江苏联通GGSN培训课件

GGSNtrainingforJiangsuUnicomMotorolaCindyWang1GGSNtrainingGGSN简介 -GGSN主要功能 -GGSN单板组成数据配置 -接口配置

-APN配置 -VPN配置 -计费配置常见故障定位和告警排除现网网络拓扑2GGSN简介GGSN主要功能提供数据包在GPRS/UMTS网络和外部数据网络之间的路由和封装GGSN在网络中的位置3GGSN简介GGSN单板组成 5GGSN简介SRU单板（Switchingandroutingunit，交换与路由单元）系统管理的核心单板，固定配置在9,10槽负责搜集路由信息，产生和分发路由表GGSN数据报文交换中心GGSN操作维护代理SPU单板（Serviceprocessingunit，业务处理单元）业务处理，包括GTP-U和GTP-C处理功能计费消息处理LPU单板（Lineinterfaceprocessingunit，线路接口处理单元）提供到外部网络（SGSN、PDN、AAAServer、CG等）的物理接口，一般配置在1,2槽6数据配置接口配置逻辑接口GGSN逻辑接口图接口命名规则：逻辑接口类型+接口编号接口编号=SPU板所在槽号/虚拟接口卡号/虚拟端口号（forgn/ga/gi）or全局编号(forg接口)如：gnif3/0/0gaif3/0/0giif3/0/0gif0SGSNGGSNCGDNSServerAAAServerRRPDNGnGiGaGaG(Inner)RLNSDHCPServerNetworkRGi7数据配置物理接口与硬件网口对应，由LPU板提供命名规则：物理接口类型+接口编号接口编号=LPU板所在槽位号/业务接口卡号/端口号如：ethernet1/0/2逻辑接口和物理接口的对应关系：LPUSPUSRUGGSNGn/GpGaGiG123SGSNCGAAA/DHCPServerPDNLogicalInterfacePhysicalInterface8数据配置Ga接口接口协议栈配置步骤：配置物理接口配置Ga逻辑接口配置CG相关信息Eg:SETCG:IP="3",GRD=0,TP=UMTS,SPN=3386;配置到CG的路由ADDIPRT;10数据配置Gi接口配置步骤配置物理接口配置Gi逻辑接口配置G逻辑接口配置到PDN，AAAServer/DHCPServer的路由配置G接口和MS下行路由接口维护CommandFunctionLSTINTFListstheconfigurationofaninterfaceLSTIPListstherunningstateofaninterface.PINGCheckwhetherthelinkbetweentheGGSNandtheotherentity(eg,SGSN,CGW,etc)isnormalLSTCGSTATQuerytheworkingstateofallCGsoraspecifiedCG.12数据配置APN配置APN基本信息SETAPN;包括APN名称、接入方式、地址分配方式、是否使用VPN，是否允许漫游用户或拜访用户接入等；APN对应的本地地址池SETPOOL;DHCP动态分配IP地址SETDHCPSVRIP;SETAPNDHCPSVRIP;AAA鉴权和计费SETAUTH；SETACCT配置DNS信息SETDNS;14数据配置虚拟APN目的：用户可以通过携带同一个APN(虚拟APN)来接入不同的PDN实现：在GGSN上设置匹配规则，根据用户携带的虚拟APN来查找对应的真实APN，再接入到相应的PDN。提供以下四类匹配类型：VirtualAPNoftheIMSIresolutionmode15数据配置

VirtualAPNoftheMSISDNresolutionmode16数据配置

VirtualAPNoftheRATresolutionmode17数据配置VirtualAPNofthePCOresolutionmode配置：SETAPN:VIRTUALAPN=ENABLE;SETVIRTUALAPN:SETAPNRPESPT:SETAPNSUFSPT;18数据配置VPN（VirtualPrivateNetwork）配置VPN特点:地址隔离数据安全同一VPN内可达VPN分类:第二层隧道封装协议（将整个帧封装在隧道中）L2TP(Layer2TunnelingProtocol)PPTP(Point-to-PointTunnelingProtocol)第三层隧道封装协议（只将第三层报文封装在隧道中）GRE(GenericRoutingEncapsulation)IPSec(IPSecurity)20数据配置VPN的实现：21数据配置GREVPN相关概念VPNinstanceVPN标识，维护独立的路由表，与全局路由表和其它VPN实例路由表隔离 RD(RouteDistinguisher)VPN-IPaddress=RD+IPaddress每个VPN实例的RD值必须在GGSN全局上唯一BindingAPN绑定VPN实例；确定MS上行包属于哪个VPN实例G接口绑定VPN实例：确定MS下行包属于哪个VPN实例Gi接口绑定VPN实例：确定GGSN与AAAserver的报文属于哪个VPN实例GRE隧道绑定VPN实例：确定VPN使用哪个GRE隧道23数据配置GREVPN应用于企业网的配置思路创建GRE隧道ADDINTF;配置隧道的源端和目的端地址SETTUNNELSRC;SETTUNNELDES;创建VPNInstance，并指定该实例的RDCREVPNI;SETVPNRTDSTG;将MS所属APN、与APN相关的G接口、GRE隧道均捆绑到该VPN实例上SETAPN;SETVPNIBIND设置VPN实例的路由信息ADDIPRTVPN24数据配置内容计费目的：针对MS使用的不同业务类型进行不同计费实现：通过在GGSN上对MS的上下行数据包配置不同的包过滤／分析规则第三层过滤：源／目的地IP地址第四层过滤：协议/端口号第七层过滤：应用协议／URL 26数据配置内容计费配置举例ADDFILTER:NAME="wap20_tcp",PTYPE=TCP,DSTIP="72",L7PROT=WAP20,URL1="";ADDCHGRULE:RNAME="uniwap_rule",FGNAME="wap20_tcp",PRIORITY=1,CK=UPDOWNSID,CHGMODE=FLOW,ACT=PARSE,UPSID="0000000001",DOWNSID="0000000001";ADDRULEUSR:OP=APN,APN="uniwap",RNAME="uniwap_rule"; 27常见故障定位和告警排除CommonToolsCommonCommandsCasesMSAccessFailedDueToAPNConfigurationErrorMSAccessFailedDueToNoAddressAvailableMSAccessSucceededButDroppedQuicklyNoDownlinkDataReceivedWithoutGifInterfaceConfiguredNoG-CDRSenttoCGWWithoutGaifConfiguration28常见故障定位和告警排除CommonCommandsThefollowingcommandsareusuallyusedtodotroubleshooting:LSTINTF:isusedtoquerythedetailsofaninterface.LSTIP:isusedtoquerytheIPaddressinformationonaninterface.LSTIPRT:isusedtoquerytheroutinginformation.PING:isusedtotesttheinterconnectivitybetweentheC-GGSNandsomenetworknode.TRACERT:isusedtotestthepathbetweentheC-GGSNandsomenetworknode.LSTUSR:isusedtoquerythenumberofonlineusers.LSTCONTEXT:isusedtoquerythedetailsofPDPContextofauser.LSTAPN:ListsthedetailsofanAPN.LSTAUTH:ListsauthenticationinformationofAPN.LSTAUTHSEC:ListsauthenticationsecuritykeyofAPN.LSTACCT:ListsaccountinformationofAPN.LSTACCTSEC:ListsaccountsecuritykeyofAPN.30常见故障定位和告警排除MSAccessFailedDueToAPNConfigurationErrorFaultSymptomtheuserfailstologintothenetwork.FaultAnalysisJudgewhethertheactivationmessagereachestheGGSN.ViewingtheGn/GpinterfacetracingmessagesItshowsthatthecommunicationbetweentheSGSNandtheGGSNisnormal.DoubleclicktheCreatePDPContextResponsemessagetoviewitscontents:31常见故障定位和告警排除Asshown,missingorunknownapnisdisplayedinthecausefields,thatis,theAPNcarriedintheactivationrequestmessageisnotconfigured.Inthiscase,theGGSNrejectstheMSaccessrequest.ViewtheAPNconfigurationintheCreatePDPContextRequestmessage32常见故障定位和告警排除ChecktheAPNconfigurationontheGGSNbyusingtheLSTAPNcommand.FaultHandlingIncorrecttheAPNconfigurationbyreconfiguringAPN33常见故障定位和告警排除MSAccessFailedDueToNoAddressAvailableFaultSymptomTheMSfailstologintothenetwork.FaultAnalysisVerifywhethertheMSaccessrequestreachestheGGSN.ViewingtheGn/GpinterfacetracingmessagesItshowsthatthecommunicationbetweentheSGSNandtheGGSNisnormal.DoubleclicktheCreatePDPContextResponsemessagetoviewitscontents:34常见故障定位和告警排除Asshowninabove,noresourcesavailableisdisplayedinthecausefield,thatis,theGGSNfailstoassigntheresourcefortheMScontext,thenrejectstheMSaccessrequest.Itshowsthatalltheaddressesinthedynamicaddresspoolareassigned.QuerytheusageoftheaddresspoolbyusingtheLSTPOOLUSAGEcommandontheGGSN.35常见故障定位和告警排除QuerythenumberofonlineMSsbyusingtheLSTUSRcommandontheGGSN:%%LSTPOOLUSAGE:APN="C-GGSNlb";%%RETCODE=0Executionsucceeded

AddressPoolIpusage

Totalvalidipnumber=100Usedipnumber=100Unusedipnumber=0LSTUSR:OP=APN,APN="C-GGSNlb";%%RETCODE=0ExecutionsucceededAPNUserNumberInformation:

ThetotalAPNuser=100!FaultHandlingReconfigureadynamicaddresspoolfortheAPNC-GGSNlbontheGGSN36常见故障定位和告警排除MSAccessSucceededButDroppedQuicklyFaultSymptomTheMSlogsintotheUMTSnetworksuccessfullybutdropsquicklyFoundthefollowingalarminformationofGGSNinalarmconsole:37常见故障定位和告警排除FaultAnalysisEnabletheGiinterfacetracingtoolontheGGSN:PingtheIPaddressoftheaccountingserverontheGGSN.Thefollowinginformationisdisplayed:PING:IP="",SRCIP="";%%RETCODE=0Executionsucceeded

PING:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutpingstatistics4packet(s)transmitted0packet(s)received100.00%packetloss

38常见故障定位和告警排除ChecktheAAAaccountingserverandfindthattheaccountingserverhasstartednormally.ChecktheroutingconfigurationoftheAAAaccountingserverandfindthatnoroutetotheGiifinterfaceaddressoftheGGSNisconfigured.FaultHandlingConfigurearoutetotheGiifinterfaceaddressoftheGGSNontheAAAaccountingserver.39常见故障定位和告警排除NoDownlinkDataReceivedWithoutGifInterfaceConfiguredFaultSymptomTheusercannotbrowsWebpages.FaultAnalysisOpentheusertraceinGGSN,foundthatthePDPactivationissuccessful.ButthereisonlyUplinkData,noDownlinkData.YoucanalsoquerythePDPContextrecordoftheMSbyLSTCONTEXTontheGGSN.40常见故障定位和告警排除StarttheEtherealtocapturepacketsontheGnandGiinterfacesAnalyzethecapturedpackets.ThereisuplinkMSdatabutnodownlinkdataontheGn/Gpinterface.ThereisbothuplinkuserdataanddownlinkuserdataontheGiinterface.CheckthedataconfigurationofrelatedportsandfindthattheGifinterfaceandtherelevantdownlinkroutearenotconfiguredontheGGSN.FaultHandlingConfiguretheGifinterfaceandspecifythedownlinkroutesforalltheMSIPaddresses 41常见故障定位和告警排除NoG-CDRSenttoCGWWithoutGaifConfigurationFaultSymptomNoG-CDR