ME60维护手册
更新时间:2024-05-28 13:04:01 阅读量: 综合文库 文档下载
Bras ME60维护手册
2016年12月
园区网Bras ME60 维护手册
目 录
一、设备配置脚本........................................................................................................ 2 二、新设备(用户)开局脚本.................................................................................... 9
2.1 2.2 2.3 2.4 2.5 2.6
汇聚/接入交换机开局 ...................................................................................................... 9 配置纯Portal拨号业务 ................................................................................................. 10 配置静态IP业务(绑定用户IP) ............................................................................... 11 配置静态IP业务(不绑定用户IP) ........................................................................... 12 配置Portal拨号业务+固定IP ...................................................................................... 13 配置Portal拨号业务(绑定用户IP) ......................................................................... 14
三、维护命令.............................................................................................................. 15
3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6 3.1.7
查看域 ............................................................................................................................. 15 查看域内用户状态 ......................................................................................................... 16 查看网络联通性 ............................................................................................................. 16 查看总用户数 ................................................................................................................. 16 强制某用户下线 ............................................................................................................. 17 查看地址池占用率 ......................................................................................................... 17 查用巡检命令 ................................................................................................................. 17
1 / 18
园区网Bras ME60 维护手册
一、 设备配置脚本
设备配置较多,仅列出维护相关部分
radius-server group wgyxy
radius-server authentication 192.168.100.100 1812 weight 0 radius-server accounting 192.168.100.100 1813 weight 0 radius-server shared-key hwme60 radius-server nas-ip-address 192.168.100.1 radius-server attribute translate
undo radius-server user-name domain-included #
radius-server authorization 192.168.100.100 shared-key hwme60 # #
acl number 6000
rule 20 permit tcp source user-group portal destination-port eq www rule 25 permit tcp source user-group portal destination-port eq 8080 rule 30 permit tcp source user-group portal destination-port eq 801 rule 35 permit tcp source user-group portal destination-port eq 802 rule 40 permit tcp source user-group portal destination-port eq 803 rule 45 permit tcp source user-group portal destination-port eq 804 rule 50 permit tcp source user-group portal destination-port eq 443 #
acl number 6001
rule 5 permit ip source user-group portal destination ip-address 192.168.100.100 0 rule 10 permit ip source user-group portal destination ip-address 127.0.0.1 0
rule 15 permit ip source ip-address 192.168.100.100 0 destination user-group portal rule 20 permit ip source ip-address 127.0.0.1 0 destination user-group portal
rule 25 permit ip source ip-address 10.10.10.0 0.0.1.255 destination user-group portal rule 30 permit ip source user-group portal destination ip-address 10.10.10.0 0.0.1.255 rule 35 permit ip source ip-address 10.19.0.0 0.0.0.255 destination user-group portal rule 40 permit ip source user-group portal destination ip-address 10.19.0.0 0.0.0.255 rule 45 permit ip source ip-address 10.3.1.0 0.0.0.255 destination user-group portal rule 50 permit ip source user-group portal destination ip-address 10.3.1.0 0.0.0.255 rule 55 permit ip source ip-address 202.97.224.68 0.0.0.1 destination user-group portal rule 60 permit ip source user-group portal destination ip-address 202.97.224.68 0.0.0.1
2 / 18
园区网Bras ME60 维护手册
rule 65 permit ip source ip-address 101.7.8.9 0 destination user-group portal rule 70 permit ip source user-group portal destination ip-address 101.7.8.9 0 #
acl number 6002
rule 30 permit ip source user-group portal destination ip-address any rule 35 permit ip source ip-address any destination user-group portal # #
ip pool 3jiao_ap_dong bas local gateway 10.10.31.1 255.255.255.0 section 0 10.10.31.2 10.10.31.254 excluded-ip-address 10.10.31.2 10.10.31.9 dns-server 202.97.224.68 202.97.224.69
# ip pool 3jiao_ap_xi bas local gateway 10.10.30.1 255.255.255.0 section 0 10.10.30.2 10.10.30.254 excluded-ip-address 10.10.30.2 10.10.30.9 dns-server 202.97.224.68 202.97.224.69 #
ip pool guanli bas local gateway 10.11.255.254 255.255.0.0 section 0 10.11.0.1 10.11.255.253 excluded-ip-address 10.11.0.1 10.11.255.253
# ip pool portal bas local gateway 10.50.0.1 255.255.0.0 section 0 10.50.0.2 10.50.255.254 excluded-ip-address 10.50.100.100 dns-server 202.97.224.68 202.97.224.69 # # aaa
local-user huawei password irreversible-cipher $1a$:a(TQ#W local-user huawei state block fail-times 3 interval 5 authentication-scheme default0 authentication-scheme default1 authentication-scheme default authentication-mode local radius authentication-scheme pppoe authentication-mode none 3 / 18 园区网Bras ME60 维护手册 authentication-scheme radius # authorization-scheme default # accounting-scheme default0 accounting-scheme default1 accounting-scheme pppoe accounting-mode none accounting-scheme jrzk accounting-scheme radius accounting interim interval 10 # domain default0 ip-pool qinshi-1 dns primary-ip 202.97.224.68 dns second-ip 202.97.224.69 user-group portal web-server 192.168.100.100 web-server url http://192.168.100.100/index_3.html web-server url-parameter domain default1 domain default_admin domain portal authentication-scheme radius accounting-scheme radius radius-server group wgyxy domain guanli authentication-scheme pppoe accounting-scheme pppoe ip-pool guanli # interface Eth-Trunk1 description to-HW-S12708 [20G] mode user-termination load-balance packet-all # interface Eth-Trunk1.1 description portal_bohao user-vlan 101 148 qinq 2111 2114 user-vlan 101 148 qinq 2141 user-vlan 101 148 qinq 2171 user-vlan 101 148 qinq 2211 2213 user-vlan 201 248 qinq 2213 user-vlan 101 148 qinq 2240 4 / 18 园区网Bras ME60 维护手册 user-vlan 201 248 qinq 2240 user-vlan 301 348 qinq 2240 user-vlan 101 148 qinq 2321 2324 user-vlan 101 148 qinq 2341 user-vlan 101 148 qinq 2371 user-vlan 101 148 qinq 2421 2425 user-vlan 101 148 qinq 2441 user-vlan 101 148 qinq 2471 user-vlan 101 148 qinq 2511 2518 user-vlan 101 148 qinq 2520 user-vlan 101 148 qinq 2540 user-vlan 201 248 qinq 2540 user-vlan 101 148 qinq 2542 user-vlan 101 148 qinq 2561 user-vlan 101 148 qinq 2611 2614 user-vlan 101 148 qinq 2641 user-vlan 101 148 qinq 2711 2713 user-vlan 101 148 qinq 2741 2742 user-vlan 101 148 qinq 2810 user-vlan 201 248 qinq 2810 user-vlan 101 148 qinq 2821 2822 user-vlan 101 148 qinq 2830 user-vlan 201 248 qinq 2830 user-vlan 101 148 qinq 2840 user-vlan 201 248 qinq 2840 user-vlan 101 148 qinq 2851 user-vlan 101 148 qinq 2861 2862 user-vlan 101 148 qinq 2870 user-vlan 201 248 qinq 2870 bas # access-type layer2-subscriber default-domain authentication portal authentication-method web arp-trigger # # interface Eth-Trunk1.2 description device_management user-vlan 2000 user-vlan 2000 qinq 2111 2114 user-vlan 2000 qinq 2141 user-vlan 2000 qinq 2171 user-vlan 2000 qinq 2211 2213 user-vlan 2000 qinq 2240 2243 5 / 18 园区网Bras ME60 维护手册 user-vlan 2000 qinq 2321 2324 user-vlan 2000 qinq 2341 user-vlan 2000 qinq 2371 user-vlan 2000 qinq 2421 2425 user-vlan 2000 qinq 2441 user-vlan 2000 qinq 2471 user-vlan 2000 qinq 2511 2518 user-vlan 2000 qinq 2520 user-vlan 2000 qinq 2540 user-vlan 2000 qinq 2542 user-vlan 2000 qinq 2561 user-vlan 2000 qinq 2611 2614 user-vlan 2000 qinq 2641 user-vlan 2000 qinq 2711 2713 user-vlan 2000 qinq 2741 2742 user-vlan 2000 qinq 2810 user-vlan 2000 qinq 2821 2822 user-vlan 2000 qinq 2830 user-vlan 2000 qinq 2840 user-vlan 2000 qinq 2851 user-vlan 2000 qinq 2861 2862 user-vlan 2000 qinq 2870 bas # access-type layer2-subscriber default-domain authentication guanli authentication-method bind arp-proxy ip-trigger arp-trigger 其他子接口可根据子接口描述确定业务! # # interface Eth-Trunk2 portswitch description to-USG9000-FW [20G] port link-type trunk port trunk allow-pass vlan 105 4000 # interface GigabitEthernet1/0/0 undo shutdown eth-trunk 1 # interface GigabitEthernet1/0/1 6 / 18 园区网Bras ME60 维护手册 undo shutdown eth-trunk 1 # interface GigabitEthernet1/0/2 undo shutdown eth-trunk 2 # interface GigabitEthernet1/0/3 undo shutdown eth-trunk 2 # interface GigabitEthernet1/0/4 description to_powercache undo shutdown ip address 10.100.99.1 255.255.255.0 # # interface GigabitEthernet1/0/9 negotiation auto description to-H3C12508 undo shutdown ip address 172.16.6.66 255.255.255.0 # # ip route-static 0.0.0.0 0.0.0.0 Vlanif4000 172.31.0.1 description uplink-USG9000-FW ip route-static 10.5.0.0 255.255.252.0 172.28.2.2 ip route-static 10.10.1.0 255.255.255.0 172.28.2.2 ip route-static 10.10.2.0 255.255.255.0 172.28.2.2 ip route-static 10.10.3.0 255.255.255.0 172.28.2.2 ip route-static 10.10.4.0 255.255.255.0 172.28.2.2 ip route-static 10.10.5.0 255.255.255.0 172.28.2.2 ip route-static 10.10.6.0 255.255.255.0 172.28.1.2 ip route-static 10.10.7.0 255.255.255.0 172.28.1.2 ip route-static 10.10.8.0 255.255.255.0 172.28.2.2 ip route-static 10.10.9.0 255.255.255.0 172.28.2.2 ip route-static 10.10.11.0 255.255.255.0 172.28.1.2 ip route-static 10.10.12.0 255.255.255.0 172.28.1.2 ip route-static 10.10.13.0 255.255.255.0 172.28.1.2 ip route-static 10.10.14.0 255.255.255.0 172.28.2.2 ip route-static 10.10.15.0 255.255.255.0 172.28.1.2 ip route-static 10.10.16.0 255.255.255.0 172.28.1.2 ip route-static 10.10.17.0 255.255.255.0 172.28.1.2 ip route-static 10.10.18.0 255.255.255.0 172.28.2.2 ip route-static 10.10.19.0 255.255.255.0 172.28.1.2 ip route-static 10.10.20.0 255.255.255.0 172.28.1.2 7 / 18 园区网Bras ME60 维护手册 ip route-static 10.10.21.0 255.255.255.0 172.28.1.2 ip route-static 10.10.32.0 255.255.255.0 172.28.1.2 ip route-static 10.17.0.0 255.255.255.0 172.28.1.2 ip route-static 10.20.0.0 255.255.255.0 172.28.1.2 ip route-static 10.22.0.0 255.255.255.0 172.28.1.2 ip route-static 10.23.0.0 255.255.255.0 172.28.2.2 ip route-static 10.25.25.0 255.255.255.0 172.28.2.2 ip route-static 172.20.1.99 255.255.255.255 192.168.100.97 description to-ATM ip route-static 172.20.2.2 255.255.255.255 192.168.100.97 description to-ATM # # static-user 10.11.0.254 10.11.0.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect static-user 10.11.1.11 10.11.1.11 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2111 domain-name guanli detect static-user 10.11.1.12 10.11.1.12 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2112 domain-name guanli detect static-user 10.11.1.13 10.11.1.13 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2113 domain-name guanli detect static-user 10.11.1.14 10.11.1.14 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2114 domain-name guanli detect static-user 10.11.1.41 10.11.1.41 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2141 domain-name guanli detect static-user 10.11.1.254 10.11.1.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect static-user 10.11.2.11 10.11.2.11 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2211 domain-name guanli detect static-user 10.11.2.12 10.11.2.12 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2212 domain-name guanli detect static-user 10.11.2.13 10.11.2.14 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2213 domain-name guanli detect static-user 10.11.2.41 10.11.2.43 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2240 domain-name guanli detect static-user 10.11.2.254 10.11.2.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect static-user 10.11.3.21 10.11.3.21 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2321 domain-name guanli detect static-user 10.11.3.22 10.11.3.22 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2322 domain-name guanli detect static-user 10.11.3.23 10.11.3.23 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2323 domain-name guanli detect static-user 10.11.3.24 10.11.3.24 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2324 domain-name guanli detect static-user 10.11.3.41 10.11.3.41 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 8 / 18 园区网Bras ME60 维护手册 2341 domain-name guanli detect static-user 10.11.3.71 10.11.3.71 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 qinq 2371 domain-name guanli detect static-user 10.11.3.253 10.11.3.254 gateway 10.11.255.254 interface Eth-Trunk1.2 vlan 2000 domain-name guanli detect # web-auth-server 192.168.100.100 port 50100 key simple hwme60 二、 新设备(用户)开局脚本 2.1 汇聚/接入交换机开局 场景:假定新建一套中区11号楼的汇聚和接入交换机,其外层VLAN为1011,内层管理地址为11,内层1xx为一楼交换机,2xx为二楼交换机,依次类推。 1.定义一个管理IP地址池: ip pool guanli-zhongqu-11 bas local gateway 10.0.11.254 255.255.255.0 section 0 10.0.11.1 10.0.11.253 excluded-ip-address 10.0.11.1 10.0.11.253 2.在管理域中加入此地址池: aaa domain guanli ip-pool guanli-zhongqu-11 3.在Bras口上终结此VLAN interface Eth-Trunk1.2 user-vlan 11 user-vlan 11 qinq 1011 4.定义静态IP用户(交换机) static-user 10.0.11.1 10.0.11.252 gateway 10.0.11.254 interface Eth-Trunk1.2 vlan 11 qinq 1011 domain-name guanli detect static-user 10.0.11.253 10.0.11.253 gateway 10.0.11.254 interface Eth-Trunk1.2 vlan 11 domain-name guanli detect 9 / 18 园区网Bras ME60 维护手册 三、 维护命令 3.1.1 查看域 [ME60] dis domain ------------------------------------------------------------------------------ Domain name State CAR Access-limit Online BODNum RptVSMNum ------------------------------------------------------------------------------ default0 Active 0 152576 24 0 0 default1 Active 0 152576 0 0 0 default_admin Active 0 152576 2 0 0 portal Active 0 152576 105 0 0 guanli Active 0 152576 110 0 0 guding Active 0 152576 15 0 0 tiyuguan Active 0 152576 2 0 0 waijiao Active 0 152576 17 0 0 zhulou Active 0 152576 12 0 0 tiyuguan0 Active 0 152576 0 0 0 waijiao0 Active 0 152576 5 0 0 zhulou0 Active 0 152576 4 0 0 duomeiti0 Active 0 152576 1 0 0 duomeiti Active 0 152576 1 0 0 3jiao_ap_xi Active 0 152576 0 0 0 ------------------------------------------------------------------------------ 左侧一列为本台Bras上定义的域,每个域按其名称分别对应着一种业务,标黄的一列为当前的在线用户数。 15 / 18 园区网Bras ME60 维护手册 3.1.2 查看域内用户状态 ------------------------------------------------------------------------------ UserID Username Interface IP address MAC Vlan IPv6 address Access type ------------------------------------------------------------------------------ 20802 19991003 Eth-Trunk1.406 10.7.0.239 0024-0126-d6b5 406/- - IPOE ------------------------------------------------------------------------------ 当前这个域内仅有一个用户在线,其用户信息如下: 用户ID:20802(每次用户上线后,系统内部生成,用于跟踪用户)。 账号:19991003(Portal拨号使用的账号)。 vlan:内层vlan为406,无外层vlan。 用户上来的接口:Eth-Trunk1.406。 用户获取的IP地址:10.7.0.239。 用户的MAC地址:0024-0126-d6b5。 还可以基于以上信息查看用户的详细信息: display access-user user-id 20802 根据用户ID查看用户状态 display access-user username 19991003 根据用户账号查看用户状态 display access-user ip-address 10.7.0.239 根据用户IP查看用户状态 display access-user ip-address 10.7.0.239 根据用户IP查看用户状态 display access-user mac-address 0024-0126-d6b5 根据用户MAC查看用户状态 3.1.3 查看网络联通性 由于Bras当前是大部分业务的网关,因此网络的连通性,可以在Bras上使用特定业务的源IP地址去测试。 例如:寝室的IP端是10.0.0.0/8,服务器区的IP端是20.0.0.0。 测试寝室到服务器区的连通性可以带着寝室网段的IP作为源IP去ping 某台服务器: ping –a 10.0.0.1 20.20.20.20 (20.20.20.20是一台在线服务器)。 3.1.4 查看总用户数 dis access-user online-total-number 16 / 18 园区网Bras ME60 维护手册 3.1.5 强制某用户下线 aaa cut access-user user-id 20802 基于用户ID将某个用户踢下线。 cut access-user ip-address 10.7.0.239 基于用户IP地址将其踢下线。 也可基于MAC地址、VLAN信息。不再重复。 3.1.6 查看地址池占用率 display ip pool all used 3.1.7 查用巡检命令 display current-configuration display version display cpu-usage display cpu-monitor information all display memory-usage display memory-monitor information all display fan display power display voltage display temperature display health display alarm statistics display alarm active display alarm history display logbuffer display interface X display int brief display ospf peer brief display bgp peer display ip routing-table statistics display clock display startup display device display device pic display switchover state 具体每种命令的用法,请搜索配置手册中的命令参考部分。 17 / 18
正在阅读:
ME60维护手册05-28
探究世界的本质104-08
(精编)部编人教版八年级语文下册第23课《马说》教学设计11-08
我的童年我的梦作文600字07-16
《我爱家乡 我爱祖国》教案0205-08
我过我节的社会实践报告12-18
搭讪后如何让mm主动来联系你?教你快速提升搭讪约会成功率文库06-02
我读书我快乐的读书手抄报02-12
- 二年级下册音乐测试题
- 浙江财经大学中微题库答案
- 小升初常考古诗填空练习(80首古诗 含答案)
- 全国导基 第十章 中国旅游诗词、楹联、游记鉴赏 练习题 及答案
- 华师大版七年级科学(生物)下册5.1《种群和群落》导学案(含答
- 人教版七年级语文上册练习:《我的老师》课时训练(附答案)-精
- NOIP2015浙江省复赛普及组成绩
- 长虹公司的应收账款管理
- 快递行业同业竞争对手调查报告
- “十三五”重点项目-牦牛骨髓粉项目节能评估报告(节能专篇)
- 钢结构生产制造部各岗位职责及任职要求
- 对H企业应收账款管理与核算现状的调查报告
- 中国化学会第24届全国高中学生化学竞赛(省级赛区)试题、标准答
- 本科成本会计
- “众包”创新模式在我国潜在的风险的探讨
- 语文基础全套复习资料(有他足够了
- 中外合作出版合同(1)
- STM32-GPIO及EXTI初始化详解
- 2018年中国控制技术市场现状调研与发展前景分析报告目录
- 大学物理试题第四章 冲量和动量
- 维护
- 手册
- ME60
- 2018年中考模拟专题汇编认识大洲-含答案
- 中科院研究生院硕士研究生入学考试(生理学)
- 广东省环境保护监测行业企业名录2018版588家
- 合工大(宣)生产实习报告
- 临床生物化学检验试卷及答案
- 2015版三标一体化管理体系内审检查表
- 2017-2022年中国医美O2O市场竞争格局研究报告(目录) - 图文
- 苯加氢岗位健康操作规程
- XX年大学生社会实践报告3000字销售类
- 《生态系统的能量流动》第一课时教案
- 10KV继电保护整定计算
- 《招聘与配置》习题评析
- 高考化学一轮复习《电化学选择题》(含解析)
- 2016年度黑龙江省科学技术奖授奖项目
- 七年级合唱主持词
- 钢网架施工组织设计 - 图文
- 面包 - 图文
- 四级作文复习大全
- 第二十三章 审计报告
- 2015届北京市石景山区九年级上学期期末考试语文试卷(带解析)