城域网优化建设工程维护手册.doc

鄂尔多斯电信2009年城域网优化建设工程维护手册向心力技术股份有限公司版权所有 侵权必究拟制：日期：审核：审核：批准：目 录1.网络介绍31.1.鄂尔多斯电信城域网现状31.2.路由现状42.NE80E/NE40E常用维护命令62.1.基本运行情况及管理性检查62.2.硬件运行情况112.3.接口运行情况152.4.路由协议运行情况182.5.路由器安全检查363.ME60常用维护命令423.1.基本运行情况及管理性检查423.2.硬件运行情况463.3.接口运行情况513.4.路由协议运行情况543.5.BRAS安全检查603.6.ME60业务数据查看644.8905常用维护命令774.1.基本运行情况及管理性检查774.2.硬件运行情况804.3.接口运行情况834.4.8905业务数据查看865.内蒙古电信NE80E、ME60、NE40E、8905简解896.BAS业务规划916.1.Radius规划916.2.PPPOE模板规划916.3.认证域建立和命名方案916.4.域建立流程927.新业务开放流程947.1.PPPOE业务947.2.WLAN业务977.3.专线业务1001. 网络介绍1.1. 鄂尔多斯电信城域网现状在中心机房和火车站机房各有1台NE80E、1台NE40E、1台ME60-16和1台8905；在中心局还有1台Eudemon1000防火墙；在达旗有1台NE40-8、1台ME60-8、1台8905；在准旗有1台NE40E、1台ME60-8、1台8905；在伊旗有1台MA5200G-4、1台8905；在棋盘井有1台MA5200G-2、1台8905；在民联B区、邮政机房、宏银机房、地税机房、人防办、创业大厦、园丁小区、佳宏机房、安厦、康巴什、乌审旗、沙圪堵、鄂旗、鄂前旗、杭锦旗各有一台8905；2台NE80E作为鄂尔多斯电信城域网的出口路由器，每台NE80E以2*2.5G分别上行到呼市M320和通辽Cisco 12416的骨干网设备。2台NE80E设备分别以1*GE链路连接鄂尔多斯CN2网络2台PE设备，承载国际差异化业务；两台NE40E设备以2*GE链路分别双上行至2台NE80E设备，2条GE链路以负载分担方式承载城域网流量，其中东胜2台NE40E设备兼做城域网内部的ASBR设备，以1*GE链路分别上行至CN2网络2台PE设备形成口字型组网，承载VPN业务；IDC服务器通过E1000防火墙双上行至出口NE80E设备；中心局、民联B区、邮政机房、宏银机房、地税机房、人防办、创业大厦、园丁小区、佳宏机房、安厦8905以2*GE分别上行至中心机房NE40E和ME60-16；火车站、康巴什、乌审旗、沙圪堵、鄂旗、鄂前旗、杭锦旗8905以2*GE分别上行至火车站机房NE40E和ME60-16；达旗8905以2*GE分别上行至达旗NE40和ME60-8；准旗8905以2*GE分别上行至准旗NE40E和ME60-8；伊旗8905以2*GE分别上行至火车站机房NE40E和伊旗MA5200G-4；棋盘井8905以2*GE分别上行至火车站机房NE40E和棋盘井MA5200G-2；S8016和NE08E因带有DCN的业务，暂时先不退网。具体组网图如下：本期鄂尔多斯电信城域网优化项目新增3台NE40E,共配置60个GE端口；新增2台ME60-16，共配置40个GE光口；新增2台ME60-8，共配置40个GE光口；新增1台Eudemon1000，共配置4个GE光口；新增21台8905，共配置254个GE光口、850个FE光口及1008个10/100/1000电口。1.2. 路由现状现网存在如下路由协议部署情况。1、MP-BGP路由协议部署鄂尔多斯城域网4台SR及6台BRAS作为MPLS VPN网络的PE设备，采用MP-IBGP 协议分发VPNv4 路由，鉴于鄂尔多斯城域网存在DCN、NGN业务，对于MP-BGP路由协议部署如下:目前内蒙电信城域网和内蒙电信省骨干网都在同一个AS内，在呼和浩特和通辽分别设置有一台NE40E做为跨域ASBR与CN2骨干网的ASBR连接，传递出省跨域的VPN路由；同时省内的两台ASBR兼做VPN RR路由反射器直接与省内各地市的PE设备建立MP-IBGP邻居关系，反射省内的VPN路由（两台VPN RR地址：219.148.164.9、219.148.164.76）。另外省公司还专门设置两台C7206和C12410路由器做为DCN业务的VPN RR路由反射器，与省内所有承载DCN业务的PE路由器建立MP-IBGP邻居关系，反射省内DCN业务的VPN路由（两台DCN VPN RR地址：219.148.164.2、219.148.164.7）。2、MPLS部署鄂尔多斯城域网内部及两台NE80E与省干设备的所有互联链路互联端口均启用MPLS LDP标签分发协议,使能MPLS LDP，路由器全局启动MPLS 转发功能，设置MPLS lsr-id为Loopback0地址，华为设备配置标签倒数第二跳弹出行为(PHB)，所有设备上只对32位掩码路由分配MPLS LDP标签。3、IBGP路由协议部署鄂尔多斯电信城域网2台核心路由器NE80E与呼市M320(219.148.164.1)及通辽Cisco 12416 (219.148.164.74)两台省干设备建立IBGP邻居关系，用于承载城域网内部的公网汇总路由；3、ISIS路由协议部署鄂尔多斯电信城域网2台出口路由器NE80E与呼市M320及通辽Cisco 12416互联采用ISIS协议作为省干网络的IGP协议，省干网络所有路由器共同组成Level2区域，ISIS路由协议仅承载省干网络设备Loopback地址和内部互联地址路由。 4、OSPF路由协议部署鄂尔多斯电信城域网的4台SR、6台BRAS及1台防火墙设备与2台出口路由器之间采用OSPF作为城域网内部IGP协议，用于承载网城域网内部设备的loopback地址、互联地址及业务地址路由。鄂尔多斯电信城域网2台核心路由器NE80E强制下发OSPF默认路由，用于引导城域网内部流量至NE80E设备；2. NE80E/NE40E常用维护命令2.1. 基本运行情况及管理性检查 1、查看设备软件版本，VRP软件版本是华为公司正式发布的版本或者已申请的受控版本（试验局除外）。执行命令：display version输出举例：NM-EE-ZXJ-SR-1.MANdisp verHuawei Versatile Routing Platform SoftwareVRP (R) software, Version 5.50 (V300R003C02B608)Copyright (C) 2000-2008 Huawei Technologies Co., Ltd.Quidway NetEngine 40E uptime is 67 days, 6 hours, 38 minutesBKP 0 version information: 1. PCB Version : CR52BKPB REV A 2. MPU Slot Quantity: 0 3. SRU Slot Quantity: 2 4. SFU Slot Quantity: 2 5. LPU Slot Quantity: 8MPU 9(Master) : uptime is 67 days, 6 hours, 38 minutes StartupTime 2009/06/03 17:24:33 SDRAM Memory Size : 2048M bytes Flash Memory Size : 32M bytes NVRAM Memory Size : 512K bytes CF Card1 Memory Size: 487M bytes CF Card2 Memory Size: 489M bytes MPU version information: 1. PCB Version : CR52SRUA REV C 2. EPLD1 Version : 106 3. EPLD2 Version : 108 4. FPGA Version : 009 5. BootROM Version : 74.0 6. BootLoad Version : 216.0 7. Software Version : Version 5.50 RELEASE 00 MIF version information: 1. PCB Version : CR52MIFB REV C 2. FPGA Version : 009 MonitorBUS version information: 1. PCB Version : CR31MBSA REV A 2. EPLD Version : 019 3. Software Version : 3.8MPU 10(Slave) : uptime is 67 days, 6 hours, 37 minutes StartupTime 2009/06/03 17:25:12 SDRAM Memory Size : 2048M bytes Flash Memory Size : 32M bytes NVRAM Memory Size : 512K bytes CF Card1 Memory Size: 487M bytes CF Card2 Memory Size: 489M bytes MPU version information:2、查看日志信息，正常情况下，日志中不应该有大量重复的信息。执行命令：display logbuffer输出举例：NM-EE-ZXJ-SR-1.MANdisp logbNM-EE-ZXJ-SR-1.MANdisp logbufferLogging buffer configuration and contents:enabledAllowed max buffer size : 1024Actual buffer size : 1024Channel number : 4 , Channel name : logbufferDropped messages : 0Overwritten messages : 27689Current messages : 1024Aug 10 2009 00:04:24 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=3)Aug 10 2009 00:04:20 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=2)Aug 10 2009 00:04:19 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=3)Aug 10 2009 00:04:17 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=2)Aug 10 2009 00:04:17 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=1)Aug 10 2009 00:04:17 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=3)Aug 10 2009 00:04:17 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=3)Aug 10 2009 00:04:14 NM-EE-ZXJ-SR-1.MAN %01SHELL/4/TELNETFAILED(l): Failed to login through telnet. (Ip=222.74.1.73, Times=2)3、查看调试信息开关，正常工作情况下，所有Debug开关关闭。执行命令：display debugging输出举例：正常情况下如果没有开启debuging功能，返回结果应该为空。NM-EE-ZXJ-SR-1.MANdis debuggingNM-EE-ZXJ-SR-1.MAN4、查看系统时间，时间设置应与北京时间一致（时间差不大于0.5小时）。执行命令：display clock输出举例：NM-EE-ZXJ-SR-1.MANdis clock2009-08-10 00:07:03MondayTime Zone : Default Zone Name add 00:00:00NM-EE-ZXJ-SR-1.MAN5、查看设备与NTP服务器的连接。执行命令：display ntp-service status输出举例：NM-EE-ZXJ-SR-1.MANdisplay ntp-service status clock status: unsynchronized clock stratum: 16 reference clock ID: none nominal frequency: 100.0000 Hz actual frequency: 100.0000 Hz clock precision: 218 clock offset: 0.0000 ms root delay: 0.00 ms root dispersion: 0.00 ms peer dispersion: 0.00 ms reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)6、查看系统补丁。执行命令：display patch-info输出举例：NM-EE-ZXJ-SR-1.MANdisplay patch-infoService pack Version:V300R003SPH012Pack file name :cfcard:/patch.pat-The patch information of slot 1-Total Patch Unit : 6Running Patch Unit : 1 - 6Active Patch Unit :Deactive Patch Unit :-The patch information of slot 3-Total Patch Unit : 6Running Patch Unit : 1 - 6Active Patch Unit :Deactive Patch Unit :-The patch information of slot 9-Total Patch Unit : 20Running Patch Unit : 1 - 20Active Patch Unit :Deactive Patch Unit :-The patch information of slot 10-Total Patch Unit : 20Running Patch Unit : 1 - 20Active Patch Unit :Deactive Patch Unit :NM-EE-ZXJ-SR-1.MAN7、查看配置文件，现网运行配置文件。执行命令：display current-configuration输出略。8、查看配置文件，设备保存配置文件。执行命令：display saved-configuration输出略。2.2. 硬件运行情况1、收集设备硬件信息。执行命令：display device输出举例：NM-EE-ZXJ-SR-1.MANdis deviceNE40Es Device status:Slot # Type Online Register Status Primary- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -1 LPU Present Registered Normal NA3 LPU Present Registered Normal NA9 MPU Present NA Normal Master10 MPU Present Registered Normal Slave11 SFU Present Registered Normal NA12 SFU Present Registered Normal NA13 SFU Present Registered Normal NA14 SFU Present Registered Normal NA15 CLK Present Registered Normal Master16 CLK Present Registered Normal Slave17 PWR Present NA Normal NA18 PWR Present NA Normal NA19 FAN Present Registered Normal NA 2、设备告警检查。执行命令：display alarm all输出举例：NM-EE-ZXJ-SR-1.MANdisplay alarm all- NO alarm-NM-EE-ZXJ-SR-1.MAN3、主备倒换状态检查，设备软硬件正常，VRP一致的情况下主备板应该一直处于Realtime and routine backup状态。执行命令：display switch state输出举例：NM-EE-ZXJ-SR-1.MANdisplay switch state Master MPU: Realtime and routine backup. Slave MPU: Receiving realtime and routine data.NM-EE-ZXJ-SR-1.MAN.4、查看主控板CPU占有率。执行命令：display cpu-usage输出举例：NM-EE-ZXJ-SR-1.MANdisplay cpu-usageCPU Usage Stat. Cycle: 60 (Second)CPU Usage : 9% Max: 42%CPU Usage Stat. Time : 2009-08-10 00:10:53CPU Usage Stat. Tick : 0xafcc(CPU Tick High) 0x4f7a3aea(CPU Tick Low)Actual Stat. Cycle : 0x0(CPU Tick High) 0x78421329(CPU Tick Low)TaskName CPU Runtime(CPU Tick High/CPU Tick Low)BUFM 0% 0/ 1ea377VIDL 91% 0/6dc699f6TICK 0% 0/ 5daee0 Ecm 0% 0/ b128dIPCR 0% 0/ f2e67 VPR 0% 0/ 1ed5a3 VPS 0% 0/ eeb50 ARQ 0% 0/ 422aacRTMR 0% 0/ 76e39dIPCQ 0% 0/ 48ac3f VP 0% 0/ 1dfRPCQ 0% 0/ 36bc7VMON 0% 0/ 788cSTND 0% 0/ 3dd2ec CFA 0% 0/ 40155INFO 0% 0/ 6bf9 LCS 0% 0/ 328 RPR 0% 0/ 3d8a4f5、查看主控板内存占有率。执行命令：display memory-usage输出举例：NM-EE-ZXJ-SR-1.MAN display memory-usage Memory utilization statistics at 2009-08-10 00:11:41 340 ms System Total Memory Is: 1993978128 bytes Total Memory Used Is: 315119000 bytes Memory Using Percentage Is: 15%NM-EE-ZXJ-SR-1.MAN6、查看业务板CPU占有率。执行命令：display cpu-usage slot 输出举例：NM-EE-ZXJ-SR-1.MAN display memory-usage Memory utilization statistics at 2009-08-10 00:11:41 340 ms System Total Memory Is: 1993978128 bytes Total Memory Used Is: 315119000 bytes Memory Using Percentage Is: 15%NM-EE-ZXJ-SR-1.MANdisplay cpu-usage slot 1CPU Usage Stat. Cycle: 60 (Second)CPU Usage : 6% Max: 20%CPU Usage Stat. Time : 2009-08-10 00:12:16CPU Usage Stat. Tick : 0xafcb(CPU Tick High) 0xbd053ba9(CPU Tick Low)Actual Stat. Cycle : 0x0(CPU Tick High) 0x77c183d0(CPU Tick Low)TaskName CPU Runtime(CPU Tick High/CPU Tick Low)BUFM 0% 0/ 1782f7VIDL 94% 0/70bfafe4TICK 0% 0/ 47aca0 VT 0% 0/ 130b3IPCR 0% 0/ 2621f VPR 0% 0/ 6bde4 VPS 0% 0/ 2698d ECM 0% 0/ 42c3fBEAT 0% 0/ 88878RTMR 0% 0/ 2ac855IPCQ 0% 0/ 3b55c2RPCQ 0% 0/ 2d60dVMON 0% 0/ 59c2STND 0% 0/ a37eaINFO 0% 0/ 1cbb7、查看业务板内存占有率。执行命令：display memory-usage slot 输出举例：NM-EE-ZXJ-SR-1.MAN display memory-usage slot 1 Slot 1 Memory utilization Info: Memory utilization statistics at 2009-08-10 00:13:01 543 ms System Total Memory Is: 425471248 bytes Total Memory Used Is: 197704208 bytes Memory Using Percentage Is: 46%NM-EE-ZXJ-SR-1.MAN 8、查看风扇工作状态检查。执行命令：display fan输出举例:NM-EE-ZXJ-SR-1.MANdisplay fanSlotid : 19Present : YESRegistered: YESStatus : MANUALFanSpeed : No.Speed 1100% 2100% 3100% 4100% 5100% 6100% 7100% 8100% 9100%2.3. 接口运行情况1、检查端口的状态，系统中没有使用的接口状态为shutdown状态，避免出现链路振荡。执行命令：display ip interfaces brief输出举例：dis ip interface brief *down: administratively down!down: FIB overload down(l): loopback(s): spoofingThe number of interface that is UP in Physical is 60The number of interface that is DOWN in Physical is 8The number of interface that is UP in Protocol is 50The number of interface that is DOWN in Protocol is 18Interface IP Address/Mask Physical Protocol Aux0/0/1 unassigned *down down GigabitEthernet0/0/0 192.168.1.1/24 up up GigabitEthernet1/0/0 123.178.129.14/30 up up GigabitEthernet1/0/1 123.178.129.78/30 up up GigabitEthernet1/0/2 unassigned up down GigabitEthernet1/0/2.3 10.169.213.1/24 up up GigabitEthernet1/0/2.10 10.169.214.1/24 up up GigabitEthernet1/0/2.53 123.178.130.49/30 up up GigabitEthernet1/0/2.201 123.178.137.1/30 up up GigabitEthernet1/0/2.202 123.178.137.5/30 up up GigabitEthernet1/0/2.203 123.178.137.9/30 up up GigabitEthernet1/0/2.204 123.178.137.13/30 up up GigabitEthernet1/0/2.205 123.178.137.17/29 up up GigabitEthernet1/0/2.206 123.178.137.25/30 up up 2、检查已使用端口的配置。执行命令：display current-configuration interface输出举例：dis cu int GigabitEthernet 1/0/0#interface GigabitEthernet1/0/0 description TO NM-EE-ZXJ-C-1.MAN GE4/0/5 GE undo shutdown ip address 123.178.129.14 255.255.255.252 ospf network-type p2p mpls mpls ldp trust upstream default port-queue be wfq weight 10 port-wred wred0 outbound port-queue af1 wfq weight 10 shaping shaping-percentage 80 port-wred wred1 outbound port-queue af4 pq shaping shaping-percentage 20 port-wred wred2 outbound port-queue ef wfq weight 15 shaping shaping-percentage 80 port-wred wred2 outbound port-queue cs6 pq shaping shaping-percentage 2 port-wred wred1 outbound#3、检查FE/GE端口工作模式，端口模式（包括速率、双工模式）配置对接双方必须一致；端口实际工作模式必须与对端一致；检查端口收发统计数据；检查上行端口的流量。执行命令：display interface输出举例：dis int g 1/0/0GigabitEthernet1/0/0 current state : UPLine protocol current state : UPLast line protocol up time : 2009-07-21 17:38:27Description:TO NM-EE-ZXJ-C-1.MAN GE4/0/5 GERoute Port,The Maximum Transmit Unit is 1500Internet Address is 123.178.129.14/30IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 0018-82d7-8fafThe Vendor PN is MXPD-243SPort BW: 1G, Transceiver max BW: 1G, Transceiver Mode: SingleModeWaveLength: 1310nm, Transmission Distance: 10kmRx Power: -8.38dBm, Tx Power: -6.14dBmLoopback:none, full-duplex mode, negotiation: disable, Pause Flowcontrol:Receive Enable and Send EnableLast physical up time : 2009-07-21 17:38:27Last physical down time : 2009-07-21 17:38:22Statistics last cleared:never Last 300 seconds input rate: 23080816 bits/sec, 5961 packets/sec Last 300 seconds output rate: 59897368 bits/sec, 8564 packets/sec Input: 3995497323749 bytes, 8685833902 packets Output: 9886463139965 bytes, 11691092463 packets Input: Unicast: 8685044151 packets, Multicast: 780926 packets Broadcast: 8825 packets, JumboOctets: 0 packets CRC: 0 packets, Symbol: 0 packets Overrun: 0 packets InRangeLength: 0 packets LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets Fragment: 0 packets, Undersized Frame: 0 packets RxPause: 0 packets Output: Unicast: 11690293669 packets, Multicast: 798774 packets Broadcast: 20 packets, JumboOctets: 0 packets Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets TxPause: 0 packets Unknown Vlan: 0 packets2.4. 路由协议运行情况1、检查设备Router id，Router id应该配置为设备LoopBack 0的ip地址。执行命令：display router iddisplay current-configuration interface LoopBack 0输出举例： dis router id RouterID:123.178.128.5 dis cu int loopback 0 #interface LoopBack0 description For Managerment ip address 123.178.128.5 255.255.255.255#2、检查BGP配置。执行命令：display current-configuration configuration bgp输出举例：display current-configuration configuration bgp#bgp 17923 group vpn_rr internal peer vpn_rr connect-interface LoopBack0 peer 219.148.164.9 as-number 17923 peer 219.148.164.9 group vpn_rr peer 219.148.164.9 description NM-HH-HCZ-S-1.163 peer 219.148.164.76 as-number 17923 peer 219.148.164.76 group vpn_rr peer 219.148.164.76 description NM-TL-HP-S-1.163 # ipv4-family unicast undo synchronization undo peer vpn_rr enable undo peer 219.148.164.9 enable undo peer 219.148.164.76 enable # ipv4-family vpnv4 policy vpn-target peer vpn_rr enable peer 219.148.164.9 enable peer 219.148.164.9 group vpn_rr peer 219.148.164.76 enable peer 219.148.164.76 group vpn_rr # ipv4-family vpn-instance CTVPN3200000-JiaoHuanJiGuanLi network 10.169.130.0 255.255.255.0 network 10.169.213.0 255.255.255.0 network 10.169.214.0 255.255.255.03、检查OSPF配置。执行命令：display current-configuration configuration ospf输出举例： display current-configuration configuration ospf#ospf 1 silent-interface LoopBack0 silent-interface GigabitEthernet1/0/2.53 silent-interface GigabitEthernet1/0/3.53 silent-interface GigabitEthernet1/0/4.53 silent-interface GigabitEthernet1/0/5.53 silent-interface GigabitEthernet1/0/6.53 silent-interface GigabitEthernet3/0/1.53 silent-interface GigabitEthernet3/0/2.53 silent-interface GigabitEthernet3/0/3.53 silent-interface GigabitEthernet3/0/4.53 silent-interface GigabitEthernet3/0/5.53 silent-interface GigabitEthernet1/0/4.201 silent-interface GigabitEthernet1/0/4.202 silent-interface GigabitEthernet1/0/5.201 bandwidth-reference 40000 area 0.0.0.0 network 123.178.128.5 0.0.0.0 network 123.178.129.76 0.0.0.3 network 123.178.129.12 0.0.0.3 network 123.178.129.16 0.0.0.3 network 123.178.130.48 0.0.0.3 network 123.178.130.52 0.0.0.3 network 123.178.130.56 0.0.0.3 network 123.178.130.60 0.0.0.3 network 123.178.130.64 0.0.0.3 network 123.178.130.68 0.0.0.3 network 123.178.130.72 0.0.0.3 network 123.178.130.80 0.0.0.3 network 123.178.130.84 0.0.0.3 network 123.178.130.88 0.0.0.3 network 123.178.136.160 0.0.0.3 network 123.178.136.148 0.0.0.3#4、检查IS-IS配置。执行命令：display current-configuration configuration isis输出举例： display current-configuration configuration isisisis 1 is-level level-2 cost-style wide network-entity 86.7923.2191.4816.4041.00 import-route direct route-policy 1 import-route ospf 1 cost 50 route-policy import-i