H3CMSR30-11F配置讲解.doc

H3C MSR30-11F部署讲解 H3C西安办事处 崔凌国MSR（Multiple Services Routers）多业务开放路由器是杭州华三通信技术有限公司（以下简称“H3C”）专门面向行业分支机构和大中型企业而推出的新一代网络产品。MSR集数据安全、语音通信、视频交互、业务定制等功能于一体，能够在企业网络应用不断丰富的形势下将多元业务方便的部署于同一节点，不仅能够最大程度的避免网络中多设备繁杂异构问题，而且极大降低了企业网络建设的初期投资与长期运维成本。MSR 30-11F路由器则是最为典型的路由交换一体化设备，通过支持48口以太网交换接口的方式实现交换接口的灵活配置和交换接口高密度的要求，MSR 30-11F是目前业界能够在1U高度的设备上提供最大密度交换接口的路由器产品。该设备将功能强大的路由器设备和专业的交换设备有机地结合在一起，能够为用户提供最高性价比的路由交换一体化的应用和组网。一、MSR30-11F外部接口简介 图1 H3C MSR 30-11F路由器接口简介二、模块线缆及其连接介绍 线缆名称线缆描述线缆适用的模块线缆实物图片/备注同异步串口线缆同异步串口(SA)V.35 DTE电缆(DB28) SIC-1SAEMIM/FIC-2SAEMIM/FIC-4SAEMIM/FIC-8SAE同异步串口线缆同异步串口(SA)V.24 DTE电缆(DB28) SIC-1SAEMIM/FIC-2SAEMIM/FIC-4SAEMIM/FIC-8SAE异步串口电缆SIC-16AS 通讯电缆-0.3米-DB28公转接4*RJ45插座SIC-16AS异步串口电缆SIC-8AS通信电缆-0.28m-D60公-8*CC8C0.32P296U(S)-(8*网口8位-)-配RJ45母座SIC-8AS4E1模块转接电缆MIM/FIC-4E1转接电缆(75欧)MIM/FIC-4E1MIM/FIC-4E1-FE1接口电缆E1接口电缆/2*BNC(75欧)3m SIC-1E1-FSIC-EPRISIC-1VE1MIM/FIC-1/2/4E1MIM/FIC-1/2/4E1-FMIM/FIC-1/2VE1E1接口电缆E1接口电缆/1*RJ45(120欧)3m SIC-1E1-FSIC-EPRISIC-1VE1MIM/FIC-1/2/4E1MIM/FIC-1/2/4E1-FMIM/FIC-1/2VE1SIC-2E1-F接口电缆2E1接口电缆-DB15 Male/4*BNC(75欧)-3mSIC-2E1-FE1线缆转接盒E1电缆120欧-75欧转接盒 120欧到75欧的E1线缆转接BNC同轴连接器同轴连接器-BNC-75-直/插座-双母-与E1电缆BNC公插头连接 75欧E1线缆备份电缆AUX接口电缆(RJ45 to DB9/DB25) 路由器的配置口路由器的AUX口路由器的异步模块路由器的同异步模块三、设备配置讲解E0/0、E0/1以及广域网接口的配置与其他路由器配置完全一样，这里就不在介绍，主要介绍48个以太口（即E0/2E0/49）的配置。E0/2E0/49与三层交换机的接口完全一样，物理接口本身不能够直接配置IP地址，如何使用请见下面的实例：建行的网点有办公和生产两种应用，客户端直接接入在路由器的48个以太口上。H3C vlan 2H3C -vlan2 port ethernet 0/2 to ethernet 0/25H3C vlan 3H3C vlan3 port ethernet 0/26 to ethernet 0/49H3C interface vlan-interface 2H3C -Vlan-interface2 ip address 1.1.0.1 255.255.255.0H3C interface vlan-interface3H3C -Vlan-interface3 ip address 2.1.0.1 255.255.255.0附录一：建行网点设备完整配置 # # version 5.20, Release 1719P02# sysname jianhang# domain default enable system#vlan 1#vlan 44#vlan 191#radius scheme system#domain system access-limit disable state active idle-cut disable self-service-url disable#user-group system#local-user admin password cipher 5W97B/VOV+Q=QMAF41! authorization-attribute level 3 service-type telnet#interface Analogmodem2/0 async mode protocol link-protocol ppp dialer enable-circular dialer-group 1 dialer circular-group 0#interface Aux0 async mode flow link-protocol ppp#interface Dialer0 link-protocol ppp ppp chap user jianhang ppp chap password cipher 5W97B/VOV+Q=QMAF41! ip address 74.160.210.51 255.255.255.0 dialer enable-circular dialer-group 1 dialer route ip 74.160.210.1 3260499#interface Ethernet0/0 port link-mode route#interface Ethernet0/1 port link-mode route#interface Serial1/0 link-protocol hdlc ip address 74.160.226.10 255.255.255.252#interface Serial1/1 link-protocol hdlc ip address 74.160.225.10 255.255.255.252#interface NULL0#interface Vlan-interface44 ip address 74.160.58.1 255.255.255.192#interface Vlan-interface191 ip address 74.160.179.1 255.255.255.192#interface Ethernet0/2 port link-mode bridge port access vlan 44#interface Ethernet0/3 port link-mode bridge port access vlan 44#interface Ethernet0/4 port link-mode bridge port access vlan 44#interface Ethernet0/5 port link-mode bridge port access vlan 44#interface Ethernet0/6 port link-mode bridge port access vlan 44#interface Ethernet0/7 port link-mode bridge port access vlan 44#interface Ethernet0/8 port link-mode bridge port access vlan 44#interface Ethernet0/9 port link-mode bridge port access vlan 44#interface Ethernet0/10 port link-mode bridge port access vlan 44#interface Ethernet0/11 port link-mode bridge port access vlan 44#interface Ethernet0/12 port link-mode bridge port access vlan 44#interface Ethernet0/13 port link-mode bridge port access vlan 44#interface Ethernet0/14 port link-mode bridge port access vlan 44#interface Ethernet0/15 port link-mode bridge port access vlan 44#interface Ethernet0/16 port link-mode bridge port access vlan 44#interface Ethernet0/17 port link-mode bridge port access vlan 44#interface Ethernet0/18 port link-mode bridge port access vlan 44#interface Ethernet0/19 port link-mode bridge port access vlan 44#interface Ethernet0/20 port link-mode bridge port access vlan 44#interface Ethernet0/21 port link-mode bridge port access vlan 44#interface Ethernet0/22 port link-mode bridge port access vlan 44#interface Ethernet0/23 port link-mode bridge port access vlan 44#interface Ethernet0/24 port link-mode bridge port access vlan 44#interface Ethernet0/25 port link-mode bridge port access vlan 44#interface Ethernet0/26 port link-mode bridge port access vlan 191#interface Ethernet0/27 port link-mode bridge port access vlan 191#interface Ethernet0/28 port link-mode bridge port access vlan 191#interface Ethernet0/29 port link-mode bridge port access vlan 191#interface Ethernet0/30 port link-mode bridge port access vlan 191#interface Ethernet0/31 port link-mode bridge port access vlan 191#interface Ethernet0/32 port link-mode bridge port access vlan 191#interface Ethernet0/33 port link-mode bridge port access vlan 191#interface Ethernet0/34 port link-mode bridge port access vlan 191#interface Ethernet0/35 port link-mode bridge port access vlan 191#interface Ethernet0/36 port link-mode bridge port access vlan 191#interface Ethernet0/37 port link-mode bridge port access vlan 191#interface Ethernet0/38 port link-mode bridge port access vlan 191#interface Ethernet0/39port link-mode bridge port access vlan 191#interface Ethernet0/40 port link-mode bridge port access vlan 191#interface Ethernet0/41 port link-mode bridge port access vlan 191#interface Ethernet0/42 port link-mode bridge port access vlan 191#interface Ethernet0/43 port link-mode bridge port access vlan 191#interface Ethernet0/44port link-mode bridge port access vlan 191#interface Ethernet0/45 port link-mode bridge port access vlan 191#interface Ethernet0/46port link-mode bridge port access vlan 191#Dinterface Ethernet0/47 port link-mode bridge port access vlan 191#interface Ethernet0/48 port link-mode bridge port access vlan 191#interface Ethernet0/49 port link-mode bridge port access vlan 191# ip route-static 0.0.0.0 0.0.0.0 74.160.226.9 ip route-static 0.0.0.0 0.0.0.0 74.160.225.9 preference 200 ip route-static 0.0.0.0 0.0.0.0 74.160.210.1 preference 250# dialer-rule 1 ip permit#user-interface tty 32 modem bothuser-interface aux 0 authentication-mode password set authentication password cipher 5W97B/VOV+Q=QMAF41!user-interface vty 0 4 authentication-mode scheme set authentication password cipher 5W97B/VOV+Q=QMAF41!附录二：拨号配置1、使用AUX口作为拨号口注意：由于MSR30-11F的console与AUX共用一个接口，因此使用的AUX口，就不能使用console，只能通过telnet远程配置设备。dialer-rule 1 ip permit#interface Aux0 async mode protocol link-protocol ppp dialer enable-circular dialer circular-group 0#interface Dialer0 link-protocol ppp ppp chap user xhnode ppp chap password cipher F)KQaTWBC/5W77WI/A! ip address 8.201.162.216 255.255.252.0dialer enable-circular dialer-group 1 dialer route ip 8.201.160.1 broadcast 88352014#user-interface aux 0 modem both speed 38400 (该值可以根据实际情况适当调整，数值太小，拨号会有延时)2、使用专用拨号口（Analogmodem）拨号2.1、组网需求两台MSR路由器通过PSTN互连，在路由器上配置轮循DCC，通过modem拨号，互相进行CHAP验证后，使能够连接到对端。2.2、组网图设备清单：MSR路由器 2台2.3、配置步骤RT1 配置# sysname RT1#dialer-rule 1 ip permit /配置拨号访问控制列表#interface Analogmodem2/0async mode protocol /修改async mode 为 protocol方式 link-protocol ppp dialer enable-circular /启动轮询DCC dialer-group 1 /引用拨号访问控制列表 dialer circular-group 0 /将接口加入Dialer Circular Group0#interface Dialer0 link-protocol pppppp chap user 1422password simple hello ip address 1.1.1.1 255.255.255.0 dialer enable-circular /启动轮询DCC dialer-group 1 /引用拨号访问控制列表 dialer route ip 1.1.1.2 1425 /配置呼叫一个对端的拨号串#user-interface tty 32 modem both /同时允许Modem呼入和呼出#2.4、配置关键点1、 一定要配置拨号访问控制列表；2、 上面例子仅列出使用dialer口实现拨号的配置而不是直接在物理口上配置，是因为采用dialer口有更多的好处。一旦拨号的物理口特别多，比如12am接口等，每个物理口都要配置，非常麻烦。强烈推荐使用dialer口配置，无论是起初的配置还是后期的维护都会方便很多；3、 默认禁止呼入呼出，需要在user-interface里面配置允许呼入或呼出，若配置modem both，则允许呼入呼出。4、 CHAP验证双方的密码要一致。