所选语种没有对应资源,请选择:

本站点使用Cookies,继续浏览表示您同意我们使用Cookies。Cookies和隐私政策>

提示

尊敬的用户,您的IE浏览器版本过低,为获取更好的浏览体验,请升级您的IE浏览器。

升级

NE40E V800R010C00 配置指南 - 用户接入 01

评分并提供意见反馈 :
华为采用机器翻译与人工审校相结合的方式将此文档翻译成不同语言,希望能帮助您更容易理解此文档的内容。 请注意:即使是最好的机器翻译,其准确度也不及专业翻译人员的水平。 华为对于翻译的准确性不承担任何责任,并建议您参考英文文档(已提供链接)。
使用用户侧Delegation地址池为用户分配IPv6前缀配置示例

使用用户侧Delegation地址池为用户分配IPv6前缀配置示例

介绍一个使用用户侧Delegation地址池为用户分配IPv6前缀配置示例,结合配置组网图来理解业务的配置过程。配置示例包括组网需求、思路准备、操作步骤和配置文件。

组网需求

用户通过NDRA+IA_PD方式从NE40E获取IPv6地址和前缀,然后其局域网用户根据前缀和接口ID生成IPv6地址。

图5-12所示:

  • NE40E作为Delegating Router为Requesting Router分配IPv6前缀。

  • Requesting Router所在的域为isp1,从GE1/0/1接口接入Delegating Router,并采用PPP认证方法。

  • 采用RADIUS认证和RADIUS计费。

  • RADIUS服务器的地址为10.6.55.55,认证和计费端口分别为1550和1551,采用标准RADIUS协议,密钥为it-is-my-secret1。

  • DNS服务器的地址为3002:3101::2:2。

图5-12  用户侧Delegation地址池为用户分配IPv6前缀基本组网图
说明:

本例中Interface1,Interface2分别代表GE 1/0/1,GE 1/0/2



配置思路

采用如下思路配置用户侧Delegation地址池为Requesting Router分配IPv6前缀的基本功能:

  1. 配置虚拟模板接口
  2. 配置AAA方案;
  3. 配置RADIUS服务器组;
  4. 配置前缀池、地址池以及绑定关系,在地址池下指定DNS服务器地址;
  5. 配置isp1域;
  6. 配置DHCPv6服务器的DUID;
  7. 配置接口。

数据准备

为完成此配置例,需准备如下的数据:

  • 认证模板的名称和认证方式
  • 计费模板的名称和计费方式
  • RADIUS服务器组名称,RADIUS认证服务器和RADIUS计费服务器的IP地址、端口号
  • IPv6本地前缀池和Delegation前缀池的名称、地址前缀、前缀分配长度
  • IPv6用户侧本地地址池和用户侧Delegation地址池的名称。
  • 域名
  • bas接口参数

操作步骤

  1. 路由器上进行配置

    # 配置虚拟模板接口。

    [*Device] interface Virtual-Template 1
    [*Device-Virtual-Template1] ppp authentication-mode pap
    [*Device-Virtual-Template1] commit
    [~Device-Virtual-Template1] quit

  2. 配置AAA方案

    # 配置认证方案

    [*Device] aaa
    [*Device-aaa] authentication-scheme auth1
    [*Device-aaa-authen-auth1] authentication-mode radius
    [*Device-aaa-authen-auth1] commit
    [~Device-aaa-authen-auth1] quit

    # 配置计费方案

    [*Device-aaa] accounting-scheme acct1
    [*Device-aaa-accounting-acct1] accounting-mode radius
    [*Device-aaa-accounting-acct1] commit
    [~Device-aaa-accounting-acct1] quit
    [~Device-aaa] quit

  3. 配置RADIUS服务器组

    [*Device] radius-server group rd1
    [*Device-radius-rd1] radius-server authentication 10.6.55.55 1550
    [*Device-radius-rd1] radius-server accounting 10.6.55.55 1551
    [*Device-radius-rd1] radius-server type standard
    [*Device-radius-rd1] radius-server shared-key-cipher it-is-my-secret1
    [*Device-radius-rd1] commit
    [~Device-radius-rd1] quit

  4. 配置本地前缀池

    [*Device] ipv6 prefix pre1 local
    [*Device-ipv6-prefix-pre1] prefix 2010:2021::/64
    [*Device-ipv6-prefix-pre1] commit
    [~Device-ipv6-prefix-pre1] quit

  5. 配置用户侧本地地址池

    [*Device] ipv6 pool pool1 bas local
    [*Device-ipv6-pool-pool1] prefix pre1
    [*Device-ipv6-pool-pool1] dns-server 3002:3101::2:2
    [*Device-ipv6-pool-pool1] commit
    [~Device-ipv6-pool-pool1] quit

  6. 配置Delegation前缀池

    [*Device] ipv6 prefix pre2 delegation
    [*Device-ipv6-prefix-pre2] prefix 2011:2022::/62 delegating-prefix-length 63
    [*Device-ipv6-prefix-pre2] commit
    [~Device-ipv6-prefix-pre2] quit

  7. 配置用户侧Delegation地址池

    [*Device] ipv6 pool pool2 bas delegation
    [*Device-ipv6-pool-pool2] prefix pre2
    [*Device-ipv6-pool-pool2] dns-server 3002:3101::2:2
    [*Device-ipv6-pool-pool2] commit
    [~Device-ipv6-pool-pool2] quit

  8. 配置isp1域

    [*Device] aaa
    [*Device-aaa] domain isp1
    [*Device-aaa-domain-isp1] authentication-scheme auth1
    [*Device-aaa-domain-isp1] accounting-scheme acct1
    [*Device-aaa-domain-isp1] radius-server group rd1
    [*Device-aaa-domain-isp1] ipv6-pool pool1
    [*Device-aaa-domain-isp1] ipv6-pool pool2
    [*Device-aaa-domain-isp1] commit
    [~Device-aaa-domain-isp1] quit
    [~Device-aaa] quit

  9. DHCPv6服务器的DUID

    [*Device] dhcpv6 duid llt
      Warning:The change of DUID will cause the accessed user work abnormally,
    are you sure to change ? [Y/N]: y

  10. 配置接口

    # 为接口指定虚模板

    [*Device] interface GigabitEthernet 1/0/1
    [*Device-GigabitEthernet1/0/1] pppoe-server bind virtual-template 1

    # 配置BAS接口

    [*Device-GigabitEthernet1/0/1] bas
    [*Device-GigabitEthernet1/0/1-bas] access-type layer2-subscriber default-domain authentication isp1
    [*Device-GigabitEthernet1/0/1-bas] commit
    [~Device-GigabitEthernet1/0/1-bas] quit

    # 启动接口的IPv6功能

    [*Device-GigabitEthernet1/0/1] ipv6 enable
    [*Device-GigabitEthernet1/0/1] ipv6 address auto link-local
    [*Device-GigabitEthernet1/0/1] commit
    [~Device-GigabitEthernet1/0/1] quit

    # 配置上行接口

    [*Device] interface GigabitEthernet 1/0/2
    [*Device-GigabitEthernet1/0/2] ipv6 enable
    [*Device-GigabitEthernet1/0/2] ipv6 address auto link-local
    [*Device-GigabitEthernet1/0/2] ipv6 address 2011::1/64 eui-64
    [*Device-GigabitEthernet1/0/2] commit
    [~Device-GigabitEthernet1/0/2] quit

  11. 验证配置结果。

    # 查看名为pre1的前缀池信息。显示其类型为本地前缀池,前缀地址为2010:2021::/64。

    <HUAWEI> display ipv6 prefix pre1
     -------------------------------------------------------------
     Prefix Name        : pre1
     Prefix Index       : 4
     Prefix constant index: -
     Prefix Type        : LOCAL
     Prefix Address     : 2010:2021::
     Prefix Length      : 64
     Reserved Type      : NONE  
     Valid Lifetime     : 3 Days 0 Hours 0 Minutes
     Preferred Lifetime: 2 Days 0 Hours 0 Minutes
     IfLocked            : Unlocked
     Vpn instance       : -       
     Conflict address   : -
     Free Prefix Count  : 262144
     Used Prefix Count  : 0
     Reserved Prefix Count: 0   
     -------------------------------------------------------------
    

    # 查看名为pre2的前缀池信息。显示其类型为Delegation前缀池,前缀地址为2011:2022::/62。

    <HUAWEI> display ipv6 prefix pre2
     -------------------------------------------------------------
     Prefix Name        : pre2
     Prefix Index       : 5
     Prefix constant index: -
     Prefix Type        : DELEGATION
     Prefix Address     : 2011:2022::
     Prefix Length      : 62
     Valid Lifetime     : 3 Days 0 Hours 0 Minutes
     Preferred Lifetime : 2 Days 0 Hours 0 Minutes
     IfLocked           : Unlocked
     Vpn instance       : -      
     PD Prefix Len      : 64
     PD Prefix/C-DUID   : -
     slaac-unshare-only : FALSE
     Conflict address   : -
     Free Prefix Count  : 4
     Used Prefix Count  : 0
     Binded Prefix Count (Free): 0
     Binded Prefix Count (Used): 0
     Reserved Prefix Count: 0     
     -------------------------------------------------------------
    

    # 查看名为pool1的地址池信息。显示其类型为用户侧本地地址池,绑定了本地前缀池pre1。

    <HUAWEI> display ipv6 pool pool1
     ----------------------------------------------------------------------
     Pool name          : pool1
     Pool No            : 4 
      Pool-constant-index :- 
     Pool type          : BAS LOCAL
     Preference         : 0
     Renew time         : 50
     Rebind time        : 80
     Status              : UNLOCKED
     Refresh interval   : 0 Days 0 Hours 0 Minutes
     Used by domain     : 1
     Dhcpv6 Unicast     : disable
     Dhcpv6 rapid-commit: disable
     Dns list             : -
     Dns server master  : 3002:3101::2:2
     Dns server slave   : -
     AFTR name          : - 
     ----------------------------------------------------------------------
     Prefix-Name                      Prefix-Type
     ----------------------------------------------------------------------
     pre1                               LOCAL
    ----------------------------------------------------------------------
    

    # 查看名为pool2的地址池信息。显示其类型为用户侧Delegation地址池,绑定了本地前缀池pre2。

    <HUAWEI> display ipv6 pool pool2
    ----------------------------------------------------------------------
     Pool name          : pool2
     Pool No            : 5 
      Pool-constant-index :- 
     Pool type          : BAS DELEGATION
     Preference         : 255
     Renew time         : 50
     Rebind time        : 80
     Status              : UNLOCKED
     Refresh interval   : 0 Days 0 Hours 0 Minutes
     Used by domain     : 0
     Dhcpv6 Unicast     : disable
     Dhcpv6 rapid-commit: disable
     Dns list            : -
     Dns server master  : -
     Dns server slave   : -
     AFTR name          : - 
     ----------------------------------------------------------------------
     Prefix-Name                      Prefix-Type
     ----------------------------------------------------------------------
     pre2                               DELEGATION
    ----------------------------------------------------------------------
    

    查看域isp1的配置。显示域下绑定了IPv6地址池pool1和pool2。

    <HUAWEI> display domain isp1
    ------------------------------------------------------------------------------
      Domain-name                     : isp1
      Domain-state                    : Active
      Authentication-scheme-name      : auth1
      Accounting-scheme-name          : acct1
      Authorization-scheme-name       :
      Primary-DNS-IP-address          : -
      Second-DNS-IP-address           : -
      Web-server-URL-parameter        : No
      Slave Web-IP-address            : -
      Slave Web-URL                   : -
      Slave Web-auth-server           : - 
      Slave Web-auth-state            : - 
      Portal-server-URL-parameter     : No
      Primary-NBNS-IP-address         : -
      Second-NBNS-IP-address          : -
      User-group-name                 : -
      Idle-data-attribute (time,flow) : 0, 60
      Install-BOD-Count               : 0
      Report-VSM-User-Count           : 0
      Value-added-service             : COPS
      User-access-limit               : 279552
      Online-number                   : 0
      Web-IP-address                  : -
      Web-URL                         : -
      Portal-server-IP                : -
      Portal-URL                      : -
      Portal-force-times              : 2
      PPPoE-user-URL                  : Disable
      IPUser-ReAuth-Time(second)      : 300
      mscg-name-portal-key            : -
      Portal-user-first-url-key       : -
      Ancp auto qos adapt             : Disable
      RADIUS-server-template          : rd1
      Two-acct-template               : -
      HWTACACS-server-template        : -
      Bill Flow                       : Disable
      Tunnel-acct-2867                : Disabled
    
      Flow Statistic:
      Flow-Statistic-Up               : Yes
      Flow-Statistic-Down             : Yes
      Source-IP-route                 : Disable
      IP-warning-threshold            : -
      IPv6-warning-threshold          : - 
      Multicast Forwarding            : Yes
      Multicast Virtual               : No
      Multicast-profile ipv6          : -
      Max-multilist num               : 4
      Multicast-profile               : -
      IPv6-Pool-name                  : pool1
      IPv6-Pool-name                  : pool2
      Quota-out                     : Offline
      Service-type                    : -
      User-basic-service-ip-type      : -/-/-
      PPP-ipv6-address-protocol       : Ndra
      IPv6-information-protocol       : Stateless dhcpv6
      IPv6-PPP-assign-interfaceid     : Disable
      Trigger-packet-wait-delay       : 60s
      Peer-backup                     : enable    
      ------------------------------------------------------------------------------
    

配置文件

  • 路由器的配置文件

    #
     sysname HUAWEI
    #
    ipv6
    #
    dhcpv6 duid 006735f300188253a56a
    #
    radius-server group rd1
     radius-server authentication 10.6.55.55 1550 weight 0
    radius-server accounting 10.6.55.55 1551 weight 0
    radius-server shared-key-cipher %^%#vS%796FO7%C~pB%CR=q;j}gSCqR-X6+P!.DYI@)%^%
    #
    interface Virtual-Template1
     ppp authentication-mode pap
    #
    ipv6 prefix pre1 local
     prefix 2010:2021::/64
    #
    ipv6 prefix pre2 delegation
     prefix 2011:2022::/62
     delegating-prefix-length 63
    #
    ipv6 pool pool1 bas local
    prefix pre1
    #
    ipv6 pool pool2 bas delegation
     prefix pre2
    dns-server 3002:3101::2:2
    #
    aaa
    authentication-scheme default0
     authentication-scheme default1
    authentication-scheme auth1
    authentication-mode radius
    #
    accounting-scheme default0
     accounting-scheme default1
    accounting-scheme acct1
    accounting-mode radius
    #
    domain  isp1
     authentication-scheme auth1
     accounting-scheme acct1
     radius-server group rd1
     ipv6-pool pool1
     ipv6-pool pool2
    #
    interface GigabitEthernet1/0/1
     pppoe-server bind Virtual-Template 1
     ipv6 enable
     ipv6 address auto link-local
     bas
      access-type layer2-subscriber default-domain authentication isp1
    #
    interface GigabitEthernet1/0/2
     ipv6 enable
     ipv6 address 2011::1/64 eui-64
     ipv6 address auto link-local
    #
    return
    
下载文档
更新时间:2018-07-12

文档编号:EDOC1100028564

浏览量:16194

下载量:205

平均得分:
本文档适用于这些产品
相关文档
相关版本
分享
上一页 下一页