IP承载网B网配置

USIM

IP承载网B网配置

<GXGL-CYL-N40E-A1>DIA CU
                  ^
Error: Unrecognized command found at '^' position.
<GXGL-CYL-N40E-A1>DIS CU
#
sysname GXGL-CYL-N40E-A1
#
super password level 3 cipher _Y)+^WT@$aCQ=^Q`MAF4<1!!
#
info-center source default channel 2 log level warning
info-center loghost source LoopBack0
info-center loghost 116.79.1.253
info-center loghost 116.79.0.27
info-center loghost 116.79.0.68 facility local3
info-center loghost 116.79.0.75 facility local3
info-center logbuffer size 1024
info-center timestamp debugging date
#
router id 116.79.13.196
#
snmp-agent trap type base-trap
#
diffserv domain default
ip-dscp-outbound af1 green map 8
ip-dscp-outbound af1 yellow map 8
ip-dscp-outbound af1 red map 8
ip-dscp-outbound af2 green map 16
ip-dscp-outbound af2 yellow map 16      
ip-dscp-outbound af2 red map 16
ip-dscp-outbound af3 green map 24
ip-dscp-outbound af3 yellow map 24
ip-dscp-outbound af3 red map 24
ip-dscp-outbound af4 green map 32
ip-dscp-outbound af4 yellow map 32
ip-dscp-outbound af4 red map 32
ip-dscp-outbound ef green map 40
diffserv domain qinq
diffserv domain 5p3d
#
ip vpn-instance 3G_IuPS
route-distinguisher 38351:11240
vpn frr route-policy rp_vpn_vpnfrr_in
apply-label per-instance
vpn-target 38351:11240 export-extcommunity
vpn-target 38351:11240 import-extcommunity
ip vpn-instance 3G_PSCE_OMC
route-distinguisher 38351:11400
apply-label per-instance
vpn-target 38351:11400 export-extcommunity
vpn-target 38351:11400 import-extcommunity
ip vpn-instance NMS_CORE                  
route-distinguisher 38351:19990
apply-label per-instance
vpn-target 38351:19990 export-extcommunity
vpn-target 38351:19990 import-extcommunity
ip vpn-instance NMS_PING
route-distinguisher 38351:19999
apply-label per-instance
vpn-target 38351:19999 export-extcommunity
vpn-target 38351:19999 import-extcommunity
ip vpn-instance SSW_Media
route-distinguisher 38351:10000
vpn frr route-policy rp_vpn_vpnfrr_in
apply-label per-instance
vpn-target 38351:10000 export-extcommunity
vpn-target 38351:10000 import-extcommunity
ip vpn-instance SSW_NMS
route-distinguisher 38351:10020
vpn frr route-policy rp_vpn_vpnfrr_in
apply-label per-instance
vpn-target 38351:10020 export-extcommunity
vpn-target 38351:10020 import-extcommunity
ip vpn-instance SSW_Signal
route-distinguisher 38351:10010         
vpn frr route-policy rp_vpn_vpnfrr_in
apply-label per-instance
vpn-target 38351:10010 export-extcommunity
vpn-target 38351:10010 import-extcommunity
#
hwtacacs-server template default
hwtacacs-server authentication 116.79.0.11
hwtacacs-server authentication 116.79.0.36 secondary
hwtacacs-server authorization 116.79.0.11
hwtacacs-server authorization 116.79.0.36 secondary
hwtacacs-server accounting 116.79.0.11
hwtacacs-server accounting 116.79.0.36 secondary
hwtacacs-server source-ip 116.79.13.196
hwtacacs-server shared-key @))&unicom
#
#
bfd
delay-up 180
#
mpls lsr-id 116.79.13.196
mpls
#
mpls ldp                                 
graceful-restart
#
acl number 2000
rule 10 permit source 116.79.0.0 0.0.0.127
rule 20 permit source 116.79.22.128 0.0.0.127
#
acl number 2001
rule 10 permit source 116.79.0.0 0.0.127.255
rule 20 permit source 172.16.0.0 0.3.255.255
#
port-wred 0
color green low-limit 50 high-limit 100 discard-percentage 1
#
traffic classifier Dscpall operator or
if-match any
#
traffic behavior SetDscp1
remark dscp cs1
traffic behavior SetDscp2
remark dscp cs2
traffic behavior SetDscp3
remark dscp cs3
traffic behavior SetDscp4                 
remark dscp cs4
traffic behavior SetDscp5
remark dscp cs5
traffic behavior SetDscp6
remark dscp cs6
traffic behavior SetDscp7
remark dscp cs7
#
traffic policy SetDscp1
share-mode
classifier Dscpall behavior SetDscp1
traffic policy SetDscp2
share-mode
classifier Dscpall behavior SetDscp2
traffic policy SetDscp3
share-mode
classifier Dscpall behavior SetDscp3
traffic policy SetDscp4
share-mode
classifier Dscpall behavior SetDscp4
traffic policy SetDscp5
share-mode
classifier Dscpall behavior SetDscp5     
traffic policy SetDscp6
share-mode
classifier Dscpall behavior SetDscp6
traffic policy SetDscp7
share-mode
classifier Dscpall behavior SetDscp7
#
isis 100
graceful-restart
is-level level-2
cost-style wide
timer lsp-generation 1 50 50 level-2
flash-flood level-2
network-entity 03.8351.0771.1160.7901.3196.00
is-name GXGL-CYL-N40E-A1
preference 21
timer spf 1 50 50
traffic-eng level-2
log-peer-change
is-snmp-traps enable
set-overload on-startup wait-for-bgp
#
interface Aux0/0/1                        
link-protocol ppp
undo shutdown
#
interface GigabitEthernet0/0/0
speed auto
duplex auto
shutdown
#
interface GigabitEthernet7/0/0
mtu 9178
description TO GXGL-CYL-NE40E-CE1
undo shutdown
#
interface GigabitEthernet7/0/0.100
vlan-type dot1q 100
mtu 9178
ip binding vpn-instance SSW_Media
ip address 10.212.114.9 255.255.255.252
traffic-policy SetDscp4 inbound
#
interface GigabitEthernet7/0/0.101
vlan-type dot1q 101
mtu 9178                                 
ip binding vpn-instance SSW_Signal
ip address 10.212.114.1 255.255.255.252
traffic-policy SetDscp5 inbound
#
interface GigabitEthernet7/0/0.102
vlan-type dot1q 102
mtu 9178
ip binding vpn-instance SSW_NMS
ip address 10.212.114.5 255.255.255.252
traffic-policy SetDscp2 inbound
#
interface GigabitEthernet7/0/0.103
vlan-type dot1q 103
description TO GXGL-CYL_N40E_CE1 g1/0/0.103
ip binding vpn-instance 3G_IuPS
ip address 10.241.190.1 255.255.255.252
traffic-policy SetDscp3 inbound
#
interface GigabitEthernet7/0/0.104
vlan-type dot1q 104
description To GXGL-GXQ-NE40E-CE1
ip binding vpn-instance 3G_PSCE_OMC
ip address 192.168.3.5 255.255.255.252   
traffic-policy SetDscp2 inbound
#
interface GigabitEthernet7/0/1
mtu 9178
description TO GXGL-GXQ-NE40E-PS-CE1
undo shutdown
#
interface GigabitEthernet7/0/1.105
vlan-type dot1q 105
description TO GXGL-GXQ-NE40E-PS-CE1
ip binding vpn-instance 3G_IuPS
ip address 10.241.190.9 255.255.255.252
traffic-policy SetDscp3 inbound
#
interface GigabitEthernet7/0/1.106
vlan-type dot1q 106
description TO GXGL-GXQ-NE40E-PS-CE1
ip binding vpn-instance 3G_PSCE_OMC
ip address 192.168.3.21 255.255.255.252
traffic-policy SetDscp2 inbound
#
interface GigabitEthernet7/0/2
shutdown                                 
#
interface GigabitEthernet7/0/3
shutdown
#
interface GigabitEthernet7/0/4
shutdown
#
interface GigabitEthernet7/0/5
shutdown
#
interface GigabitEthernet7/0/6
shutdown
#
interface GigabitEthernet7/0/7
shutdown
#
interface GigabitEthernet7/0/8
shutdown
#
interface GigabitEthernet7/0/9
shutdown
#
interface GigabitEthernet7/0/10           
shutdown
#
interface GigabitEthernet7/0/11
shutdown
#
interface GigabitEthernet7/0/12
shutdown
#
interface GigabitEthernet7/0/13
shutdown
#
interface GigabitEthernet7/0/14
shutdown
#
interface GigabitEthernet7/0/15
shutdown
#
interface GigabitEthernet7/0/16
shutdown
#
interface GigabitEthernet7/0/17
shutdown
#                                         
interface GigabitEthernet7/0/18
shutdown
#
interface GigabitEthernet7/0/19
shutdown
#
interface GigabitEthernet7/0/20
shutdown
#
interface GigabitEthernet7/0/21
shutdown
#
interface GigabitEthernet7/0/22
shutdown
#
interface GigabitEthernet7/0/23
description To NMC-GXGL-XSK-PC-H1
undo shutdown
ip binding vpn-instance NMS_CORE
ip address 192.168.8.185 255.255.255.252
traffic-policy SetDscp2 inbound
#
interface Pos1/0/0                        
link-protocol ppp
mtu 9178
description POS1/0/0 To GXNN-SZL-N80E-B1 POS6/0/1 155M
undo shutdown
ip address 172.16.61.62 255.255.255.252
isis enable 100
isis circuit-level level-2
isis cost 6000 level-2
isis small-hello
mpls
mpls ldp
trust upstream default
port-queue be wfq weight 9 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af1 wfq weight 4 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af2 wfq weight 12 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af3 wfq weight 30 shaping shaping-percentage 90 port-wred 0 outbound
port-queue af4 pq shaping shaping-percentage 90 outbound
port-queue ef pq shaping shaping-percentage 90 outbound
port-queue cs6 pq shaping shaping-percentage 80 outbound
port-queue cs7 pq shaping shaping-percentage 80 outbound
transmission-alarm down lais lof los lrdi pais prdi
transmission-alarm holdoff-timer 100
transmission-alarm holdup-timer 3000     
#
interface Pos1/0/1
link-protocol ppp
mtu 9178
description POS1/0/1 To GXNN-SZL-N80E-B1 POS6/0/2 155M
undo shutdown
ip address 172.16.61.18 255.255.255.252
isis enable 100
isis circuit-level level-2
isis cost 6000 level-2
isis small-hello
mpls
mpls ldp
trust upstream default
port-queue be wfq weight 9 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af1 wfq weight 4 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af2 wfq weight 12 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af3 wfq weight 30 shaping shaping-percentage 90 port-wred 0 outbound
port-queue af4 pq shaping shaping-percentage 90 outbound
port-queue ef pq shaping shaping-percentage 90 outbound
port-queue cs6 pq shaping shaping-percentage 80 outbound
port-queue cs7 pq shaping shaping-percentage 80 outbound
transmission-alarm down lais lof los lrdi pais prdi
transmission-alarm holdoff-timer 100
transmission-alarm holdup-timer 3000
#
interface Pos1/0/2
link-protocol ppp
mtu 9178
description POS1/0/2 To GXGL-CYL-N40E-A2 POS1/0/2 155M
undo shutdown
ip address 172.17.66.197 255.255.255.252
isis enable 100
isis circuit-level level-2
isis small-hello
mpls
mpls ldp
trust upstream default
port-queue be wfq weight 9 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af1 wfq weight 4 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af2 wfq weight 12 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af3 wfq weight 30 shaping shaping-percentage 90 port-wred 0 outbound
port-queue af4 pq shaping shaping-percentage 90 outbound
port-queue ef pq shaping shaping-percentage 90 outbound
port-queue cs6 pq shaping shaping-percentage 80 outbound
port-queue cs7 pq shaping shaping-percentage 80 outbound
transmission-alarm down lais lof los lrdi pais prdi
transmission-alarm holdoff-timer 100
transmission-alarm holdup-timer 3000
#
interface Pos1/0/3
link-protocol ppp
mtu 9178
description POS1/0/3 To GXGL-CYL-N40E-A2 POS1/0/3 155M
undo shutdown
ip address 172.17.66.193 255.255.255.252
isis enable 100
isis circuit-level level-2
isis small-hello
mpls
mpls ldp
trust upstream default
port-queue be wfq weight 9 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af1 wfq weight 4 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af2 wfq weight 12 shaping shaping-percentage 40 port-wred 0 outbound
port-queue af3 wfq weight 30 shaping shaping-percentage 90 port-wred 0 outbound
port-queue af4 pq shaping shaping-percentage 90 outbound
port-queue ef pq shaping shaping-percentage 90 outbound
port-queue cs6 pq shaping shaping-percentage 80 outbound
port-queue cs7 pq shaping shaping-percentage 80 outbound
transmission-alarm down lais lof los lrdi pais prdi
transmission-alarm holdoff-timer 100
transmission-alarm holdup-timer 3000
#
interface Pos1/0/4
link-protocol ppp
shutdown
#
interface Pos1/0/5
link-protocol ppp
shutdown
#
interface Pos1/0/6
link-protocol ppp
shutdown
#
interface Pos1/0/7
link-protocol ppp
shutdown
#
interface NULL0
#                                         
interface LoopBack0
description loopback for management
ip address 116.79.13.196 255.255.255.255
isis enable 100
isis circuit-level level-2
#
interface LoopBack99
ip binding vpn-instance NMS_PING
ip address 10.255.13.196 255.255.255.255
#
bgp 38351
undo default ipv4-unicast
graceful-restart
group pgVRR internal
peer pgVRR connect-interface LoopBack0
peer 116.79.9.5 as-number 38351
peer 116.79.9.5 group pgVRR
peer 116.79.9.5 description To GDGZ-XSK-N40E-V1
peer 116.79.9.12 as-number 38351
peer 116.79.9.12 group pgVRR
peer 116.79.9.12 description To SCCD-SN-N40E-V1
peer 116.79.13.192 as-number 38351
peer 116.79.13.192 group pgVRR           
peer 116.79.13.192 description To GXNN-SZL-N80E-A1
#
ipv4-family unicast
  undo synchronization
  preference 170 170 170
  undo peer pgVRR enable
  undo peer 116.79.9.5 enable
  undo peer 116.79.9.12 enable
  undo peer 116.79.13.192 enable
#
ipv4-family vpnv4
  policy vpn-target
  peer pgVRR enable
  peer pgVRR route-policy rp_bgp_lp_in import
  peer pgVRR route-policy rp_bgp_community_out export
  peer pgVRR advertise-community
  peer 116.79.9.5 enable
  peer 116.79.9.5 group pgVRR
  peer 116.79.9.5 next-hop-local
  peer 116.79.9.12 enable
  peer 116.79.9.12 group pgVRR
  peer 116.79.9.12 next-hop-local
  peer 116.79.13.192 enable               
  peer 116.79.13.192 group pgVRR
  peer 116.79.13.192 next-hop-local
#
ipv4-family vpn-instance 3G_IuPS
  preference 170 170 170
  peer 10.241.190.2 as-number 64710
  peer 10.241.190.2 description AR1-CYL-CE1_3G_IuPS
  peer 10.241.190.2 connect-interface GigabitEthernet7/0/0.103
  peer 10.241.190.2 bfd min-tx-interval 150 min-rx-interval 150
  peer 10.241.190.2 bfd enable
  peer 10.241.190.2 route-update-interval 5
  peer 10.241.190.10 as-number 64710
  peer 10.241.190.10 connect-interface GigabitEthernet7/0/1.105
  peer 10.241.190.10 bfd min-tx-interval 150 min-rx-interval 150
  peer 10.241.190.10 bfd enable
  peer 10.241.190.10 substitute-as
  peer 10.241.190.10 advertise-community
#
ipv4-family vpn-instance 3G_PSCE_OMC
  preference 170 170 170
  peer 192.168.3.6 as-number 64710
  peer 192.168.3.6 description To GXGL-GXQ-NE40E-CE1
  peer 192.168.3.6 bfd min-tx-interval 150 min-rx-interval 150
  peer 192.168.3.6 bfd enable
  peer 192.168.3.22 as-number 64710
  peer 192.168.3.22 connect-interface GigabitEthernet7/0/1.106
  peer 192.168.3.22 bfd min-tx-interval 150 min-rx-interval 150
  peer 192.168.3.22 bfd enable
  peer 192.168.3.22 substitute-as
  peer 192.168.3.22 advertise-community
#
ipv4-family vpn-instance NMS_CORE
  preference 170 170 170
  network 192.168.8.184 255.255.255.252 route-policy rp_bgp_NMS_CORE_out
#
ipv4-family vpn-instance NMS_PING
  preference 170 170 170
  network 10.255.13.196 255.255.255.255
#
ipv4-family vpn-instance SSW_Media
  preference 170 170 170
  network 10.212.114.8 255.255.255.252 route-policy rp_bgp_community_out
  peer 10.212.114.10 as-number 64710
  peer 10.212.114.10 description AR1-CE1_Media
  peer 10.212.114.10 connect-interface GigabitEthernet7/0/0.100
  peer 10.212.114.10 bfd min-tx-interval 150 min-rx-interval 150
  peer 10.212.114.10 bfd enable
  peer 10.212.114.10 route-update-interval 5
#
ipv4-family vpn-instance SSW_NMS
  preference 170 170 170
  network 10.212.114.4 255.255.255.252 route-policy rp_bgp_community_out
  peer 10.212.114.6 as-number 64710
  peer 10.212.114.6 description AR1-CE1_Signal
  peer 10.212.114.6 connect-interface GigabitEthernet7/0/0.102
  peer 10.212.114.6 bfd min-tx-interval 150 min-rx-interval 150
  peer 10.212.114.6 bfd enable
  peer 10.212.114.6 route-update-interval 5
#
ipv4-family vpn-instance SSW_Signal
  preference 170 170 170
  network 10.212.114.0 255.255.255.252 route-policy rp_bgp_community_out
  peer 10.212.114.2 as-number 64710
  peer 10.212.114.2 description AR1-CE1_Signal
  peer 10.212.114.2 connect-interface GigabitEthernet7/0/0.101
  peer 10.212.114.2 bfd min-tx-interval 150 min-rx-interval 150
  peer 10.212.114.2 bfd enable
  peer 10.212.114.2 route-update-interval 5
#                                         
aaa
local-user ipnoc password cipher GG;DNXRDC6PX!X<]K3BK;Q!!
local-user ipnoc service-type telnet
local-user ipnoc level 1
local-user zyuc password cipher ^/&%TN6R'`+Q=^Q`MAF4<1!!
local-user zyuc service-type telnet
local-user zyuc level 3
authentication-scheme default
  authentication-mode  hwtacacs  local
  authentication-super  hwtacacs  super
#
authorization-scheme default
  authorization-mode  hwtacacs  local
#
accounting-scheme default
  accounting-mode hwtacacs
  accounting start-fail online
  accounting interim-fail max-times  3 online
#
domain default
  hwtacacs-server default
#
recording-scheme tacacs                  
  recording-mode hwtacacs default
#
cmd recording-scheme tacacs
#
#
route-policy rp_bgp_lp_in permit node 100
if-match community-filter 1
apply local-preference 200
#
route-policy rp_bgp_lp_in permit node 200
if-match community-filter 2
apply local-preference 100
#
route-policy rp_bgp_community_out permit node 100
apply community 38351:2001 38351:3771 38351:4773 additive
#
route-policy rp_vpn_vpnfrr_in permit node 100
if-match ip next-hop ip-prefix pl_vpnfrr
apply backup-nexthop auto
#
route-policy rp_bgp_NMS_CORE_out permit node 100
apply community 38351:2001 38351:3771 38351:3773 additive
#                                         
nqa test-instance 5839 DMSV3R3.NMC.BJBJ.JM.E2900.H1
test-type jitter
destination-address ipv4 172.17.66.194
destination-port 33434
frequency 300
nqa test-instance 5840 DMSV3R3.NMC.BJBJ.JM.E2900.H1
test-type jitter
destination-address ipv4 172.16.61.17
destination-port 33434
frequency 300
#
nqa-server udpecho 116.79.13.196 33434
#
ip ip-prefix pl_vpnfrr index 10 permit 116.79.10.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 20 permit 116.79.11.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 30 permit 116.79.12.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 40 permit 116.79.13.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 50 permit 116.79.14.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 60 permit 116.79.15.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 70 permit 116.79.16.0 24 greater-equal 24 less-equal 32
ip ip-prefix pl_vpnfrr index 80 permit 116.79.17.0 24 greater-equal 24 less-equal 32
#
ip community-filter 1 permit 38351:2001
ip community-filter 2 permit 38351:2002
#
ip route-static default-preference 5
#
snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF000055DB
snmp-agent community read  UNIngn2007R acl 2000
snmp-agent community write  2007uniNGNwr acl 2000
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 116.79.0.19 params securityname UNIngn2007R v2c
snmp-agent target-host trap address udp-domain 116.79.0.6 params securityname UNIngn2007R v2c
snmp-agent target-host trap address udp-domain 116.79.0.8 params securityname UNIngn2007R v2c
snmp-agent trap enable bfd
snmp-agent trap enable te tunnel
snmp-agent trap enable static-lsp
snmp-agent trap enable te tunnel-reop
snmp-agent trap enable te te-frr
snmp-agent trap enable te te-frr private
snmp-agent trap enable te hot-standby
snmp-agent trap enable te ordinary      
snmp-agent trap enable mpls-oam
snmp-agent trap enable ldp
snmp-agent trap enable tunnel-ps
snmp-agent trap enable configuration
snmp-agent trap enable system
snmp-agent trap enable standard
snmp-agent trap enable mstp
snmp-agent trap enable ssh
snmp-agent trap enable flash
snmp-agent trap source LoopBack0
#
ntp-service authentication enable
ntp-service authentication-keyid 1 authentication-mode md5 CW0^(2H0)'aQ=^Q`MAF4<1!!
ntp-service reliable authentication-keyid 1
ntp-service unicast-server 116.79.22.34 authentication-keyid 1
ntp-service unicast-server 116.79.22.2 authentication-keyid 1 source-interface LoopBack0
#
user-interface maximum-vty 15
user-interface con 0
authentication-mode aaa
user-interface aux 0
user-interface vty 0 14
acl 2001 inbound                        
authentication-mode aaa
idle-timeout 5 0
user-interface vty 16 20
#
return