【文章內(nèi)容簡(jiǎn)介】 neighbor pgVRR activate $配置驗(yàn)證：IPv4鄰居關(guān)系show ip bgp summary Neighbor Ver As MsgRcvd MsgSend Up/Down State/PfxRcd 4 65232 2295 1993 16:33:41 0 4 65232 2293 1991 16:32:32 0 VPNv4鄰居關(guān)系show bgp vpnv4 unicast summary Neighbor Ver As MsgRcvd MsgSend Up/Down State/PfxRcd 4 65232 2224 2013 16:41:42 19 4 65232 2685 2013 16:41:42 19 . 新增路由網(wǎng)段的通告新增地址段的通告分兩種情況：1) VPN業(yè)務(wù)地址：VPN中通過重分布方式發(fā)布了直連路由，只要完成三層接口的配置就會(huì)自動(dòng)通告出去了，不需要額外配置；2) 公網(wǎng)業(yè)務(wù)地址：需要通過bgp進(jìn)行發(fā)布，完成三層接口的配置后，通過以下命令進(jìn)行發(fā)布router bgp 64948 network net_mask!配置驗(yàn)證：show ip bgp neighbor out Routes Sent to This neighbor:Dest NextHop Metric LocPrf Path. 組播協(xié)議配置ip multicastrouting router pimsm staticrp interface gei0/0/0/1 pimsm$interface gei0/1/0/1 pimsm$ interface loopback2 pimsm //需要開啟此接口的PIMSM，以激活接口的IGMP功能 $ router igmp interface loopback2 //把loopback2靜態(tài)加入組播頻道實(shí)現(xiàn)拉流 staticgroup staticgroup ……[略] staticgroup !配置驗(yàn)證：查看PIMSM鄰居show ip pimsm neighbor Neighbor Address Interface DR Priority Uptime Expires Ver gei0/1/0/1 1 17:05:27 00:01:16 V2 gei0/0/0/1 1 17:05:28 00:01:39 V2查看組播路由show ip mroute summary IP multicast routing table summary (*,G): 255 routes (S,G): 59 routes Total: 314 routesshow ip mroute IP Multicast Routing Table(*, ), RP: , TYPE: DYNAMIC, FLAGS: NS Ining interface: gei0/1/0/1, flags: NS Outgoing interface list: loopback2, flags: F(, ), TYPE: DYNAMIC, FLAGS: Ining interface: gei0/1/0/1, flags: Outgoing interface list: loopback2, flags: F(*, ), RP: , TYPE: DYNAMIC, FLAGS: NS Ining interface: gei0/1/0/1, flags: NS Outgoing interface list: loopback2, flags: F(, ), TYPE: DYNAMIC, FLAGS: Ining interface: gei0/1/0/1, flags: Outgoing interface list: loopback2, flags: F….. Radius基本數(shù)據(jù)配置Radius group 1/2/3都是為了滿足現(xiàn)網(wǎng)業(yè)務(wù)需求必須配置的，不能遺漏。3) Group1用于不帶域名的業(yè)務(wù)應(yīng)用，如普通pppoe上網(wǎng)；4) Group2用于帶域名的業(yè)務(wù)應(yīng)用，如VPDN、Web+portal；5) Group3是為了配合DM功能配置的 Radius下發(fā)DM消息將用戶踢下線，一般用于欠費(fèi)或其他特殊需求，為保證DM消息的合法性，M6000會(huì)檢測(cè)DM消息源地址是否是Radius組中的地址，如不匹配將丟棄。，所以需要配置group 3來配合DM功能，實(shí)際不會(huì)引用，但必須配置。radius authenticationgroup 1 server 1 master key 8889 port 1645 server 2 key 8889 port 1645 deadtime 0 nasipaddress !radius authenticationgroup 2 server 1 master key 8889 port 1645 server 2 key 8889 port 1645 deadtime 0 usernameformat includedomain nasipaddress !radius authenticationgroup 3 server 1 key 8889 port 1645 nasipaddress !radius accountinggroup 1 server 1 master key 8889 port 1646 server 2 key 8889 port 1646 deadtime 0 nasipaddress localbuffer enable!radius accountinggroup 2 server 1 master key 8889 port 1646 server 2 key 8889 port 1646 deadtime 0 usernameformat includedomain nasipaddress localbuffer enable!radius accountinggroup 3 server 1 key 8889 port 1646 nasipaddress localbuffer enable!Radius可用性驗(yàn)證：如果設(shè)備的loopback加入了Radius中，采用下面錯(cuò)誤的帳號(hào)能返回“reject”信息，如提示“unreachable”loopback還未加入Radius，或未生效。Radius通信異常radiusping authenticationgroup 1 test test chap Ping radius authenticationgroup 1 with test at 17:58:27!Ping server 1 at 17:58:27!Ping server 2 at 17:58:27!....Request timed out. Server 1 unreachable!Request timed out. Server 2 unreachable!Radius可用radiusping authenticationgroup 1 tes test chap Ping radius authenticationgroup 1 with tes at 17:59:46!Ping server 1 at 17:59:46!Ping server 2 at 17:59:46!Reply from server 2 reject at 17:59:46!Reply from server 1 reject at 17:59:46!. AAA全局認(rèn)證、授權(quán)、計(jì)費(fèi)基本模版創(chuàng)建aaaauthenticationtemplate 1 //Radius認(rèn)證，不帶域名 aaaauthenticationtype radius authenticationradiusgroup 1!aaaauthenticationtemplate 2 //本地認(rèn)證 aaaauthenticationtype local!aaaauthenticationtemplate 3 //Radius認(rèn)證，帶域名 aaaauthenticationtype radius authenticationradiusgroup 2!aaaauthenticationtemplate 4 //不認(rèn)證 aaaauthenticationtype none!aaaauthorizationtemplate 1 aaaauthorizationtype radius!aaaauthorizationtemplate 2 aaaauthorizationtype mixradius //IPTV組播業(yè)務(wù)要配置為此方式，否則用戶無法加入組播組。 !aaaauthorizationtemplate 3 aaaauthorizationtype mixradius!aaaaccountingtemplate 1 aaaaccountingtype radius accountingradiusgroup first 1!aaaaccountingtemplate 2 aaaaccountingtype none!aaaaccountingtemplate 3 aaaaccountingtype radius accountingradiusgroup first 2!. QoS基本配置classmap cmCopper_NNI matchany match precedence 1 match mplsexp 1!classmap cmSilver_NNI matchany match precedence 2 match mplsexp 2!classmap cmGold_NNI matchany match precedence 3 match mplsexp 3!classmap cmCritical_NNI matchany match precedence 4 match mplsexp 4!classmap cmPlatinum_NNI matchany match precedence 5 match mplsexp 5!classmap cmNetworkControl_NNI matchany match precedence 6 match mplsexp 6!classmap cmDiamond_NNI matchany match precedence 7 match mplsexp 7!classmap cmCopper_UNI matchany match precedence 1 match out8021p 1!classmap cmSilver_UNI matchany match precedence 2 match out8021p 2!classmap cmGold_UNI matchany match precedence 3 match out8021p 3!classmap cmCritical_UNI matchany match precedence 4 match out8021p 4!classmap cmPlatinum_UNI matchany match precedence 5 match out8021p 5!classmap cmNetworkControl_UNI matchany match precedence 6 match out8021p 6!