7750典型配置案例(服务、协议、接口)

典型配置案例典型配置案例 Confidential 第 1 页 共 17 页 ISE 典型配置案例典型配置案例 IES 业务业务 1 VPRN 业务业务 2 VPLS 业务业务 3 Epipe 业务业务 4 BGP 配置配置 5 OSPF 配置配置 5 ISIS 配置配置 6 Policy 配置配置 6 QOS 配置配置 8 SDP 配置配置 10 LDP 配置配置 10 Mirror 配置配置 10 VPRN 互通配置互通配置 11 VRRP 配置配置 13 POS 接口配置接口配置 15 LOG 配置配置 15 基本配置基本配置 16 IES 业务业务 SAP 点需要点需要 access Ethernet encap type qinq dot1q null show service service using show service id arp show service id fdb show port clear port 结合结合 QOS 案例有案例有 qos 在在 ies 下的应用下的应用 customer 1 create description ChengDu dianxian shujubu xiaoyang 86502311 exit ies 10 customer 1 create no shutdown interface to SC create address 172 16 0 1 24 sap 1 1 5 0 create exit exit 典型配置案例典型配置案例 Confidential 第 2 页 共 17 页 ISE exit ies 11 customer 1 create subscriber interface to ASB create address 172 16 1 1 24 group interface to ASB11 create sap 1 1 5 11 create anti spoof ip host ip 100 100 100 2 host ip 100 100 100 3 egress scheduler policy to ASB qos 10 exit exit sap 1 1 6 13 create exit exit group interface to ASB21 create sap 1 1 5 12 create ingress qos 100 exit egress scheduler policy to ASB qos 10 exit exit exit exit VPRN 业务业务 相关配置相关配置 LDP BGP 和和 IGP 不需要不需要 sdp show router bgp sum show service service using show route show route tunnel table show routes route table show route bgp routes svc ping service ping traceroute router oam vprn ping oam vprn trace show route ldp 典型配置案例典型配置案例 Confidential 第 3 页 共 17 页 ISE service customer 1 create description Default customer exit vprn 10 customer 1 create description vpn1 route distinguisher 100 10 auto bind ldp vrf target target 100 10 interface vpn1 create address 11 0 0 1 24 loopback exit no shutdown exit vprn 20 customer 1 create description vpn2 route distinguisher 100 20 auto bind ldp vrf target target 100 20 interface vpn2 create address 12 0 0 1 24 loopback exit no shutdown exit exit VPLS 业务业务 需要需要 SDP 可以采用可以采用 GRE 或或 LDP show service service using show service lablels show service fdb oam mac populate oam mac ping oam mac ping service destination FF FF FF FF FF FF oam mac trace oam mac purge service customer 2 create description Alcatel Customer 典型配置案例典型配置案例 Confidential 第 4 页 共 17 页 ISE contact Joe User phone 555 1212 exit sdp 3001 mpls create far end 10 1 1 1 ldp no shutdown exit sdp 3002 mpls create far end 10 1 1 2 ldp no shutdown exit vpls 100 customer 2 vpn 100 create stp shutdown exit sap 1 1 4 100 create exit mesh sdp 3001 100 create exit mesh sdp 3002 100 create exit no shutdown exit vpls 200 customer 2 vpn 200 create stp shutdown exit sap 1 1 4 200 create exit mesh sdp 3001 200 create exit mesh sdp 3002 200 create exit no shutdown exit exit Epipe 业务业务 采用采用 spoke sdp show service oam svc ping 典型配置案例典型配置案例 Confidential 第 5 页 共 17 页 ISE oam mac service customer 11 create exit epipe 117 customer 1 create shutdown sap 1 1 5 117 create exit spoke sdp 114 117 create exit exit exit BGP 配置配置 需要在全局需要在全局 router 下配置下配置 AS 和和 routerID show router bgp autonomous system 100 router id bgp router id 1 1 1 91 peer as 100 group BGP family ipv4 vpn ipv4 neighbor 1 1 1 90 exit exit 增加 RR 的配置 group RR family ipv4 vpn ipv4 cluster 1 1 1 93 export lp peer as 100 neighbor 1 1 1 94 exit neighbor 1 1 1 92 exit exit exit 典型配置案例典型配置案例 Confidential 第 6 页 共 17 页 ISE OSPF 配置配置 在做策略引入的时候 需要在做策略引入的时候 需要 asbr 指定指定 show router route table protocol ospf show router ospf configure router ecmp 2 ospf area 0 0 0 0 interface system exit interface SR91 SR90 exit interface SR91 SR93 authentication type password authentication key f3iz20JnD7g hash exit exit exit ISIS 配置配置 Show router ISIS isis export o2i level capability level 2 level 2 wide metrics only exit area id 49 0001 exit interface to 93 interface type broadcast level 2 metric 2000 exit exit exit Policy 配置配置 from 多个条件为并列关系多个条件为并列关系 export 多个策略为顺序关系多个策略为顺序关系 begin 进入编辑状态 进入编辑状态 commit 提交修改执行提交修改执行 典型配置案例典型配置案例 Confidential 第 7 页 共 17 页 ISE policy options begin prefix list d prefix prefix 11 11 11 0 24 exact exit policy statement d to o entry 10 from prefix list d prefix exit to protocol ospf exit action accept type 1 exit exit exit policy statement i2o entry 1 from protocol isis prefix list 100 exit to protocol ospf exit action accept exit exit exit policy statement lp entry 1 from prefix list d prefix exit action accept local preference 200 exit exit exit 典型配置案例典型配置案例 Confidential 第 8 页 共 17 页 ISE commit exit 协议引入的时候 需要 asbr QOS 配置配置 可以做分层可以做分层 qos 最多最多 3 级 常见 入作级 常见 入作 fc 分类 出做策略 分类 出做策略 网络侧网络侧 qos 相对较弱相对较弱 show qos show port detail 参考参考E work doc config 7750 SR User Guide 061106 阿尔卡特阿尔卡特 7750 QOS 部署方案 非常详细部署方案 非常详细 sap ingress 100 create queue 1 create exit queue 2 create rate 5000 cir 3000 exit queue 11 multipoint create exit fc af create queue 2 exit ip criteria entry 10 create match protocol tcp dst port eq 23 exit action fc af exit exit default fc ef exit 分层 qos scheduler policy to ASB create tier 1 scheduler a1 create rate 10000 cir 6000 exit exit 典型配置案例典型配置案例 Confidential 第 9 页 共 17 页 ISE tier 2 scheduler a21 create rate 4000 cir 2000 exit scheduler a22 create rate 6000 cir 4000 exit exit exit sap egress 10 create queue 1 create exit queue 2 create parent a21 rate 3000 cir 2000 exit fc be create queue 2 exit exit 进入标记 出端口策略 sap ingress 10 create queue 1 create exit queue 11 multipoint create exit default fc ef default priority high exit network queue Sig1 create queue 1 create mbs 50 cbs 1 high prio only 10 exit queue 2 create rate 100 cir 80 exit queue 9 multipoint create mbs 50 cbs 1 high prio only 10 exit 典型配置案例典型配置案例 Confidential 第 10 页 共 17 页 ISE fc ef create multicast queue 9 queue 2 exit exit port 1 1 1 ethernet network queue policy Sig1 SDP 配置配置 与 pipe vpls 业务相关 MPLS 方式 sdp 114 mpls create far end 1 1 1 93 ldp keep alive shutdown exit no shutdown exit GRE 方式 sdp 3 create far end 1 1 1 91 keep alive shutdown exit no shutdown exit LDP 配置配置 需要注意对端使用接口还是需要注意对端使用接口还是 system IP ldp interface parameters transport address interface system interface to90 exit exit targeted session exit exit 典型配置案例典型配置案例 Confidential 第 11 页 共 17 页 ISE Mirror 配置配置 可以可以 mirror 本地或者远端 本地或者远端 mirror 目的为目的为 SAP mirror mirror dest 1 create description test remote source far end 1 1 1 1 exit no shutdown exit mirror dest 2 create sap 1 1 5 13 create exit no shutdown exit exit VPRN 互通配置互通配置 通过通过 MBGP 的的 community 属性携带属性携带 RT 进行引入 进行引入 vrf import 也可以通过也可以通过 vrf export 对出方向对出方向 RT 进行修改进行修改 RA prefix list a prefix 172 24 1 0 24 exact exit prefix list b prefix 172 24 2 0 24 exact exit community a members target 100 1 policy statement A2B entry 1 from protocol bgp vpn prefix list a community a exit action accept exit exit default action accept exit 典型配置案例典型配置案例 Confidential 第 12 页 共 17 页 ISE exit policy statement B2A entry 1 from prefix list b exit action accept community add a exit exit default action accept exit exit vprn 1001 customer 1 create vrf import A2B vrf export B2A route distinguisher 100 2 auto bind ldp vrf target target 100 2 interface b create address 200 11 20 1 24 loopback exit interface b1 create address 172 24 2 1 24 loopback exit no shutdown exit RB prefix list peer prefix 172 24 2 0 24 exact exit community peer members target 100 2 policy statement test entry 1 from prefix list peer community peer exit action accept exit 典型配置案例典型配置案例 Confidential 第 13 页 共 17 页 ISE exit exit vprn 1001 customer 1 create vrf import test route distinguisher 100 1 auto bind ldp vrf target target 100 1 interface a create address 200 10 10 1 24 loopback exit interface a1 create address 172 24 1 1 24 loopback exit no shutdown exit VRRP 配置配置 可以在可以在 ies 和和 vprn 下实现下实现 实现了虚拟路由 也实现了实现了虚拟路由 也实现了 load balancing show router vrrp instance interface clear router vrrp statistics show vrrp policy debug router vrrp 典型配置案例典型配置案例 Confidential 第 14 页 共 17 页 ISE Host 2 1 19 92 2 1 16 68 8 1 1 0 0 2 24 4 1 1 3 VRF 1 1 2 1 1 2 1 1 1 1 1 1 1 1 2 1 1 1 1 10 0 1 1 2 2 0 0 2 24 4 1 10 0 2 2 3 3 0 0 2 24 4 1 10 0 1 1 3 3 0 0 2 24 4 3 3 1 1 3 3 2 2 1 1 2 2 P PE E 1 1P PE E 1 1 1 10 0 1 1 1 1 1 1 3 32 21 10 0 1 1 1 1 1 1 3 32 2 P PE E 2 2P PE E 2 2 1 10 0 1 1 1 1 2 2 3 32 21 10 0 1 1 1 1 2 2 3 32 2 P PE E 3 3P PE E 3 3 1 10 0 1 1 1 1 3 3 3 32 21 10 0 1 1 1 1 3 3 3 32 2 Host 1 L LA AN N 1 1 3 3 3 1 1 1 10 0 2 20 0 gateway 3 gateway 1 VRID 30 Master IP 192 168 1 3 VRID 30 Backup IP 192 168 1 3 VRID 10 Backup IP 192 168 1 1 VRID 10 Master IP 192 168 1 1 1 19 92 2 1 16 68 8 2 2 1 1 2 24 4 1 1 3 i iB BG GP P v vp pn n v v4 4 Host 3 PE 1 configure service ies 10 customer 1 create interface vrrp ies PE1 create address 192 168 1 1 24 sap 1 1 3 10 create exit vrrp 10 owner backup 192 168 1 1 exit vrrp 30 backup 192 168 1 3 ping reply optional telnet reply optional ssh reply optional exit exit no shutdown exit PE 3 典型配置案例典型配置案例 Confidential 第 15 页 共 17 页 ISE configure service ies 10 customer 1 create interface vrrp ies PE3 create address 192 168 1 3 24 sap 1 1 3 10 create exit vrrp 10 backup 192 168 1 1 ping reply optional telnet reply optional ssh reply optional exit vrrp 30 owner backup 192 168 1 3 exit exit no shutdown exit POS 接口配置接口配置 协调两端参数一致 port 1 1 4 description TO Router name 2 5G 1 2 1 sonet sdh framing sdh 国内都是全部是 sdh 没有 sonet clock source no