a members target:100:1 policy-statement A2B entry 1 from protocol bgp-vpn prefix-list a community a exit action accept exit exit default-action accept exit exit policy-statement B2A entry 1 from prefix-list b exit action accept community add a exit exit default-action accept exit exit vprn 1001 customer 1 create vrf-import A2B vrf-export B2A route-distinguisher 100:2 auto-bind ldp vrf-target target:100:2 interface b create address 200.11.20.1/24 loopback exit interface b1 create address 172.24.2.1/24 loopback exit no shutdown exit RB: prefix-list peer prefix 172.24.2.0/24 exact exit community peer members target:100:2 policy-statement test entry 1 from prefix-list peer community peer exit action accept exit exit exit vprn 1001 customer 1 create vrf-import test route-distinguisher 100:1 auto-bind ldp vrf-target target:100:1 interface a create address 200.10.10.1/24 loopback exit interface a1 create address 172.24.1.1/24 loopback exit no shutdown exitVRRP配置 可以在ies和vprn下实现 实现了虚拟路由，也实现了load balancing show router vrrp instance interface clear router vrrp statistics show vrrp policy debug router vrrp，/PE-1:# configure service ies 10 customer 1 create interface vrrp_ies_PE1 create address 192.168.1.1/24 sap 1/1/3:10 createexit vrrp 10 owner backup 192.168.1.1 exit vrrp 30 backup 192.168.1.3 ping-reply # optional telnet-reply # optional ssh-reply # optional exit exit no shutdown exitPE-3:# configure service ies 10 customer 1 create interface vrrp_ies_PE3 create address 192.168.1.3/24 sap 1/1/3:10 createexit vrrp 10 backup 192.168.1.1 ping-reply # optional telnet-reply # optional ssh-reply # optional exit vrrp 30 owner backup 192.168.1.3 exit exit no shutdown exitPOS接口配置协调两端参数一致，port 1/1/4 description TO Router-name 2.5G (1/2/1) sonet-sdh framing sdh (国内都是全部是sdh,没有sonet) clock-source node-timed (通常直连用node-timed,过传输用loop-timed) path mode access/networkscramble (是否加扰)CRC/32 (CRC是16，还是32)mtu