GPRS H3C CE设备及配置说明.ppt

1、H3C CE 设备组网及配置说明,ISSUE 1.0,日期：2007-05-15,杭州华三通信技术有限公司 版权所有，未经授权不得使用与传播,为更好的满足广东移动GPRS十五期项的实施方案，我司CE使用VRF功能将Gn和Gi流量区分，CE与GGSN/SGSN设备及Gn/Gi防火墙设备之间使用OSPF协议，提高链路的使用率。,引入,CE设备组网,CR1,CMNET,CR2,Gn防火墙-1,Gn防火墙-2,Gi防火墙-1,Gi防火墙-2,Gi防火墙-1,Gi防火墙-2,CE-1,CE-2,CE-1,CE-2,GGSN/SGSN,GGSN/SGSN,LAN1,LAN2,CE 设备配置说明(1),#下

2、联业务vlan配置： vlan 40 description for Gi_Aside # vlan 60 description for Gn_Aside # vlan 80 description for GGSN_NTP1_Aside #配置VRF Gn和VRF Gi： ip vpn-instance Gn route-distinguisher 100:1 vpn-target 100:1 export-extcommunity vpn-target 100:1 import-extcommunity # ip vpn-instance Gi route-distinguisher 2

3、00:1 vpn-target 200:1 export-extcommunity vpn-target 200:1 import-extcommunity,# 用户登陆radius及本地认证配置： domain default enable cmcc # radius scheme cmcc primary authentication 88.1.1.1 primary accounting 88.1.1.1 key authentication cipher XXXXXX key accounting cipher XXXXXX user-name-format without-domai

4、n # domain cmcc authentication login radius-scheme cmcc local authorization login radius-scheme cmcc local accounting login radius-scheme cmcc access-limit disable state active idle-cut disable self-service-url disable # local-user CMCC password cipher XXXXXX authorization-attribute level 3 service-

5、type telnet terminal,CE 设备配置说明(2),#配置下联业务接口： interface GigabitEthernet9/0/7 port link-mode bridge port access vlan 60 # interface GigabitEthernet9/0/8 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 40 # interface GigabitEthernet9/0/19 port link-mode b

6、ridge description to SAEGW1201 Gn/NTP A side port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 60 80 # interface GigabitEthernet9/0/20 port link-mode bridge description to GGSN1202 Gn/NTP A side port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 60 80,#

7、配置业务vlan-if与VRF绑定 interface Vlan-interface40 description for Gi_Aside ip binding vpn-instance Gi ip address 10.244.118.49 255.255.255.248 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 # interface Vlan-interface60 description for Gn_Aside ip binding vpn-instance Gn ip address 10.244.118.17 255.

8、255.255.240 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 # interface Vlan-interface80 description for GGSN_NTP1_Aside ip binding vpn-instance Gn ip address 10.244.118.65 255.255.255.248 ospf cost 1000 ospf timer hello 1 ospf timer dead 4,CE 设备配置说明(3),#配置CE-1与CE-2之间互联： interface Route-Aggregat

9、ion1 description to_GZSW1202BEr_intertrunk link-aggregation mode dynamic # interface Route-Aggregation1.10 description interSW_Gn ip binding vpn-instance Gn ip address 10.244.118.81 255.255.255.252 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 ospf authentication-mode md5 1 cipher XXXXXX ospf

10、network-type p2p # interface Route-Aggregation1.20 description interSW_Gi ip binding vpn-instance Gi ip address 10.244.118.93 255.255.255.252 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 ospf authentication-mode md5 1 cipher XXXXXX ospf network-type p2p,# interface Ten-GigabitEthernet8/0/1 po

11、rt link-mode route description T0-GZSW1202BEr-GE-8/0/1-10GE port link-aggregation group 1 # interface Ten-GigabitEthernet8/0/2 port link-mode route description T0-GZSW1202BEr-GE-8/0/2-10GE port link-aggregation group 1,CE 设备配置说明(4),#配置上联Gn防火墙和Gi防火墙接口： interface Ten-GigabitEthernet8/0/3 port link-mod

12、e route description T0-GZFW1201BEr-GE1/0/2-10GE ip binding vpn-instance Gn ip address 10.244.118.85 255.255.255.252 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 ospf authentication-mode md5 1 cipher XXXXXX ospf network-type p2p ospf timer retransmit 3 # interface Ten-GigabitEthernet8/0/4 port

13、 link-mode route description T0-GiFW1203Ber-GE1/0/0-10GE ip binding vpn-instance Gi ip address 10.244.118.97 255.255.255.252 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 ospf authentication-mode md5 1 cipher XXXXXX ospf network-type p2p ospf timer retransmit 3,interface Ten-GigabitEthernet8/0

14、/5 port link-mode route description T0-GiFW1203Ber-GE2/0/0-10GE ip binding vpn-instance Gi ip address 10.244.118.105 255.255.255.252 ospf cost 1000 ospf timer hello 1 ospf timer dead 4 ospf authentication-mode md5 1 cipher XXXXXX ospf network-type p2p ospf timer retransmit 3,CE 设备配置说明（5）,#配置OSPF与VRF

15、绑定： router id 188.1.92.76 # ospf 1 vpn-instance Gn import-route direct import-route static maximum load-balancing 6 vpn-instance-capability simple area 0.0.0.0 network 10.244.118.80 0.0.0.3 network 10.244.118.84 0.0.0.3 network 10.244.118.16 0.0.0.15 network 10.244.118.64 0.0.0.7 # ospf 2 vpn-instance Gi import-route direct import-route static maximum load-balancing 6 vpn-instance-capability simple area 0.0.0.0 network 10.244.118.92