SR7750配置步骤-自己总结滴

合集下载

Alcatel 7750 设备配置指南

Alcatel 7750 SR 设备配置指南1.设备配置命令说明 (2)3.1 S YSTEM基本配置 (2)3.2 L OG配置 (3)3.3 P ORT配置 (3)3.4 ISIS协议配置 (5)3.5 M PLS、LDP协议配置 (6)3.6 S ECURITY 配置 (7)3.7 VPN-BGP配置 (9)3.8 P OLICY配置 (10)3.9 S ERVICE配置 (11)3.10 IES业务配置 (11)3.11 VPLS 业务配置 (13)3.12 VPRN业务配置 (15)2.故障排除方法说明 (17)2.1 光路正常但PORT端口DOWN (17)2.2 PING 不通对端地址 (17)2.3 ISIS邻接关系无法建立 (18)2.4 BGP邻居无法正常建立 (18)2.5 BGP表中有路由，但路由没有被放进VPN路由表中 (18)2.6 VPN中用户CE设备无法访问远端 (18)3.业务运行状态检查命令 (19)3.1 查看S ERVICE业务运行状态 (19)3.2 检查路由器接口运行状态 (19)3.3 查看设备P ORT端口运行状态 (20)3.4 查看设备MAC地址表信息 (21)4.删除SERVICE配置步骤 (22)1.设备配置命令说明3.1 System基本配置1．chassis-mode 要配置为C，以支持新的feature。

2．telnet 的session限制为设置为最大数7。

3．时区自定义为BEIJ 08。

配置示例：systemname "YZ-SYL-R-AC7750-01"chassis-mode csnmppacket-size 9216exitlogin-controltelnetinbound-max-sessions 7outbound-max-sessions 7exitno login-bannerexittimesntpshutdownexitzone BEIJ 08exitthresholdsrmonexitexitexit检查命令：show chassis 查看chassis mode是否为C。

7750 SR OS 路由器配置指南.pdf_1701701281.3433275说明书

PrefaceAbout This GuideThis guide describes logical IP routing interfaces, virtual routers, IP and MAC-based filtering, andcflowd support and presents configuration and implementation examples.This document is organized into functional chapters and provides concepts and descriptions of theimplementation flow, as well as Command Line Interface (CLI) syntax and command usage.AudienceThis manual is intended for network administrators who are responsible for configuring therouters. It is assumed that the network administrators have an understanding of networkingprinciples and configurations. Protocols, standards, and services described in this manual includethe following:•IP router configuration•Virtual routers•IP-based filters•CflowdPrefaceList of Technical PublicationsThe documentation set is composed of the following books:•7750 SR OS Basic System Configuration GuideThis guide describes basic system configurations and operations.•7750 SR OS System Management GuideThis guide describes system security and access configurations as well as event loggingand accounting logs.•7750 SR OS Interface Configuration Guide•7750 SR OS Router Configuration GuideThis guide describes logical IP routing interfaces and associated attributes such as an IPaddress, as well as IP and MAC-based filtering, and VRRP and Cflowd.•7750 SR OS Routing Protocols GuideThis guide provides an overview of routing concepts and provides configuration examplesfor RIP, OSPF, IS-IS, BGP, and route policies.•7750 SR OS MPLS GuideThis guide describes how to configure Multiprotocol Label Switching (MPLS) and LabelDistribution Protocol (LDP).•7750 SR OS Services GuideThis guide describes how to configure service parameters such as service distributionpoints (SDPs), customer information, and user services.•7750 SR OAM and Diagnostic GuideThis guide describes how to configure features such as service mirroring and Operations,Administration and Management (OAM) tools.•7750 SR OS Triple Play GuideThis guide describes Triple Play services and support provided by the 7750 SR andpresents examples to configure and implement various protocols and services.•7750 SR OS Quality of Service GuideThis guide describes how to configure Quality of Service (QoS) policy management.•OS Multi-Service ISA GuideThis guide describes services provided by integrated service adapters such as ApplicationAssurance, IPSec, ad insertion (ADI) and Network Address Translation (NAT).•7750 SR-OS RADIUS Attributes Reference GuidePreface This guide describes all supported RADIUS Authentication, Authorization and Accounting attributes.PrefaceTechnical SupportIf you purchased a service agreement for your router and related products from a distributor orauthorized reseller, contact the technical support staff for that distributor or reseller for assistance.If you purchased an Alcatel-Lucent service agreement, contact your welcome center at:Web: /wps/portal/supportReport documentation errors, omissions and comments to:**************************************Include document name, version, part number and page(s) affected.。

7750 SR-Series 路由器基本系统配置指南说明书

PrefaceAbout This GuideThis guide describes system concepts and provides configuration explanations and examplesto configure SR-OS boot option file (BOF), file system and system management functions.This document is organized into functional chapters and provides concepts and descriptions ofthe implementation flow, as well as Command Line Interface (CLI) syntax and commandusage.AudienceThis manual is intended for network administrators who are responsible for configuring the7750 SR-Seriesrouters. It is assumed that the network administrators have an understanding ofnetworking principles and configurations. Protocols, standards, and processes described in thismanual include the following:•CLI concepts•File system concepts•Boot option, configuration, image loading, and initialization procedures•Basic system management functions such as the system name, router location andcoordinates, and CLLI code, time zones, Network Time Protocol (NTP), SimpleNetwork Time Protocol (SNTP), and synchronization properties7750 SR OS Basic System Configuration GuidePrefaceList of Technical PublicationsThe 7750 SR documentation set is composed of the following books:•7750 SR OS Basic System Configuration GuideThis guide describes basic system configurations and operations.•7750 SR OS System Management GuideThis guide describes system security and access configurations as well as event loggingand accounting logs.•7750 SR OS Interface Configuration Guide•7750 SR OS Router Configuration GuideThis guide describes logical IP routing interfaces and associated attributes such as an IPaddress, as well as IP and MAC-based filtering, and VRRP and Cflowd.•7750 SR OS Routing Protocols GuideThis guide provides an overview of routing concepts and provides configuration examplesfor RIP, OSPF, IS-IS, BGP, and route policies.•7750 SR OS MPLS GuideThis guide describes how to configure Multiprotocol Label Switching (MPLS) and LabelDistribution Protocol (LDP).•7750 SR OS Services GuideThis guide describes how to configure service parameters such as service distributionpoints (SDPs), customer information, and user services.•7750 SR OAM and Diagnostic Guide•This guide describes how to configure features such as service mirroring and Operations, Administration and Management (OAM) tools.•7750 SR OS Triple Play GuideThis guide describes Triple Play services and support provided by the 7750 SR andpresents examples to configure and implement various protocols and services.•7750 SR OS Quality of Service GuideThis guide describes how to configure Quality of Service (QoS) policy management.•OS Multi-Service ISA GuideThis guide describes services provided by integrated service adapters such as ApplicationAssurance, IPSec, ad insertion (ADI) and Network Address Translation (NAT).•7750 SR-OS RADIUS Attributes Reference GuideThis guide describes all supported RADIUS Authentication, Authorization andAccounting attributes.Page 127750 SR OS Basic System Configuration GuidePrefaceTechnical SupportIf you purchased a service agreement for your 7750 SR router and related products from adistributor or authorized reseller, contact the technical support staff for that distributor or resellerfor assistance. If you purchased an Alcatel-Lucent service agreement, contact your welcomecenter:/wps/portal/supportReport documentation errors, omissions and comments to:**************************************Include document name, version, part number and page(s) affected.7750 SR OS Basic System Configuration Guide Page 13PrefacePage 147750 SR OS Basic System Configuration Guide。

7750BRAS维护与配置

7750SR/BRASI护与配置（SR功能篇）1. 设备配置命令说明 (4)1.1. S YSTEM本配置 (4)1.2. L OG!己置 (7)1.3. P ORT®置 (9)1.3.1 上行端口和互联POR㈱口配置 (9)1.3.2下联端口配置 (10)1.4. IGP协议配置 (14)1.4.1 OSPF协议配置 (14)1.4.2 ISIS 协议配置 (17)1.5. MLS LDP协议配置 (19)1.6. 设备安全配置（SECURITY (24)1.6.1 设备访问安全 (24)1.6.2 主CPU保护 (28)1.7. VPN-BGP配置 (35)1.8. P OLIC 丫配置 (38)1.9. 业务配置 (40)1.9.1 IES 业务配置 (41)1.9.2 二层VPN vpls 业务配置 (45)1.9.3三层VPN VPR业务配置 (48)1.10. SNM甫己置 (52)1.11. C FLOW配置 (53)2. 业务运行状态检查命令 (55)2.1查看设备P OR调口运行状态 (55)2.1.1 查看设备所有Port端口运行状态 (55)2.1.2 查看设备单个Port端口运行状态 (57)2.2 查看S ERVICE^务运行状态 (60)2.3检查路由器接口运行状态 (62)2.3.1 查看所有接口状态 (62)2.3.1 查看单个业务的接口状态 (64)2.4查看设备MAC地址表信息 (66)2.4.1 查看所有MA弛址表 (66)2.4.2 查看单个业务的MAC%址表 (69)2.5查看设备路由表信息 (70)2.5.1 查看所有路由表地址表 (70)2.5.2查看某个业务的路由表 (71)3. 故障排除方法说明 (73)3.1 光路正常但PORTED DOWN (73)3.2 PING不通对端地址 (73)3.3 ISIS邻接关系无法建立 (73)3.4 BGP^S居无法正常建立 (73)3.5 BG咪中有路由，但路由没有被放进VPN路由表中 (73)3.6 VPN中用户CE设备无法访问远端 (74)3.7 VPLS故障分析 (74)3.7.1 按照下列配置做mac-filter (74)3.7.2 在VPLS中应用MAC-FILTER (75)3.8.3 通过分析LO俄出问题 (75)4删除SERVICE配置步骤 (76)4.1 删除单个SAP S ERVICE^置步骤 (76)4.2删除多个SAP S ERVICE®己置步骤 (76)1.设备配置命令说明1.1. System基本配置1. chassis-mode 要配置为C,以支持新的feature 。

阿尔卡特7750配置文档

上海贝尔阿尔卡特7750SR配置标准模板目录一、硬件配置 (5)1．1配置IOM卡 (5)1.1.1 查看已经插入的IOM卡的类型 (5)1.1.2正确配置IOM卡的类型 (5)1．2配置MDA卡 (5)1.2.1查看已经插入的MDA卡的类型 (5)1.2.2正确配置MDA卡的类型 (5)1．3配置MDA端口 (6)1．3．1 POS端口配置 (6)1．3．2 以太口配置 (6)1．3．3 查看port信息 (6)二、设备管理配置 (7)2．1配置路由器名称、LOCATION、CONTACT (7)2．2配置系统时间 (7)2．3配置SNTP (7)2．3．1 打开SNTP(简单网络时间协议) (7)2．3．2 配置SNTP地址 (7)2．4配置SR为TELNET服务器 (7)2．5配置TELNET登陆限制 (8)2．5．1 配置默认动作为允许，因为是所有上主控板的流量。

(8)2．5．2 配置允许IP段的ACL，配置源IP，协议，目的端口 (8)2．5．3 配置一条拒绝的ACL，拒绝其他IP段。

(8)2．6配置用户 (8)2．6．1 配置用户名 (8)2．6．2 配置用户密码 (8)2．6．3 配置用户登陆方式 (9)2．6．4 配置用户所属的组 (9)2．7配置LOG (9)2．7．1 配置log－id (9)2．7．2 配置log信息类型 (9)2．7．3 配置记录log的方式 (9)2．7．4 配置记录log方式的具体配置 (9)2．8配置SNMP (10)2.9配置主备板同步 (10)2．9．1 配置自动同步 (10)2．9．2 手工同步命令 (10)2.10配置空闲时间 (10)2.11配置ANTI－SPOOF (10)三、路由配置 (11)3．1配置路由器系统地址 (11)3．2配置网络接口 (11)3．2．2 配置IP地址 (11)3．2．3 配置关联端口 (11)3．2．4 查看配置的路由器接口 (11)3．3配置静态及OSPF路由协议 (12)3．3．1 配置静态路由 (12)3．3．2 配置OSPF区域 (12)3．3．3 配置ospf接口cost值 (12)3．3．4 配置一个stub区域 (12)3．3．5 配置NSSA区域 (12)3．3．6 配置虚链路 (13)3．3．7 配置认证 (13)3.3.8配置路由聚合 (13)3.3.9 配置静态路由注入到OSPF路由协议 (13)3．3．10 查看运行在ospf协议下的接口 (14)3．3．11 查看ospf邻居建立关系 (14)3．3．12 查看ospf路由表 (14)3．4配置IS-IS (14)3．4．1 配置区域ID (14)3．4．2 配置路由器等级能力 (15)3．4．3 配置IS-IS接口 (15)3．4．4 查看ISIS下的接口 (15)3．4．5 添加已经配置到ISIS的每个网络接口 (15)3．4．6 查看ISIS邻接关系 (15)3．4．7 查看ISIS路由表 (15)3．5BGP配置 (16)3．5．1 创建AS (16)3．5．2 配置路由器 ID5 (16)3．5．3 配置 BGP (16)3．6配置POLICY (16)3．6．1 配置policy名称 (16)3．6．2 配置从静态路由分布到ospf路由协议中的policy (17)3．6．3 配置commit使之生效 (17)3．6．4 应用policy (17)3.7IP F ILTER配置 (17)3.7.1创建ip filter (17)3．7．2 指定默认动作 (17)3. 7．3 创建条目，指定动作、源、目的IP (17)3．7．4 应用ip filter (18)四、 MPLS 配置以及业务配置 (19)4．1MPLS配置 (19)4．1．1 MPLS接口配置 (19)4．1．3 配置 MPLS LSP和主路径 (19)4．1．4 查看命令 (20)4．1．5 改变每个网络接口的最大传输单元（MTU）尺寸 (20)4．2 E P IPE 配置 (20)4．2．1 创建客户并将其与提供的业务相关联 (20)4．2．2 指向客户的接口（在我们的网络中由膝上电脑表示）称为“toCustomer”，必须配置为接入接口。

阿尔卡特7750SR路由器现场维护手册

阿尔卡特7750SR路由器日常维护操作手册上海贝尔阿尔卡特股份有限公司互联网事业部二零零六年十月目录1. 总体概述................................................. 错误!未定义书签。

2. 常用软件操作............................................. 错误!未定义书签。

. 通过Console线缆连接路由器....................... 错误!未定义书签。

. SR系列路由器配置过程............................ 错误!未定义书签。

. 设备重启......................................... 错误!未定义书签。

. 路由引擎切换..................................... 错误!未定义书签。

. TiMOS软件升级步骤............................... 错误!未定义书签。

软件升级相关文件............................. 错误!未定义书签。

升级步骤..................................... 错误!未定义书签。

. 密码恢复......................................... 错误!未定义书签。

. 在CLI中获取帮助................................. 错误!未定义书签。

3. 7750SR-12 ................................................ 错误!未定义书签。

. 7750SR-12结构................................... 错误!未定义书签。

设备描述..................................... 错误!未定义书签。

SR7750典型配置案例(第二季度)

Alcatel 7750SR典型配置案例2011-4-1——2011-6-221.SR上FTTH业务的配置 (2)G配置 (5)3.epipe上的VC-Switch配置 (6)4.Filter log实现简单抓包 (7)5.cron配置 (8)6.端口或者vlan流量监控 (9)7.CPU高占用率快速故障定位 (11)■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■1.SR上FTTH业务的配置FTTH通过DHCP方式从省公司统一获取IP地址；对应的VPN（VPRN）通过CN2连接到DHCP server；各区域RT、RD、router-policy可以根据实际情况修改；，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，业务配置：*A:SR-XXX -SR7750-1>config>service>vprn# info----------------------------------------------description "CTVPN4005-E8C_IAD_DHCP"vrf-import "CTVPN4005_E8C_IAD_DHCP_import"vrf-export "CTVPN4005_E8C_IAD_DHCP_export"ecmp 4autonomous-system 65185route-distinguisher 4809:400500auto-bind ldp！连接到CN2接口interface "2_GE0/3" createaddress 172.27.128.2/30sap 2/2/7:102 createexitexit！连接到E8C接口subscriber-interface "E8C_172.27.248.0/21" createaddress 189.52.0.1/24group-interface "XianYe_E8-C_Voice-DHCP-1" createarp-populatedhcpserver 172.20.0.9 172.20.0.10trustedlease-populate 300gi-address 189.52.0.1no shutdownexitsap 2/2/9:2201.45 createexitsap 2/2/9:122.2020 createexitexitexit！与CN2的路由部署bgpexport "mpbgp_export_to_ce-ebgp"group "65185-4809"multihop 2peer-as 4809neighbor 172.27.128.1exitexitexitno shutdown路由策略配置：*A:SR-XXX-SR7750-1# show router policy CTVPN4005_E8C_IAD_DHCP_import entry 10fromprotocol bgp-vpncommunity "VPN_CTVPN4005_E8C_IAD_DHCP"exitaction acceptexitexitentry 20action rejectexit*A:SR-XXX-SR7750-1# show router policy CTVPN4005_E8C_IAD_DHCP_export entry 10fromprotocol directexittoprotocol bgp-vpnexitaction acceptcommunity add "VPN_CTVPN4005_E8C_IAD_DHCP"exitexitentry 15fromprotocol staticexittoprotocol bgp-vpnexitaction acceptcommunity add "VPN_CTVPN4005_E8C_IAD_DHCP"exitexitentry 20fromprotocol bgpexittoprotocol bgp-vpnexitaction acceptcommunity add "VPN_CTVPN4005_E8C_IAD_DHCP"exitexit*A:SR-XXX-SR7750-1# show router policy community VPN_CTVPN4005_E8C_IAD_DHCPcommunity "VPN_CTVPN4005_E8C_IAD_DHCP" members "target:4809:400500"*A:SR-XXX-SR7750-1# show router policy mpbgp_export_to_ce-ebgp entry 10fromprotocol bgp-vpnexittoprotocol bgpexitaction acceptexitexitentry 15fromprotocol ospfexittoprotocol bgpexitaction acceptexitexitentry 20fromprotocol staticexittoprotocol bgpexitaction acceptexitexitentry 25fromprotocol directexittoprotocol bgpexitaction acceptexitexit■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■G配置LAG组内的物理端口，关闭协商、1000M/duplex；LACP链路聚合控制协议（802.3ad），最好两边都支持，如果都支持就采用lacp active；在做LAG备份的时候，最好为跨IOM或者MDA；，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，port 1/1/2description "TO LAG1"ethernet no autono shutdownexitport 2/1/2description "TO LAG1"ethernet no autono shutdownexitconfig lag 1description "lag from A to B"mode accessencap-type dot1qlacp activeport 1/1/2port 2/1/2no shutdownexit查看lag状态show lag 1 detail================================================================= LAG Details================================================================= ==============Description : to-AG-22JU-T40G-------------------------------------------------------------------------------Details-------------------------------------------------------------------------------Lag-id : 1 Mode : access Adm : up Opr : up Thres. Exceeded Cnt : 8 Port Threshold : 0Thres. Last Cleared : 11/30/2010 10:41:21 Threshold Action : down Dynamic Cost : false Encap Type : dot1q Configured Address : 00:16:4d:1b:2e:f9 Lag-IfIndex : 1342177281 Hardware Address : 00:16:4d:1b:2e:f9 Adapt Qos : distribute Hold-time Down : 0.0 secLACP : enabled Mode : active LACP Transmit Intvl : fast LACP xmit stdby : enabled Selection Criteria : highest-count Slave-to-partner : disabled Number of sub-groups: 1 Forced : -System Id : 00:16:4d:1b:2d:b8 System Priority : 32768Admin Key : 32768 Oper Key : 32768Prtr System Id : 00:1e:73:97:25:60 Prtr System Priority : 32768Prtr Oper Key : 259-------------------------------------------------------------------------------Port-id Adm Act/Stdby Opr Primary Sub-group Forced Prio-------------------------------------------------------------------------------2/2/1 up active up yes 1 - 32768 2/2/2 up active up 1 - 32768 -------------------------------------------------------------------------------Port-id Role Exp Def Dist Col Syn Aggr Timeout Activity -------------------------------------------------------------------------------2/2/1 actor No No Yes Yes Yes Yes Yes Yes2/2/1 partner No No Yes Yes Yes Yes Yes Yes2/2/2 actor No No Yes Yes Yes Yes Yes Yes2/2/2 partner No No Yes Yes Yes Yes Yes Yes■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■3.epipe上的VC-Switch配置epipe即VLL，是在两点间建立虚拟专线，从协议上分析，是从一个业务接入点到另外一个业务接入点进行信令交互；对于复杂的层次网络结构，存在epipe的两个点都是SDP隧道的情况，此时的epipe只从当vc-swtiching；，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，config service epipe 100010 vc-swtiching customer 1 createspoke-sdp 101:100010 createexitspoke-sdp 103:100010 createexitexit■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■4.Filter log实现简单抓包由于抓包通常需要到现场，同时需要有电口连接抓包的电脑，通过mirror进行数据包的获取；在处理问题的时候，可以利用filter log的功能实现简单匹配数据包的日志，实现简单抓包对网络问题进行问题；完成抓包后，必须在sap点上取消filter配置；，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，config filterip-filter 10 createdefault-action forward缺省转发entry 20 creatematch 匹配所有ip包exitlog 101 匹配的记录保持在filter log中action forward 匹配的数据转发exitexit/config service vpls 1001sap 1/1/3:100.1001 createingressfilter ip 10exitegressfilter ip 10exitexit查看匹配结果show filter log 1012010/12/03 17:11:50 Mac Filter: 20:10 Desc:SAP: 1/1/3:11.0 Direction: Ingress Action: DropSrc MAC: 00-14-0d-fd-13-1d Dst MAC: ff-ff-ff-ff-ff-ff EtherType: 0806 ARP: Sender MAC: 00-14-0d-fd-13-1d Target MAC: 00-00-00-00-00-00 Sender IP: 10.156.3.55 Target IP: 10.156.1.255 OpCode: Request2010/12/03 17:11:51 Mac Filter: 20:10 Desc:SAP: 1/1/3:11.0 Direction: Ingress Action: DropSrc MAC: 00-14-0d-fd-13-1d Dst MAC: ff-ff-ff-ff-ff-ff EtherType: 0806 ARP: Sender MAC: 00-14-0d-fd-13-1d Target MAC: 00-00-00-00-00-00 Sender IP: 10.156.3.55 Target IP: 10.156.1.255 OpCode: Request2010/12/03 17:11:51 Mac Filter: 20:10 Desc:SAP: 1/1/3:11.0 Direction: Ingress Action: DropSrc MAC: 00-14-0d-fd-13-1d Dst MAC: ff-ff-ff-ff-ff-ff EtherType: 0806 ARP: Sender MAC: 00-14-0d-fd-13-1d Target MAC: 00-00-00-00-00-00 Sender IP: 10.156.3.55 Target IP: 10.156.1.255 OpCode: Request2010/12/03 17:11:51 Mac Filter: 20:10 Desc:SAP: 1/1/3:11.0 Direction: Ingress Action: DropSrc MAC: 00-14-0d-fd-13-1d Dst MAC: ff-ff-ff-ff-ff-ff EtherType: 0806 ARP: Sender MAC: 00-14-0d-fd-13-1d Target MAC: 00-00-00-00-00-00 Sender IP: 10.156.3.55 Target IP: 10.156.1.255 OpCode: Request■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■5.cron配置cron作为设备周期性指令调度，可以提供自动化脚本；比如每天24:00断开部分用户，每天07:00恢复用户网络；调度方式可以按照日历，比如每周1-5，也可以周期性，比如每2小时重复执行；，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，A:XXX>config>cron# info----------------------------------------------script "service-open"location "cf3:\service-open.cfg"no shutdownexitaction "service-open"results "cf3:\cron.log"script "service-open"no shutdownexitschedule "service-open"action "service-open"day-of-month allhour 8minute 0month allweekday allno shutdownexit6.端口或者vlan流量监控收集端口或者sap点的流量，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，，监控物理端口/monitor port 1/1/3 rate======================================================================== Monitor statistics for Port 1/1/3========================================================================Input Output--------------------------------------------------------------------------------------------------------------------------------------------------------------At time t = 0 sec (Base Statistics)-------------------------------------------------------------------------------Octets 1156900175180050 1503817061589626 Packets 1486380537325 1623749192754 Errors 18 0-------------------------------------------------------------------------------At time t = 10 sec (Mode: Rate)-------------------------------------------------------------------------------Octets 28329529 38503716 Packets 37806 42468 Errors 0 0 Utilization (% of port capacity) 22.66 30.80-------------------------------------------------------------------------------At time t = 20 sec (Mode: Rate)-------------------------------------------------------------------------------Octets 28573319 38488267 Packets 37843 42555 Errors 0 0 Utilization (% of port capacity) 22.85 30.791/1/3端口流量=1000M*22.85%=228.5M（input）1/1/3端口流量=1000M*30.79%=307.9M（output）监控SAP接入点/monitor service id 501 sap 3/2/1:3501.0 rate-------------------------------------------------------------------------------At time t = 11 sec (Mode: Rate)--------------------------------------------------------------------------------------------------------------------------------------------------------------Sap Statistics-------------------------------------------------------------------------------Last Cleared Time : N/APackets Octets % PortUtil. Forwarding Engine StatsDropped : 0 0 0.00 Off. HiPrio : 0 0 0.00 Off. LowPrio : 1366 389242 0.31 Off. Uncolor : 0 0 0.00Queueing Stats(Ingress QoS Policy 1)Dro. HiPrio : 0 0 0.00 Dro. LowPrio : 0 0 0.00 For. InProf : 0 0 0.00 For. OutProf : 1366 389242 0.31Queueing Stats(Egress QoS Policy 1)Dro. InProf : 0 0 0.00 Dro. OutProf : 0 0 0.00 For. InProf : 864 147786 0.11 For. OutProf : 1 68 ~0.00 -------------------------------------------------------------------------------Sap per Queue Stats-------------------------------------------------------------------------------Packets Octets % PortUtil.Ingress Queue 1 (Unicast) (Priority)Off. HiPrio : 0 0 0.00 Off. LoPrio : 1366 389242 0.31 Dro. HiPrio : 0 0 0.00 Dro. LoPrio : 0 0 0.00 For. InProf : 0 0 0.00 For. OutProf : 1366 389242 0.31Egress Queue 1For. InProf : 857 146456 0.11 For. OutProf : 1 67 ~0.00 Dro. InProf : 0 0 0.00 Dro. OutProf : 0 0 0.00典型配置案例Confidential 800 820 5182 第 11 页共 11 页 Alcatel-Lucent Sap 流量=1000M*0.31%=3.1M （input ）Sap 流量=1000M*0.11%=1.1M （output ）7. CPU 高占用率快速故障定位当CPU 占用率很高时，一定会有大量Packet 上送主控制板CPM 处理才会导致一些进程（比如IP Stack ）的占用率高，但上送的Packet 有正常的协议报文、攻击流量，如何对攻击流量进行分辩、快速定位就是关键。

7750配置模版-中盈优创

7750配置模版-中盈优创S R路由器上线配置模板1基本信息与可靠性 (3)1.1配置要求 (3)1.2配置模板 (3)2接口 (3)2.1配置要求 (3)2.2配置模板 (4)3基础路由 (6)3.1配置要求 (6)3.2配置模板 (6)4系统管理和安全 (8)4.1配置要求 (8)4.2配置模板 (9)1基本信息与可靠性1.1配置要求●配置设备命名。

●配置设备软件系统启动引导。

●（如缺省关闭）配置控制卡之间的配置文件和动态数据同步。

●（如缺省关闭）配置控制卡在故障情况下的无缝倒换。

1.2配置模板●配置设备命名。

config systemname system-nameexit●配置设备软件系统启动引导。

bofPrimary-image cf3:/ixxxxprimary-config config.cfgsecondary-image cf3:/iyyyysecondary-config yyyy.cfgexitbof save●（如缺省关闭）配置控制卡之间的配置文件和动态数据同步。

config redundancysynchronize configexit●（如缺省关闭）配置控制卡在故障情况下的无缝倒换。

缺省，无需配置2接口2.1配置要求创建loopback0端口:●配置端口描述●配置ip地址GE端口:●关闭GE端口自动协商（因成功率不高）●配置端口描述●配置MTU值为1526●配置ip地址●端口配置为trunk模式GE链路聚合:●按照LACP (802.3ad)在不同厂商设备之间配置多GE链路的聚合POS端口:●打开POS端口Payload扰码。

●POS封装：PPP。

●POS成帧：SDH。

●POS CRS：32位。

●POS故障报告：缺省。

●手工关闭POS端口时，需能向远端发送AIS告警（Cisco需要配置；华为缺省如此；其他厂家不支持）。

●时钟同步：分两种情况：－如为SDH电路，则两端均取线路时钟；－如为WDM或裸纤电路，则首先看网络层次：网络层次高（核心高于汇接高于边缘）的一端取本地时钟，网络层次低的取线路时钟；如网络层次相同（如同为汇接路由器），则看loopback0地址：地址低的一端取本地时钟，地址高的取线路时钟。

7750 SR OS 基本系统配置指南.pdf_1701713446.1597066说明书

Configuration CommandsFile System CommandsshutdownSyntax[no] shutdown [active] [standby][no] shutdown [cflash-id]Context fileDescription This command shuts down (unmounts) the specified CPM(s).Use the no shutdown [active] [standby] command to enable one or both CPM.Use the no shutdown [cflash-id] command to enable a compact flash (cf1:, cf2:, or cf3:) on the SF/CPMcard. The no shutdown command can be issued for a specific slot when no compact flash is present. Whena flash card is installed in the slot, the card will be activated upon detection.In redundant systems, use the no shutdown command on cf3: on both SF/CPMs in order to facilitate syn-chronization. See the synchronize command on page 408.NOTE: The shutdown command must be issued prior to removing a flash card. If no parameters are speci-fied, then the drive referred to by the current working directory will be shut down.LED Status Indicators — The following states are possible for the compact flash:Operational:If a compact flash is present in a drive and operational (no shutdown), the respective LED is lit green.The LED flickers when the compact flash is accessed.NOTE: Do not remove the compact flash during a read/write operation.State:admin = up, operational = up, equippedFlash defective:If a compact flash is defective, the respective LED blinks amber to reflect the error condition and a trapis raised.State:admin = up/down, operational = faulty, equipped = noFlash drive shut down:When the compact flash drive is shut down and a compact flash present, the LED is lit amber. In thisstate, the compact flash can be ejected.State:admin = down, operational = down, equipped = yesNo compact flash present, drive shut down:If no compact flash is present and the drive is shut down the LED is unlit.State:admin = down, operational = down, equipped = noNo compact flash present, drive enabled:If no compact flash is present and the drive is not shut down the LED is unlit.State:admin = up, operational = down, equipped = noEjecting a compact flash:The compact flash drive should be shut down before ejecting a compact flash card. The LED shouldturn to solid (not blinking) amber. This is the only mode to safely remove the flash card.If a compact flash drive is not shut down before a compact flash is ejected, the LED blinks amber forapproximately 5 seconds before shutting off.State:admin = down, operational = down, equipped = yesThe shutdown or no shutdown state is not saved in the configuration file. Following a reboot all compactflash drives are in their default state.Default no shutdown — compact flash device administratively enabledParameters cflash-id — Enter the compact flash slot ID to be shut down or enabled. When a specific cflash-id is speci-fied, then that drive is shutdown. If no cflash-id is specified, the drive referred to by the current workingdirectory is assumed. If a slot number is not specified, then the active CPM is assumed.Default The current compact flash deviceValues cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:active — If active is selected, then all drives on the active CPM are shutdown or enabled.standby — If standby is selected, then all drives on the standby CPM are shutdown or enabled.Note: When both active and standby keywords are specified, then all drives on both CPM are shut-down.File CommandsattribSyntax attrib [+r | -r]file-urlattribContext fileDescription This command sets or clears/resets the read-only attribute for a file in the local file system. To list all files and their current attributes enter attrib or attrib x where x is either the filename or a wildcard (*).When an attrib command is entered to list a specific file or all files in a directory, the file’s attributes are dis-played with or without an “R” preceding the filename. The “R” implies that the +r is set and that the file isread-only. Files without the “R” designation implies that the -r is set and that the file is read-write-all. Forexample:ALA-1>file cf3:\ # attribcf3:\bootlog.txtcf3:\bof.cfgcf3:\boot.ldrcf3:\sr1.cfgcf3:\testcf3:\bootlog_prev.txtcf3:\BOF.SAVParameters file-url — The URL for the local file.Values local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:,cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:+r — Sets the read-only attribute on the specified file.-r — Clears/resets the read-only attribute on the specified file.cdSyntax cd [file-url]Context fileDescription This command displays or changes the current working directory in the local file system.Parameters file-url — Syntax: [local-url | remote-url (255 chars max)local-url - [cflash-id/][file-path]remote-url - [{ftp://|tftp://}login:pswd@remote-locn/][file-path]cf1,cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:<none> — Displays the current working directory... — Signifies the parent directory. This can be used in place of an actual directory name in a directory-url.directory-url — The destination directory.copySyntax copy source-file-url dest-file-url [force]Context fileDescription This command copies a file or all files in a directory from a source URL to a destination URL. At least one of the specified URLs should be a local URL. The optional wildcard (*) can be used to copy multiple filesthat share a common (partial) prefix and/or (partial) suffix.When a file is copied to a destination with the same file name, the original file is overwritten by the new filespecified in the operation. The following prompt appears if the destination file already exists:“Overwrite destination file (y/n)?”For example:To copy a file named srcfile in a directory called test on cf2 in slot B to a filecalled destfile in a directory called production on cf1 in slot A, the syntax is:sr1>file cf2:\ # copy cf2-B/test/srcfile cf1-A/production/destfileTo FTP a file named 121201.cfg in directory mydir stored on cf1 in slot A to a networkFTP server with IP address 131.12.31.79 in a directory called backup with a destinationfile name of 121201.cfg, the FTP syntax is:copy cf1-A/mydir/121201.cfg 131.12.31.79/backup/121201.cfgParameters source-file-url — The location of the source file or directory to be copied.dest-file-url — The destination of the copied file or directory.force — Forces an immediate copy of the specified file(s).file copy force executes the command without displaying a user prompt message.deleteSyntax delete file-url[force]Context fileDescription This command deletes the specified file.The optional wildcard “*” can be used to delete multiple files that share a common (partial) prefix and/or(partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches thewildcard:“Delete file <filename> (y/n)?”file-url — The file name to delete.Values local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:,cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:force — Forces an immediate deletion of the specified file(s).file delete*force deletes all the wildcard matching files without displaying a user prompt message.dirSyntax dir [file-url] [sort-order { d | n | s}] [reverse]Context fileDescription This command displays a list of files and subdirectories in a directory.Parameters file-url — The path or directory name.Use the file-url with the optional wildcard (*) to reduce the number of files to list.Default Lists all files in the present working directorysort-order { d | n | s — Specifies the sort order.Values d — daten — names — sizereverse — Specifies to reverse the sort order.Sample OutputA:cses-E12>file cf3:\ # dir- dir [<file-url>] [sort-order { d | n | s}] [reverse]<file-url> : <local-url>|<remote-url>local-url - [<cflash-id>/][<file-path>]200 chars max, including cflash-iddirectory length 99 chars max eachremote-url - [ftp://<login>:<pswd>@<remote-locn>/][<file-path>]255 chars maxdirectory length 99 chars max eachremote-locn - [ <hostname> | <ipv4-address> |"["<ipv6-address>"]" ]ipv4-address - a.b.c.dipv6-address - x:x:x:x:x:x:x:x[-interface]x:x:x:x:x:x:d.d.d.d[-interface]x - [0..FFFF]Hd - [0..255]Dinterface - 32 chars max, for linklocal addressescflash-id - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|cf2-B:|cf3:|cf3-A:|cf3-B:< d | n | s> : Sort order: d - date, n - name, s - size<reverse> : keyword - reverse orderA:cses-E12>file cf3:\ # dirfileSyntax fileContext rootDescription The context to enter and perform file system operations. When entering the file context, the prompt changes to reflect the present working directory. Navigating the file system with the cd.. command results in achanged prompt.The exit all command leaves the file system/file operation context and returns to the <ROOT> CLI context.The state of the present working directory is maintained for the CLI session. Entering the file commandreturns the cursor to the working directory where the exit command was issued.formatSyntax format cflash cflash-id [reliable]Context root>fileDescription This command formats the compact flash. The compact flash must be shutdown before starting the format. Parameters cflash-id — The compact flash type.cf1:, cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:reliable — Enables the reliance file system and dis-ables the default DOS file system. This option is valid only on compact flashes 1 and 2.mdSyntax md file-urlContext fileDescription This command creates a new directory in a file system.Directories can only be created one level at a time.Parameters file-url — The directory name to be created.Values local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:, cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:moveSyntax move old-file-url new-file-url [force]Context fileDescription This command moves a local file, system file, or a directory. If the target already exists, the command fails and an error message displays.The following prompt appears if the destination file already exists:“Overwrite destination file (y/n)?”Parameters old-file-url — The file or directory to be moved.Values local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:, cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:new-file-url — The new destination to place the old-file-url.Values local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:, cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:force — Forces an immediate move of the specified file(s).file move force executes the command without displaying a user prompt message.rdSyntax rd file-url rfrd file-url [force]Context fileDescription The rd command is used to delete a directory.If a directory has files and no sub-directories, the force option must be used to force delete the directory andfiles it contains.If a directory has sub-directories, then the force option will fail and the rf parameter should be used insteadto force delete that directory including the sub-directories.Example:A:nE1>file cf1:\ # rd alcateltestAre you sure (y/n)? yDeleting directory cf1:\alcateltest ..MINOR: CLI Cannot delete cf1:\alcateltest.A:nE1>file cf1:\ # rd alcateltest forceDeleting directory cf1:\alcateltest .MINOR: CLI Cannot delete cf1:\alcateltest.A:nE1>file cf1:\ # rd hussein rfDeleting all subdirectories and files in specified directory. y/n ?yDeleting directory cf1:\hussein\hussein1 ..OKDeleting directory cf1:\alcateltest .OKParameters file-url — The directory to be removed.local-url | remote-url:255 chars maxlocal-url:[cflash-id/][file-path]remote-url[ftp://login:pswd@remote-locn/][file-path]cf1:, cf1-A:,cf1-B:,cf2:,cf2-A:,cf2-B:,cf3:,cf3-A:,cf3-B:rf — The parameter forces a recursive delete.force — Forces an immediate deletion of the specified directory.For example, rd file-url force executes the command without displaying a user prompt message.repairSyntax repair [cflash-id]Context fileDescription This command checks a compact flash device for errors and repairs any errors found.Parameters cflash-id — Specify the compact flash slot ID to be shut down or enabled. When a specific cflash-id is spec-ified, then that drive is shutdown. If no cflash-id is specified, the drive referred to by the current work-ing directory is assumed. If a slot number is not specified, then the active SF/CPMCFM is assumed.Default The current compact flash deviceValues cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:scpSyntax scp local-file-url destination-file-url [router router-instance] [force]Context fileDescription This command copies a local file to a remote host file system. It uses ssh for data transfer, and uses the same authentication and provides the same security as ssh. The following prompt appears:“Are you sure (y/n)?” The destination must specify a user and a host.Parameters local-file-url — The local source file or directory.Values[cflash-id/][file-path]: Up to 256 characters.destination-file-url — The destination file.Values user@hostname:destination-fileuser — The SSH user.host — The remote host IP address of DNS name.file-path — The destination path.router-instance — Specify the router name or service ID.Values router-name: Base , managementservice-id: 1 — 2147483647Default Baseforce — Forces an immediate copy of the specified file.file scp local-file-url destination-file-url[router] force executes the command without displaying auser prompt message.typeSyntax type file-urlContext fileDescription Displays the contents of a text file.Parameters file-url — The file contents to display.Values file-url<local-url>|<remote-url>local-url [<cflash-id>/][<file-path>]200 chars max, including cflash-iddirectory length 99 chars max eachremote-url[{ftp://|tftp://}<login>:<pswd>@<remote-locn>/][<file-path>] 255 chars maxdirectory length 99 chars max eachremote-locn [ <hostname> | <ipv4-address> |<ipv6-address> ]ipv4-address a.b.c.dipv6-address x:x:x:x:x:x:x:x[-interface]x:x:x:x:x:x:d.d.d.d[-interface]x - [0..FFFF]Hd - [0..255]Dinterface - 32 chars max, for linklocal addressescflash-id cf1:, cf1-A:, cf1-B:versionSyntax version file-url [check]Context fileDescription This command displays the version of an SR OS *.tim file.Parameters file-url — The file name of the target file.Values local-url | remote-url:255 characters maximumlocal-url:[cflash-id/][file-path]remote-url: [{ftp://|tftp://}login:pswd@remote-locn/][file-path]cflash-id:cf1:, cf1-A:, cf1-B:check — Validates the .tim file.Sample OutputA:Redundancy>filecf3:\#versionftp://test:************.xxx.xx/usr/global/images/6.1/R4/cpm.timTiMOS-C-6.1.R4 for 7750Thu Oct 30 14:21:09 PDT 2008 by builder in /rel6.1/b1/R4/panos/mainA:Redundancy>filecf3:\#versioncheckftp://test:************.xxx.xx/usr/global/images/6.1/R4/cpm.timTiMOS-C-6.1.R4 for 7750Thu Oct 30 14:21:09 PDT 2008 by builder in /rel6.1/b1/R4/panos/mainValidation successfulA:Redundancy>file cf3:\ #viSyntax vi local-urlContext fileDescription Edit files using the vi editor. Refer to VI Editor on page 45.Parameters local-url — Specifies the local source file or directory.Values[cflash-id>/]file-pathcflash-id: cf1:, cf2:, cf3:。

7750SR-BRAS业务配置手册

7750SR BRAS业务配置手册上海贝尔股份有限公司广东分公司2009-6-4林常键目录PPPOE业务概述 (3)BRAS业务的硬件需求 (3)静态VLAN方式的PPPOE业务流程 (3)静态VLAN方式的PPPOE业务配置流程 (5)动态VLAN方式的PPPOE业务流程 (9)动态VLAN方式的PPPOE业务配置流程 (10)动态VLAN方式的L2TP业务流程 (15)动态VLAN方式的L2TP业务配置流程 (17)静态VLAN方式接入的PPPOE业务debug信息 (21)动态VLAN方式接入的PPPOE业务debug信息 (21)动态VLAN方式接入的L2TP业务debug信息 (21)附录：7750SR Release7.0 Radius 属性 (21)PPPOE业务概述7750SR在6.0版本开始正式支持PPPOE业务，6.1版本添了Radius认证PPPOE用户功能，7.0版本将PPPOE与L2TP业务关联，7750SR可以支持L2TPv2的LAC功能。

PPPOE业务可以在7750SR的IES、VPRN三层业务上实现，用户可以是静态VLAN配置的方式接入，也可以通过msap实现是动态VLAN配置的方式接入。

静态VLAN相对配置而言会更为繁锁，适用于少量VLAN的配置，动态VLAN配置的方式适用于per user per vlan的方式下接入大量PPPOE用户。

对于PPPOE业务可以在Null、Dot1q和 QinQ封装下均支持。

L2TP业务可以在7750SR的PPPOE拔号接入条件下为企业远端用户提供从用户终端到用户路由器的二层VPN隧道业务，其典型组网拓扑如下：BRAS业务的硬件需求7750SR路由器的PPPOE业务将在IOM2-20G和IOM3-XP上支持。

7750SR路由器的L2TP业务将需要有IOM3-XP为作L2TP业务出接口。

静态VLAN方式的PPPOE业务流程1、PPPOE客户端通过PPPOE拔号程序发送PADI报文来发现二层网络内的PPPOE-Server2、二层以太网内的PPPOE-Server收到PADI报文后回应PADO报文。

SR7750配置步骤-自己总结滴

SR7750配置步骤一、基本配置1、在config-system 视图下，1）起名字标示此设备：name liaocheng-842-7750-ar1SystemPort 有两种模式network和access 又都分为输入、输出两个方向ingress egressconfig>system>security>profile 默认为none 不授权修改默认启动文件，确保下次依然生效vrrp配置时要注意主地址和vrrp地址一定要在同一子网下。

掩码要正确。

2、在config-router 视图下，在router 视图下做autonomous-system 200 AS号，否则bgp邻居无法建立配置习惯为进config—router ，，interface，bgp，isis等在此视图下。

而不是router bgp 100 ，这个设备的treeRouter id 必配。

Family ipv4 router>bgp# info----------------------------------------------group "to-h3c"type externallocal-as 200peer-as 100neighbor 10.10.10.2exitexitgroup "to-3528"local-address 10.10.20.1type externalpeer-as 100neighbor 10.10.20.2exit端口的典型配置接用户的端口port 1/2/5description "GE1/2/5 To SDLC-T600-1 GE1/0/0->OMC&Signal"ethernetmode accessencap-type dot1qmtu 9192no autonegotiateexitno shutdown接上行设备端口port 1/1/1description "POS1/1/1 To SDJN-YXS-N5KE-B1 POS12/0/2 155M JN-LC S-1N7002(backup)"networkegresspoolslope-policy "CU-WRED"exitexitexitsonet-sdhframing sdhhold-time up 30 down 1speed oc3pathmtu 9180scramblenetworkqueue-policy "CU-NetworkEgressQ"exitno shutdownexitexitno shutdown都分为全局配置，具体配置在什么视图下建立的，show的时候就得注意。

7750 SR OS 路由器配置指南.pdf_1701712574.009497说明书

Common CLI Command DescriptionsIn This ChapterThis section provides information about common Command Line Interface (CLI) syntax andcommand usage.Topics in this chapter include:•SAP syntax on page 616Common CLI Command DescriptionsCommon Service CommandssapSyntax[no] sap sap-idDescription This command specifies the physical port identifier portion of the SAP definition.Parameters sap-id — Specifies the physical port identifier portion of the SAP definition.The sap-id can be configured in one of the following formats:null[port-id | bundle-id| bpgrp-id | lag-id | aps-id]port-id: 1/1/3bundle-id: bundle-ppp-1/1.1bpgrp-id: bpgrp-ima-1lag-id: lag-63aps-id: aps-1dot1q[port-id | bundle-id| bpgrp-id | lag-id | aps-id]:qtag1port-id:qtag1: 1/1/3:100bundle-id: bundle-ppp-1/1.1bpgrp-id: bpgrp-ima-1lag-id:qtag1:lag-61:102aps-id:qtag1: aps-1:27qinq[port-id |bundle-id| bpgrp-id | lag-id]:qtag1.qtag2port-id:qtag1.qtag2: 1/1/3:100.10bundle-id: bundle-ppp-1/1.1bpgrp-id: bpgrp-ima-1lag-id:qtag1.qtag2:lag-10:atm[port-id | aps-id | bundle-id | bpgrp-id][:vpi/vci |vpi |vpi1.vpi2]port-id: 1/1/1aps-id: aps-1bundle-id: bundle-ima-1/1.1bundle-ppp-1/1.1bpgrp-id: bpgrp-ima-1vpi/vci: 16/26vpi: 16vpi1.vpi2: 16.200frame-relay [port-id| aps-id]:dlci port-id: 1/1/1:100aps-id: aps-1dlci: 16cisco-hdlc slot/mda/port.channel port-id: 1/1/3.1Common CLI Command Descriptions Values:sap-id null[port-id | bundle-id | bpgrp-id | lag-id | aps-id]dot1q [port-id | bundle-id | bpgrp-id | lag-id | aps-id]:qtag1qinq[port-id | bundle-id | bpgrp-id | lag-id]:qtag1.qtag2atm [port-id | aps-id][:vpi/vci|vpi| vpi1.vpi2]frame [port-id | aps-id]:dlcicisco-hdlc slot/mda/port.channelcem slot/mda/port.channelima-grp [bundle-id[:vpi/vci|vpi|vpi1.vpi2]port-id slot/mda/port[.channel]bundle-id bundle-type-slot/mda.bundle-numbundle keywordtype ima, fr, pppbundle-num 1 — 336bpgrp-id bpgrp-type-bpgrp-numbpgrp keywordtype ima, fr, pppbpgrp-num 1 — 2000aps-id aps-group-id[.channel]aps keywordgroup-id 1 — 64ccag-id ccag-id.path-id[cc-type]:cc-idccag keywordid 1 — 8path-id a, bcc-type .sap-net, .net-sapcc-id 0 — 4094lag-id lag-idlag keywordid 1 — 200qtag1 0 — 4094qtag2 *, 0 — 4094vpi NNI: 0 — 4095UNI: 0 — 255vci 1, 2, 5 — 65535dlci 16 — 1022ipsec-id ipsec-id.[private | public]:tagipsec keywordid 1 — 4tag 0 — 4094bundle-id — Specifies the multilink bundle to be associated with this IP interface. The bundle keyword must be entered at the beginning of the parameter.The command syntax must be configured as follows:bundle-id:bundle-type-slot-id/mda-slot.bundle-numbundle-id value range: 1 — 336For example:Common CLI Command Descriptions*A:ALA-12>config# port bundle-ppp-5/1.1*A:ALA-12>config>port# multilink-bundlebgprp-id — Specifies the bundle protection group ID to be associated with this IP interface. The bpgrp keyword must be entered at the beginning of the parameter.The command syntax must be configured as follows:bpgrp-id: bpgrp-type-bpgrp-numtype:imabpgrp-num value range: 1 — 2000For example:*A:ALA-12>config# port bpgrp-ima-1*A:ALA-12>config>service>vpls$ sap bpgrp-ima-1qtag1, qtag2 — Specifies the encapsulation value used to identify the SAP on the port or sub-port. If this parameter is not specificially defined, the default value is 0.Values qtag1: * | 0 — 4094qtag2 : * | 0 — 4094The values depends on the encapsulation type configured for the interface. The following tabledescribes the allowed values for the port and encapsulation types.Ethernet Dot1q0 — 4094The SAP is identified by the 802.1Q tag on the port.Note that a 0 qtag1 value also accepts untagged packetson the dot1q port.Ethernet QinQ qtag1: 0 — 4094qtag2: 0 — 4094The SAP is identified by two 802.1Q tags on the port. Note that a 0 qtag1 value also accepts untagged packets on the Dot1q port.SONET/SDH IPCP-The SAP is identified by the channel. No BCP isdeployed and all traffic is IP.SONET/SDH TDM BCP-Null0The SAP is identified with a single service on thechannel. Tags are assumed to be part of the customerpacket and not a service delimiter.SONET/SDHTDMBCP-Dot1q0 — 4094The SAP is identified by the 802.1Q tag on the channel.SONET/SDH TDM Frame Relay16 — 991The SAP is identified by the data link connectionidentifier (DLCI).SONET/SDH ATM ATM vpi (NNI) 0 — 4095vpi (UNI) 0 — 255vci 1, 2, 5 — 65535The SAP is identified by port or by PVPC or PVCCidentifier (vpi, vpi/vci, or vpi range)Common CLI Command Descriptions sap ipsec-id.private|public:tag — This parameter associates an IPSec group SAP with this interface. This is the public side for an IPSec tunnel. Tunnels referencing this IPSec group in the private side may be created if their local IP is in the subnet of the interface subnet and the routing context specified matches with the one of the interface.This context will provide a SAP to the tunnel. The operator may associate an ingress and egress QoS policies as well as filters and virtual scheduling contexts. Internally this creates an Ethernet SAP that will be used to send and receive encrypted traffic to and from the MDA. Multiple tunnels can beassociated with this SAP. The “tag” will be a dot1q value. The operator may see it as an identifier. The range is limited to 1 — 4095.Common CLI Command Descriptions。

阿尔卡特7750培训资料1：路由配置

解决这种情形的方法被称为Proxy ARP（代理ARP）。这个技术允许配置在本地网之间的路由器代替D来响应设备A的广播。这个路由器不会将设备D的硬件地址发送回给设备A。因为他们不在同一网络中，A不能直接发送给D。路由器发送给A收到ARP请求的接口的硬件地址。A然后发送数据到路由器，路由器发送这个数据到其他网络的D。这个路由器也代替A为D做相同的事情，并且当广播包的目的地和ARP发起者不在同一物理网络上时，路由器为任何在两个网络上的其他设备都采取相同的方法。
− L1， L 1-2，和L2 − 从其他协议分发进来的IPv4 的路由汇总 − 汇总路由所通告的量度比其他具体的IPv4 路由的量度要小。。
• 可基于每个消息类型和每个level，支持抑制IS-IS认证。提高与非 7750 IS-IS 部署的互操作性。
• 不间断路由
7750SR 路由和路由策略
Alcatel Proprietary, all rights reserved © 2005, Alcatel
• 出站路由过滤 (ORF) –BGP的一个特征：一个BGP 发送者请求他的
邻居不发送给它特定的路由。在 7750VPRN上支持。 • TTL 安全– 能够指定一个进入的BGP 信息包的最小TTL 值。
− 多数eBGP对等体关系在邻近的路由器间建立。 − 假如一个信息包的TTL值不在指定的范围内，便丢弃这个信息包并产生一
7750 SR 业务实现R3.0
Alcatel University
代理-ARP
子网 20
主机 A IP add.=IP_A MAC add.= MAC_A
子网 10
主机C IP add.=IP_C MAC add.= MAC_C
接口 X

7750SR路由器快速配置手册

阿尔卡特 7750SR 路由器快速配置手册
上海贝尔阿尔卡特股份有限公司
7750S概述..................................................................................................................................... 4 新增板卡配置............................................................................................................................. 6 2.1. IOM 模块配置.............................................................................................................. 7 2.2. MDA 模块配置.............................................................................................................. 8 新增链路配置........................................................................................................................... 10 3.1. 物理端口配置.............................................................................................

7750 SR 路由器操作、管理和诊断指南说明书

PrefaceAbout This GuideThis guide describes service mirroring and Operations, Administration and Management (OAM)and diagnostic tools provided by the router and presents examples to configure and implementvarious tests.This guide is organized into functional chapters and provides concepts and descriptions of theimplementation flow, as well as Command Line Interface (CLI) syntax and command usage.AudienceThis guide is intended for network administrators who are responsible for configuring the 7750 SRrouters. It is assumed that the network administrators have an understanding of networkingprinciples and configurations. Concepts described in this guide include the following:•Service mirroring and Lawful Interception•Operation, Administration and Maintenance (OAM) operationsPrefaceList of Technical PublicationsThe 7750 SR documentation set is composed of the following guides: Table 1: List of Technical PublicationsPreface Table 1: List of Technical PublicationsSearching for InformationYou can use Adobe Reader, Release 6.0 or later, to search one or more PDF files for a term.To search for specific information in this guide1. From the Adobe Reader main menu, choose Edit > Search or Advanced Search. The Searchpanel opens.2. Click on the In the current document radio button.3. Enter the term to search for.4. Select the following search criteria, if required:Preface•Whole words only•Case-Sensitive•Include Bookmarks•Include Comments5. Click on the Search button. Adobe Reader displays the search results.You can expand the entries by clicking on the + symbol.To search for specific information in multiple documentsNote: The PDF files that you search must be in the same folder.1. From the Adobe Reader main menu, choose Edit > Search or Advanced Search. The Searchpanel opens.2. Click on the All PDF Documents in radio button.3. Choose the folder in which to search using the drop-down menu.4. Enter the term to search for.5. Select the following search criteria, if required:•Whole words only•Case-Sensitive•Include Bookmarks•Include Comments6. Click on the Search button. Adobe Reader displays the search results.You can expand the entries for each file by clicking on the + symbol.PrefaceTechnical SupportIf you purchased a service agreement for your 7750 SR router and related products from adistributor or authorized reseller, contact the technical support staff for that distributor or resellerfor assistance. If you purchased an Alcatel-Lucent service agreement, follow this link to contact anAlcatel-Lucent support representative and to access product manuals and documentation updates:https:///portal/olcsHome.doPreface。

阿尔卡特7750SR发布路由

community "GDGZ_CMCC_OLT_WanGuan"
exit
action accept
exit
exit
exit
exit
policy-statement "GDGZ_CMCC_OLT_WanGuan_Export"
entry 10
from
exit
entry 500
action reject
exit
exit
policy-statement "GDGZ_CMCC_IPPBX_Import"
policy-statement "GDGZ_CMCC_OLT_WanGuan_Import"
entry 10
from
protocol bgp-vpn
prefix 172.16.26.0/24 longer
exit
prefix-list "OLT_WanGuan_Direct_Route"
prefix 172.17.25.0/25 exact
entry 10
from
protocol bgp-vpn
community "GDGZ_CMCC_IPPBX_Center"
entry 500
action reject------------------------------
prefix-list "Direct_Route"
prefix 120.196.3.188/30 exact
prefix 120.196.3.196/30 exact

Alcatel7750SR常用命令集

Alcatel7750SR常用命令集1. 简介本文档是关于Alcatel7750SR常用命令集的指南。

Alcatel7750SR是一款多功能的路由器和交换机，广泛应用于电信运营商和企业网络中。

本文档将介绍一些常用的命令，以帮助用户更好地了解和使用Alcatel7750SR。

2. 登录与退出2.1 登录要登录到Alcatel7750SR设备，可以使用以下命令：login <用户名> <密码>其中，<用户名>和<密码>分别是您的登录名和密码。

2.2 退出要退出登录，可以使用以下命令：logout3. 基本配置3.1 设置主机名可以使用以下命令设置设备的主机名：configure systemset hostname <主机名>end其中，<主机名>是您要设置的主机名。

3.2 设置IP地址要设置设备的IP地址，可以使用以下命令：configure systemset address <接口> ip-address <IP地址>/<子网掩码>end其中，<接口>是设备的接口名，如ethernet 1/1/1，<IP 地址>是您要设置的IP地址，<子网掩码>是IP地址的子网掩码。

4. 路由配置4.1 静态路由要配置静态路由，可以使用以下命令：configure router static-routeadd <目标网络> next-hop <下一跳地址>end其中，<目标网络>是要配置的目标网络，如10.0.0.0/24，<下一跳地址>是下一跳的IP地址。

4.2 动态路由要配置动态路由，可以使用以下命令：configure router dynamic-routeospfarea <区域号>network <网络地址> mask <子网掩码>exitexit其中，<区域号>是OSPF的区域号，<网络地址>是要配置的网络地址，<子网掩码>是网络地址的子网掩码。

中国移动7750SR业务数据配置规范(IES)

江苏移动7750SR业务数据配置规范（集团专线）南通分公司工程维护部2009年10月目录1前言 (3)2业务规则 (3)37750业务结构 (4)4业务配置前的基本配置 (4)4.1 端口设置 (4)4.2 业务（集团专线）基本配置 (4)5IES（专线业务）配置 (5)5.1 配置思路 (5)5.2 Interface配置模式 (5)5.3 subscriber-interface配置模式 (6)6完整业务配置举例 (7)6.1 interface专线开通 (7)6.2 subscriber-interface专线开通 (7)7常用show命令 (9)1 前言本配置规范只涉及7750作为SR时的IES业务，本文所有配置为最基本的配置，也是集团业务开通的必要配置。

根据业务发展需求将对本规范进行补充。

2 业务规则关键字用途规则customer ID 每种业务对应的customer ID1、IES 10；2、VPLS 20；3、VPRN 30；4、VLL 40IES ID 区分每个IES业务1、本地唯一，具体规则如下：2、IES ID：10+（cmnet_zx/VoIP），cmnet_zx 编号：100—110 VoIP 编号：200-210描述定义业务/端口描述1、业务描述：配置为业务用途（To_HaiMenChangHai）2、端口描述：To_对端设备名称_对端设备端口序号3、interface描述：以IP_X.X.X.X/mask路由策略控制引入路由的路由策略策略名称：业务导入陆游协议，如ies_bgp，意为将ies的路由导入BGPPrefix-List 路由发布前缀列表名称和策略名称一致policy-statement路由策略编辑采用业务导入协议命名3 7750业务结构7750SR4 业务配置前的基本配置4.1 端口设置配置思路：当7750SR 为下联设备提供业务服务时，用户设备上联到7750的端口称为SAP ，以太口的配置有：端口描述，配置端口模式，配置封装，配置端口协商A:AK7750# configure port x/x/xA:AK7750>config>port# description To_对端设备名称_对端设备端口序号 A:AK7750>config>port# ethernet mode accessA:AK7750>config>port# ethernet encap-type null/dot1q/qinq A:AK7750>config>port# ethernet no autonegotiate A:AK7750>config>port# no shutdown A:AK7750>config>port# exit4.2 业务（集团专线）基本配置配置说明：7750SR 要求每开一个业务要关联customer ，本次业务开通要求为每种业务创一个customer ID 并做描述，规范见<关键字说明>部分。

阿尔卡特7750配置文档

上海贝尔阿尔卡特7750SR配置标准模板目录一、硬件配置 (5)1．1配置IOM卡 (5)1.1.1 查看已经插入的IOM卡的类型 (5)1.1.2 正确配置IOM卡的类型 (5)1．2配置MDA卡 (5)1.2.1 查看已经插入的MDA卡的类型 (5)1.2.2 正确配置MDA卡的类型 (5)1．3配置MDA端口 (6)1．3．1 POS端口配置 (6)1．3．2 以太口配置 (6)1．3．3 查看port信息 (6)二、设备管理配置 (8)2．1配置路由器名称、LOCA TION、CONTACT (8)2．2配置系统时间 (8)2．3配置SNTP (8)2．3．1 打开SNTP (8)2．3．2 配置SNTP地址 (8)2．4配置SR为TELNET服务器 (8)2．5．1 配置默认动作为允许，因为是所有上主控板的流量。

(9)2．5．2 配置允许IP段的ACL，配置源IP，协议，目的端口 (9)2．5．3 配置一条拒绝的ACL，拒绝其他IP段。

(9)2．6配置用户 (9)2．6．1 配置用户名 (9)2．6．2 配置用户密码 (9)2．6．3 配置用户登陆方式 (10)2．6．4 配置用户所属的组 (10)2．7配置LOG (10)2．7．1 配置log－id (10)2．7．2 配置log信息类型 (10)2．7．3 配置记录log的方式 (10)2．7．4 配置记录log方式的具体配置 (10)2．8配置SNMP (11)2.9配置主备板同步 (11)2．9．1 配置自动同步 (11)2．9．2 手工同步命令 (11)2.10配置空闲时间 (11)2.11配置ANTI－SPOOF (11)三、路由配置 (13)3．1配置路由器系统地址 (13)3．2配置网络接口 (13)3．2．1 配置interface名字及描述 (13)3．2．2 配置IP地址 (13)3．2．3 配置关联端口 (13)3．2．4 查看配置的路由器接口 (13)3．3配置静态及OSPF路由协议 (14)3．3．1 配置静态路由 (14)3．3．2 配置OSPF区域 (14)3．3．3 配置ospf接口cost值 (14)3．3．4 配置一个stub区域 (14)3．3．5 配置NSSA区域 (14)3．3．6 配置虚链路 (15)3．3．7 配置认证 (15)3.3.8 配置路由聚合 (15)3.3.9 配置静态路由注入到OSPF路由协议 (15)3．3．10 查看运行在ospf协议下的接口 (16)3．3．11 查看ospf邻居建立关系 (16)3．3．12 查看ospf路由表 (16)3．4配置IS-IS (16)3．4．1 配置区域ID (16)3．4．2 配置路由器等级能力 (17)3．4．4 查看ISIS下的接口 (17)3．4．5 添加已经配置到ISIS的每个网络接口 (17)3．4．6 查看ISIS邻接关系 (17)3．4．7 查看ISIS路由表 (17)3．5BGP配置 (18)3．5．1 创建AS (18)3．5．2 配置路由器 ID5 (18)3．5．3 配置 BGP (18)3．6配置POLICY (18)3．6．1 配置policy名称 (18)3．6．2 配置从静态路由分布到ospf路由协议中的policy (19)3．6．3 配置commit使之生效 (19)3．6．4 应用policy (19)3.7IP F ILTER配置 (19)3.7.1 创建ip filter (19)3．7．2 指定默认动作 (19)3. 7．3创建条目，指定动作、源、目的IP (19)3．7．4 应用ip filter (20)四、 MPLS 配置以及业务配置 (21)4．1MPLS配置 (21)4．1．1 MPLS接口配置 (21)4．1．2 创建已命名的MPLS路径 (21)4．1．3 配置 MPLS LSP和主路径 (21)4．1．4 查看命令 (22)4．1．5 改变每个网络接口的最大传输单元（MTU）尺寸 (22)4．2 E P IPE 配置 (22)4．2．1 创建客户并将其与提供的业务相关联 (22)4．2．2 指向客户的接口（在我们的网络中由膝上电脑表示）称为“toCustomer”，必须配置为接入接口。

7750SR配置方法

实用文案7750SR路由器配置规范V2.1上海贝尔阿尔卡特股份有限公司互联网事业部二零零六年十一月目录1.概述 (5)2.系统基本配置 (7)2.1.层次化命令结构 (7)2.2.在CLI中获得帮助 (8)2.3.硬件板卡配置 (9)2.4.设备名称配置 (11)2.5.系统时间配置 (11)2.6.NTP配置 (11)2.7.主备卡切换配置 (12)2.8.AAA配置（登录用户） (14)3.端口配置 (16)3.1.Loopback端口配置 (16)3.2.GE端口配置 (16)3.3.POS端口配置 (17)3.4.端口镜像配置 (18)4.安全配置 (23)4.1.ACL配置 (23)4.2.防攻击配置 (24)5.网管配置 (31)5.1.网管地址配置 (31)5.2.TELNET配置 (32)5.3.FTP配置 (33)5.4.SNMP (33)5.5.SYSLOG (35)5.6.配置备份 (36)5.7.SSH配置 (36)Flow备份 (37)6.路由配置 (39)6.1.黑洞路由配置 (39)6.2.静态路由配置 (39)6.3.OSPF配置 (39)6.4.ISIS配置 (44)6.5.BGP配置 (47)7.业务配置 (54)7.1.专线业务配置（IES配置） (54)7.2.MPLS VPN业务配置 (56)7.2.1P路由器配置 (56)7.2.2PE路由器配置（VPRN） (60)7.2.3PE路由器配置（VPLS） (63)8.7750SR常用维护命令 (67)1.概述阿尔卡特7750SR路由器是业内第一个专为高级互联网和虚拟专用网络（VPN）业务而设计和优化的IP/MPLS业务路由器。

阿尔卡特7750SR有三种尺寸可供选择：单槽、7槽和12槽，可提供具有卓越性能和高密度的各种接口。

作为目前业内最具扩展性的路由器平台，阿尔卡特7750SR具有为高效传送基于服务等级协议（SLA）的业务而设计的软件和硬件架构，因此阿尔卡特7750SR不仅仅是强大的互联网路由器，更是一个灵活、强大的业务供应平台。