#HUAWEI A905 STREET CELL MVRF

#R9 SCL2100ER COLORADO 29

! hostname

system-view
sysname R09-415273R-905A-01

! Configure Loopbacks

interface Loopback 0
description for IPSYSTEM
ip address 10.75.148.177 255.255.255.255

! configuration FTP

ftp server enable

ftp client-source -i Loopback0

! configure info-center

info-center source SHELL channel 4 log level informational

info-center loghost source LoopBack0
info-center loghost 10.209.41.58
info-center loghost 10.119.164.208

! configure time

clock timezone MEX minus 06:00:00

clock daylight-saving-time MEX repeating 02:00 first Sun Apr 02:00 last Sun Oct
01:00 2015 2037

! enable bfd

bfd

! configure aaa database

aaa
local-user root password cipher Ma2!sD8#
Changeme_123
local-user root service-type ssh ftp
local-user root level 15
local-user root ftp-directory cfcard:
local-user telcel password cipher Telcel@123
local-user telcel service-type ssh ftp
local-user telcel level 15
local-user telcel ftp-directory cfcard:

! configure Wireless_In diffserv

diffserv domain Wireless_In

ip-dscp-inbound 0 phb be green
 ip-dscp-inbound 8 phb af1 green
ip-dscp-inbound 18 phb af2 green
ip-dscp-inbound 26 phb ef green
ip-dscp-inbound 34 phb af3 green
ip-dscp-inbound 46 phb ef green
ip-dscp-inbound 56 phb af4 green

! configure Wireless_Out diffserv

diffserv domain Wireless_Out

8021p-outbound be green map 0
8021p-outbound af1 green map 4
8021p-outbound af2 green map 2
8021p-outbound af3 green map 3
8021p-outbound af4 green map 6
8021p-outbound ef green map 5

flow-queue Telcel_FlowQueue-L3_300
queue be wfq weight 23
queue af1 wfq weight 23
queue af2 wfq weight 23
queue af3 wfq weight 5
queue af4 wfq weight 5
queue af3 pq shaping 30000
queue ef pq shaping 60000

qos-profile Telcel_FlowQueue-L3_300
user-queue cir 300000 pir 300000 flow-queue Telcel_FlowQueue-L3_300

! configure NTP

quit
undo ntp-service server disable
ntp-service unicast-server 10.33.19.70
ntp-service unicast-server 10.40.56.70 preference

! configure BGP

bgp 65000
router-id 10.75.148.177
graceful-restart

! configure SNMP

snmp-agent
snmp-agent community write cipher Huawei_oam_IPRAN
snmp-agent sys-info version all
snmp-agent group v3 IPRAN privacy
snmp-agent target-host trap address udp-domain 10.119.155.13 source LoopBack0 vpn-
instance Telcel_IP_OAM params securityname cipher Huawei_oam_IPRAN
snmp-agent target-host trap address udp-domain 10.191.155.10 source LoopBack0
params securityname cipher Huawei_oam_IPRAN
snmp-agent target-host trap address udp-domain 10.191.155.12 source LoopBack0
params securityname cipher Huawei_oam_IPRAN
snmp-agent target-host trap address udp-domain 10.191.155.13 source LoopBack0
params securityname cipher Huawei_oam_IPRAN
snmp-agent trap enable
y
snmp-agent trap source LoopBack0
snmp-agent trap enable feature-name lldp
snmp-agent extend error-code enable
snmp-agent usm-user v3 IPRAN
snmp-agent usm-user v3 IPRAN group IPRAN
snmp-agent usm-user v3 IPRAN authentication-mode sha
TiPran!21
TiPran!21
snmp-agent usm-user v3 IPRAN privacy-mode aes128
TiPran!21
TiPran!21
snmp-agent trap source LoopBack0
snmp-agent extend error-code enable
snmp-agent trap enable
y

! configure SSH

undo ssh server compatible-ssh1x enable

stelnet server enable
ssh authentication-type default password
ssh client first-time enable

! configure user-interfaces

user-interface vty 0 4
authentication-mode aaa
user privilege level 15
protocol inbound ssh

user-interface vty 16 20
authentication-mode aaa
user privilege level 15
protocol inbound ssh

hwtacacs-server template telcel

hwtacacs-server authentication 10.119.248.18
hwtacacs-server authentication 10.211.6.237 secondary
hwtacacs-server authorization 10.119.248.18
hwtacacs-server authorization 10.211.6.237 secondary
hwtacacs-server accounting 10.119.248.18
hwtacacs-server accounting 10.211.6.237 secondary
hwtacacs-server shared-key cipher secret123
hwtacacs-server source-ip 10.171.71.93
undo hwtacacs-server user-name domain-included

aaa
authentication-scheme telcel
authentication-mode hwtacacs local

authorization-scheme telcel
authorization-mode hwtacacs local
authorization-cmd 15 hwtacacs local
 accounting-scheme telcel
accounting-mode hwtacacs
accounting send-update
accounting start-fail online

!Configuración VPN FRR

system
route-policy VPN_FRR permit node 10
apply backup-nexthop auto

!Configuración de VPNs de servicios

ip vpn-instance Telcel_2G
ipv4-family
route-distinguisher 65000:11
vpn frr route-policy VPN_FRR
apply-label per-instance

ip vpn-instance Telcel_3G
ipv4-family
route-distinguisher 65000:1100
vpn frr route-policy VPN_FRR
apply-label per-instance

ip vpn-instance Telcel_CFE
ipv4-family
route-distinguisher 65000:800
vpn frr route-policy VPN_FRR
apply-label per-instance

ip vpn-instance Telcel_LTE
ipv4-family
route-distinguisher 65000:5
vpn frr route-policy VPN_FRR
apply-label per-instance

ip vpn-instance Telcel_IP_OAM
ipv4-family
route-distinguisher 65000:6
vpn frr route-policy VPN_FRR
apply-label per-instance

!Configuración de políticas de servicios

route-policy advertise_OAM permit node 10

description advertise_OAM_service_ip_to_transmission
apply community 8151:285 64800:1 8151:377 additive

route-policy advertise_2G permit node 10

description advertise_2G_service_ip_to_transmission
apply community 8151:285 8151:342 8151:379 64800:1 additive

route-policy advertise_3G permit node 10

description advertise_3G_service_ip_to_transmission
apply community 8151:285 8151:376 64800:1 additive

route-policy advertise_LTE permit node 10

description advertise_LTE_service_ip_to_transmission
 apply community 8151:285 8151:375 64800:1 additive

route-policy advertise_CFE permit node 10

description advertise_CFE_service_ip_to_transmission
apply community 8151:285 8151:391 64800:1 additive

route-policy advertise_CAC permit node 10

description advertise_CAC_service_ip_to_transmission
apply community 8151:285 64800:1 8151:377 additive

route-policy advertise_WIFI permit node 10

description advertise_WIFI_service_ip_to_transmission
apply community 8151:285 64800:1 8151:378 additive

route-policy advertise_SPIDERCLOUD permit node 10

description advertise_SPIDERCLOUD_service_ip_to_transmission
apply community 8151:285 64800:1 8151:391 additive

ip ip-prefix default-route index 10 permit 0.0.0.0 0

route-policy receive_default_route permit node 100

description only_ receive_default_route_from_transmission
if-match ip-prefix default-route
apply local-preference 200

!Asociar VPN de servicios a puertos

interface GigabitEthernet0/2/1
description To_UNINET_UG0-1804-0044
undo shutdown
mtu 1530
mode user-termination
dcn

interface GigabitEthernet0/2/1.100
description To_UNINET_C30-2003-0673_Telcel_3G
control-vid 10 qinq-termination
qinq termination pe-vid 417 ce-vid 100
ip binding vpn-instance Telcel_3G
ip address 10.206.57.243 255.255.255.254
arp broadcast enable
qos-profile Telcel_FlowQueue-L3_300 outbound pe-vid 417 ce-vid 100
trust upstream Wireless_Out
trust 8021p

interface GigabitEthernet0/2/1.101
description To_UNINET_C30-2003-0673_Telcel_LTE
control-vid 11 qinq-termination
qinq termination pe-vid 417 ce-vid 101
ip binding vpn-instance Telcel_LTE
ip address 10.206.60.243 255.255.255.254
arp broadcast enable
qos-profile Telcel_FlowQueue-L3_300 outbound pe-vid 417 ce-vid 101
trust upstream Wireless_Out
trust 8021p

interface GigabitEthernet0/2/1.103
description To_UNINET_C30-2003-0673_Telcel_2G
 control-vid 13 qinq-termination
qinq termination pe-vid 417 ce-vid 103
ip binding vpn-instance Telcel_2G
ip address 10.206.59.243 255.255.255.254
arp broadcast enable
qos-profile Telcel_FlowQueue-L3_300 outbound pe-vid 417 ce-vid 103
trust upstream Wireless_Out
trust 8021p

interface GigabitEthernet0/2/1.104
description To_UNINET_C30-2003-0673_Telcel_CFE
control-vid 14 qinq-termination
qinq termination pe-vid 417 ce-vid 104
ip binding vpn-instance Telcel_CFE
ip address 10.206.56.243 255.255.255.254
arp broadcast enable
qos-profile Telcel_FlowQueue-L3_300 outbound pe-vid 417 ce-vid 104
trust upstream Wireless_Out
trust 8021p

interface GigabitEthernet0/2/1.106
description To_UNINET_C30-2003-0673_Telcel_IP_OAM
control-vid 16 qinq-termination
qinq termination pe-vid 417 ce-vid 106
ip binding vpn-instance Telcel_IP_OAM
ip address 10.206.58.243 255.255.255.254
arp broadcast enable
qos-profile Telcel_FlowQueue-L3_300 outbound pe-vid 417 ce-vid 106
trust upstream Wireless_Out
trust 8021p

interface LoopBack 0
description for IPSYSTEM
ip binding vpn-instance Telcel_IP_OAM
ip address 10.75.148.177 255.255.255.255

!Levantar peer bgp hacia cada VPN de servicios

bgp 65000

ipv4-family vpn-instance Telcel_2G

import-route direct route-policy advertise_2G
peer 10.206.59.242 as-number 8151
peer 10.206.59.242 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier
4
peer 10.206.59.242 bfd enable
peer 10.206.59.242 route-policy receive_default_route import
peer 10.206.59.242 advertise-community

ipv4-family vpn-instance Telcel_3G

import-route direct route-policy advertise_3G
peer 10.206.57.242 as-number 8151
peer 10.206.57.242 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier
4
peer 10.206.57.242 bfd enable
peer 10.206.57.242 route-policy receive_default_route import
peer 10.206.57.242 advertise-community
 ipv4-family vpn-instance Telcel_CFE
import-route direct route-policy advertise_CFE
peer 10.206.56.242 as-number 8151
peer 10.206.56.242 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier
4
peer 10.206.56.242 bfd enable
peer 10.206.56.242 route-policy receive_default_route import
peer 10.206.56.242 advertise-community

ipv4-family vpn-instance Telcel_LTE

import-route direct route-policy advertise_LTE
peer 10.206.60.242 as-number 8151
peer 10.206.60.242 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier
4
peer 10.206.60.242 bfd enable
peer 10.206.60.242 route-policy receive_default_route import
peer 10.206.60.242 advertise-community

ipv4-family vpn-instance Telcel_IP_OAM

import-route direct route-policy advertise_OAM
peer 10.206.58.242 as-number 8151
peer 10.206.58.242 bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier
4
peer 10.206.58.242 bfd enable
peer 10.206.58.242 route-policy receive_default_route import
peer 10.206.58.242 advertise-community

!Asignación de servcios sin QINQ

interface GigabitEthernet0/2/3
description To_SCL2100ER COLORADO 29
undo shutdown

interface GigabitEthernet0/2/3.40
vlan-type dot1q 40
description To_SCL2100ER COLORADO 29/LTE_S1U-S1MME-SYNC
ip bi vpn Telcel_LTE
ip address 10.111.21.169 255.255.255.248
statistic enable
trust upstream Wireless_In

interface GigabitEthernet0/2/3.43
vlan-type dot1q 43
description To_SCL2100ER COLORADO 29/LTE-OAM
ip bi vpn Telcel_IP_OAM
ip address 10.111.141.169 255.255.255.248
statistic enable
trust upstream Wireless_In

set net-manager vpn-instance Telcel_IP_OAM

commit

return
save
y
************ejecutar después de conectar la línea************
system-view
undo dcn
y
undo interface loopback0
return
save
y