《se800几个常见的配置》由会员分享，可在线阅读，更多相关《se800几个常见的配置（6页珍藏版）》请在金锄头文库上搜索。
1、1、 admin_acl 的配置ip access-list admin_aclseq 10 permit ip 221.2.128.0 0.0.7.255 anyseq 20 permit ip 221.2.141.0 0.0.0.255 anyseq 30 permit ip 218.56.9.192 0.0.0.15 anyseq 31 permit ip 221.2.138.48 0.0.0.15 anyseq 32 permit ip host 210.52.3.12 anyseq 40 deny tcp any any eq telnetseq 50 deny tcp any an
2、y eq sshseq 60 deny tcp any any eq ftpseq 70 deny tcp any any eq ftp-dataseq 80 deny tcp any any eq 161seq 90 deny udp any any eq tftpseq 91 deny udp any any eq snmpseq 100 permit ip any any!admin-access-group admin_acl in count log2、 用户绑定interface one multibindip address 100.1.1.1/24subscriber name
3、 dslampassword dslamip address 100.1.1.2ip address 100.1.1.3ip address 100.1.1.4ip address 100.1.1.5ip address 100.1.1.6port ethernet 1/7no shutdownencapsulation dot1qdot1q pvc 100 bind subscriber dslamlocal password dslam3、 L2TP 配置context tunnel_mi domain libellotest1 domain libellotest2 ! no ip do
4、main-lookup ! interface To_MI_LNS1 ip address 192.168.18.113/28 no logging console aaa authentication subscriber none ! subscriber default tunnel domain service telnet client ! l2tp-peer name MI_LNS1 media udp-ip remote ip 192.168.18.114 local 192.168.18.1 13 function lac-only local-name MT_LAC1 tun
5、nel-auth key mi_access1 ! l2tp-peer name MI_LNS2 media udp-ip remote ip 192.168.18.114 local 192.168.18.1 13 local-name MT_LAC2 function lac-only tunnel-auth key mi_access2 ! l2tp-group name grp_routeur1 algorithm priority deadtime 5 domain libellotest1 domain libellotest2 peer name MI_LNS1 preferen
6、ce 10 peer name MI_LNS2 preference 20 4、The network topology as shown below:the SE800 configuration is attached in the file config.txtSE800 function as LTS box, using unnamed peer accept l2tp tunnel from LAC, and switch the tunnel to LNS. LNS terminate PPPoE session and assign IP address. In the SE8
7、00, the tunnel between LAC and LTS is created on loopback ipaddress, 1.1.1.1 and 10.10.10.10, the slot 11 and slot 11 are GE module and used for route traffic between 1.1.1.1 and 10.10.10.10, card 11 and card 12 configed slot redundant, with same priority. When slot 11 and slot 12 are both online, 1
8、000 pppoe session from LAC (from tester) was load balanced on slot 11 and slot 12, as shown belowlocalSE3#show l2tp global ipcPPA Name Registration Time Chg# Ccts Tun-Cr Tun-Del- - - - - -Slot 2 IPPA Mon Sep 27 15:32:40 2 6 3 0Slot 2 EPPA Mon Sep 27 15:32:41 4 6 3 0Slot 11 IPPA Mon Sep 27 15:32:41 6
9、 502 3 0Slot 11 EPPA Mon Sep 27 15:32:42 10 502 3 0Slot 12 IPPA Mon Sep 27 15:32:41 8 502 3 0Slot 12 EPPA Mon Sep 27 15:32:42 12 502 3 0localSE3#the I remove card 11, at begin, all session was switch over to slot 12. as shown below4、 对于 PPP 用户，QOS 策略要施加到帐号上，在 pvc 上施加策略对 ppp 用户不起作用。dscp 40 (101)对应 4
10、队列的队列 1。5、用户从一个 PVC，建立两个 PPPOE 连接，一个到 contextpppoe（普通上网） ，一个到context iptv（IPTV 视频） 。按不同的用户和应用，数据流被分为四个级别，分别打上 DSCP 标记：普通上网df，固定 IP 用户 cs3 ，iptvcs4 在上联的 GE10/1，下联 DSLAM 的 ATM3/1，eth5/1 上应用队列策略。在 ATMPVC 上为保证有 IPTV 需求的用户的带宽，将相应 PVC 上应用 vbr。各种配置如下：context pppoe subscriber defaultqos policy policing inte
11、rnet 进入 VR 的数据包打 DSCP 标记qos policy internet policing定义 ingress 的 qos policyrate 1000 burst 100conform mark dscp df*port ethernet 10/1在上联口应用优化级队列 test-pqqos policy queuing test-pqatm profile vbr-rt定义 vbr-rt 的 atm profileshaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1qos policy queuing
12、test-atmwfq在下联 ATM 口应用 atm wfq 队列atm pvc explicit 107:101 through 107:932 profile vbr-rt encapsulation pppoe在相应 pvc 上应用 profile vbr-rtport eth 5/1qos policy queuing test-edrr在下联 100M 的端口上应用 edrr 队列context iptv subscriber defaultqos policy policing iptv进入 VR 的数据包打 DSCP 标记qos policy iptv policing定义 in
13、gress 的 qos policyrate 1000 burst 100conform mark dscp cs4*port ethernet 10/1在上联口应用优化级队列 test-pqqos policy queuing test-pqatm profile vbr-rt定义 vbr-rt 的 atm profileshaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1qos policy queuing test-atmwfq在下联 ATM 口应用 atm wfq 队列atm pvc explicit 107:10
14、1 through 107:932 profile vbr-rt encapsulation pppoeport eth 5/1qos policy queuing test-edrr在下联 100M 的端口上应用 edrr 队列context b1483qos policy fixip policing定义固定 IP 用户的 DSCP 值mark dscp cs3*atm profile vbr-nrt定义 vbr-nrt 的 atm profileshaping vbr-rt pcr 2000 cdvt 1000 scr 1500 bt 1000port atm 3/1qos policy queuing test-atmwfq在下联 ATM 口应用 atm wfq 队列（egress ）atm pvc 0 410 profile vbr-nrt encapsulation route1483qos policy policing fixip 在 pvc 上应用策略给该 pvc 数据打 DSCP 标记（ingress）port eth 5/1qos policy queuing test-edrr 在下联 100M 的端口上应用 edrr 队列（egress）dot1q pvc 2158qos policy policing fixip
