Huawei Switch S5700 Series POSTEF

CẤU HÌNH DỊCH VỤ TRIPLE PLAY

HUAWEI SWITCH S5700-LI (V200R011C10SPC600)
Dịch Vụ VLAN
Internet 351
Multicast 99
VoD 2400
VoIP 3000
Management 3996

#Đặt tên cho switch

[huawei] sysname SW

# Cấu hình User quản lý

[SW] telnet server enable

[SW] user-interface maximum-vty 5

[SW] user-interface vty 0

[SW-ui-vty0] user privilege level 15

[SW-ui-vty0] protocol inbound telnet

[SW-ui-vty0] authentication-mode password

[SW-ui-vty0] set authentication password cipher huawei123456

[SW-ui-vty0] idle-timeout 30

[SW-ui-vty0] quit

[SW] user-interface console 0

[SW-ui-con0] user privilege level 15

[SW-ui-con0] authentication-mode password

[SW-ui-con0] set authentication password cipher huawei123456

[SW-ui-con0] idle-timeout 30

#Tạo VLAN (system view)

[SW] vlan batch 99 2400 351 3000 3996

1
Huawei Switch S5700 Series POSTEF

# Tạo IP quản lý

[SW] interface vlan 3996

[SW-if-vlan3996] ip address 10.25.4.16 255.255.255.0

[SW-if-vlan3996] quit

[SW] ip route-static 0.0.0.0 0.0.0.0 10.25.4.254

# Enable igmp-snooping (system view & VLAN view)

[SW] igmp-snooping enable

[SW] vlan 99

[SW-vlan-99] igmp-snooping enable

[SW-vlan-99] quit

[SW] vlan 2400

[SW-vlan-2400] igmp-snooping enable

# Tạo Multicast user vlan

[SW] vlan 99

[SW-vlan-99] multicast-vlan enable

[SW-vlan-99] multicast-vlan user-vlan 2400

# Tạo Traffic policy

[SW] traffic classifier LIVE operator and

[SW-classifier-LIVE] if-match vlan-id 99

[SW-classifier-LIVE] quit

[SW] traffic classifier VOD operator and

[SW-classifier- VOD] if-match vlan-id 2400

[SW-classifier- VOD] quit

[SW] traffic behavior MYTV

2
Huawei Switch S5700 Series POSTEF

[Switch-behavior- MYTV] remark 8021p 4

[Switch-behavior- MYTV] quit

[SW] traffic policy MYTV

[Switch-trafficpolicy- MYTV] classifier LIVE behavior MYTV

[Switch-trafficpolicy- MYTV] classifier VOD behavior MYTV

# Tạo ACL

[SW] acl number 2000

[SW-acl-2000] rule 5 deny source 232.84.1.0 0.0.0.255

[SW-acl-2000] rule 6 deny source 232.84.2.0 0.0.0.255

[SW-acl-2000] rule 7 deny source 232.84.3.0 0.0.0.255

# Tạo SSM Group Policy

[SW] vlan 99

[SW-vlan-99] igmp-snooping ssm-mapping enable

[SW-vlan-99] igmp-snooping ssm-policy 2000

# Cấu hình Uplink port (interface view)

[SW] Interface Eth-Trunk 1

[SW-Eth-trunk-1] description UPLINK

[SW-Eth-trunk-1] mode lacp

[SW-Eth-trunk-1] port link-type trunk

[SW-Eth-trunk-1] port trunk allow-pass vlan 99 2400 351 3000 3996

[SW-Eth-trunk-1] traffic-policy MYTV inbound

[SW-Eth-trunk-1] pppoe uplink-port trusted

[SW-Eth-trunk-1] pppoe intermediate-agent information policy keep

[SW] Interface XGigabitEthernet 0/0/1

3
Huawei Switch S5700 Series POSTEF

[SW-XGigabitEthernet0/0/1] Eth-trunk 1

[SW-XGigabitEthernet0/0/1] undo negotiation auto // nếu port không up vật lý

# Cấu hình port Thuê bao

[SW] Interface GigabitEthernet 0/0/1

[SW-GigabitEthernet0/0/1] description Subscriber

[SW-GigabitEthernet0/0/1] port link-type trunk

[SW-GigabitEthernet0/0/1] port trunk allow-pass vlan 99 2400 351 3000

# Port isolation

[SW] port-group G1

[SW-port-group-G1] group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/24

[SW-port-group-G1] port-isolate enable

# Rate limit trên port

[SW-GigabitEthernet0/0/1] qos lr outbound cir 25000

[SW-GigabitEthernet0/0/1] qos wrr

[SW-GigabitEthernet0/0/1] qos queue 4 wrr weight 80

[SW-GigabitEthernet0/0/1] qos queue 0 wrr weight 20

[SW-GigabitEthernet0/0/1] qos queue 4 shaping cir 3000 pir 5000

[SW-GigabitEthernet0/0/1] qos queue 0 shaping cir 15000 pir 20000

# Xác thực 7 tham số :

[SW] pppoe intermediate-agent information enable

[SW] pppoe intermediate-agent information format circuit-id user-defined "%sysname atm

1/1/1/%port:0.35"

[SW] pppoe intermediate-agent information vendor-id 3561 // với trường hợp PPPoE Server
không phải của Huawei.

[SW] pppoe intermediate-agent information encapsulation circuit-id

4
Huawei Switch S5700 Series POSTEF

# Cho IPoE

[SW] dhcp enable

[SW] dhcp option82 circuit-id format user-defined "%sysname atm 1/1/1/%port:0.3000"

# QinQ

Inner VLAN 5,6 sẽ được tag outer VLAN 10

Inner VLAN 7,8 sẽ được tag outer VLAN 20

[SW]vlan batch 5 to 8 10 20

[SW-GigabitEthernet0/0/2] port hybrid untagged vlan 10 20

[SW-GigabitEthernet0/0/2] qinq vlan-translation enable

[SW-GigabitEthernet0/0/2] port vlan-stacking vlan 5 stack-vlan 10

[SW-GigabitEthernet0/0/2] port vlan-stacking vlan 6 stack-vlan 10

[SW-GigabitEthernet0/0/2] port vlan-stacking vlan 7 stack-vlan 20

[SW-GigabitEthernet0/0/2] port vlan-stacking vlan 8 stack-vlan 20

[SW-GigabitEthernet0/0/2] quit

Thêm VLAN 10,20 vào uplink :

[SW] interface XgigabitEthernet 0/0/2

[SW-XGigabitEthernet0/0/2] port trunk allow-pass vlan 10 20