《APN配置》教学课件

《APN配置》配置APNAPN数据配置创建APN并进入APN视图apn

apn-instance是否使能选择校验select-mode-check

{

enable

[

subscribed{

enable

|disable

}

|

ms-provided

{

enable

|

disable

}

|network-provided

{

enable

|

disable

}

]

*

|

disable

}配置举例<UGW>

system-view[UGW]

apn

H[UGW-apn-H]

select-mode-check

disablePage2配置APNAPN数据配置设置接入模式access-mode

{

transparent-authentication

|

transparent-non-authentication

|

non-transparent[

authentication-mode

{

pco

|apn

[

authentication-password

password-string]

[

pco-priorityenable

|

disable

]|

msisdn

[authentication-password

password-string

]

[

pco-priority

enable

|

disable

]

}

]

|

local-authentication

}配置举例[UGW-apn-H]

access-mode

transparent-non-authenticationPage3配置APNAPN配置可选命令闲置超时idle-timeout会话超时session-timeout带宽控制max-bandwidth

max-bandwidth-value最大用户数max-pdpnumber

max-pdp-numberPage4配置APN验证APN配置验证命令display

apndisplay

apn

apn-instancePage5IP地址分配关键概念下行路由Gif接口eNobeBGif

接口S1-U

接口数据LPU

SPU其他设备Page6地址分配模式用户地址可为静态IP地址或动态IP地址动态IP地址，通过下面命令配置指定APN的IP地址分配属性address-allocate

ipv4

{

local

[

radius-prior

{

enable|

disable

}

]

|dhcp[radius-prior

{

enable

|disable

}

]

|

radius}[

ipv6

{

local

[radius-prior{

enable

|

disable

}]|

dhcp

[

radius-prior

{enable|

disable

}

]

|

radius

}

]配置举例[UGW-apn-H]

address-allocate

ipv4

localPage7地址分配模式HSS或HLR上的静态IP地址，通过下面命令配置指定APN下静态地址接入属性static-ip

[

hlr-hss-provided

{

enable

[

conflict{

deactive

|

ignore

}

]

|

disable

}

]

[

route{

enable

[

hlr-hss

|

radius

|

all

]

|

disable

}

]配置举例[UGW-apn-H]

static-ip

hlr-hss-provided

enable

conflictignore

route

disablePage8地址裁决Page9IP地址池配置配置VPN实例创建VPNip

vpn-instance

vpn-instance-name配置RDroute-distinguisher

route-distinguisher配置举例[UGW]ip

vpn-instance

test[UGW-vpn-instance-test]route-distinguisher

1:11Page10IP地址池配置本地地址分配模式下的地址池配置创建地址池ip

pool

pool-name

[

remote

[

ipv4

|

ipv6

]

|

local[

ipv4

|

ipv6

]

|

radius

{

ipv4

|

ipv6

}

groupgroup-number

[

instance-id

]

|

mbms

|

hlr

{

ipv4

|ipv6

}

[

group

group-number

]

|

nat

{

no-pat

|

pat

|full-cone

}

]绑定地址池到VPN实例（可选）vpn-instance

instance

name为地址池设置IP地址段section

section-num

start-ip

end-ipPage11IP地址池配置地址池绑定创建或进入APNapn

apn-instance绑定APN到VPN实例vpn-instance

instance

name绑定地址池到APNaddress-pool

pool-namePage12IP地址池配置举例[UGW]ip

vpn-instance

test[UGW-vpn-instance-test]route-distinguisher

1:11[UGW-vpn-instance-test]q[UGW]ip

pool

test[UGW-ip-pool-test]vpn-instance

test[UGW-ip-pool-test]section

1

10.10.10.0

10.10.10.255[UGW-ip-pool-test]q[UGW]apn

test[UGW-apn-test]vpn-instance

test[UGW-apn-test]address-pooltestPage13地址池维护维护锁定IP地址池。一旦锁定，池中的IP地址便不可用。lockunlock操作举例[UGW]access-view[UGW-access]ip

pool

test[UGW-access-ip-pool-test]lock[UGW-access-ip-pool-test]unlockPage14地址池维护验证地址池配置验证命令display

ip

pool操作举例

[UGW]access-view[UGW-access]display

ip

pool

testPage15核心网分组域上的RADIUS应用功能认证可以从PCO中获取用户名和密码或者直接从UGW9811上获得计费基于流量或时长的计费Page16配置RADIUS认证功能执行如下操作：创建RADIUS服务器组radius-server

group

group-name（可选）配置RADIUS重传或超时radius-server

{

retransmit

retry-times

|

timeoutseconds

}

*为认证功能配置RADIUS服务器radius-server

authentication

ip-address

[

vpn-instance

vpn-instance

]

[

port

port

]

key

key-string[

secondary

]为RADIUS服务器组的鉴权服务器绑定对应的Giif口client-ip

auth

interface

interface-namePage17配置RADIUS认证功能配置可选认证属性配置可选认证属性radius-server

auth-attribute支持3GPP扩展属性radius-server

auth-3gppvsa支持运营商私有属性radius-server

accept-attributePage18配置RADIUS认证功能配置APN缺省用户名和密码将认证服务器与APN绑定radius-server

group

group-name在UGW9811上配置APN缺省用户名和密码common-user

user-name

commonuser-passwordpassword指明是否使能域名剥离功能strip-domain-name｛

enable

|

disable

｝Page19配置RADIUS认证功能配置举例[UGW-access]radius-server

grouptestAAA[UGW-access-radius-testAAA]client-ip

auth

interfaceGiif4/0/0[UGW-access-radius-testAAA]radius-server

authentication

10.111.23.7key

CqN29chdnqd0[UGW]apn

H[UGW-apn-H]radius-server

group

testaaa[UGW-apn-H]common-user

saecommonuser-password

operator[UGW-apn-H]strip-domain-name

enablePage20配置RADIUS计费功能执行如下操作：创建RADIUS服务器组radius-server

group

group-name配置组内服务器模式radius-server

{

retransmit

retry-times

|

timeoutseconds

}

*为计费功能配置RADIUS服务器radius-server

accounting

ip-address

[

vpn-instancevpn-instance

]

[

port

port

]

key

key-string[

secondary

|

carbon-copy]为RADIUS服务器组配置的计费服务器绑定对应的Giif口client-ip

acct

interface

interface-namePage21配置RADIUS计费功能配置可选计费属性配置可选计费属性radius-server

acct-onoffsig支持3GPP扩展属性radius-server

acct-3gppvsa支持运营商私有属性radius-server

acct-attributePage22配置RADIUS计费功能为APN配置计费功能将计费服务器与APN绑定radius-server

group

group-name为RADIUS计费功能配置阈值radius

threshold为RADIUS客户端配置控制属性radius

acctctrlPage23配置RADIUS计费功能配置举例[UGW-access]radius-server

group

testAAA[UGW-access-radius-testAAA]radius-server

accounting10.111.23.7

key

CqN29chdnqd0[UGW]apn

H[UGW-apn-H]radius-server

group

testaaa[UGW-apn-H]radius

threshold

time-threshold

10volume-threshold

1024Page24UGW9811上的计费流程radius

acctctrlAccounting-start

sendingWait-

accounting-

responseReceive

accounting-

response

?Sending

create

PDPcontext

response

(accept)Sending

create

PDPcontext

response

(fail)YNEnableDisableSending

create

PDPcontext

response(accept)Keep

the

activated

PDP

contextNo

Sendingaccounting

stop

messageYResponse-

timeout

?Deactivedata-before-

responsedata

forwardingbefore

Accounting

responsedata

forwardingafter

Accounting

responsepermitprohibitReceive

accounting

reponse?NAccount-stop?ContinueSending

accounting

stop

messageEnableDisablePage25RADIUS配置验证验证检查UGW9811上的RADIUS配置display

radius-server

authenticationdisplay

radius-server

accountingdisplay

apnPage26DNS配置配置UGW9811获得DNS信息为APN配置DNS服务器dns

{

ipv4

primary-ip

ipv4-primary-ip-address

[

secondary-ip

ipv4-secondary-ip-addres

]

|

ipv6

primary-ip

ipv6-primary-ip-address

[

secondary-ip

ipv6-secondary-ip-addres

]

}

*defdns

{

ipv4

primary-ip

ipv4-primary-ip-address

[

secondary-ip

ipv4-secondary-ip-address]|

ipv6

primary-ip

ipv6-primary-ip-address

[secondary-ipipv6-secondary-ip-address

]}

*Page27DNS配置配置UGW9811获得DNS信息配置DNS64服务器dns64

primary-ip

ipv6-primary-ip-address

[

secondary-ip

ipv6-secondary-ip-address

]defdns64

primary-ip

ipv6-primary-ip-address

[

secondary-ip

ipv6-secondary-ip-address

]Page28DNS配置DNS配置举例[UGW]

apnH[UGW-apn-H]

dns

ipv4

primary-ip122.5.7.39[UGW-apn-H]

dns64

primary-ip

2000:0:0:1::00

secondary-ip2000:0:0:2::00[UGW]

access-view[UGW-access]

defdnsipv4

primary-ip

122.5.7.39[UGW-access]

defdns64

primary-ip

2000:0:0:1::00secondary-ip2000:0:0:2::00Page29配置DHCP服务器当地址由DHCP服务器分配时创建DHCP服务器组dhcp-servergroupgroup-name添加DHCP服务器dhcp-server

ip-address

[

vpn-instance