(2)基于7750BRAS厂家命令集
维 护 文 档基于 7750BRAS 7750BRAS 的常用命令集Command Reference of 7750SR Based on BRAS作 者 姓 名： 部门、 产品： 工 号：兰宇 CCD 四川分公司 CV1.8完 成 日 期：创新沟通方式，缔造多彩生活
维护文档摘要本文档从 7750BRAS 作为宽带接入设备，提供 PPPOE、IPOE、L2TP 业务出发，给 出了在日常工作中常见的配置和维护命令，并针对性的对命令进行注释，作为维护命令 集速查手册，不同于产品手册，将重点对维护和配置中的常用命令进行说明和举例，可 以作为用户和工程师在基本的维护工作中的一个帮助手册或者速查手册。 本文档没有对所有命令进行枚举，对于 7750SR 所有命令和原理的讲解，可以参考 随机的配置手册。 本文涉及命令均以 8.0 版本作为参考，如果存在例外将注释版本信息。 关键词：7750BRAS；PPPOE；命令集；参考-I-维护文档Command Reference of 7750SRAbstract The document presents frequent collection of commands about PPPOE/IPOE/L2TP serevice’s configuration and maitaintion.It mainly illustrate and comment those commands which differ from configure manual of 7750SR. This Document is based 7750SR R8.0. Key Words：7750SR；BRAS; C Reference- II -基于 7750BRAS 的常用命令集目摘 1录要 ....................................................................................................................................................I 系统命令集 ....................................................................................................................................... 4 1.1 配置命令 .............................................................................................................................. 4 1.1.1 设置设备名称 ......................................................................................................... 4 1.1.2 设置系统时间 ......................................................................................................... 4 1.1.3 设置 SNMP 团体字 ................................................................................................... 4 1.1.4 使能 TELNET 服务 ................................................................................................... 4 1.1.5 使能 FTP 服务 ......................................................................................................... 5 1.1.6 使能 SSH 服务 ......................................................................................................... 5 1.1.7 设置设备访问过滤列表 ......................................................................................... 5 1.1.8 强制用户下线 ......................................................................................................... 6 1.2 诊断命令 .............................................................................................................................. 6 1.2.1 显示设备 CPU .......................................................................................................... 6 1.2.2 显示设备 Memory .................................................................................................... 7 1.2.3 显示设备时间 ......................................................................................................... 8 1.2.4 显示设备软件版本 ................................................................................................. 8 1.2.5 显示设备运行时间 ................................................................................................. 8 1.2.6 显示登录用户 ......................................................................................................... 8 1.2.7 显示设备日志 ......................................................................................................... 9 1.2.8 显示主备同步状态 ............................................................................................... 10Abstract .................................................................................................................................................. II2硬件命令集 ..................................................................................................................................... 11 2.1 配置命令 ............................................................................................................................ 11 2.1.1 配置 IOM ................................................................................................................ 11 2.1.2 配置 MDA ................................................................................................................ 11 2.1.3 配置 Port .............................................................................................................. 12 2.1.4 配置链路聚合 LAG ................................................................................................ 12 2.2 诊断命令 ............................................................................................................................ 13 2.2.1 查看 CARD 状态 ..................................................................................................... 13 2.2.2 查看 MDA 状态 ....................................................................................................... 15 2.2.3 查看端口状态 ....................................................................................................... 17 2.2.4 监控端口流量 ....................................................................................................... 19 2.2.5 查看机框状态 ....................................................................................................... 20 2.2.6 查看设备温度 ....................................................................................................... 21 2.2.7 查看风扇状态 ....................................................................................................... 211基于 7750BRAS 的常用命令集2.2.8 查看电源状态 ....................................................................................................... 21 3 路由协议命令集 ............................................................................................................................. 22 3.1 IGP 协议命令集 ................................................................................................................. 22 3.1.1 静态路由命令集 ................................................................................................... 22 3.1.2 OSPF 命令集 .......................................................................................................... 22 3.1.3 ISIS 命令集 .......................................................................................................... 24 3.2 BGP 命令集 ......................................................................................................................... 27 3.2.1 配置命令 ............................................................................................................... 27 3.2.2 诊断命令 ............................................................................................................... 27 3.3 LDP 命令集 ......................................................................................................................... 30 3.3.1 配置命令 ............................................................................................................... 30 3.3.2 诊断命令 ............................................................................................................... 30 4 RADIUS 命令集 ............................................................................................................................. 32 4.1 认证策略命令集 ................................................................................................................ 32 4.1.1 配置命令 ............................................................................................................... 32 4.1.2 诊断命令 ............................................................................................................... 37 4.2 计费策略命令集 ................................................................................................................ 40 4.2.1 配置命令 ............................................................................................................... 40 4.2.2 诊断命令 ............................................................................................................... 44 5 用户策略命令集 ............................................................................................................................. 46 5.1 PPPOE-Policy 命令集 ....................................................................................................... 46 5.1.1 配置命令 ............................................................................................................... 46 5.1.2 诊断命令 ............................................................................................................... 47 5.2 Sub-ident-policy 命令集 ............................................................................................... 48 5.2.1 配置命令 ............................................................................................................... 48 5.2.2 诊断命令 ............................................................................................................... 49 5.3 Sub-Profile 命令集 ......................................................................................................... 50 5.3.1 配置命令 ............................................................................................................... 50 5.3.2 诊断命令 ............................................................................................................... 50 5.4 Sla-Profile 命令集 ......................................................................................................... 52 5.4.1 配置命令 ............................................................................................................... 52 5.4.2 诊断命令 ............................................................................................................... 53 5.5 本地用户数据库命令集 .................................................................................................... 55 5.5.1 配置命令 ............................................................................................................... 55 5.5.2 诊断命令 ............................................................................................................... 56 5.6 本地地址池命令集 ............................................................................................................ 57 5.6.1 配置命令 ............................................................................................................... 572基于 7750BRAS 的常用命令集5.6.2 诊断命令 ............................................................................................................... 58 6 PPPOE 业务命令集 ........................................................................................................................ 61 6.1 6.2 MSAP 命令集 ....................................................................................................................... 61 6.1.1 配置命令 ............................................................................................................... 61 PPPOE 业务命令集 ............................................................................................................. 63 6.2.1 配置命令 ............................................................................................................... 63 6.2.2 诊断命令 ............................................................................................................... 70 7 IPOE 命令集 ................................................................................................................................... 79 7.1 7.2 MSAP 命令集 ....................................................................................................................... 79 7.1.1 配置命令 ............................................................................................................... 79 IPOE 业务命令集 ............................................................................................................... 81 7.2.1 配置命令 ............................................................................................................... 81 7.2.2 诊断命令 ............................................................................................................... 89 8 L2TP 命令集 ................................................................................................................................... 95 8.1 配置命令 .............................................................................................................................. 95 8.1.1 使能 L2TP .............................................................................................................. 95 8.1.2 LNS 地址改变策略 ................................................................................................ 95 8.1.3 创建和配置 TunnelGroup .................................................................................... 96 8.1.4 创建和配置 Tunnel .............................................................................................. 97 8.2 诊断命令 .............................................................................................................................. 98 8.2.1 查看 LNS ................................................................................................................ 98 8.2.2 查看 L2TP session .............................................................................................. 98 8.2.3 查看 L2TP group .................................................................................................. 99 8.2.4 查看 L2TP 用户列表 ........................................................................................... 100 9 其它命令集 ................................................................................................................................... 101 9.1 9.2 IP 过滤列表 ..................................................................................................................... 101 MAC 过滤列表 ................................................................................................................... 1029.3 过滤列表匹配规则 .......................................................................................................... 102 参考文献 ............................................................................................................................................. 104 致 谢 ............................................................................................................................................. 105 作者简介 ............................................................................................................................................. 1063基于 7750BRAS 的常用命令集1系统命令集本节涉及系统基本信息配置和诊断，比如设备名称、设备时间、软件版本等等。1.1 配置命令1.1.1 设置设备名称ALC-SR# config system name &hostname& - &hostname&: [32 chars max]语法： 语法：举例： 举例：ALCALC-SR&config&system# SR&config&system# info #-------------------------------------------------echo &System Configuration& #-------------------------------------------------name &SCXX-YY-SR7-001&1.1.2设置系统时间ALC-SR# admin set-time &date& &time& &date& : YYYY/MM/DD &time& : hh:mm[:ss]语法： 语法：举例： 举例：ALCALC-SR& SR&admin# admin# setset-time
00:00:001.1.3设置 SNMP 团体字ALC-SR# config system security snmp community &community-string& &access-permissions& [version &SNMP-version&] - &access-permissions&: r|rw|rwa|mgmt|vpls-mgmt - &SNMP-version&: v1|v2c|both语法： 语法：举例： 举例：ALCALC-SR&config&system&security&snmp# SR&config&system&security&snmp# info ---------------------------------------------community &rwascxxx& rwa version v2c ----------------------------------------------1.1.4使能 TELNET 服务语法： 语法：4基于 7750BRAS 的常用命令集ALC-SR# config system security [no] telnet-server举例： 举例：ALCALC-SR&config&system&security# SR&config&system&security# info ---------------------------------------------telnet-servertelnet 服务系统默认是关闭。 1.1.5 使能 FTP 服务ALC-SR# config system security [no] ftp-server语法： 语法：举例： 举例：ALCALC-SR&config&system&security# SR&config&system&security# info ---------------------------------------------ftp-serverftp 服务系统默认是关闭，建议在使用完成 ftp 后，关闭 ftp 服务。 1.1.6 使能 SSH 服务ALC-SR# config system security ssh [no] server-shutdown语法： 语法：举例： 举例：ALCALC-SR&config&system&security SR&config&system&security&ssh &config&system&security&ssh# &ssh# info ---------------------------------------------no server-shutdownSSH 服务系统默认打开。 1.1.7 设置设备访问过滤列表举例： 举例：ALCALC-SR& SR&system&security# system&security# info management-access-filter ip-filter default-action permit entry 100 description &nctele-SJZC& src-ip 172.16.37.96/27 action permit exit … entry 110 description &cacti-Server& src-ip 172.16.37.166/32 action permit exit5基于 7750BRAS 的常用命令集entry 199 dst-port 23 65535 action deny exit entry 200 dst-port 161 65535 action deny exit缺省默认为 default-action 为 deny，建议设置缺省为 permit，除非能够穷举所有访问 列表，否则可能严重影响业务。 案例中的 entry 199 表示除之前的 entry，其他所有的 telnet 访问 denly；entry 200 表 示出之前所有 entry，其他所有的 snmp 访问 deny。 1.1.8 强制用户下线ALC-SR# admin disconnect &users& - &users&: [address &ip-address& | username &user-name& | {console| telnet|ftp|ssh}]语法： 语法：举例： 举例：ALCALC-SR# admin disconnect username sc_jk1.2 诊断命令1.2.1 显示设备 CPUALC-SR# show system cpu语法: 举例： 举例：ALCALC-SR# show system cpu =============================================================================== CPU Utilization (Sample period: 1 second) =============================================================================== Name CPU Time CPU Usage Capacity (uSec) Usage ------------------------------------------------------------------------------BFD 26 ~0.00% ~0.00% BGP 2,259 0.22% 0.22% CFLOWD 1,246 0.12% 0.12% Cards & Ports 10,493 1.05% 0.29% DHCP Server 2,094 0.20% 0.19% ICC 39,153 3.92% 3.92% IGMP/MLD 863 0.08% 0.08% IOM 0 0.00% 0.00% IP Stack 207,871 20.81% 18.98% IS-IS 6,193 0.62% 0.62% ISA 1,692 0.16% 0.12% LDP 1,373 0.13% 0.13%6基于 7750BRAS 的常用命令集Logging 1,243 0.12% 0.12% MPLS/RSVP 1,592 0.15% 0.14% MSDP 0 0.00% 0.00% Management 19,495 1.95% 1.48% OAM 1,096 0.10% 0.07% OSPF 985 0.09% 0.06% PIM 3,381 0.33% 0.33% RIP 0 0.00% 0.00% RTM/Policies 1,063 0.10% 0.10% Redundancy 5,222 0.52% 0.36% SNMP Daemon 0 0.00% 0.00% Services 45,649 4.57% 4.47% Stats 0 0.00% 0.00% Subscriber Mgmt 6,210 0.62% 0.32% System 36,546 3.65% 1.00% VRRP 571 0.05% 0.04% WEB Redirect 217 0.02% 0.02% ------------------------------------------------------------------------------Total 998,568 100.00% Idle 602,035 60.28% Usage 396,533 39.71% Busiest Core Utilization 396,533 39.71% ===============================================================================在日常维护中， 通常占用率比较多的应用有： System、 Service、 IP Stack。 对于 System、 Service 通常是大量 log 读写，filter log 占用等等引起。对于 IP Stack 通常是网络攻 击、ARP 风暴等等引起。 1.2.2 显示设备 MemoryALC-SR# show system memory语法： 语法： 举例： 举例：ALCALC-SR# show system Memory =============================================================================== Memory Pools =============================================================================== Name Max Allowed Current Size Max So Far In Use ------------------------------------------------------------------------------System No limit 71,554,080 87,336,448 59,359,336 Icc 8,388,608 1,048,576 1,048,576 188,920 RTM/Policies No limit 20,971,520 20,971,520 19,195,168 OSPF No limit 1,048,576 1,048,576 490,360 MPLS/RSVP No limit 7,794,344 7,794,344 6,613,792 LDP No limit 3,145,728 3,145,728 2,015,328 IS-IS No limit 4,505,664 4,505,664 3,905,448 RIP No limit 0 0 0 VRRP No limit 1,048,576 1,048,576 1,456 BGP No limit 21,725,376 22,773,952 21,314,648 Services No limit 11,081,760 12,130,336 10,152,2647基于 7750BRAS 的常用命令集IOM No limit 0 0 0 CFLOWD No limit 0 0 0 IGMP No limit 0 0 0 PIM No limit 0 0 0 MCast Stack No limit 0 0 0 IP Stack No limit 38,598,712 38,598,712 36,880,608 MBUF No limit 5,837,312 5,837,312 4,866,688 IGMP Snooping No limit 1,048,576 1,048,576 860,552 TLS MFIB No limit 1,048,576 1,048,576 939,032 WEB Redirect 8,388,608 2,097,152 2,097,152 1,378,032 MSDP No limit 0 0 0 ------------------------------------------------------------------------------Current Total Size : 192,554,528 bytes Total In Use : 168,161,632 bytes Available Memory : 1,795,024,944 bytes ===============================================================================在日常维护还没有出现 memory 不足的情况。 1.2.3 显示设备时间ALC-SR# show time语法： 语法： 举例： 举例：ALCALC-SR# show time Wed Jan 12 13:29:54 GMT8 20111.2.4显示设备软件版本ALC-SR# show version语法： 语法： 举例： 举例：ALCALC-SR# show version TiMOS-C-8.0.R10 cpm/hops ALCATEL SR 7750 Copyright (c)
Alcatel-Lucent. All rights reserved. All use subject to applicable license agreements. Built on Tue May 24 17:48:05 PDT 2011 by builder in /rel8.0/b1/R10/panos/main1.2.5显示设备运行时间ALC-SR# show uptime语法： 语法： 举例： 举例：ALCALC-SR# show uptime System Up Time : 195 days, 08:15:22.76 (hr:min:sec)如果在设备启动运行中进行过 CPM/SFM 卡切换，显示的时间为切换后的时间。 1.2.6 显示登录用户语法： 语法：8基于 7750BRAS 的常用命令集ALC-SR# show users举例： 举例：ALCALC-SR# show users =============================================================================== User Type Login time Idle time From =============================================================================== Console -368d 14:49:47 -sc_jk Telnet 23MAY:04 0d 00:00:00 121.137.11.72 ------------------------------------------------------------------------------Number of users : 1 ===============================================================================1.2.7显示设备日志ALC-SR# show log log-id &99|100&语法： 语法： 举例： 举例：ALCALC-SR# show log loglog-id 99 =============================================================================== Event Log 99 =============================================================================== Description : Default System Log Memory Log contents [size=500 next event= (wrapped)] 1/08/04 18:47:39.17 GMT8 WARNING: PPPOE #2001 Base PPPoE session failure &PPPoE session failure on SAP lag-1:*.* in service 10 - [e0:05:c5:cb:19:1f,1,nc] RADIUS authentication failed& 1/08/04 18:47:39.17 GMT8 MINOR: SVCMGR #2214 Base Managed SAP creation failure &The system could not create a Managed SAP. Capturing SAP:lag-1:*.*, service:10. Description: RADIUS authentication failed& 1/08/04 18:47:39.11 GMT8 WARNING: SYSTEM #2006 Base DHCPS &Lease for server dhcp-pppoe ip-address 182.129.28.139 configuration modified& 1/08/04 18:47:38.97 GMT8 MINOR: SVCMGR #2214 Base Managed SAP creation failure &The system could not create a Managed SAP. Capturing SAP:lag-2:*.*, service:10. Description: Invalid session-id: 1& 1/08/04 18:47:38.79 GMT8 MAJOR: SYSTEM #2011 Base DHCPS &Dropped notification tmnxConfigModify for tmnxDhcpSvrLeaseState because of frequencyExceeded& ALCALC-SR# show log loglog-id 100 show log log-id 100 =============================================================================== Event Log 100 =============================================================================== Description : Default Serious Errors Log9基于 7750BRAS 的常用命令集warning:
events dropped from log Memory Log contents [size=500 next event=155(not wrapped)]154
02:55:10.98 GMT8 MAJOR: LOGGER #2008 Base log-id 10 file-id 10 &Log file cf3:\log\log1-185509 on compact flash cf3 has been rolled over& 153
21:47:45.45 GMT8 MAJOR: LOGGER #2008 Base log-id 20 file-id 20 &Log file cf3:\log\log1-103106 on compact flash cf3 has been rolled over& 152
02:55:09.69 GMT8 MAJOR: LOGGER #2008 Base log-id 10 file-id 10 &Log file cf3:\log\log0-185508 on compact flash cf3 has been rolled over& 151
09:01:44.90 GMT8 MAJOR: SYSTEM #2002 Base Configuration Save Succeeds &Configuration file saved to: cf3:\config.cfg&其中 99 记录设备运行所有告警(不包括 security 和 change)，100 记录是告警基本大 于等于 major 级别的告警。如果设备上还配置其他 log-id 告警，也通过以上命令查 看。 1.2.8 显示主备同步状态ALC-SR# show redundancy synchronization语法： 语法： 举例： 举例：ALCALC-SR# show redundancy synchronization =============================================================================== Synchronization Information =============================================================================== Standby Status : standby ready Last Standby Failure : N/A Standby Up Time :
02:54:28 Standby Version : TiMOS-C-8.0.R10 cpm/hops ALCATEL SR 7750 Copyright (c)
Alcatel-Lucent. All rights reserved. All use subject to applicable license agreements. Built on Tue May 24 17:48:05 PDT 2011 by builder in /rel8.0/b1/R10/panos/main Failover Time : N/A Failover Reason : N/A Boot/Config Sync Mode : Configuration Boot/Config Sync Status : Config only synchronized Last Config File Sync Time : 08/01/:47 Last Boot Env Sync Time : Never ===============================================================================显示备用情况(Up 时间、软件版本)、同步模式(通常情况配置为只同步配置文件)、 上次同步时间。10基于 7750BRAS 的常用命令集2硬件命令集本节配置和诊断设备硬件，包括 IOM 模块、MDA 模块、物理端口，以及风扇、电源等硬件状态。2.1 配置命令2.1.1 配置 IOMALC-SR# config card &slot& card type &iom-type&语法： 语法：举例： 举例：ALCALC-SR&config# SR&config# info #-------------------------------------------------echo &Card Configuration& #-------------------------------------------------card 1 card-type iom2-20g新安装模块，必须手工配置 type，设备才能加载，配置前可以通过 show card 查看 板卡类型，请参考相关命令。SFP/CPM 卡不需要配置，自动识别加载。 2.1.2 配置 MDAALC-SR# config card &slot& mda &mda-slot& mda type &mda-type&语法： 语法：举例： 举例：ALCALC-SR&config# SR&config# info #-------------------------------------------------echo &Card Configuration& #-------------------------------------------------card 1 card-type iom2-20g mda 1 mda-type m5-1gb-sfp exit exit新安装模块，必须手工配置 type，设备才能加载，配置前可以通过 show mda 查看 板卡类型，请参考相关命令。11基于 7750BRAS 的常用命令集2.1.3配置 PortALC-SR# config port &port-id& description &string& ethernet mode &access|network& mtu &bytes& encap-type &dot1q|null|qinq& [no] autonegotiate语法： 语法：举例： 举例：ALCALC-SR&config# SR&config# info #-------------------------------------------------echo &Port Configuration& #-------------------------------------------------port 1/1/4 description &TO-SCXX-YY-S/2& ethernet mode access encap-type qinq no autonegotiate exit no shutdown exit以上配置主要针对 Ethernet 端口。 端口模式有 access 和 network，对于上行口采用 network，其他端口使用 access；封 装类型有 dot1q(单层 vlan)，null(不携带 vlan)，qinq(双层 vlan)；端口自适应根据情 况修改， 通常电口多为自适应； MTU 默认值值根据端口 mode 不同而不同： network 时 MTU=9212，access(null)时 MTU=1514，每增加一层 vlan 自动增加 4byte。注：由于城域网基本都是 ethernet 口，很少有 POS 或者 ATM 口，关于这类接口配置，请参考 手册。2.1.4配置链路聚合 LAGALC-SR# config lag &lag-id& description &string& mode &access|network& mtu &bytes& encap-type &dot1q|null|qinq& port &port-id& lacp [mode] [administrative-key &admin-key&]语法： 语法：举例： 举例：ALCALC-SR&config# SR&config# info #-------------------------------------------------echo &LAG Configuration&12基于 7750BRAS 的常用命令集#-------------------------------------------------lag 1 description &to-AG-22JU-T40G& mode access encap-type dot1q port 2/2/1 port 2/2/2 lacp active administrative-key 32768 no shutdown exitLACP 的 mode 有 passive 和 active，active 表示主动发送 lacp 协议报文，passive 的 表示收到对端的 lacp 报文后才发送。 系统自动生成， 表示哪些端口在同一个 lag 中。 Administrative-key 可以不进行配置， 其他 mode、mtu、encap-type 配置参考物理端口配置说明。注：同一个 lag 中的端口，端口的状态必须完全一致，所以物理端口不能配置为自适应协商方 式。2.2 诊断命令2.2.1 查看 CARD 状态ALC-SR# show card [detail]语法： 语法： 举例： 举例：ALCALC-SR# show card =============================================================================== Card Summary =============================================================================== Slot Provisioned Equipped Admin Operational Comments Card-type Card-type State State ------------------------------------------------------------------------------1 iom3-xp iom3-xp up up 2 iom3-xp iom3-xp up up A sfm2-400g sfm2-400g up up/active B sfm2-400g sfm2-400g up up/standby =============================================================================== ALCALC-SR# show card detail =============================================================================== Card 1 =============================================================================== Slot Provisioned Equipped Admin Operational Comments Card-type Card-type State State ------------------------------------------------------------------------------1 iom3-xp iom3-xp up upIOM Card Specific Data13基于 7750BRAS 的常用命令集Clock source Named Pool Mode Fail On Error Available MDA slots Installed MDAs FP 1 Specific Data WRED Admin State WRED buffer-allocation max WRED buffer-allocation min WRED reserved-cbs max WRED reserved-cbs min WRED Slope Policy hi-bw-mc-srcEgress Alarm hi-bw-mc-srcEgress Group mc-path-mgmt Admin State Ingress Bandwidth Policy Hardware Data Platform type Part number CLEI code Serial number Manufacture date Manufacturing string Manufacturing deviations Manufacturing assembly number Administrative state Operational state Temperature Temperature threshold Software boot (rom) version Software version Time of last boot Current alarm state Base MAC address Last bootup reason Memory capacity: : : : :none Disabled Disabled 2 2: : : : : : : : : :Out Of Service 00 2500 default 2 0 Out Of Service default: : : : : : : : : : : : : : : : : : :619AAAE01 IPU3AC9EAA NS299 82-0107-05 up up 47C 75C X-8.0.R3 on Mon May 10 16:03:15 PDT 2010 by* TiMOS-I-8.0.R10 iom/hops ALCATEL SR 7750 Co*
02:55:23 alarm cleared 00:23:3e:d5:be:08 hard boot 2,048 MB===============================================================================可以查看模块运行状态(up/down)、模块当前温度、启动时间、软件版本。ALCALC-SR# show card a detail =============================================================================== Card A =============================================================================== Slot Provisioned Equipped Admin Operational Comments Card-type Card-type State State ------------------------------------------------------------------------------A sfm2-400g sfm2-400g up up/activeBOF last modified: N/A14基于 7750BRAS 的常用命令集Config file version Config file last modified Config file last saved M/S clocking ref state Flash - cf1: Administrative State Operational state Flash - cf2: Administrative State Operational state Flash - cf3: Administrative State Operational state Serial number Firmware revision Model number Size Free space: : : :SUN JUN 26 18:52:10 2011 UTC
17:56:28 primary: up : not equipped: up : not equipped: : : : : : :up up E74BE74B
SMART CF 1,953 MB 1,167 MBHardware Data Platform type : 7750 Part number : 3HE03208AAAB01 CLEI code : Serial number : NS Manufacture date :
Manufacturing string : Manufacturing deviations : Manufacturing assembly number : Administrative state : up Operational state : up Temperature : 37C Temperature threshold : 75C Software boot (rom) version : X-8.0.R3 on Mon May 10 16:03:15 PDT 2010 by* Software version : TiMOS-C-8.0.R10 cpm/hops ALCATEL SR 7750 Co* Time of last boot :
02:54:21 Current alarm state : alarm cleared Base MAC address : 00:23:3e:e8:93:12 Memory capacity : 2,048 MB ===============================================================================可以查看 SFP/CPM 模块运行状态(up/down)、模块当前温度、启动时间、软件版本、 CF 卡存储情况、主备情况。 2.2.2 查看 MDA 状态ALC-SR# show mda [detail]语法： 语法： 举例： 举例：ALCALC-SR# show mda15基于 7750BRAS 的常用命令集=============================================================================== MDA Summary =============================================================================== Slot Mda Provisioned Equipped Admin Operational Mda-type Mda-type State State ------------------------------------------------------------------------------1 1 m10-1gb-sfp-b m10-1gb-sfp-b up up 2 m1-10gb-xfp m1-10gb-xfp up up 2 1 m10-1gb-xp-sfp m10-1gb-xp-sfp up up 2 m1-10gb-xfp m1-10gb-xfp up up =============================================================================== ALCALC-SR# show mda detail =============================================================================== MDA 1/1 detail =============================================================================== Slot Mda Provisioned Equipped Admin Operational Mda-type Mda-type State State ------------------------------------------------------------------------------1 1 m10-1gb-sfp-b m10-1gb-sfp-b up upMDA Specific Data Maximum port count Number of ports equipped Network ingress queue policy Capabilities Hardware Data Platform type Part number CLEI code Serial number Manufacture date Manufacturing string Manufacturing deviations Manufacturing assembly number Administrative state Operational state Temperature Temperature threshold Software version Time of last boot Current alarm state Base MAC address: : : :10 10 default Ethernet: : : : : : : : : : : : : : : :617AAAB01 NS172009up up 37C 75C N/A
02:55:29 alarm cleared 00:23:3e:ec:8d:29------------------------------------------------------------------------------QOS Settings ------------------------------------------------------------------------------Ing. Named Pool Policy : None Egr. Named Pool Policy : None ===============================================================================16基于 7750BRAS 的常用命令集可以查看 MDA 模块运行状态(up/down)、模块当前温度、启动时间。 2.2.3 查看端口状态ALC-SR# show port show port &port-id& [detail]语法： 语法：举例： 举例：ALCALC-SR&config# SR&config# show port ============================================================================== Ports on Slot 1 ============================================================================== Port Admin Link Port Cfg Oper LAG/ Port Port Port SFP/XFP/ Id State State MTU MTU Bndl Mode Encp Type MDIMDX -----------------------------------------------------------------------------1/1/1 Up Yes Up
- netw null gige GIGE-SX 1/1/2 Up Yes Up
- accs qinq gige GIGE-LX 10KM ALCALC-SR&config# SR&config# show port 1/1/1 =============================================================================== Ethernet Interface =============================================================================== Description : to r1-c-xk-01.Mnet-CRS-1-R1 GE0/4/1/0 Interface : 1/1/1 Oper Speed : 0 mbps Link-level : Ethernet Config Speed : 1 Gbps Admin State : up Oper Duplex : N/A Oper State : down Config Duplex : full Physical Link : No MTU : 1614 Single Fiber Mode : No IfIndex :
Hold time up : 0 seconds Last State Change : 06/27/:26 Hold time down : 0 seconds Last Cleared Time : N/A DDM Events : Enabled Configured Mode : Dot1Q Ethertype : PBB Ethertype : Ing. Pool % Rate : Ing. Pool Policy : Egr. Pool Policy : Net. Egr. Queue Pol: Egr. Sched. Pol : Auto-negotiate : Accounting Policy : Egress Rate : Load-balance-algo : network 0xe7 100 n/a n/a default n/a false None Default Default Encap Type QinQ Ethertype : null : 0x8100Egr. Pool % Rate : 100MDI/MDX Collect-stats Ingress Rate LACP Tunnel Keep-alive Retry: : : :unknown Disabled Default DisabledDown-when-looped : Disabled Loop Detected : False Use Broadcast Addr : False Sync. Status Msg. : Disabled: 10 : 120Rx Quality Level : N/A17基于 7750BRAS 的常用命令集Tx DUS/DNU SSM Code Type Configured Address Hardware Address Cfg Alarm Alarm Status Transceiver Data: Disabled : sdh : 00:23:3e:ec:8d:29 : 00:23:3e:ec:8d:29 : :Tx Quality Level : N/ATransceiver Type : Model Number : TX Laser Wavelength: Connector Code : Manufacture date : Serial Number : Part Number : Optical Compliance : Link Length support:SFP none 1310 nm LC
BP 1AZ GIGE-LX 10km for SMFDiag Capable Vendor OUI Media AW: yes : 00:1c:ad : Ethernet=============================================================================== Transceiver Digital Diagnostic Monitoring (DDM), Externally Calibrated =============================================================================== Value High Alarm High Warn Low Warn Low Alarm ------------------------------------------------------------------------------Temperature (C) +29.0 +100.0 +90.0 +0.0 -5.0 Supply Voltage (V) 3.33 3.60 3.50 3.10 3.00 Tx Bias Current (mA) 9.1 60.0 50.0 1.0 0.5 Tx Output Power (dBm) -5.30 -2.00 -3.00 -11.51 -12.50 Rx Optical Power (avg dBm) -40.00 -3.00 -4.00 -18.01! -19.01! =============================================================================== =============================================================================== Traffic Statistics =============================================================================== Input Output ------------------------------------------------------------------------------Octets 0 0 Packets 0 0 Errors 0 0 =============================================================================== =============================================================================== Port Statistics =============================================================================== Input Output ------------------------------------------------------------------------------Unicast Packets 0 0 Multicast Packets 0 0 Broadcast Packets 0 0 Discards 0 0 Unknown Proto Discards 0 ===============================================================================18基于 7750BRAS 的常用命令集=============================================================================== Ethernet-like Medium Statistics =============================================================================== Alignment Errors : 0 Sngl Collisions : 0 FCS Errors : 0 Mult Collisions : 0 SQE Test Errors : 0 Late Collisions : 0 CSE : 0 Excess Collisns : 0 Too long Frames : 0 Int MAC Tx Errs : 0 Symbol Errors : 0 Int MAC Rx Errs : 0 In Pause Frames : 0 Out Pause Frames : 0 ===============================================================================可以查看 PORT 模块运行状态(up/down)、 端口最近一次 up/down 时间、 端口自适应、 端口封装、端口 MTU、SFP 类型，光功率和接收灵敏度、收发包情况(单播、广播、 多播包)等等。注：在 6.0 版本之前没有 DDM，即不能显示光功率等参数。2.2.4 监控端口流量ALC-SR# monitor port &port-id& [rate] [interval &seconds&]语法： 语法： 举例： 举例：ALCALC-SR# monitor port 1/1/2 rate =============================================================================== Monitor statistics for Port 1/1/2 =============================================================================== Input Output ------------------------------------------------------------------------------------------------------------------------------------------------------------At time t = 0 sec (Base Statistics) ------------------------------------------------------------------------------Octets
Errors 0 0 ------------------------------------------------------------------------------At time t = 10 sec (Mode: Rate) ------------------------------------------------------------------------------Octets 5225 Packets
Errors 0 0 Utilization (% of port capacity) 0.86 2.05 ------------------------------------------------------------------------------At time t = 20 sec (Mode: Rate) ------------------------------------------------------------------------------Octets 9194 Packets 19基于 7750BRAS 的常用命令集Errors Utilization (% of port capacity)0 0.840 1.95可以实时采集 PORT 流量，CTRL+C 终止采集。 rate 参数表示显示结果计算为速率，如上 1/1/2 端口下行(output)流量 =%=19.5M。 2.2.5 查看机框状态ALC-SR# show chassis语法： 语法： 举例： 举例：ALCALC-SR# how chassis =============================================================================== Chassis Information =============================================================================== Name : BNG-XK-BMZ-SR Type : 7750 SR-12 Location : Coordinates : CLLI code : Number of slots : 12 Number of ports : 22 Critical LED state : Off Major LED state : Off Minor LED state : Off Over Temperature state : OK Base MAC address : 00:23:3e:4e:b6:50 Admin chassis mode : d Oper chassis mode : d Hardware Data Part number : 3HE00104AAAC02 CLEI code : IPME400FRB Serial number : NS Manufacture date :
Manufacturing string : Manufacturing deviations : Manufacturing assembly number : 82-0018-10 Time of last boot :
02:54:21 Current alarm state : alarm cleared ------------------------------------------------------------------------------Environment Information Number of fan trays : 3 Number of fans : 6 Fan tray number Status Speed Fan tray number : 1 : up : half speed : 220基于 7750BRAS 的常用命令集Status Speed: up : half speedFan tray number : 3 Status : up Speed : half speed ------------------------------------------------------------------------------Power Supply Information Number of power supplies : 2 Power supply number Defaulted power supply type Power supply model Status : : : : 1 dc pem-3 upPower supply number : 2 Defaulted power supply type : dc Power supply model : pem-3 Status : up ===============================================================================需要留意 Fan 状态、速度，电源状态，如果 fan 速度是 full speed，说明设备温度过 高，可以查看各板卡温度进一步确认。 2.2.6 查看设备温度设备温度体现为每张板卡温度，包括 IOM/SFM/MDA 模块，相关命令请参考“查 看 CARD 状态”,“查看 MDA 状态”部分。 2.2.7 查看风扇状态请参考“查看机框状态”部分。 2.2.8 查看电源状态请参考“查看机框状态”部分。21基于 7750BRAS 的常用命令集3路由协议命令集由于本节配置中的 IGP、BGP、LDP 在开局后很少改动，本文档不做详细描述，详细命令请参考配置手册。3.1 IGP 协议命令集3.1.1 静态路由命令集3.1.1.1 配置命令语法： 语法：ALC-SR&config&router# ALC-SR&config&service&vprn# static-route &subnet/mask& next-hop &ip-address& [preference N] static-route &subnet/mask& blackhole [preference N] 3.1.1.2 诊断命令 诊断命令语法： 语法：ALC-SR# show router route-table protocol static举例： 举例：ALCALC-SR# SR# show router router routeroute-table protocol static =============================================================================== Route Table (Router: Base) =============================================================================== Dest Prefix Type Proto Age Pref Next Hop[Interface Name] Metric ------------------------------------------------------------------------------------------------------------------------------------------------------------No. of Routes: 0 ===============================================================================查看路由表中的静态路由条目。 3.1.2 OSPF 命令集3.1.2.1 配置命令举例： 举例：ALCALC-SR& SR&config&router# config&router# info ospf reference-bandwidth 22基于 7750BRAS 的常用命令集preference 110 area 0.0.0.0 interface &system& passive exit interface &To-Mnet/2/2& exit exit exit3.1.2.2 诊断命令语法： 语法：ALC-SR# show router ospf neibour [detail] show router ospf database show router route-table protocol ospf举例： 举例：ALCALC-SR# SR# show router ospf neighbor =============================================================================== OSPF Neighbors =============================================================================== Interface-Name Rtr Id State Pri RetxQ TTL ------------------------------------------------------------------------------To-Mnet/1/1 121.208.157.250 Full 1 0 39 To-Mnet/2/0 121.208.157.242 Full 1 0 38 ------------------------------------------------------------------------------No. of Neighbors: 2 ===============================================================================查看 OSPF 邻居。ALCALC-SR# SR# show router ospf neighbor detail =============================================================================== OSPF Neighbors =============================================================================== ------------------------------------------------------------------------------Neighbor Rtr Id : 121.208.157.250 Interface: To-Mnet/1/1 ------------------------------------------------------------------------------Neighbor IP Addr : 121.208.157.153 Local IF IP Addr : 121.208.157.154 Area Id : 0.0.0.0 Designated Rtr : 121.208.157.250 Backup Desig Rtr : 121.208.157.140 Neighbor State : Full Priority : 1 Retrans Q Length : 0 Options : -E--OEvents : 5 Last Event Time : 05/28/:12 Up Time : 49d 17:11:07 Time Before Dead : 36 sec GR Helper : Not Helping GR Helper Age : 0 sec GR Exit Reason : None GR Restart Reason: Unknown Bad Nbr States : 2 LSA Inst fails : 0 Bad Seq Nums : 0 Bad MTUs : 0 Bad Packets : 0 LSA not in LSDB : 023基于 7750BRAS 的常用命令集Option Mismatches: 0 Nbr Duplicates : 0 Num Restarts : 0 Last Restart at : Never -------------------------------------------------------------------------------查看 OSPF 邻居、UP 时间。ALCALC-SR# SR# show router ospf database =============================================================================== OSPF Link State Database (Type : All) =============================================================================== Type Area Id Link State Id Adv Rtr Id Age Sequence Cksum ------------------------------------------------------------------------------Router 0.0.0.0 121.68.197.1 125.68.197.1 436 0xx32d5 Router 0.0.0.0 121.208.157.137 222.208.157.137 ee Router 0.0.0.0 121.208.157.140 222.208.157.140 074de 0x81c1 Router 0.0.0.0 121.208.157.141 222.208.157.141 a Router 0.0.0.0 121.208.157.142 222.208.157.142 652 0x80013fcc 0x21bf Router 0.0.0.0 121.208.157.143 222.208.157.143 209 0xx4221 Router 0.0.0.0 121.208.157.144 222.208.157.144 002b5 0x7e8d Router 0.0.0.0 121.208.157.242 222.208.157.242 799 0x8x58ca查看 OSPF 链路状态 Database。ALCALC-SR# SR# show router routeroute-table protocol ospf =============================================================================== Route Table (Router: Base) =============================================================================== Dest Prefix Type Proto Age Pref Next Hop[Interface Name] Metric ------------------------------------------------------------------------------0.0.0.0/0 Remote OSPF 49d16h59m 150 172.208.157.153 1 0.0.0.0/0 Remote OSPF 49d16h59m 150 172.208.157.173 1 10.254.254.20/30 Remote OSPF 49d16h59m 110 21.208.157.153 .254.20/30 Remote OSPF 49d16h59m 110 172.208.157.173 65555查看路由表中 OSPF 的路由条目。 3.1.3 ISIS 命令集3.1.3.1 配置命令举例： 举例：ALCALC-SR& SR&config&router# config&router# info level-capability level-2 area-id 49.0001 reference-bandwidth 10000 level 2 wide-metrics-only24基于 7750BRAS 的常用命令集exit interface &system& level 2 passive exit exit interface &To-Mnet12416_1& exit interface &To-Mnet12416_2& exit interface &system1& level 2 passive exit exit3.1.3.2 诊断命令 诊断命令语法： 语法：ALC-SR# show router isis adjacency [detail] show router isis database show router route-table protocol isis举例： 举例：ALCALC-SR# SR# show router isis adjacency =============================================================================== ISIS Adjacency =============================================================================== System ID Usage State Hold Interface MT Enab ------------------------------------------------------------------------------ISA-XK-HCZ-SR Up 25 to-SA-XK-HCZ-SR7750-1 No SR-XK-HCZ-SR Up 26 to-SR-XK-HCZ-SR7750-1 No ------------------------------------------------------------------------------Adjacencies : 2 ===============================================================================查看 ISIS 邻居状态。ALCALC-SR# SR# show router isis adjacency detail =============================================================================== ISIS Adjacency =============================================================================== SystemID : ISA-XK-HCZ-SR7750-1 SNPA : 00:21:05:c6:80:a4 Interface : to-ISA-XK-HCZ-SR7750-1 Up Time : 323d 16:56:54 State : Up Priority : 0 Nbr Sys Typ : L2 L. Circ Typ : L2 Hold Time : 20 Max Hold : 27 Adj Level : L2 MT Enabled : No Topology : Unicast IPv6 Neighbor IPv4 Neighbor : :: : 172.121.0.12125基于 7750BRAS 的常用命令集Restart Support : Restart Status : Restart Supressed : Number of Restarts: Last Restart at :Disabled Not currently being helped Disabled 0 Never查看 ISIS 邻居状态、UP 时间。ALCALC-SR# SR# show router isis database =============================================================================== ISIS Database =============================================================================== LSP ID Sequence Checksum Lifetime Attributes ------------------------------------------------------------------------------Displaying Level 1 database ------------------------------------------------------------------------------Level (1) LSP Count : 0 Displaying Level 2 database ------------------------------------------------------------------------------BRAS-ISA-22-ERX-00 0x2dc30 0x L1L2 ISA-ZX-S-00 0x2f6e9 0x6de3
BRAS-XK-J0-E320-1.00-00 0x68fc 0xbb9c 845 L1L2 BRAS-XK-22-E320-1.00-00 0xd0c3 0x5da3
ISA-XK-W0-SR-00 0x1dcc1 0x92e3
ISA-XK-W0-SR-00 0x1f25e 0xb8f4 838 L1L2 ISA-XK-SO-SR-00 0x1e1e3 0xL2 ===============================================================================查看 ISIS 的链路状态 Database。ALCALC-SR# SR# show router routeroute-table protocol isis =============================================================================== Route Table (Router: Base) =============================================================================== Dest Prefix Type Proto Age Pref Next Hop[Interface Name] Metric ------------------------------------------------------------------------------0.0.0.0/0 Remote ISIS
172.121.0.126 21 10.84.0.0/30 Remote ISIS
172.121.0.126 41 10.84.0.128/30 Remote ISIS
172.121.0.126 31 10.84.4.0/22 Remote ISIS
172.121.0.126 41查看路由表中 ISIS 的路由条目。26基于 7750BRAS 的常用命令集3.2 BGP 命令集3.2.1 配置命令举例： 举例：ALCALC-SR& SR&config&router# config&router# info multipath 4 ibgp-multipath group &VPN-BGP& family vpn-ipv4 peer-as 65185 neighbor 172.16.190.15 local-address 172.16.190.23 exit neighbor 172.16.190.16 local-address 172.16.190.23 exit exit group &IPV4-BGP& family ipv4 export &Local_to_Internet& peer-as 65185 neighbor 172.16.150.1 description &To-XXX-001.Mnet.12416& local-address 172.16.190.24 exit neighbor 172.16.150.2 description & To-YYY-001.Mnet.12416& local-address 172.16.190.24 exit exit3.2.2诊断命令ALC-SR# show router bgp neigbour [ipaddress] [detail] show router bgp summary show router route-table protocol static语法： 语法：举例： 举例：ALCALC-SR# SR# show router bgp neighbor =============================================================================== BGP Neighbor =============================================================================== ------------------------------------------------------------------------------Peer : 172.98.150.1 Group : IPV4-BGP ------------------------------------------------------------------------------Peer AS : 65085 Peer Port : 37476 Peer Address : 172.98.150.1 Local AS : 65185 Local Port : 17927基于 7750BRAS 的常用命令集Local Address : 172.89.190.24 Peer Type : Internal State : Established Last State : Established Last Event : recvKeepAlive Last Error : Cease Local Family : IPv4 Remote Family : IPv4 Hold Time : 90 Keep Alive : 30 Active Hold Time : 90 Active Keep Alive : 30 Cluster Id : None Preference : 170 Num of Flaps : 183174 Recd. Paths : 15301 IPv4 Recd. Prefixes : 20416 IPv4 Active Prefixes : 19363 IPv4 Suppressed Pfxs : 0 VPN-IPv4 Suppr. Pfxs : 0 VPN-IPv4 Recd. Pfxs : 0 VPN-IPv4 Active Pfxs : 0 Mc IPv4 Recd. Pfxs. : 0 Mc IPv4 Active Pfxs. : 0 Mc IPv4 Suppr. Pfxs : 0 IPv6 Suppressed Pfxs : 0 IPv6 Recd. Prefixes : 0 IPv6 Active Prefixes : 0 Input Queue : 0 Output Queue : 0 i/p Messages : 3315424 o/p Messages : 2532848 i/p Octets : 5085735 o/p Octets : 1022973 i/p Updates : 787481 o/p Updates : 12 TTL Security : Disabled Min TTL Value : n/a Graceful Restart : Disabled Stale Routes Time : n/a Advertise Inactive : Disabled Peer Tracking : Disabled Advertise Label : None Auth key chain : n/a Local Capability : RouteRefresh MP-BGP Remote Capability : RouteRefresh MP-BGP Import Policy : None Specified / Inherited Export Policy : Local_to_Internet -------------------------------------------------------------------------------查看 bgp 邻居状态，确定 Last Event、Import/Export policy、Family。ALCALC-SR# SR# show router bgp summary =============================================================================== BGP Router ID : 172.89.190.23 AS : 65185 Local AS : 65085 =============================================================================== BGP Admin State : Up BGP Oper State : Up Number of Peer Groups : 2 Number of Peers : 4 Total BGP Paths : 2897 Total Path Memory : 483796 Total BGP Active Rts. : 37544 Total BGP Rts. : 40832 Total Supressed Rts. : 0 Total Hist. Rts. : 0 Total Decay Rts. : 0 Total Total Total Total Total VPN VPN VPN VPN VPN Peer Groups Local Rts. Remote Rts. Supp. Rts. Decay Rts. : : : : : 0 243
Total VPN Peers : 0Total VPN Remote Active Rts.: 10037 Total VPN Hist. Rts. : 0Total IPv6 Remote Rts.: 0Total IPv6 Rem. Active Rts. : 028基于 7750BRAS 的常用命令集=============================================================================== BGP Summary =============================================================================== Neighbor AS PktRcvd InQ Up/Down State|Rcv/Act/Sent (IPv4) PktSent OutQ Rcv/Act/Sent (VpnIPv4) Rcv/Act/Sent (IPv6) Rcv/Act/Sent (MCastIPv4) ------------------------------------------------------------------------------172.98.150.1 6 0 18d15h09m /5
VPN-IPv4 Incapable IPv6 Incapable MCAST-IPv4 Incapable 172.98.150.2 6 0 18d16h41m /5
VPN-IPv4 Incapable IPv6 Incapable MCAST-IPv4 Incapable 172.89.190.15 9 0 18d15h09m IPv4 Incapable
/243 IPv6 Incapable MCAST-IPv4 Incapable 172.89.190.16 0 0 18d16h41m IPv4 Incapable
IPv6 Incapable MCAST-IPv4 Incapable ===============================================================================查看 bgp 邻居状态，确定已 UP 时间，收发的 ipv4/vpnv4 路由条目。ALCALC-SR# SR# show router router routeroute-table protocol bgp =============================================================================== Route Table (Router: Base) =============================================================================== Dest Prefix Type Proto Age Pref Next Hop[Interface Name] Metric ------------------------------------------------------------------------------10.20.0.0/16 Remote BGP 18d15h08m 170 161.39.98.41 0 10.30.16.0/21 Remote BGP 18d15h08m 170 161.39.98.41 0 10.30.40.0/21 Remote BGP 18d15h08m 170 161.39.98.41 0 18.1.1.3/32 Remote BGP 18d15h08m 170 161.39.98.41 0查看路由表中的 BGP 路由条目。29基于 7750BRAS 的常用命令集3.3 LDP 命令集3.3.1 配置命令举例： 举例：ALC-SR&config&router# info #-------------------------------------------------echo &LDP Configuration& #-------------------------------------------------ldp peer-parameters peer 172.16.190.15 authentication-key &PS4C1u1YeqAiC5u8dsnjrp0uwtr68EIjR2/6leH5oEE& hash2 exit exit interface-parameters interface &To-Mnet12416_1& exit interface &To-Mnet12416_2& exit exit targeted-session exit exit3.3.2诊断命令ALC-SR# show router ldp session [detail] show router ldp peer [detail] show router ldp bindings [active]语法： 语法：举例： 举例：ALCALC-SR# SR# show router ldp session ============================================================================= LDP Sessions ============================================================================= Peer LDP Id Adj Type State Msg Sent Msg Recv Up Time ----------------------------------------------------------------------------121.98.150.1:0 Link Established 854 18d 15:18:15 121.98.150.2:0 Link Established 878 18d 16:50:22 121.89.190.1:0 Targeted Established :41:14 121.89.190.3:0 Targeted Established :41:20 121.89.190.21:0 Targeted Established :38:06 121.89.190.25:0 Targeted Established :41:18 ----------------------------------------------------------------------------No. of Sessions: 6 =============================================================================查看 LDP session 状态、UP 时间、邻居类型(Link or Target)。30基于 7750BRAS 的常用命令集ALCALC-SR# SR# show router ldp peer =============================================================================== LDP Peers =============================================================================== Peer Adm Opr Hello Hold KA KA Passive Auto Factor Time Factor Timeout Mode Created ------------------------------------------------------------------------------121.89.190.1 Up Up 3 45 4 40 Disabled Yes 121.89.190.3 Up Up 3 45 4 40 Disabled Yes 121.89.190.5 Up Up 3 45 4 40 Disabled Yes 121.89.190.7 Up Up 3 45 4 40 Disabled Yes 121.89.190.9 Up Up 3 45 4 40 Disabled Yes 121.89.190.21 Up Up 3 45 4 40 Disabled Yes 121.89.190.25 Up Up 3 45 4 40 Disabled Yes ------------------------------------------------------------------------------No. of Peers: 7 ===============================================================================查看 LDP peer 状态、相关参数。ALCALC-SR# SR# show router ldp bindings =============================================================================== LDP LSR ID: 121.89.190.23 =============================================================================== Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn S - Status Signaled Up, D - Status Signaled Down E - Epipe Service, V - VPLS Service, M - Mirror Service A - Apipe Service, F - Fpipe Service, I - IES Service, R - VPRN service P - Ipipe Service =============================================================================== LDP Prefix Bindings =============================================================================== Prefix Peer IngLbl EgrLbl EgrIntf/LspId EgrNextHop ------------------------------------------------------------------------------10.84.0.0/30 121.98.150.1 214 1/1/1 61.139.98.41 10.84.0.0/30 121.98.150.2 044 1/1/2 61.139.98.45 10.84.0.128/30 121.98.150.1 213 1/1/1 61.139.98.41 10.84.0.128/30 121.98.150.2 043 1/1/2 61.139.98.45 10.84.4.0/22 121.98.150.1 206 1/1/1 61.139.98.41 10.84.4.0/22 121.98.150.2 211 1/1/2 61.139.98.45 10.84.12.0/22 121.98.150.1 187 1/1/1 61.139.98.41 10.84.12.0/22 121.98.150.2 213 1/1/2 61.139.98.45查看 LDP 标签分配情况。31基于 7750BRAS 的常用命令集4RADIUS 命令集RADIUS 提供用户的认证、 授权和计费， BRAS 通过 RADIUS 协议与 RADIUS 服务器交互，本节涉及创建和配置 RADIUS 认证和计费服务器，以及运行状态诊断。在 PPPOE 环境和 IPOE 环境中，认证策略配置有相应的区别。4.1 认证策略命令集4.1.1 配置命令4.1.1.1 创建认证策略 创建认证策略语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-pppoe& create description &for-pppoe-customer& radius-authentication-server fallback-action accept source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change pppoe-access-method pap-chap include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exit创建认证策略，在认证策略中可以定义响应 RADIUS 认证服务器以及相关参数、包 括的 RADIUS 属性等等。4.1.1. 4.1.1.2 1.2 定义 RADIUS 服务器语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create radius-authentication-server fallback-action &accept& router &router-instance&32基于 7750BRAS 的常用命令集source-address &ip-address& server &id& address &radius-ip-address& secret &share-key& [port &number&] exit举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-pppoe& create description &for-pppoe-customer& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change pppoe-access-method pap-chap include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exitserver 定义 RADIUS 服务器 IP 地址，共享 key，端口号，默认为 1812。 source-address 定义与 Radius 交互的源 IP 地址。 Router 命令定义了 Radius 报文通过哪个路由实例发送，base 和不配置，表示 通过全局路由表，可以定义他一个特点的 VPN 中。 Fallback-action accept 表示如果到 radius 失败， 直接允许拨号用户通过认证， 不配置表示如果失败后，用户拨号也失败；也可以配置 fallback-action user-db &local-user-db-name&，表示如果 radius 失败后，检查本地用户数据 库进行认证。4.1.1.3 4.1.1.3 定义 PPPOE 认为方式语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create pppoe-access-method {none|padi|pap-chap}举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-pppoe& create description &for-pppoe-customer& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change pppoe-access-method pap-chap33基于 7750BRAS 的常用命令集include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exit定义与 RADIUS 交互的认证加密方式是 padi 还是 pap-chap，通常配置为 pap-chap。4.1.1.4 4.1.1.4 定义 PPPOE 环境下 domain语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create ppp-user-name &append|default-domain|replace& &domain-name& ppp-user-name strip举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-pppoe& create description &for-pppoe-customer& ppp-user-name append &SC163& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change pppoe-access-method pap-chap include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exit在 PPPOE 环境中用户名中的域名处理(8.0R4 及以上版本)： strip 表示任何在用户名中包含域名的部分被 trim， 比如终端拨号 ABC@domain， 在发送到 RADIUS 时 username 为 ABC。 append 表示在原有的用户名后增加@domain，比如终端拨号 ABC，在发送到 RADIUS 时为 ABC@domain，如果终端是 ABC@domain，发送到 RADIUS 时 是 ABC@doamin.domain。 default-domain 表示如果携带有 domain 保持不变，如果没有则增加 default-domain。比如终端拨号 ABC，发送到 RADIUS 为 ABC@domain，如果 终端拨号时 ABC@domain1，发送 RADIUS 还是 ABC@domain1。 replace 表示替换还有 domain 部分的名称，比如终端拨号时 ABC@domain1，发 送到 RADIUS 时是 ABC@domain，如果终端拨号时 ABC，发送到 RADIUS 还 是 ABC。 缺省配置为 no ppp-user-name，表示不对用户拨号的用户名做任何处理。34基于 7750BRAS 的常用命令集4.1.1.5 4.1.1.5 使能 RADIUS 授权更改 授权更改语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create accept-authorization-change举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-pppoe& create description &for-pppoe-customer& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change pppoe-access-method pap-chap include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exitaccept-authorization-change 表示接受 RADIUS 的授权，即在认证通过后可以通过 RADIUS 下发授权，改变认证计费策略。在 PORTAL 业务中比较常见。4.1.1.6 4.1.1.6 定义 IPOE 环境下的 useruser-namename-format语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create user-name-format ascii-converted-circuit-id| ascii-converted-tuple| circuit-id| mac| tuple dhcp-client-vendor-opts exit举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-iptv& create description &for-iptv-customer& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change user-name-format circuit-id exit35基于 7750BRAS 的常用命令集include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exit在 IPOE 环境中可以定义设备向 RADIUS 发起的认证请求中用户名格式： ascii-converted-circuit-id| ascii-converted-tuple| circuit-id| mac| tuple 为 8.0R4 之前 的 username 格式。 dhcp-client-vendor-opts 为在 8.0R4 之后 username 格式，即 option60/61 方式，详 细参考《TIMOS-8.0R4 workshop v1.2，TPSDA enhancements，2010》。4.1.1. 4.1.1.7 .1.7 定义 IPOE 环境下的 password语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create password &password&举例： 举例：ALCALC-SR&config& SR&config&subscr &config&subscrsubscr-mgmt# mgmt# info authentication-policy &auth-iptv& create description &for-iptv-customer& password &#$@16fbACDOMH& radius-authentication-server fallback-action accept router &base& source-address 121.121.0.12 server 1 address 121.122.9.4 secret &K1CTq0HUHCi4Hqy7Spfpd.& hash2 exit accept-authorization-change user-name-format circuit-id exit include-radius-attribute nas-port-id prefix-string &G& nas-identifier mac-address exit exit在 IPOE 环境中可以定义设备向 RADIUS 发起的认证请求的用户密码： 在 IPOE 下，终端采用 DHCP 方式，在 BRAS 向设备发送认证请求，统一携带 此密码。4.1.1.8 4.1.1.8 定义 RADIUS 属性语法： 语法：ALC-SR# config subscriber-mgmt authentication-policy &auth-policy-name& create include-radius-attribute36基于 7750BRAS 的常用命令集nas-port-id [prefix-string &string&] [suff