搜索
武汉电信IPTV第二平面华为SRNE40E-X配置规范第1页共21页华为SRNE40E-X配置规范地址池分担:每对SR两个地址池，地址池1在SR1主用，地址池2在SR2主用域名：创建两个不同的域，域tv01绑定地址池1，域tv02绑定地址池2.接口绑定：在绑定到不同的下行接口路由发布：通过BGP引入UNR路由发布业务地址，发布时设置策略:地址池1，SR1优先，地址池2，SR2上优先。隧道采用lsp隧道，优选SR之间链路bfd名称:vrrp1001,vrrp1002...bfd标识符：local和remote设置相同1001,1002,1003,1004...vrrpid:同一台交换机设置不同101,102；不同交换机可以重复使用，vrrpID由于设备限制，相同的ID只能重复16次，操作16个就无法配置，依次增加。remote-backup-profile名称：按交换机机名称+链路组的英文（first，second）地址池名称：TV01TV02TV03TV04....域名：TV01与TV02绑定到不同下行口实现分担，TV01在SR1上主用，TV02在SR2上主用#clocktimezoneBJTadd08:00:00本地时区信息进行设置，配置信息里看不见//该配置表示把ME60的时区配置成东八区（即是北京时间）#sysnameWH-WH-YFC-SR-1.M2N.NE40E#multicastrouting-enable使能组播路由#multicastload-splittingsource-group组播负载分担#user-groupiptv配置IPTV用户组#slot1启用单板BAS功能basenable#Bfd启用BFD#superpasswordlevel3cipherdjttdkl#info-centersourcedefaultchannel2loglevelwarning配置把warning等级以上的日志信息送往日志主机info-centerloghostsourceLoopBack0info-centerloghost58.53.191.132facilitylocal4info-centerloghost58.53.191.131facilitylocal4info-centerloghost221.232.247.45facilitylocal2info-centerloghost202.103.28.3###//与认证服务器相同武汉电信IPTV第二平面华为SRNE40E-X配置规范第2页共21页radius-serversourceinterfaceLoopBack0radius-servergrouptelnet_authradius-serverauthentication202.103.28.1381645weight0radius-serverauthentication202.103.28.1391645weight0radius-serveraccounting202.103.28.1381646weight0radius-serveraccounting202.103.28.1391646weight0radius-servershared-keywhdxwlb123undoradius-serveruser-namedomain-included＃ipvpn-instancehbitmsroute-distinguisher4809:26000vpn-target4809:2600001export-extcommunityvpn-target4809:2600000import-extcommunity#mplslsr-id221.235.39.249本设备的LoopBack0地址mpls全局模式下使能mpls，进入MPLS视图lsp-triggerhost//只对32位地址分配MPLSLDP标签#mplsldp全局使能LDP，并创建LDP的公网实例#isis27graceful-restartis-levellevel-2cost-stylewidetimerlsp-generation1120配置定时器flash-floodlevel-2network-entity86.5125.0027.2212.3503.9249.00LOOPBACK地址is-nameWH-WH-YFC-SR-1.M2N.NE40E打开IS-IS动态主机名交换功能preference150timerspf150100log-peer-change记录邻居变化maximumload-balancing8最大ECMP路径数设为8条timerlsp-max-age65535配置LSP定时器timerlsp-refresh32768配置LSP定时器set-overloadon-startup300#aclnumber2000telnet访问控制列表rule0permitsource202.103.24.00.0.0.255rule1permitsource202.103.29.00.0.0.255rule2permitsource202.103.26.00.0.0.255rule3permitsource202.103.28.00.0.0.255rule4permitsource219.140.254.00.0.0.255rule5permitsource59.175.240.00.0.15.255rule6permitsource221.232.248.00.0.7.255rule7permitsource202.103.37.00.0.0.255rule8permitsource61.183.4.1600.0.0.31武汉电信IPTV第二平面华为SRNE40E-X配置规范第3页共21页rule9permitsource10.16.0.00.15.255.255rule10permitsource111.175.224.00.0.3.255rule11permitsource111.175.232.00.0.7.255rule12permitsource111.175.240.00.0.15.255rule13permitsource58.49.0.00.0.7.255rule14permitsource58.49.8.00.0.0.255rule15permitsource58.49.9.00.0.0.255rule16permitsource58.53.191.580rule17permitsource221.232.247.450rule18permitsource61.183.6.220rule19permitsource221.235.39.00.0.0.255rule100deny#aclnumber2001snmp访问控制列表rule0permitsource202.103.24.00.0.0.255rule1permitsource219.140.254.00.0.0.255rule2permitsource202.103.28.00.0.0.255rule3permitsource202.103.37.160.0.0.15rule100deny#aclnumber2005snmp访问控制列表rule10permitsource202.103.28.00.0.0.15rule20permitsource202.103.37.160.0.0.15rule30permitsource58.53.191.00.0.0.255rule100deny#aclnumber3030rule10permitipdestination239.254.96.00.0.0.255#aclnumber3100rule5permittcpdestination-porteqechorule10permittcpdestination-porteqCHARgenrule15permitudpdestination-porteq19rule20permittcpdestination-porteqfinger＃aclnumber6030针对用户组iptv的允许访问控制列表rule5permitipsourceip-address121.60.244.00.0.3.255destinationuser-groupiptvrule10permitipsourceip-address121.60.248.00.0.3.255destinationuser-groupiptvrule15permitipsourceip-address121.60.252.00.0.3.255destinationuser-groupiptvrule20permitipsourceip-address121.60.236.00.0.3.255destinationuser-groupiptvrule25permitipsourceip-address121.60.240.00.0.3.255destinationuser-groupiptvrule30permitipsourceip-address116.210.252.00.0.0.255destinationuser-groupiptvrule35permitipsourceip-address116.210.253.00.0.0.255destinationuser-groupiptvrule40permitipsourceip-address27.29.255.00.0.0.255destinationuser-groupiptv#aclnumber6031武汉电信IPTV第二平面华为SRNE40E-X配置规范第4页共21页rule5permitipdestinationuser-groupiptv#定义流trafficclassifierpermitiptvoperatoror//定义类（类的作用是匹配数据流）if-matchacl6030trafficclassifierdenyiptv-internetoperatororif-matchacl6031#定义动作默认为permittrafficbehaviorpermit定义一个流行为,名字是permit（流行为的名字是可以随便取的，如果该流行为下什么也不配，默认的动作是permit)trafficbehaviordenydeny#定义策略trafficpolicy1share-modeclassifierpermitiptvbehaviorpermitclassifierdenyiptv-internetbehaviordeny#traffic-policy1inboundtraffic-policy1outbound#slot1cpu-defendpolicy4适用于LPUG单板（policy4-10）＃cpu-defendpolicy4适用于LPUG单板（policy4-10）blacklistacl3100#slot2cpu-defendpolicy14适用于LPUF-20单板（policy14-20）＃cpu-defend-policy14blacklistacl3100#dhcp-servergrouptv01SR1上主用dhcp-server61.183.4.146dhcp-serversourceinterfaceLoopBack0dhcp-servergiaddrip-address27.29.24.1#dhcp-servergrouptv02SR2上主用，本期暂时不用创建dhcp-server61.183.4.146dhcp-serversourceinterfaceLoopBack0dhcp-servergiaddrip-address27.29.28.1#ippooltv01basremoteSR1上主