Network Router User Manual

ManualsBrandsNortel Networks ManualsNetwork RouterVersalar 8000

Nortel Secure Router 8000 Series

Configuration -WAN Access

Release:

Document Revision:

5.3

01.01

www.nortel.com

NN46240-503 324557-A Rev01

Summary of content (486 pages)

PAGE 1
Nortel Secure Router 8000 Series Configuration -WAN Access Release: Document Revision: 5.3 01.01 www.nortel.
PAGE 2
Nortel Secure Router 8000 Series Release: 5.3 Publication: NN46240-503 Document Revision: 01.01 Document status: Standard Document release date: 30 March 2009 Copyright © 2009 Nortel Networks All Rights Reserved.
PAGE 3
Nortel Secure Router 8000 Series Configuration -WAN Access Contents About this document .......................................................................................................................1 1 WAN access overview ...............................................................................................................1-1 1.1 Introduction .................................................................................................................................................
PAGE 4
Nortel Secure Router 8000 Series Configuration -WAN Access 2.3.1 Establishing the configuration task .................................................................................................2-10 2.3.2 Configuring the link layer protocol .................................................................................................2-10 2.3.3 Configuring the MTU...................................................................................................................... 2-11 2.3.
PAGE 5
Nortel Secure Router 8000 Series Configuration -WAN Access 3.4.7 Configuring cable mode of CT1 interface.......................................................................................3-18 3.4.8 Checking the configuration .............................................................................................................3-19 3.5 Configuring CE3 interfaces.......................................................................................................................3-20 3.5.
PAGE 6
Nortel Secure Router 8000 Series Configuration -WAN Access 4.2.7 Configuring check word length of CRC..........................................................................................4-12 4.2.8 Configuring MTU ...........................................................................................................................4-13 4.2.9 Checking the configuration .............................................................................................................4-14 4.
PAGE 7
Nortel Secure Router 8000 Series Configuration -WAN Access 5.2.1 Establishing the configuration task ...................................................................................................5-4 5.2.2 Creating FR sub-interfaces................................................................................................................5-5 5.2.3 Creating X.25 sub-interfaces.............................................................................................................5-6 5.2.
PAGE 8
Nortel Secure Router 8000 Series Configuration -WAN Access 6.3.3 Configuring the peer to be authenticated by the local router in PAP mode ..................................... 6-11 6.3.4 Checking the configuration ............................................................................................................. 6-11 6.4 Configuring unidirectional CHAP.............................................................................................................6-12 6.4.
PAGE 9
Nortel Secure Router 8000 Series Configuration -WAN Access 6.10.3 Disabling the re-group of the fragments of the MP packets ..........................................................6-43 6.10.4 Configuring the packet order guarantee function on the MP-group interface ...............................6-44 6.10.5 Checking the configuration ...........................................................................................................6-45 6.11 Maintaining PPP and MP...................................
PAGE 10
Nortel Secure Router 8000 Series Configuration -WAN Access 7.5 Configuring load balancing .......................................................................................................................7-31 7.5.1 Establishing the configuration task .................................................................................................7-31 7.5.2 Enabling or disabling X.25 switching .............................................................................................7-32 7.5.
PAGE 11
Nortel Secure Router 8000 Series Configuration -WAN Access 8.1.3 Frame relay compression...................................................................................................................8-8 8.1.4 multilink frame relay.........................................................................................................................8-8 8.1.5 References ........................................................................................................................................
PAGE 12
Nortel Secure Router 8000 Series Configuration -WAN Access 8.9.3 Configuring FR FRF.9 compression on a main-interface or a point-to-multipoint sub-interface....8-34 8.9.4 Checking the configuration .............................................................................................................8-35 8.10 Configuring frame relay IP header compression .....................................................................................8-36 8.10.1 Establishing the configuration task ................
PAGE 13
Nortel Secure Router 8000 Series Configuration -WAN Access 9.2.3 Configuring the IP address of the interface .......................................................................................9-3 9.2.4 Setting the Polling Interval................................................................................................................9-4 9.2.5 Checking the configuration ...............................................................................................................9-4 9.
PAGE 14
Nortel Secure Router 8000 Series Configuration -WAN Access 10.7.3 Checking the configuration .........................................................................................................10-23 10.8 Creating a PVC-group and configuring the PVC service mapping .......................................................10-24 10.8.1 Establishing the configuration task .............................................................................................10-24 10.8.
PAGE 15
Nortel Secure Router 8000 Series Configuration -WAN Access 11.3 Configuring the IPoA application............................................................................................................ 11-9 11.3.1 Establishing the configuration task................................................................................................ 11-9 11.3.2 Configuring IPoA mapping on a PVC ......................................................................................... 11-10 11.3.
PAGE 16
Nortel Secure Router 8000 Series Configuration -WAN Access Index ................................................................................................................................................ i-1 xiv Nortel Networks Inc. Issue 5.
PAGE 17
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 3-1 CE1 interfaces binding..................................................................................................................3-31 Figure 3-2 E1 interfaces binding ....................................................................................................................3-35 Figure 3-3 Schematic diagram of CE3 interface configuration ......................................................................
PAGE 18
Nortel Secure Router 8000 Series Configuration -WAN Access Figure 7-11 Direct connection of two routers through serial interface (X.25)................................................7-41 Figure 7-12 Connecting routers to an X.25 public packet network ................................................................7-45 Figure 7-13 Networking diagram for configuring VC....................................................................................7-48 Figure 7-14 X.25 PVC bearing IP datagram.............
PAGE 19
Nortel Secure Router 8000 Series Configuration -WAN Access Tables Table 1-1 Command line views and prompts of WAN physical interfaces.......................................................1-2 Table 1-2 Command line views and prompts of WAN logical interfaces .........................................................1-3 Table 1-3 Interface numbering..........................................................................................................................
PAGE 20
Nortel Secure Router 8000 Series Configuration -WAN Access Contents About this document .......................................................................................................................1 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 21
PAGE 22
Nortel Secure Router 8000 Series Configuration -WAN Access About this document About this document Overview This chapter describes the organization of this document, product version, intended audience, conventions, and update history. Related versions The following table lists the product versions related to this document.
PAGE 23
Nortel Secure Router 8000 Series Configuration -WAN Access About this document 2 Chapter Description 3 E-Carrier and T-Carrier Interface Configuration This chapter describes E-Carrier and T-Carrier interface related concepts including digital carrier system and channelized, unchannelized and clear channel modes. It also describes the configuration steps of various interfaces including E1, CE1, CT1, CE3, along with typical examples.
PAGE 24
Nortel Secure Router 8000 Series Configuration -WAN Access About this document Chapter Description 12 PPPoE Configuration This section describes Point-to-Point Protocol over Ethernet (PPPoE) basic configuration and the procedure to configure maximum number of sessions available on a local MAC address, on a peer MAC address, on the local system, along with typical examples.
PAGE 25
Nortel Secure Router 8000 Series Configuration -WAN Access About this document Convention Description Boldface Names of files, directories, folders, and users are in boldface. For example, log in as user root. Italic Book titles are in italics. Courier New Terminal display is in Courier New. Command conventions Convention Description Boldface The keywords of a command line are in boldface. Italic Command arguments are in italics.
PAGE 26
Nortel Secure Router 8000 Series Configuration -WAN Access About this document Keyboard operation Format Description Key Press the key. For example, press Enter and press Tab. Key 1+Key 2 Press the keys concurrently. For example, pressing Ctrl+Alt+A means the three keys should be pressed concurrently. Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means the two keys should be pressed in turn.
PAGE 27
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 1 WAN access overview ...............................................................................................................1-1 1.1 Introduction ...................................................................................................................................................1-2 1.1.1 WAN interface types ................................................................................................................
PAGE 28
PAGE 29
Nortel Secure Router 8000 Series Configuration -WAN Access Tables Table 1-1 Command line views and prompts of WAN physical interfaces.........................................................1-2 Table 1-2 Command line views and prompts of WAN logical interfaces ...........................................................1-3 Table 1-3 Interface numbering............................................................................................................................1-6 Issue 5.
PAGE 30
PAGE 31
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview 1 WAN access overview About this chapter The following table shows the contents of this chapter. Section Description 1.1 Introduction This section describes interfaces and link layer protocols of WAN. 1.2 Configuring WAN interface parameters This section describes how to configure WAN interface parameters. 1.3 Maintaining interfaces This section describes how to maintain WAN interfaces. Issue 5.
PAGE 32
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview 1.1 Introduction This section describes the following topics that you need to know before you configure WAN interfaces and link layer protocols: z WAN interface types z Link layer protocols of WAN 1.1.1 WAN interface types Interface types Interfaces help exchange data and interact with other devices on the network. They are divided into physical and logical interfaces.
PAGE 33
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview Interface Command Line View Command Prompt CT1 interface CT1 interface view Run the controller t1 1/0/0 command in the system view. [Nortel-T1 1/0/0] CE3 interface CE3 interface view Run the controller e3 1/0/0 command in the system view. [Nortel-E3 1/0/0] POS interface POS interface view Run the interface pos 3/0/0 command in the system view.
PAGE 34
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview Interface Command Line View Command Prompt LoopBack interface LoopBack interface view Run the interface loopback 2 command in the system view. [Nortel-LoopBack2] NULL interface NULL interface view Run the interface null 0 command in the system view. [Nortel-NULL0] Tunnel interface Tunnel interface view Run the interface tunnel 0/0/6 command in the system view.
PAGE 35
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview z Describes how to create virtual circuits, forward packets, create links, transport data, disconnect links, and disconnect virtual circuits between DTE and DCE. z Performs error control, traffic control and instance statistics, providing users with optional service functions and configuration functions.
PAGE 36
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview 1.2 Configuring WAN interface parameters 1.2.1 Establishing the configuration task Applicable environment The section describes how to configure WAN interfaces. You must run all configurations related to interfaces in the interface views. Table 1-3 Interface numbering Product Numbering Secure Router 8000 routers Slot: Secure Router 8000: numbered from left to right and from the top down of the front chassis.
PAGE 37
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview No. Procedure 2 Configuring interface description 3 Configuring interval of flow statistics 4 Enabling the WAN interface 5 Checking the configuration 1.2.2 Entering the WAN interface view Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 38
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview z The network protocol address supported by the interface z The static route or dynamic routing protocol on the interface z The dial mapping, DDC operating parameters, and Modem management need to be configured if the interface supports dial z Parameters about packet filtering and NAT if a firewall is set up on the interface The SR8000 supports the description interface-description command, which configures descriptions
PAGE 39
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview The interfaces that support the configuration of the interval of flow statistics are the physical interfaces (not including controller interface) and high-speed MP Group interface. You cannot change through configuration the interval of flow statistics of other logical interfaces that adopt the default value.
PAGE 40
Nortel Secure Router 8000 Series Configuration -WAN Access 1 WAN access overview Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0 Output queue : (FIFO queue : Size/Length/Discards) 0/256/0 Interface is V35 0 packets input, 0 bytes 0 packets output, 0 bytes Run the display ip interface brief command. The configuration succeeds when brief IP information and physical status of an interface appear.
PAGE 41
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 2 Serial interface configuration ..................................................................................................2-1 2.1 Introduction ...................................................................................................................................................2-2 2.1.1 Synchronous serial interface .........................................................................................................
PAGE 42
PAGE 43
Nortel Secure Router 8000 Series Configuration -WAN Access Tables Table 2-1 Index mode of the synchronous serial interface .................................................................................2-2 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 44
PAGE 45
Nortel Secure Router 8000 Series Configuration -WAN Access 2 2 Serial interface configuration Serial interface configuration About this chapter The following table shows the contents of this chapter. Section Description 2.1 Introduction This section briefly describes the synchronous serial interfaces and the HSSI interfaces. 2.2 Configuring the synchronous serial interface This section describes how to configure the synchronous interfaces. 2.
PAGE 46
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration 2.1 Introduction This section covers the following topics that you need to know before you configure the , synchronous serial interface, and the HSSI interface: z Synchronous serial interface z HSSI interface 2.1.1 Synchronous serial interface The serial interface is one of the most commonly used WAN interfaces.
PAGE 47
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration z Its highest rate is 51.84 Mbit/s and it is the unchannelized interface. z Supports the working modes of the system self-loop and the line self-loop of the physical chip. z Supports the automatic identification of the remote DTE and DCE equipment and the automatic choice of the clock. z Supports the link layer protocol, PPP and HDLC. z Supports the IP network layer protocol. 2.
PAGE 48
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration No. Procedure 9 Checking the configuration When required, you configure the PPP/HDLC/FR, DCC, and IP address on the synchronous serial interface if required. Refer to the relevant chapters in this manual for details. 2.2.2 Configuring link layer protocol type Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 49
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration The command configures the baud rate of the interface. The synchronous serial interface supports different ranges of baud rate for different physical electrical procedures. z V.24DTE/DCE: 1200 bit/s to 64000 bit/s z V.35DCE/DCE, X.21DTE/DCE, EIA/TIA-449DTE/DCE and EIA-530DTE /DCE: 1200 bit/s to 2048000 bit/s When two synchronous serial interfaces connect, the baud rate on the line is known at the DCE side.
PAGE 50
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration system-view The system view appears. Step 2 Run: interface serial interface-number The serial interface view appears. Step 3 Run: detect dcd The command enables DCD signal detection. If the DCD signal detection of the interface is disabled, the system detects only when the serial interface is connecting to the cable and reports the state (Up or Down) of the interface.
PAGE 51
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration The system view appears. Step 2 Run: interface serial interface-number The serial interface view appears. Step 3 Run: interface serial interface-number The view of a specified serial interface appears. Step 4 Run: code nrzi The command configures the link coding mode of the serial interface as nrzi.
PAGE 52
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration The system view appears. Step 2 Run: interface serial interface-number The serial interface view appears. Step 3 Run: mtu mtu The command configures the MTU. The MTU of the synchronous interface involves the packet reassembling and disassembling on the interface. By default, the MTU of a serial interface is 1500 bytes.
PAGE 53
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration By default, the length of the CRC check word is 16 bits. ----End 2.2.10 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the status and statistics of a serial interface.
PAGE 54
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration 2.3 Configuring the HSSI interface 2.3.1 Establishing the configuration task Applicable environment When the SR8000 connects to the DCE equipment by HSSI interface or when two SR8000 routers connect with each other, configure the HSSI. Preconfiguration tasks None. Data preparation To configure a HSSI interface, you need the following data. No.
PAGE 55
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration The HSSI interface view appears. Step 3 Run: link-protocol { hdlc | ppp } The command configures the link layer protocol on the HSSI interface. The type of the link layer protocol affects the link layer frame format of data that passes through the HSSI interface. By default, the link layer adopts PPP as the protocol. ----End 2.3.
PAGE 56
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration crc { 16 | 32 | no-crc } The command configures the parity bit of the HSSI interface. By default, the parity bit is 16. ----End 2.3.5 Configuring the loopback mode Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface hssi interface-number The HSSI interface view appears.
PAGE 57
Nortel Secure Router 8000 Series Configuration -WAN Access 2 Serial interface configuration After you run the reset command to reset the statistics of the interface, all the statistics are reset. To reset the interface statistics, run the following reset command in the user view. Action Command Reset the interface statistics. reset counters interface [ interface-type [ interface-number ] ] 2.4.
PAGE 58
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 4 POS and CPOS interface configuration.................................................................................4-1 4.1 Introduction ...................................................................................................................................................4-2 4.1.1 SONET.............................................................................................................................................
PAGE 59
Nortel Secure Router 8000 Series Configuration -WAN Access 4.5.2 Configuring attribute parameters of synchronous serial interface......................................................4-24 4.5.3 Configuring link layer protocol of synchronous serial interface........................................................4-24 4.5.4 Configuring hold-interval of the link layer protocol for synchronous serial interface.......................4-25 4.5.5 Checking the configuration...........................................
PAGE 60
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 4-1 STM-N frame structure.....................................................................................................................4-3 Figure 4-2 Process of multiplexing E1 to STM-1 ..............................................................................................4-4 Figure 4-3 Process of multiplexing T1 to STM-1...............................................................................................
PAGE 61
PAGE 62
Nortel Secure Router 8000 Series Configuration -WAN Access 4 4 POS and CPOS interface configuration POS and CPOS interface configuration About this chapter The following table shows the contents of this chapter. Section Description 4.1 Introduction This section describes basic concepts of POS interfaces and CPOS interfaces. 4.2 Configuring POS interfaces This section describes how to configure a POS interface. 4.
PAGE 63
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration 4.1 Introduction This section covers the following topics you need to know before you configure a POS or CPOS interface: z SONET z SDH z POS z CPOS 4.1.1 SONET The Synchronous Optical Network (SONET) is a synchronous optical transmission system defined by the ANSI. The SONET supports a suite of transmission rates, which includes OC-1 (51.84Mbit/s), OC-3 (155Mbit/s), OC-12 (622Mbit/s), and OC-48 (2.
PAGE 64
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Figure 4-1 STM-N frame structure 9× 270× N（bytes） 1 2 3 4 5 6 7 8 9 Regenerator Section Overhead AU-PTR Payload Multiplex Section Overhead 9× N 261× N The STM-N is in the block frame structure of 9 lines x 270 x N rows. The number N here is consistent with that in STM-N. The value of N can be 1, 4, 16, and so on, which indicates that the signal is multiplexed by N STM-1 signals.
PAGE 65
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Multiplexing E1/T1 to STM-1 In the SDH multiplexing process stipulated in the G.709 recommendation, you can have more than one multiplexing route from a valid payload to STM-N. Figure 4-2 shows the mode of multiplexing E1/T1 to STM-1. Figure 4-2 Process of multiplexing E1 to STM-1 STM-1 × 1 AUG-1 × 1 AU-4 VC-4 × 3 TUG-3 × 3 Multiplexing AU-3 C-12: 2.
PAGE 66
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration The two TU-12s are adjacent if their numbers of TUG-3 and TUG-2 in the VC-4 are the same while the numbers of TU-12 differ by 1. The number in the preceding formula refers to the location number of VC4 frame. The value of the number of TUG-3s ranges from 1 to 3; the value of TUG-2 is from 1 to 7 and the value of TUG-12 is from 1 to 3.
PAGE 67
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration The SDH has a variety of overhead bytes. This section describes only a few of them that are used in the CPOS configuration. z SOH SOH consists of RSOH and MSOH. The payload of STM-N frame has the Overhead byte and Path Overhead (POH), which monitors low speed tributary signals. The J0 (regeneration section trace message) is included in RSOH. It is used to send the Section Access Point Identifier repeatedly.
PAGE 68
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Channelization and unchannelization In the framed mode, channelization transmits multiple paths of data over a piece of optical fiber by using low speed tributary signals of STN-N signals. One path of data is called a channel. During transmission, each channel has its own bandwidth, start and end points, and monitoring policies.
PAGE 69
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Interface Card Link Layer Protocol MP Binding RTP1CPE1 PPP and HDLC Supports each MP binding supports a maximum of 12 channels, and the maximum number of bindings is 32. RTP1CPT1 PPP and HDLC Supports each MP binding supports a maximum of 12 channels, and the maximum number of bindings is 32. Table 4-2 shows the working mode of the E1/T1 channels channelized by the CPOS interface cards on the SR8000.
PAGE 70
Nortel Secure Router 8000 Series Configuration -WAN Access z 4 POS and CPOS interface configuration Support for VPN Each E1/T1 channel or MP group corresponds to a VPN. The STM-1 CPOS interface supports to add or remove an E1/T1 channel or an MP group into or from a VRF. For the E1/T1 channel and the MP group added to the VPN, you can set whether to allow access to the public routing table.
PAGE 71
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration No. Procedure 6 Configuring check word length of CRC 7 Configuring MTU 8 Checking the configuration 4.2.2 Configuring link layer protocol Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface pos interface-number The POS interface view appears. Step 3 Run: link-protocol { ppp | hdlc } The command configures the link layer protocol of the POS interface.
PAGE 72
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration When choosing the clock mode for the POS interface, note the following: z When the POS interfaces of two routers are connected directly or through the Wavelength Division Multiplexing (WDM), you configure one end to use master clock mode and the other end to use slave clock mode. z When the POS interface of the router is connected with switching devices, you set the POS interface as the slave clock mode.
PAGE 73
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration The system view appears. Step 2 Run: interface pos interface-number The POS interface view appears. Step 3 Run: frame-format { sdh | sonet } The command configures the frame format of the POS interface. A POS interface supports two types of frame formats. z SDH format z SONET format By default, the frame format of POS interface is the SDH format. ----End 4.2.
PAGE 74
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Step 2 Run: interface pos interface-number The POS interface view appears. Step 3 Run: crc { 16 | 32} The command configures the check word length of CRC of the POS interface. The POS interface on the 8012E supports two types of CRC check word lengths: 16 bits and 32 bits. The POS interface on the SR8008, SR8004 and SR8002 supports one CRC 32 bit check word length.
PAGE 75
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration After configuring the IPv6 MTU, run the ppp mru-negotiate ipv6 command to start negotiation of the IPv6 MTU. Configuring IPv6 MTU Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface pos interface-number The POS interface view appears. Step 3 Run: ipv6 mtu mtu The command configures the IPv6 MTU of the POS interface.
PAGE 76
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration 4.3 Configuring STM-1 CPOS interfaces 4.3.1 Establishing the configuration task Applicable environment When the SONET/SDH optical interface bears packet data and low speed port access, configure the CPOS interface. NOTE By default, the default configuration is adopted. The configuration procedure in this section is optional. Pre-configuration tasks None.
PAGE 77
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration When the CPOS interface card on the SR8000 routers and other devices are connected, configure the clock mode as the master clock mode. Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: controller cpos cpos-number The CPOS interface view appears. Step 3 Run: clock { master | slave } The command configures the clock mode of the CPOS interface.
PAGE 78
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration ----End 4.3.4 Configuring overhead bytes Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: controller cpos cpos-number The CPOS interface view appears. Step 3 Run: flag { j0 j0-string | j1 j1-string | c2 c2-value } The command configures the overhead bytes of the CPOS interfaced.
PAGE 79
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Step 3 Run: frame-format sdh The command configures the frame format of the CPOS interface to SDH. Step 4 Run: multiplex mode { au-3 | au-4 } The command configures the AUG multiplexing route of the CPOS interface. In the SDH, payload has two mapping and multiplexing solutions: z In the ANSI multiplexing, lower order payload aggregates into the VC-3 higher order path.
PAGE 80
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration No. Data 1 Number of CPOS interface of the router 2 Number of the E1 or T1 channel 3 Number of the E1 or T1 channels whose timeslots are bound as channel-set, timeslot number or timeslot range Configuration procedures No.
PAGE 81
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Creating E1/T1 channel of the channelized mode Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: controller cpos cpos-number The CPOS interface view appears.
PAGE 82
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Step 3 Choose one of the following commands to configure frame format of the E1/T1 channel as required. z Run the e1 e1-number set frame-format { crc4 | no-crc4 } command to configure frame format of E1 channel. z Run the t1 t1-number set frame-format { esf | sf } command to configure frame format of T1 channel. The E1 channel supports the frame format of 4-bit Cyclic Redundancy Check (CRC).
PAGE 83
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration z After configuring the interface services, start the specified channel in current interface view. This ensures that the configured services are loaded to the channel. z The shutdown or undo shutdown command takes effect on all the E1/T1 channels of the CPOS interface and the serial interfaces generated. Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 84
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration 4.5 Configuring synchronous serial interfaces 4.5.1 Establishing the configuration task Applicable environment The synchronous serial interfaces formed by CPOS interface index through the slot/card/ interface/ channel number: channel-set.
PAGE 85
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Before configuring the synchronous serial interface, you need to run the shutdown command to disable the interface. After the configuration, you need to run the undo shutdown command to start the interface to validate the configuration. 4.5.2 Configuring attribute parameters of synchronous serial interface Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 86
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration The system view appears. Step 2 Run: interface serial interface-number The synchronous serial interface view appears. Step 3 Run: link-protocol { ppp | fr | hdlc | lapb | x.25 | sdlc } The command configures the link layer protocol. By default, the synchronous serial interface uses PPP as the link layer protocol.
PAGE 87
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Action Command Check the status and statistics of the serial interface. display interface serial interface-number 4.6 Maintaining POS and CPOS interface 4.6.1 Resetting interface statistics After you run the reset command to reset the statistics of the interface, all the statistics are reset. To reset the interface statistics, run the following reset command in the user view.
PAGE 88
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Action Command Set the local loopback in the T1 channel of the STM-1 CPOS interface. t1 t1-number set loopback { local | payload | remote } 4.7 Configuration examples This section provides the following examples: z Example for directly connecting routers through POS interfaces z Example for configuring STM-1 CPOS interfaces 4.7.
PAGE 89
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration # Configure POS 1/0/0. The clock mode is slave. system-view [RouterA] interface pos 1/0/0 [RouterA-Pos1/0/0] ip address 10.110.1.10 255.255.255.0 Step 2 Configure Router B. # Configure POS 4/0/0, set clock mode the master modeas slave while all other physical parameters use default values.
PAGE 90
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 2/2/3 ms ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Pos1/0/0 link-protocol ppp ip address 10.110.1.10 255.255.255.0 # return z Configuration file of Router B # sysname RouterB # interface Pos4/0/0 clock master link-protocol ppp ip address 10.110.1.11 255.255.255.
PAGE 91
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration NOTE The configurations of the T1 channel and the E1 channel are consistent. Use the E1 channel as an example. Figure 4-6 Networking diagram of using STM-1 CPOS interface E1/T1 .. ADM RouterA E1/T1 . ADM CPOS3/0/1 STM-4/16 ADM Internet STM-1/STM-4 ADM n× E1/T1 .. Configuration roadmap The configuration roadmap is as follows: 1. Create the channel. 2. Create the bound group. 3.
PAGE 92
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Configure Router A. # Create a channel on the CPOS interface.
PAGE 93
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Configure Router A. # Create a channel on the CPOS interface.
PAGE 94
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Configuration files z For the low-speed CPOS interface, the configuration files are as follows: Configuration file of Router A # sysname RouterA # controller Cpos3/0/1 clock master e1 1 channel-set 1 timeslot-list 1-10 e1 1 set clock master e1 2 channel-set 2 timeslot-list 11-15 e1 2 set clock master e1 3 channel-set 3 timeslot-list 16-20 e1 3 set clock master e1 4 channel-set 4 timeslot-list 21-30 e1 4 set
PAGE 95
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration interface Serial3/0/1/1:0 link-protocol ppp ppp mp Mp-group 0/0/3 # interface Serial3/0/1/2:0 link-protocol ppp ppp mp Mp-group 0/0/3 # interface Serial3/0/1/3:0 link-protocol ppp ppp mp Mp-group 0/0/3 # interface Serial3/0/1/4:0 link-protocol ppp ppp mp Mp-group 0/0/3 # interface Mp-group0/0/3 hic-bind enable # return 4.
PAGE 96
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration Step 2 Check the clock configurations of the interfaces by using the display interface pos command. If two routers are directly connected, ensure clock mode on one end is master, and that on the other end is slave. ----End 4.8.
PAGE 97
Nortel Secure Router 8000 Series Configuration -WAN Access 4 POS and CPOS interface configuration z The MTU value is set too small. Because the length of a QoS queue is limited, there are too many fragments if you set a small MTU for a relative large packet. Consequently, the packet discards from the QoS queue. You can increase the length of the QoS queue to solve the problem.
PAGE 98
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 5 Logical interface configuration ...............................................................................................5-1 5.1 Introduction ...................................................................................................................................................5-2 5.1.1 Sub-interface overview .................................................................................................................
PAGE 99
Nortel Secure Router 8000 Series Configuration -WAN Access 5.7.1 Example for configuring the sub-interface.........................................................................................5-16 5.7.2 Example for configuring the virtual template ....................................................................................5-18 5.7.3 Example for configuring the loopback interface................................................................................5-19 5.8 Troubleshooting................
PAGE 100
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 5-1 Networking diagram of configuring the sub-interface....................................................................5-17 Figure 5-2 Networking diagram of configuring the loopback interface ...........................................................5-19 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 101
PAGE 102
Nortel Secure Router 8000 Series Configuration -WAN Access 5 5 Logical interface configuration Logical interface configuration About this chapter The following table shows the contents of this chapter. Section Description 5.1 Introduction This section describes various logical interfaces. 5.2 Creating sub-interfaces This section describes how to configure a sub-interface. See Example for configuring the sub-interface. 5.
PAGE 103
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration 5.1 Introduction The section covers the following topics that you need to know before you configure logical interfaces: z Sub-interface overview z Virtual template and virtual access interface z Virtual ethernet interface z Loopback interface z Null interface A logical interface refers to an interface that does not physically exist, and that you create only through manual configuration.
PAGE 104
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration 5.1.2 Virtual template and virtual access interface Relations between the virtual template and the virtual access interface You use the virtual template to configure a virtual access interface. The virtual template is an interface template. Create a virtual template before creating a virtual access interface and delete it after turning off the virtual access interface.
PAGE 105
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration NOTE The SR8000 is an integrated device. The numbering of the Virtual-Ethernet interface must follow certain limitations. The slot number and card number are fixed as 0. 5.1.4 Loopback interface Loopback is a virtual interface with the characteristic of software. TCP/IP specifies that the IP addresses in the network segment 127.0.0.0 are loopback addresses.
PAGE 106
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration No. Data 2 Number of the sub-interface Configuration procedures No. Procedure 1 Creating FR sub-interfaces 2 Creating X.25 sub-interfaces 3 Creating ATM sub-interfaces 4 Checking the configuration NOTE The following configuration steps correspond to different physical interfaces. Choose configurations as required. 5.2.
PAGE 107
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration The default type of an FR sub-interface is P2MP. You can configure the items described below on an FR sub-interface.
PAGE 108
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration ----End 5.2.4 Creating ATM sub-interfaces Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number.subnumber [ p2mp | p2p ] The command configure an ATM sub-interface. sub interface-number ranges from 1 to 1024. In practice, a main interface can support up to 1024 sub-interfaces. The default type of an ATM sub-interface is P2MP.
PAGE 109
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Last 300 seconds output rate 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes 0 errors, 0 drops, 0 unknown protocol Output:0 packets, 0 bytes 0 errors, 0 drops Run the display fr interface command to view information about the status and configuration of the FR sub-interface. display fr interface Serial6/0/0, DTE, physical up, protocol up Serial6/0/0.
PAGE 110
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Data preparation To configure a virtual template, you need the following data. No. Data 1 Number of the virtual template 2 Number of maximum links for sending multicast or broadcast packets supported by the virtual template Configuration procedures No. Procedure 1 Creating a VT 2 Setting maximum number of links supported by a VT 3 Checking the configuration 5.3.
PAGE 111
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Step 2 Run: interface virtual-template vt-number The command creates a VT and the VT view appears. Step 3 Run: broadcast-limit link number The command configures the maximum link number supported by the virtual template for sending multicast or broadcast packets. The multicast or broadcast packets sent out from each link may affect the system performance if there are too many links in the virtual template.
PAGE 112
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration 0 packets input, 0 bytes, 0 drops 0 packets output, 0 bytes, 0 drops Run the display virtual-access command. The configuration succeeds when the status of a virtual access interface appears.
PAGE 113
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Configuration procedures No. Procedure 1 Creating a VE interface 2 Configuring a MAC address for a VE interface 3 Checking the configuration 5.4.2 Creating a VE interface Do as follows on routers. Step 1 Run: system-view The system view appears. Step 2 Run: interface virtual-ethernet ve-number The command creates a VE interface and the VE view appears.
PAGE 114
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration ----End 5.4.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the status of a VE interface. display interface virtual-ethernet [ ve-number ] [ | { begin | exclude | include } regular-expression ] 5.5 Configuring a loopback interface 5.5.
PAGE 115
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Configuration procedures No. Procedure 1 Creating a loopback interface and configuring its IP address 2 Checking the configuration 5.5.2 Creating a loopback interface and configuring its IP address Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface loopback loopback-number The command creates a loopback interface.
PAGE 116
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Internet Address is 11.1.1.1/24 Physical is Loopback Last 300 seconds input rate 0 bits/sec, 0 packets/sec Last 300 seconds output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 drops 0 packets output, 0 bytes, 0 drops 5.6 Configuring a null interface 5.6.1 Establishing the configuration task Applicable environment The Null interface is like the null devices supported by certain operating systems.
PAGE 117
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration The null interface view appears. The Null interface remains in the Up state all the time. It cannot forward data packet. You can neither configure an IP address for it nor encapsulate it with protocols. ----End 5.6.3 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the status of a Null interface.
PAGE 118
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Figure 5-1 Networking diagram of configuring the sub-interface Ethernet 2: 129.10.0.0/24 202.38.160.2 Router B RouterA 202.38.160.1 DLCI=70 DLCI=50 Serial1/0/0 Frame Relay network DLCI=60 202.38.161.1 DLCI=80 RouterC Ethernet 1: 129.9.0.0/24 202.38.161.2 Ethernet 3: 129.11.0.0/24 Configuration roadmap The configuration roadmap is as follows: 1.
PAGE 119
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration # Configure the sub-interface Serial 1/0/0:0.1 on Router A, and assign VC for it. [RouterA] interface serial 1/0/0:0.1 p2p [RouterA-Serial1/0/0:0.1] ip address 202.38.160.1 255.255.255.0 [RouterA-Serial1/0/0:0.1] fr dlci 50 [RouterA-fr-dlci-Serial1/0/0:0.1-50] quit [RouterA-Serial1/0/0:0.1] quit # Configure the sub-interface Serial 1/0/0:0.2 on Router A, and assign VC for it. [RouterA] interface serial 1/0/0:0.
PAGE 120
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration 5.7.3 Example for configuring the loopback interface Networking requirements After you configure the loopback interface with IP address, it works as the lending party in the IP unnumbered. Loopback interface uses 30-bit mask. Figure 5-2 Networking diagram of configuring the loopback interface POS3/0/0 10.10.1.1/32 POS3/0/0 RouterA RouterB Configuration roadmap The configuration roadmap is as follows: 1.
PAGE 121
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration [RouterB-Pos3/0/0] quit Step 3 Check the configuration. # Display the status of POS 3/0/0. display interface pos 3/0/0 Pos3/0/0 current state : UP Line protocol current state : UP Description : NORTEL, Nortel Series, Pos3/0/0 Interface, Route Port The Maximum Transmit Unit is 4470 bytes, Hold timer is 10(sec) Internet Address is unnumbered, using address of LoopBack6 (10.10.1.1/30) ... ...
PAGE 122
Nortel Secure Router 8000 Series Configuration -WAN Access 5 Logical interface configuration Fault analysis Before troubleshooting the virtual interface template, check whether the virtual interface template is applied to one of the following situations: z Creating the VPN virtual access interface z Creating the MP virtual access interface z Creating the PPPoX virtual access interface Then locate the fault according to specific applicable environment.
PAGE 123
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 6 PPP and MP configuration .......................................................................................................6-1 6.1 Introduction ...................................................................................................................................................6-3 6.1.1 PPP....................................................................................................................................
PAGE 124
Nortel Secure Router 8000 Series Configuration -WAN Access 6.6.2 Creating a VT and assigning an IP address ........................................................................................6-27 6.6.3 Directly binding the interface to an existing VT................................................................................6-27 6.6.4 Checking the configuration................................................................................................................6-28 6.
PAGE 125
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 6-1 PPP link operation process................................................................................................................6-4 Figure 6-2 Networking diagram of PAP or CHAP authentication....................................................................6-47 Figure 6-3 Networking diagram of the MP-group binding...............................................................................
PAGE 126
PAGE 127
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6 PPP and MP configuration About this chapter The following table shows the contents of this chapter. Section Description 6.1 Introduction This section describes concepts and fundamentals of PPP and MP. 6.2 Encapsulating an interface with PPP and MRU negotiation This section describes how to encapsulate PPP and configure PPP MRU. 6.
PAGE 128
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Section Description 6.8 Configuring MP binding using the MP-group This section describes how to configure MP binding by using MP-group. See Example for binding MPs into the MP-group. 6-2 6.9 Configuring MP limiting parameters This section describes how to configure MP parameters. 6.10 Configuring MP fragment function This section describes how to configure the MP fragment function. 6.
PAGE 129
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.1 Introduction The section covers the following topics that you need to know before you configure PPP and MP: z PPP z MP z references 6.1.1 PPP PPP Introduction The Point-to-Point Protocol (PPP) is one of the link layer protocols that supports transmission of multiple network protocol packets over a point-to-point link. PPP provides user authentication and supports synchronous and asynchronous communications.
PAGE 130
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration z Configuring Authenticator with a user name. The authentication procures are as follows: z − Authenticator sends a random generated "challenge" message together with the local host name to the peer. − The peer looks for its local password in the local users list based on the user name of authenticator.
PAGE 131
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration NCP negotiation supports IPCP, MPLSCP and OSCICP negotiations. IPCP negotiation involves the negotiation of IP addresses of two ends. After NCP negotiation, a network layer protocol is selected. The network layer protocol then sends messages over the PPP link.
PAGE 132
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The link binds with the specified virtual template (VT) without authenticating users on the VT. For physical interfaces bound to a VT, you can either configure authentication or not. z − If you configure authentication, bind the links directly to the specified virtual interface template after the interface passes the authentication.
PAGE 133
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Document No. Description RFC1332 The PPP Internet Protocol Control Protocol (IPCP) RFC1962 The PPP Compression Control Protocol (CCP) 6.2 Encapsulating an interface with PPP and MRU negotiation 6.2.1 Establishing the configuration task Applicable environment The P2P connection is a simple WAN connection.
PAGE 134
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration No. Procedure 2 Enabling PPP MRU negotiation 3 Checking the configuration 6.2.2 Encapsulating the interface with PPP Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears. Step 3 Run: link-protocol ppp The command configures the link layer protocol as PPP.
PAGE 135
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.2.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the PPP configuration and status of the interface. display interface [ interface-type [ interface-number ] ] [ | { begin | exclude | include } regular-expression ] Run the display interface command. When PPP configuration of an interface appears the configuration succeeds.
PAGE 136
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration This section describes how to configure PAP unidirectional authentication. Preconfiguration tasks Before configuring PAP authentication, complete the following tasks: z Configuring physical attributes of the router interfaces. z Encapsulating the interface with PPP. Data preparation To configure PAP, you need the following data. No.
PAGE 137
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Return to the system view. Step 5 Run: interface interface-type interface-number The interface view appears. Step 6 Run: ppp authentication-mode pap [ call-in ] The command configures the authentication mode as PAP. Step 7 Run: restart The command restarts the interface.
PAGE 138
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.3.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the link status of the interface and the running status of LCP display interface [ interface-type [ interface-number ] ] Run the display interface command. When LCP is "opened" the authentication succeeds.
PAGE 139
Nortel Secure Router 8000 Series Configuration -WAN Access z 6 PPP and MP configuration Bidirectional where two parts can work as both the authenticator and the authenticated. This section describes how to configure CHAP unidirectional authentication. Preconfiguration tasks Before configuring CHAP authentication, complete the following tasks: z Configuring physical attributes of the router interfaces. z Encapsulating the interfaces with PPP.
PAGE 140
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The system view appears. Step 2 Run: aaa The AAA view appears. Step 3 Run: local-user user-name password { simple | cipher } password The command adds the user name and password of the authenticated into the local user list. Step 4 Run: quit Return to the system view. Step 5 Run: interface interface-type interface-number The interface view appears.
PAGE 141
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The system view appears. Step 2 Run: aaa The AAA view appears. Step 3 Run: local-user user-name password { simple | cipher } password The command adds the user name and password of the authenticated into the local user list. Step 4 Run: quit Return to the system view. Step 5 Run: interface interface-type interface-number The interface view appears.
PAGE 142
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 3 Run: local-user user-name password { simple | cipher } password The command adds the user name and password of the authenticated into the local user list. Step 4 Run: quit Return to the system view. Step 5 Run: interface interface-type interface-number The interface view appears. Step 6 Run: ppp authentication-mode chap [ pap ] [ call-in ] The command configures the Authentication mode as CHAP.
PAGE 143
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration ppp chap password { cipher | simple } password The command configures the password used in the authentication. Step 5 Run: restart The command restarts the interface. NOTE If the user name and the password are changed, use the restart or the, shutdown and the undo shutdown command under the interface view to validate the configuration. ----End 6.4.
PAGE 144
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.5 Configuring PPP optional parameters 6.5.1 Establishing the configuration task Applicable environment z Call back When the router works as the client port of the call back and the server allows calling back to the user-specified number, you can configure dialing number needed to call the router, and then the reverse charging is complemented.
PAGE 145
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Data preparation To configure PPP optional parameters, you need the following data. No.
PAGE 146
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 3 Choose one of the following steps to configure the interface as the callback server or the callback client. z Run the ppp callback server command to set the interface as the callback server. z Run the ppp callback client command to set the interface as the callback client. NOTE z Only the low-speed serial interface, and the Dialer interface support call back function.
PAGE 147
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration NOTE After you configure the packet compression or header compression, the configuration takes effect only after the restart command, or the shutdown and the undo shutdown commands are used. If you apply the compression to MP, you must use the restart command, or the shutdown and the undo shutdown commands on all the interfaces bound by MP.
PAGE 148
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears. Step 3 Run: ip tcp vjcompress The command enables VJ TCP compression on the interface. Step 4 Run: restart The command restarts the interface.
PAGE 149
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears. Step 3 Run: timer hold seconds The command configures the timeout period of polling on the interface. The interval of the polling time ranges from 0 to 32767 in second. The default value is 10 seconds. ----End 6.5.
PAGE 150
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The interface view appears. Step 3 Run: ppp ipcp dns primary-dns-address [ secondary-dns-address ] The command configures the DNS server address of the local negotiation. By default, a router does not provide DNS server address for its peer. ----End 6.5.7 Configuring the PPP link quality detection Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 151
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The command suppresses the peer host route for adding into the direct routing table of the local end. The PPP link does not limit the peer route and local route to be on the same network segment. IP addresses of both ends of the PPP link that are not on the same network segment can interconnect. If you configure the error IP address on the one end, you cannot detect and locate the fault quickly and correctly.
PAGE 152
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Input: 0 packets, 0 bytes 0 input errors, 0 runts, 0 giants, 0 parity errors 0 CRC, 0 overruns, 0 frame errors Output:0 packets, 0 bytes 0 output errors, 0 underruns, 0 parity errors, 0 describe errors 0 owner errors, 0 Other errors DCD=DOWN DTR=DOWN DSR=DOWN RTS=DOWN CTS=DOWN Run the display ppp compression iphc command. When the IPHC information about PPP packets appears the configuration succeeds.
PAGE 153
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration No. Data 1 Interface number of the router 2 Number of the VT 3 IP address and subnet mask of the VT Configuration procedures No. Procedure 1 Creating a VT and assigning an IP address 2 Directly binding the interface to an existing VT 3 Checking the configuration NOTE You need to configure the local and the peer ends separately. The methods are the same. 6.6.
PAGE 154
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration interface interface-type interface-number The interface view appears. Step 3 Run: ppp mp virtual-template number The command binds the interface to an existing VT. When using a VT to bind an interface, consider the following items: z Physical interfaces must be bound into one VT in the same mode.
PAGE 155
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Run the display interface virtual-template command to view status of a VT. For example: display interface virtual-template Virtual-Template0 current state : UP Line protocol current state :UP (spoofing) Description : NORTEL, Nortel Series, Virtual-Template0 Interface, Route Port The Maximum Transmit Unit is 1500 bytes Internet Address is 10.1.1.
PAGE 156
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Preconfiguration tasks Before configuring MP authentication binding using the VT, complete the following tasks: z Configuring physical attributes of the router interface z Configuring the link layer protocol of the interface as PPP z Configuring the authentication mode (CHAP or PAP) of the PPP interfaces Data preparation To configure MP authentication binding using the VT, you need the following data. No.
PAGE 157
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration ppp mp binding-mode { authentication | descriptor | both } The command configures authentication binding mode. Step 5 Run: quit Return to the system view. Step 6 Run: ppp mp user user-name bind virtual-template number The command binds the VT with the MP user. When a VT is bound to bind an interface, consider the following items: z You must bind the physical interfaces into one VT in the same mode.
PAGE 158
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration NOTE If one end adopts the authentication binding, while the other end adopts direct binding, perform the previous configuration on the former. The later, which works as the authenticated, only needs to be configured with MP direct binding through the VT. For details, see Configuring MP direct binding through the VT. Step 4 Choose one of the following methods to restart the interface.
PAGE 159
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration QoS max-bandwidth : 64 Kbps Output queue : (Urgent queue : Size/Length/Discards) 0/50/0 Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0 Output queue : (FIFO queue : Size/Length/Discards) 0/256/0 Last 300 seconds input rate 0 bits/sec, 0 packets/sec Last 300 seconds output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 drops 0 packets output, 0 bytes, 0 drops Run the display ppp mp command.
PAGE 160
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration By default, the endpoint discriminator needs to be negotiated in SR8000 MP negotiation. If no endpoint discriminator is sent, MP negotiation fails. Then the endpoint discriminator negotiation can not be configured on the local side. Preconfiguration tasks Before configuring MP binding using MP-group, complete the following tasks: z Configuring physical attributes of the router interface.
PAGE 161
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 2 Run: interface mp-group number The command creates the MP-group interface. NOTE The SR8000 is an integrated device. The numbering of MP-group interfaces follows certain limitations. The slot number and card number are fixed as 0. Step 3 Run: ip address ip-address { mask | mask-length } [ sub ] The IP address is assigned for the MP-group interface. Step 4 Run: quit Return to the system view.
PAGE 162
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration ip address ip-address { mask | mask-length } [ sub ] The command assigns the IP address for the MP-group interface. Step 5 Run: quit Return to the system view. Step 6 Run: interface interface-type interface-number The interface view appears. Step 7 Run: ppp mp mp-group number The command adds the interface into the MP-group.
PAGE 163
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration parameters of the local end are consistent with the terminal discriminator parameters of the peer end. If you want to use the undo discriminator command on the MP-Group interface, you must use the shutdown and undo shutdown commands to enable the configuration. Step 4 Run: quit Return to the system view. Step 5 Run: interface interface-type interface-number The interface view appears.
PAGE 164
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.9 Configuring MP limiting parameters 6.9.1 Establishing the configuration task Applicable environment After configuring MP binding, you can configure MP limiting parameters to optimize the link channels.
PAGE 165
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration NOTE z After changing the parameters configured in the VT or the MP-group view, you need to use the shutdown command in all the bound sub-channels to disable the MP binding. z Then use the undo shutdown command in all the bound sub-channels to bind MP again. z Finally, all the configured commands will be effective. 6.9.
PAGE 166
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration After this command is configured: z If the MP binding you configure is through virtual-template, you need to restart all bundled links. z If the MP binding you configure is through MP-group, you need to restart the MP-group interface or all bundled links on the MP-group interface. ----End 6.9.
PAGE 167
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.9.5 Configuring the damping of the MP bundled links Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface mp-group number The MP-Group interface view appears. Step 3 Run: ppp mp damping [ detect-time detect-time flapping-count flapping-count damping-time damping-time ] The command configures the damping function of the MP bundled links.
PAGE 168
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Internet protocol processing : disabled Link layer protocol is PPP LCP reqsent QoS max-bandwidth : 2048 Kbps Output queue : (Urgent queue : Size/Length/Discards) 0/50/0 Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0 Output queue : (FIFO queue : Size/Length/Discards) 0/256/0 Last 300 seconds input rate 19 bits/sec, 0.20 packets/sec Last 300 seconds output rate 19 bits/sec, 0.
PAGE 169
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Configuration procedures No. Procedure 1 Configuring the minimum packet length of the fragment of the outbound packet 2 Disabling the re-group of the fragments of the MP packets 3 Configuring the packet order guarantee function on the MP-group interface 4 Checking the configuration 6.10.
PAGE 170
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 3 Run: undo ppp mp reorder-window The command disables the regrouping of the fragments of the MP packets. By default, the regroup of the fragments of the MP packets is enabled. To improve the forwarding performance of the small packet, you can run the undo ppp mp reorder-window command on the MP-Group interface to disable the re-group of the MP fragments.
PAGE 171
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The MP-Group interface view appears. Step 3 Run: ppp mp reorder The command enables the packet sequential function on the MP-group interface. When you bundle the multiple links on the MP-group interface, the differences in the physical attributes of the bundled links and the sizes of the fragment packet can cause that the sequence of receiving the packets is not consistent with that of sending the packets.
PAGE 172
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Action Command Check the MP binding information. display ppp mp [ interface interface-type interface-number ] 6.11 Maintaining PPP and MP Debugging affects on the performance of the system. After debugging, run the undo debugging all command to disable it immediately. When the operation faults of PPP and MP occur, use the debugging command in the user view to debug the PPP and MP link protocol and locate the fault.
PAGE 173
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Action Command Enable the debugging of the damping of PPP debugging ppp damping [ interface interface-type interface-number ] 6.
PAGE 174
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration z The IP address of the interface on Router B is 10.110.0.2/24 Configuration procedure Step 1 Configuring Router A # Add the username and password of Router B to the local user list of Router A. system-view [RouterA] aaa [RouterA-aaa] local-user rtb password simple router [RouterA-aaa] quit # Configure an IP address for POS 1/0/0 and configure the link-layer encapsulation protocol as PPP.
PAGE 175
Nortel Secure Router 8000 Series Configuration -WAN Access Compliance PartNumber Mode 6 PPP and MP configuration : OC3-unknown : HFBR-5710L : unknown Media LaserwaveLen : unknown WaveLenth Length unknown Output queue : (Urgent queue : Size/Length/Discards) 0/50/0 Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0 Output queue : (FIFO queue : Size/Length/Discards) 0/256/0 Statistics last cleared: never Traffic statistics: Last 300 seconds input rate 0 bits/sec, 0 packets/sec Last 300 seconds o
PAGE 176
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 6.12.2 Example for configuring unidirectional CHAP authentication Networking requirements As shown in, configure Router A with a user name when you to authenticate Router B in CHAP mode. Configuration roadmap The configuration roadmap is as follows: 1. Add the user name and password of Router B to the local user list of Router A. 2. Configure the local user name for Router A. 3.
PAGE 177
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration [RouterA-Pos1/0/0] shutdown [RouterA-Pos1/0/0] undo shutdown Step 2 Configure Router B # Add the user name of RouterA and the local password to the local user list of Router B. system-view [RouterB] aaa [RouterB-aaa] local-user rta password simple hello [RouterB-aaa] quit # Configure the IP address for POS 1/0/0 and configure the link-layer encapsulation protocol as PPP.
PAGE 178
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration # aaa local-user rtb password simple hello # return z Configuration file of Router B # sysname RouterB # interface Pos1/0/0 link-protocol ppp ppp chap user rtb ip address 10.110.0.2 255.255.255.0 # aaa local-user rta password simple hello # return 6.12.
PAGE 179
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration # Configure an IP address for POS 1/0/0 and configure the link-layer encapsulation protocol as PPP. [RouterA] interface pos 1/0/0 [RouterA-Pos1/0/0] ip address 10.110.0.1 255.255.255.0 [RouterA-Pos1/0/0] link-protocol ppp # Configure the username of Router A used in its authentication by Router B in the CHAP mode. [RouterA-Pos1/0/0] ppp chap user rta # Configure the authentication in CHAP mode.
PAGE 180
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 96 packets input, 1546 bytes 97 packets output, 1568 bytes ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Pos1/0/0 link-protocol ppp ppp authentication-mode chap ppp chap user rta ip address 10.110.0.1 255.255.255.
PAGE 181
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Configuration roadmap The configuration roadmap is as follows: 1. Configure the local user lists on Router A and Router B. 2. Enable PAP authentication on Router A and Router B. 3. Create MP-group interface and add related interfaces to MP-group. 4. Restart routers to validate the configuration.
PAGE 182
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration [RouterA-Serial1/0/1] ppp authentication-mode pap [RouterA-Serial1/0/1] ppp pap local-user rta password simple rta # Add Serial 1/0/1 to the Mp-group interface. [RouterA-Serial1/0/1] ppp mp mp-group0/0/1 [RouterA-Serial1/0/1] quit Step 2 Configure Router B. # Add the username and password of Router A to the local user list of Router B.
PAGE 183
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration [RouterB] interface serial2/0/0 [RouterB-Serial2/0/0] shutdown [RouterB-Serial2/0/0] undo shutdown [RouterB-Serial2/0/0] quit [RouterB] interface serial2/0/1 [RouterB-Serial2/0/1] shutdown [RouterB-Serial2/0/1] undo shutdown [RouterB-Serial2/0/1] quit NOTE To ensure the success of MP binding, Nortel recommends you to restart all the bound sub-tunnels after the configuration. Step 4 Verify the configuration.
PAGE 184
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration round-trip min/avg/max = 29/29/31 ms NOTE There is only one way to bind the link to the MP-group, that is, to specify the MP-group interface on the interface.
PAGE 185
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration return 6.12.5 Example for configuring MP direct binding using the VT Networking requirements You connect Router A and Router B through two pairs of serial ports. Configure MP binding using virtual-template without any authentication. Figure 6-4 Networking diagram of the MP binding VT1 8.1.1.1/24 Serial1/0/0 VT1 8.1.1.
PAGE 186
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration # Configure Serial 1/0/1. [RouterA] interface serial 1/0/1 [RouterA-Serial1/0/1] ip address 8.1.2.2 255.255.255.0 [RouterA-Serial1/0/1] link-protocol ppp [RouterA-Serial1/0/1] ppp mp virtual-template 1 [RouterA-Serial1/0/1] shutdown [RouterA-Serial1/0/1] undo shutdown [RouterA-Serial1/0/1] quit Step 2 Configure Router B. # Create and configure the VT.
PAGE 187
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration NOTE To ensure the success of the MP binding, it is recommended to restart the binding sub-tunnel after the configuration. Step 4 Verify the configuration. # Check the binding. In the following display, "Bundle Multilink" indicates the physical interface is directly bound to the VT.
PAGE 188
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Configuration files z Configuration file of Router A # sysname RouterA # interface Serial1/0/0 link-protocol ppp ppp mp Virtual-Template 1 # interface Serial1/0/1 link-protocol ppp ppp mp Virtual-Template 1 # interface Virtual-Template1 ip address 8.1.1.1 255.255.255.
PAGE 189
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration 3. Create VTs for Router A and Router B, configure IP addresses for VTs, and configure authentication using user name. 4. Bind the interfaces to VTs, and configure the interfaces to work in MP mode. Data preparation To complete the configuration, you need the following data: z The IP address of the VT on Router A is 8.1.1.1/24 z The IP address of the VT on Router B is 8.1.1.
PAGE 190
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration [RouterA] aaa [RouterA-aaa] local-user rtbchap password simple chap [RouterA-aaa] quit # Configure Serial 1/0/1 on Router A.
PAGE 191
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration [RouterB] interface serial 1/0/1 [RouterB-Serial1/0/1] ppp mp [RouterB-Serial1/0/1] quit Step 5 Configure Router A and Router B to authenticate their peers through user names. # On Router A, specify the VT to which the interface of Router B is bound through authentication using user name.
PAGE 192
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration The bundled son channels are: Serial1/0/0 # Check the binding on Router B.
PAGE 193
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration PING 8.1.1.1: 56 data bytes, press CTRL_C to break Reply from 8.1.1.1: bytes=56 Sequence=1 ttl=255 time=80 ms Reply from 8.1.1.1: bytes=56 Sequence=2 ttl=255 time=30 ms Reply from 8.1.1.1: bytes=56 Sequence=3 ttl=255 time=30 ms Reply from 8.1.1.1: bytes=56 Sequence=4 ttl=255 time=40 ms Reply from 8.1.1.1: bytes=56 Sequence=5 ttl=255 time=50 ms --- 8.1.1.1 ping statistics --5 packet(s) transmitted 5 packet(s) received 0.
PAGE 194
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration ppp authentication-mode pap ppp pap local-user rtbpap password simple rtbpap ppp mp # interface Serial1/0/1 link-protocol ppp ppp authentication-mode chap ppp chap user rtbchap ppp chap password simple chap ppp mp # interface Virtual-Template0 ppp mp binding-mode authentication ip address 8.1.1.2 255.255.255.
PAGE 195
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 1 Check the connection of the interfaces. If the connection is not correct or the contact is poor, connect them once again. Step 2 Check whether the physical attributes of two ends are consistent by using the display interface command. If not, modify them to be consistent. Step 3 Run the shutdown and the undo shutdown commands or the restart command in the interface view to validate the newly configured attributes.
PAGE 196
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 1 Check the CHAP configuration on two routers. If the user names of the server and the client are the same, modify them to be different. In the SR8000, run the display interface command to check the CHAP configuration. Step 2 After modifying the CHAP configuration, restart the interfaces. In the SR8000, run the shutdown command and the undo shutdown command, or use the restart command in the interface view.
PAGE 197
Nortel Secure Router 8000 Series Configuration -WAN Access 6 PPP and MP configuration Step 1 Check the current MP status by using the display ppp mp command. The interfaces that are bound to the same MP should adopt the same binding method. Otherwise, the system regards them as two different MP bindings. Step 2 Check the binding modes of the interface on Router A.
PAGE 198
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 7 LAPB and X.25 configuration...................................................................................................7-1 7.1 Introduction ...................................................................................................................................................7-3 7.1.1 X.25 ....................................................................................................................................
PAGE 199
Nortel Secure Router 8000 Series Configuration -WAN Access 7.6.1 Establishing the configuration task ....................................................................................................7-34 7.6.2 Starting X.25 switching......................................................................................................................7-34 7.6.3 Configuring local switching (SVC) ...................................................................................................7-35 7.6.
PAGE 200
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 7-1 X.25 network model .........................................................................................................................7-3 Figure 7-2 X.25 protocol Layer..........................................................................................................................7-4 Figure 7-3 X.25 packet and LAPB frame................................................................................................
PAGE 201
PAGE 202
Nortel Secure Router 8000 Series Configuration -WAN Access Tables Table 7-1 Description of X.25 channel range delimitation parameters.............................................................7-16 Table 7-2 X.25 layer 3 timer.............................................................................................................................7-19 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 203
PAGE 204
Nortel Secure Router 8000 Series Configuration -WAN Access 7 7 LAPB and X.25 configuration LAPB and X.25 configuration About this chapter The following table shows the contents of this chapter. Section Description 7.1 Introduction This section describes basic knowledge about X.25 and LAPB. 7.2 LAPB configuration This section describes how to configure LAPB parameters. See Example for configuring LAPB. 7.3 Configuring an X.25 interface This section describes how to configure an X.25 interface.
PAGE 205
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Section Description 7.5 Configuring load balancing This section describes how to configure X.25 load balancing. See: 7.6 Configuring XOT z Example for configuring the X.25 load balancing z Example for configuring the X.25 load balancing carrying IP Datagrams This section describes how to configure XOT.
PAGE 206
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.1 Introduction This section covers the following topics that you need to know before you configure X.25 and LAPB: z X.25 z X.25 Principle z LAPB z X.25 switching function z X.25 load balancing z XOT 7.1.1 X.25 X.25 is a procedure of point-to-point interworking between Data Terminal Equipment (DTE) and Data Circuit-terminal Equipment (DCE).
PAGE 207
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.1.2 X.25 Principle Virtual Circuit By using the X.25, you can connect two DETs through the existing telephone network. A virtual circuit (VC) is the created connection in X.25 to ensure reliable communication between two DTEs. A VC only exists logically, which is different from physical circuit in circuit switching.
PAGE 208
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration The link set up between DTE and DCE by X.25 layer 2 (LAPB) is multiplexed by X.25 layer 3, and several usable VCs are the final output to users. Figure 7-3 shows the relation between packets and frames in various X.25 layers. Figure 7-3 X.25 packet and LAPB frame Packet Head X.25 Layer3 X.25 Layer2 X.25 Layer1 FB Head UserData Data FCS FB BitFlow 7.1.3 LAPB X.
PAGE 209
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.1.4 X.25 switching function The SR8000 also performs X.25 switching function, serving as a small-sized X.25 packet switch to save the user’s investment in X.25. Figure 7-4 shows the interrelationship between LAPB, X.25, and X.25 switching. Figure 7-4 Interrelationship between LAPB, X.25 and X.25 switching Internet Protocol X.25 Switching X.25 LAPB X.25 and IP ( two directly connected routers without through X.
PAGE 210
Nortel Secure Router 8000 Series Configuration -WAN Access z 7 LAPB and X.25 configuration After being set up, PVC continues in the stage of data transmission without the process of call establishment and call deletion. Therefore, X.25 load balancing is ineffective on PVC and functions only on SVC. Within a single X.25 hunt group, all DTEs hold the identical status and share the same X.121 addresses. The DTEs in a hunt group can call other DTEs outside the hunt group in the normal mode.
PAGE 211
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z In round-robin mode, cyclic selection method is adopted to select the next interface or the XOT Tunnel for every call request. For example, as shown in the above figure, if hunt group hg1 adopts round-robin mode, calls are sent to Server A and Server B in turn. z The VC-number mode selects the interfaces with free logical channels in a hunt group for every call request.
PAGE 212
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration For Router A and Router D, the whole process of setting up and applying TCP connection is transparent, and it does not matter whether the data is forwarded through the IP network or X.25 network. Features of the XOT in the SR8000 Implementing XOT in the SR8000 accords with RFC1613 recommendation and possesses the following features: z Supports SVC application.
PAGE 213
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Configuration procedures No. Procedure 1 Configuring the link layer protocol of an interface as LAPB 2 Configuring LAPB parameters 3 Checking the configuration 7.2.2 Configuring the link layer protocol of an interface as LAPB Do as follows on the routers. Step 1 Run: system-view The system view appears. Step 2 Run interface serial interface-number The interface view appears.
PAGE 214
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration lapb window-size k-value The command configures the LAPB window parameter K. Step 5 Run: lapb max-frame n1-value The command configures the LAPB parameter N1. Step 6 Run: lapb retry n2-value The command configures the LAPB parameter N2. Step 7 Run: lapb timer { t1 t1-value | t2 t1-value | t3 t3-value } The command configures the system timers T1 and T2 and T3 of LAPB.
PAGE 215
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.2.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check information on the interface. display interface serial [ number ] [ | { begin | exclude | include } regular-expression ] 7.3 Configuring an X.25 interface 7.3.1 Establishing the configuration task Applicable environment To make the link performance better, you change some parameters of X.
PAGE 216
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration No. Data 3 To configure the X.25 sub-interface, you need: z Peer IP address z X.121 address z local VC number z Upper layer protocols borne by the VC z Network protocol address of the peer VC, VC X.121 address Configuration procedures No. Procedure 1 Configuring X.25 attributes 2 Configuring X.25 interface supplementary parameter 3 Configuring an X.
PAGE 217
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 5 Run: x25 vc-range[ in-channel lic hic ] [ bi-channel ltc htc ] [ out-channel loc hoc ] The command configures the X.25 VC range. Step 6 Run: x25 modulo { 8 | 128 } The command configures packet sequence numbering mode. By default, an X.25 interface uses modulo 8.
PAGE 218
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Setting X.25 VC range z VC Management The X.25 protocol can multiplex multiple number of logical virtual connections over a physically existing link between DTE and DCE. The virtual connections are called VC or logic channel (LC). The virtual connections established by X.25 reach a maximum of 4095, and their numbers range from 1 to 4095.
PAGE 219
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Figure 7-7 X.25 channel division 1 PVC range LIC Incoming-only channel range HIC unused LTC Two-way channel range HTC unused LOC Outgoing-only channel range HOC unused 4095 For the meanings of these six parameters, refer to Table 7-1. Table 7-1 Description of X.
PAGE 220
Nortel Secure Router 8000 Series Configuration -WAN Access − 7 LAPB and X.25 configuration The X.25 protocol requires DTE and DCE to have the same VC range parameter; therefore, the new configuration cannot take effect immediately after successful X.25 negotiation. It is necessary to use the shutdown and undo shutdown commands. Setting X.25 packet numbering modulus X.25 procedure requires DTE and DCE to have the same packet numbering mode.
PAGE 221
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.3.3 Configuring X.25 interface supplementary parameter Do as follows on the routers. Step 1 Run: system-view The system view appears. Step 2 Run interface serial interface-number The interface view appears. Step 3 Run: x25 timer tx0 seconds The timeout period of the procedure restart timer. Step 4 Run: x25 timer tx1 seconds The timeout period of the call procedure timer.
PAGE 222
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration x25 response calling-address The calling DTE address is carried when a call response packet is sent. Step 12 Run: x25 default-protocol protocol-type The command specifies the default upper layer protocol. In the default situation: z The timer resetting delay at DTE side is 180 seconds, and the delay at the DCE side is 60 seconds.
PAGE 223
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration To set up a SVC with a call, you need an X.25 address which adopts the address format specified in ITU-T Recommendation X.121. An X.121 address is a string of Arabic numerals ranging from 0 to 15. The following describes the configuration of some attributes relevant to the X.121 address of an interface. − Configuring an alias of an interface When you forward an X.
PAGE 224
Nortel Secure Router 8000 Series Configuration -WAN Access − 7 LAPB and X.25 configuration Configuring the attributes related to the address code set in the call packet or call accept packet As specified in the X.25 protocol, the call packet must carry the information set of both the calling DTE address (source address) and the called DTE address (destination address). This address information set is called the address code set.
PAGE 225
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z Run the x25 pvc pvc-number protocol protocol-address x121-address x.121-address [ option ] command to configure the PVC. When configuring the permanent virtual circuit on the sub-interface, you must divide the range of the virtual template on the main interface. ----End The X.25 sub-interface is a virtual interface with its own protocol address and VC.
PAGE 226
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Data preparation To configure X.25, you need the following data. No. Data 1 To create a PVC and the address mapping, you need: 2 3 4 z Peer IP address z X.121 address z VC number To configure the additional parameters of the X.
PAGE 227
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration system-view The system view appears. Step 2 Run interface serial interface-number The interface view appears. Step 3 Run: x25 map { compressedtcp protocol-address | ip protocol-address }* x121-address x.121-address [ option ] The command creates the mapping from a destination protocol address to an X.121 address. Step 4 Run: x25 pvc pvc-number { compressedtcp protocol-address | ip protocol-address }* x121-address x.
PAGE 228
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration An X.25 interface has its X.121 address and inter-network protocol (such as IP) address. When X.25 initiates a call through this interface, the source address (calling DTE address) carried in the call request packet is the X.121 address of this interface. For a datagram with a definite destination IP address, you locate its corresponding X.121 destination address by the configured address mapping.
PAGE 229
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration x25 map { compressedtcp protocol-address | ip protocol-address } * x121-address x.121-address idle-timer minutes The command configures the maximum idle time for SVC associated with an address mapping. Step 5 Run: x25 vc-per-map count The command configures the maximum number of SVCs associated with all address mappings on the interface.
PAGE 230
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z x25 call-facility threshold in out z x25 map { compressedtcp protocol-address | ip protocol-address } * x121-address x.121-address threshold in out Step 13 Run one of the following commands to carry transmitting delay request in a call. z x25 call-facility send-delay milliseconds z x25 map { compressedtcp protocol-address | ip protocol-address } * x121-address x.
PAGE 231
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z Configuring SVC maximum idle time Specify a time period. If SVC is idle within this period (no packet interaction), the X.25 automatically clears the SVC to avoid unnecessary expenses. This SVC is re-establishes before the data packet is sent next time. The activation of these characteristics does not affect data transmission.
PAGE 232
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration The default queue length can contain 200 packets; however, if there is a massive data flow or low transmission rate of the X.25 network, the queue length can be increased to avoid unexpected data packet loss. z Broadcasting through X.25 Inter-network protocols are required to send broadcast datagrams in certain cases for specific purposes.
PAGE 233
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration A packet network consists of many nodes interconnected in a certain topological structure. From the source to its destination, a packet passes through many nodes, each of which must have packet switching capability. X.25 packet switching receives packets from one X.25 port, and sends them out of the X.25 port selected according to related destination address information contained in the packets. X.
PAGE 234
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Action Command Check the X.25 switch routing table. display x25 switch-table svc { dynamic | static } Check X.25 switch PVC table. display x25 switch-table pvc Check X.25 VC. display x25 vc [ vcn ] 7.5 Configuring load balancing 7.5.1 Establishing the configuration task Applicable environment DCEs provide X.25 load balancing. You configure the load balancing of X.25 networks on DCE equipment.
PAGE 235
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration No. Data 2 To configure X.25 switching route, you need: z The forwarding address is a hunt group or an interface z The X.121 address, source and destination address of the forwarding Configuration procedures No. Procedure 1 Enabling or disabling X.25 switching 2 Configuring X.25 hunt group 3 Configuring X.25 switching route 4 Checking the configuration 7.5.2 Enabling or disabling X.
PAGE 236
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration The command adds the interface into a hunt group. Step 4 Run: channel xot ip-address The command adds the XOT channel into a hunt group. A hunt group can hold a maximum of 10 synchronous serial ports or XOT channels. You cannot add the XOT channel into the hunt group that adopts vc-number channel. ----End 7.5.4 Configuring X.
PAGE 237
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.6 Configuring XOT 7.6.1 Establishing the configuration task Applicable Environment Configure the XOT route to forward X.25 packets through the IP network. Preconfiguration tasks Before configuring XOT, complete the following task: z Powering on the router and start the router normally z Connecting the interface and configuring the physical parameters of the interface z Configuring the X.
PAGE 238
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 1 Run: system-view The system view appears. Step 2 Run: x25 switch The command enables X.25 switching. Because the XOT is an extension of X.25 switching, you have to first start X.25 switching. By default, X.25 switching is not enabled. ----End 7.6.3 Configuring local switching (SVC) Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: x25 switch svc x.
PAGE 239
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] xot ip-address1 [ ip-address2 ] … [ ip-address6 ] [ xot-option ] The command configures an SVC XOT route. You must configure the local X.25 route in the SVC mode. ----End PVC Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 240
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration PVC Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface serial interface-number The interface view appears.
PAGE 241
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration You can use the reset lapb statistics command in the serial interface view. 7.7.2 Debugging X.25 Debugging affects the performance of the system. After debugging, run the undo debugging all command to disable it immediately. When an X.25 fault occurs, run the following debugging commands in the user view to debug and locate the fault.
PAGE 242
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z Example for configuring the X.25 load balancing z Example for configuring the X.25 load balancing carrying IP Datagrams z Example for configuring the TCP/IP header compression 7.8.1 Example for configuring LAPB Networking requirements You connect two routers through serial interfaces with the LAPB protocol encapsulated to transmit IP datagrams directly.
PAGE 243
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # Configure other LAPB parameters. (If the link is of good quality, and a higher rate is required, you can increase the traffic control parameter modulo to 128 and the window-size can be increased to 127. The parameters must be the same on both directly connected ends.
PAGE 244
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 0 input errors, 0 CRC, 0 frame errors 0 overrunners, 0 aborted sequences, 0 input no buffers DCD=DOWN DTR=DOWN DSR=DOWN RTS=DOWN CTS=DOWN ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Serial1/0/0 link-protocol lapb dte ip lapb modulo 128 lapb window-size 127 ip address 202.38.160.1 255.255.255.
PAGE 245
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 3. Configure the address mapping and other parameters. Data preparation To complete the configuration, you need the following data: z The IP addresses of the interfaces on Router A and Router B are 202.38.160.1/24 and 202.38.160.2/24 respectively. z The X121 address of the interfaces on Router A and Router B are 20112451 and 20112452 respectively.
PAGE 246
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # Specify an X.121 address for this interface. [RouterB-Serial1/0/0] x25 x121-address 20112452 # Specify the address mapping heading for the peer. [RouterB-Serial1/0/0] x25 map ip 202.38.160.1 x121-address 20112451 # Increase the traffic control parameters slightly because the routers are directly connected.
PAGE 247
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Serial1/0/0 link-protocol x25 x25 x121-address 20112451 x25 packet-size 1024 1024 x25 window-size 5 5 x25 map ip 202.38.160.2 x121-address 20112452 ip address 202.38.160.1 255.255.255.
PAGE 248
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Figure 7-12 Connecting routers to an X.25 public packet network serial1/0/0 168.173.24.2/24 serial1/0/0 168.173.24.1/24 x.25 windowsize:5 5 packetsize:512 512 Router B RouterA serial1/0/0 168.173.24.3/24 Router C Configuration roadmap The configuration roadmap is as follows: 1. Configure IP addresses of the interfaces on three routers. 2. Configure the link protocol of the interfaces on three routers to X.25.
PAGE 249
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterA-Serial1/0/0] x25 window-size 5 5 [RouterA-Serial1/0/0] x25 packet-size 512 512 [RouterA-Serial1/0/0] x25 vc-range bi-channel 1 32 [RouterA-Serial1/0/0] x25 map ip 168.173.24.2 x121-address 30561002 [RouterA-Serial1/0/0] x25 map ip 168.173.24.3 x121-address 30561003 [RouterA-Serial1/0/0] shutdown [RouterA-Serial1/0/0] undo shutdown Step 2 Configure Router B. # Configure an IP address for the interface.
PAGE 250
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Map-type: SVC_MAP VC-number: 1 Facility: # Display the VC information on Router A. [RouterA] display x25 vc Interface: Serial1/0/0 SVC 1 State: P4 Map: ip 168.173.24.
PAGE 251
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # interface Serial1/0/0 link-protocol x25 x25 x121-address 30561002 x25 vc-range bi-channel 1 32 x25 packet-size 512 512 x25 window-size 5 5 x25 map ip 168.173.24.1 x121-address 30561001 x25 map ip 168.173.24.3 x121-address 30561003 ip address 168.173.24.2 255.255.255.
PAGE 252
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Data preparation To complete the configuration, you need the following data: z The PVC range is [1, 8]. z Incoming-only channel range is [9, 16]. z Two-way channel range is [17, 1024]. Configuration procedures Step 1 Configure Router A.
PAGE 253
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # return 7.8.5 Example for transmitting IP datagrams through X.25 PVC Networking requirements Without adding static routes, PC A and PC B can exchange routing information between Ethernet A and Ethernet B through the RIP routing protocol. Figure 7-14 X.25 PVC bearing IP datagram PC A PC B serial1/0/0 192.149.13.1/24 RouterA Ethernet A x.25 windowsize:5 5 packetsize:512 512 PVC 3 serial1/0/0 192.149.13.
PAGE 254
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterA-Serial1/0/0] link-protocol x25 [RouterA-Serial1/0/0] x25 x121-address 21 [RouterA-Serial1/0/0] x25 vc-range bi-channel 9 1024 [RouterA-Serial1/0/0] x25 pvc 3 ip 192.149.13.2 x121-address 22 broadcast packet-size 512 512 window-size 5 5 [RouterA-Serial1/0/0] shutdown [RouterA-Serial1/0/0] undo shutdown [RouterA-Serial1/0/0] quit Step 2 Configure Router B.
PAGE 255
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 3 Verify the configuration. Ping Router B on Router A. The ping is successful. # Display the mapping information of Router A. [RouterA] display x25 map Interface: Serial1/0/0(protocol status is UP) Ip address:ip 192.149.13.2 X.
PAGE 256
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Networking requirements You configure multiple sub-interfaces on a physical interface to connect multiple peers of different network sections. In Figure 7-16, you configure Router A with two sub-interfaces that interconnect to Router B and Router C respectively. Figure 7-16 Diagram of X.25 sub-interface configuration Router D Serial1/0/2 Serial1/0/0 Serial1/0/0.1 10.1.1.2/16 Serial1/0/0 20.1.1.
PAGE 257
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterA-Serial1/0/0.1] shutdown [RouterA-Serial1/0/0.1] undo shutdown [RouterA-Serial1/0/0.1] quit # Create the sub-interface Serial 1/0/0.2. [RouterA-Serial1/0/0.1] interface serial 1/0/0.2 [RouterA-Serial1/0/0.2] ip address 20.1.1.2 255.255.0.0 [RouterA-Serial1/0/0.2] x25 map ip 20.1.1.1 x121-address 300 [RouterA-Serial1/0/0.2] shutdown [RouterA-Serial1/0/0.2] undo shutdown Step 2 Configure Router B.
PAGE 258
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Interface: Serial1/0/0.2(protocol status is UP) Ip address:ip 20.1.1.1 X.121 address:300 Map-type: SVC_MAP VC-number: 1 Facility: Interface: Serial1/0/0.1(protocol status is UP) Ip address:ip 10.1.1.1 X.121 address:200 Map-type: SVC_MAP VC-number: 1 Facility: # Display the VC information about Router A display x25 vc Interface: Serial1/0/0.2 SVC 1 State: P4 Map: ip 20.1.1.
PAGE 259
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Configuration files z Configuration files of Router A # sysname RouterA # interface Serial1/0/0 link-protocol x25 x25 x121-address 100 # interface Serial1/0/0.1 x25 map ip 10.1.1.1 x121-address 200 ip address 10.1.1.2 255.255.0.0 # interface Serial1/0/0.2 x25 map ip 20.1.1.1 x121-address 300 ip address 20.1.1.2 255.255.0.
PAGE 260
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration interface Serial1/0/2 link-protocol x25 dce # x25 switch svc 100 interface Serial1/0/0 x25 switch svc 200 interface Serial1/0/1 x25 switch svc 300 interface Serial1/0/2 # return 7.8.7 Example for configuring the SVC function of XOT Networking requirements You connect Router B and Router C to each other through the Ethernet interface. Set up a TCP connection between the routers, through which the X.
PAGE 261
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Configuration procedure Step 1 Configure Router A. # Configure the basic X.25. system-view [RouterA] interface serial 2/0/0 [RouterA-Serial2/0/0] link-protocol x25 dte ietf [RouterA-Serial2/0/0] x25 x121-address 1 [RouterA-Serial2/0/0] x25 map ip 1.1.1.2 x121-address 2 [RouterA-Serial2/0/0] ip address 1.1.1.1 255.0.0.
PAGE 262
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterC] x25 switch svc 2 interface serial 2/0/0 # Configure the XOT switching. [RouterC] x25 switch svc 1 xot 10.1.1.1 # Configure Ethernet 1/0/0. [RouterC] interface ethernet 1/0/0 [RouterC-Ethernet1/0/0] ip address 10.1.1.2 255.0.0.0 [RouterC-Ethernet1/0/0] quit # Configure Serial 2/0/0. [RouterC] interface serial 2/0/0 [RouterC-Serial2/0/0] link-protocol x25 dce ietf Step 5 Verify the configuration.
PAGE 263
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Snd Queue(Current/Max): 0/200 ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Serial2/0/0 link-protocol x25 x25 x121-address 1 x25 map ip 1.1.1.2 x121-address 2 ip address 1.1.1.1 255.0.0.0 # return z Configuration file of Router B # sysname RouterB # x25 switching # interface Ethernet1/0/0 ip address 10.1.1.1 255.0.0.
PAGE 264
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration sysname RouterD # interface Serial2/0/0 link-protocol x25 x25 x121-address 2 x25 map ip 1.1.1.1 x121-address 1 ip address 1.1.1.2 255.0.0.0 # return 7.8.8 Example for configuring the PVC function of XOT Networking requirements You connect Router B and Router C through the Ethernet interfaces. Set up a TCP connection between the routers, through which the X.25 packets can forward.
PAGE 265
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # Configure basic X.25. system-view [RouterD] interface serial 2/0/0 [RouterD-Serial2/0/0] link-protocol x25 dte ietf [RouterD-Serial2/0/0] x25 x121-address 2 [RouterD-Serial2/0/0] x25 vc-range in-channel 10 20 bi-channel 30 1024 [RouterD-Serial2/0/0] shutdown [RouterD-Serial2/0/0] undo shutdown [RouterD-Serial2/0/0] x25 pvc 1 ip 1.1.1.1 x121-address 1 [RouterD-Serial2/0/0] ip address 1.1.1.2 255.0.0.
PAGE 266
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration The two hosts can ping through each other. # Display the VC information about Router B. [RouterB] display x25 vc Interface: Serial2/0/0-10.1.1.
PAGE 267
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration x25 x121-address 1 x25 vc-range in-channel 10 20 bi-channel 30 1024 x25 pvc 1 ip 1.1.1.2 x121-address 2 ip address 1.1.1.1 255.0.0.0 # return z Configuration file of Router B # sysname RouterB # x25 switching # interface Ethernet1/0/0 ip address 10.1.1.1 255.0.0.0 # interface Serial2/0/0 link-protocol x25 dce x25 vc-range in-channel 10 20 bi-channel 30 1024 x25 xot pvc 1 10.1.1.
PAGE 268
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.8.9 Example for configuring the X.25 load balancing Networking requirements Configure hunt group on Router A which serves as an X.25 switch. Simultaneously, enable the function of substitution between destination addresses and source addresses, so that the calls of X.25 terminal can be sent to Router B, Router C, and Router E to achieve load balancing. As an X.
PAGE 269
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # Configure the link protocol of Serial 1/0/0 as X.25 and specify it to operate in DCE mode. system-view [RouterA] interface serial 1/0/0 [RouterA-Serial1/0/0] link-protocol x25 dce [RouterA-Serial1/0/0] quit # Configure the link layer protocol of other synchronous serial interfaces as X.25 and specify it to operate in DCE mode. Their configuration is identical to the configuration of Serial 1/0/0.
PAGE 270
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterD-Serial1/0/0]link-protocol x25 dce [RouterD-Serial1/0/0] quit # Configure IP addresses on Ethernet 2/0/0. [RouterD] interface ethernet 2/0/0 [RouterD-Ethernet2/0/0] ip address 10.1.1.2 255.255.255.0 [RouterD-Ethernet2/0/0] quit # Enable the X.25 switching in the system view. [RouterD] x25 switching # Configure the X.25 switching route whose forwarding address is the XOT Tunnel.
PAGE 271
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration # Return z Configuration file of Router B # sysname RouterB # interface Serial1/0/0 link-protocol x25 x25 x121-address 8888 # return z Configuration file of Router C # sysname RouterC # interface Serial1/0/0 link-protocol x25 x25 x121-address 8888 # return z Configuration file of Router D # sysname RouterD # x25 switching # interface Ethernet2/0/0 ip address 10.1.1.2 255.255.255.
PAGE 272
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.8.10 Example for configuring the X.25 load balancing carrying IP Datagrams Networking requirements X.25 packet switching networks interconnect IP networks in different areas. The X.25 networks carries the IP data. The ISPs provide the function of X.
PAGE 273
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 1 Configure Router A. # Configure Ethernet 2/0/0. system-view [RouterA] interface ethernet 2/0/0 [RouterA-Ethernet2/0/0] ip address 10.1.1.1 255.255.255.0 [RouterA-Ethernet2/0/0] quit # Configure Serial 1/0/0. [RouterA] interface serial 1/0/0 [RouterA-Serial1/0/0] link-protocol x25 dte [RouterA-Serial1/0/0] x25 x121-address 1111 [RouterA-Serial1/0/0] ip address 1.1.1.1 255.255.255.
PAGE 274
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration [RouterC-Serial1/0/0] link-protocol x25 dte [RouterC-Serial1/0/0] x25 x121-address 3333 [RouterC-Serial1/0/0] ip address 1.1.1.3 255.255.255.0 [RouterC-Serial1/0/0] x25 map ip 1.1.1.1 x121-address 1111 [RouterC-Serial1/0/0] x25 map ip 2.1.1.1 x121-address 1111 [RouterC-Serial1/0/0] x25 map ip 1.1.1.2 x121-address 2222 [RouterC-Serial1/0/0] x25 map ip 2.1.1.
PAGE 275
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Map-type: SVC_MAP VC-number: 0 ----End Configuration files z Configuration file of Router A # sysname RouterA # interface Ethernet2/0/0 ip address 10.1.1.1 255.255.255.0 # interface Serial1/0/0 link-protocol x25 x25 x121-address 1111 x25 vc-per-map 2 x25 map ip 1.1.1.3 x121-address 3333 ip address 1.1.1.1 255.255.255.0 # ip route-static 10.3.1.0 255.255.255.0 1.1.1.
PAGE 276
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration 7.8.11 Example for configuring the TCP/IP header compression Networking requirements As shown in Figure 7-20, you directly connect two routers. Figure 7-20 Direct connection of two routers through serial interfaces (X.25) Serial1/0/0 16.16.16.1/24 Serial1/0/0 16.16.16.2/24 Router A Router B Configuration roadmap The configuration roadmap is as follows: 1. Configure the link protocol to X.25. 2.
PAGE 277
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration system-view [RouterB] interface serial 1/0/0 # Encapsulate X.25 DCE. [RouterB-serial1/0/0] link-protocol x25 dce ietf # Configure an X.121 address. [RouterB-Serial1/0/0] x25 x121-address 1002 # Configure an IP address. [RouterB-Serial1/0/0] ip address 16.16.16.2 255.255.0.0 # Configure map multi-protocol. [RouterB-Serial1/0/0] x25 map ip 16.16.16.1 compressedtcp 16.16.16.
PAGE 278
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration x25 x121-address 1002 x25 map ip 16.16.16.1 compressedtcp 16.16.16.1 x121-address 1001 ip address 16.16.16.2 255.255.0.0 # return 7.9 Troubleshooting This section provides troubleshooting methods for the following faults: z LAPB is always disconnected z LAPB protocol is up, VC cannot be established z X.25 Protocol cannot enter the up status z X.
PAGE 279
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Fault analysis The possible cause is that the maximum frame size of this end may be too small. Set a larger value of maximum frame size. Troubleshooting procedure Do as follows on the routers: Step 1 Enable the debugging. You can find that one end discards the received frames without transmitting it to the X.25 packet layer. Step 2 Modify the MTU on the end. ----End 7.9.3 X.
PAGE 280
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration z The address mapping from the peer to the local is not configured. z The channel range is incorrect. z The facility options that are restricted by the network have been transmitted. Troubleshooting procedure Do as follows on the routers: Step 1 Change the configuration if the address is configured incorrectly.
PAGE 281
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 2 After configuring the VC range, use the shutdown command and the undo shutdown command to activate the configuration. ----End 7.9.7 After SVC application of XOT is configured, the ping fails Fault description After you configure the SVC application of XOT, the ping operation fails. Fault analysis The possible causes are: z The physical connection is in the faulty condition. z SVC is configured incorrectly.
PAGE 282
Nortel Secure Router 8000 Series Configuration -WAN Access 7 LAPB and X.25 configuration Step 2 If the interface is Down, check whether the physical connection and configuration are correct. Step 3 Check whether the SVC is configured correctly. Step 4 Check whether the XOT is configured correctly. ----End Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 283
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 8 Frame relay configuration ........................................................................................................8-1 8.1 Introduction ...................................................................................................................................................8-3 8.1.1 FR protocol and related concepts.....................................................................................................
PAGE 284
Nortel Secure Router 8000 Series Configuration -WAN Access 8.7 Configuring PVC standby groups of frame relay switching .......................................................................8-26 8.7.1 Establishing the configuration task ....................................................................................................8-26 8.7.2 Configuring the switching PVC backup function ..............................................................................8-27 8.7.
PAGE 285
Nortel Secure Router 8000 Series Configuration -WAN Access 8.14.7 Example for configuring frame relay over IP ..................................................................................8-66 8.14.8 Example for configuring the frame relay frf9 compression .............................................................8-69 8.14.9 Example for configuring MFR.........................................................................................................8-71 8.15 Troubleshooting.....................
PAGE 286
PAGE 287
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 8-1 FR interface type...............................................................................................................................8-3 Figure 8-2 Schematic diagram of switching in a PVC standby group................................................................8-7 Figure 8-3 Schematic diagram of bundle and bundle links ................................................................................
PAGE 288
PAGE 289
Nortel Secure Router 8000 Series Configuration -WAN Access Tables Table 8-1 Meanings of FR LMI protocol parameters .........................................................................................8-5 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 290
PAGE 291
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8 Frame relay configuration About this chapter The following table shows the contents of this chapter. Section Description 8.1 Introduction This section describes concepts and fundamentals of FR. 8.2 Configuring This section describes how to configure FR. See Example for connecting LANs through the frame relay network. 8.
PAGE 292
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Section Description 8.7 Configuring PVC standby groups of frame relay switching This section describes how to configure the PVC backup and tunnel interface backup of FR. See: z Example for configuring the PVC backup of frame relay switching. z Example for configuring the backup of frame relay over IP. 8.8 Configuring frame relay over an IP network This section describes how to configure FR over IP. 8.
PAGE 293
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.1 Introduction This section covers the following topics that you need to know before you configure FR: z FR protocol and related concepts z PVC standby of frame relay switching z Frame relay compression z multilink z References 8.1.1 FR protocol and related concepts FR protocol FR interface type A Frame Relay (FR) network provides data communication between user devices (such as routers and hosts).
PAGE 294
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Data link connection identifier Frame relay is a statistically multiplexing protocol that provides multiple Virtual Circuits (VCs) on a single physical transmission line. Data Link Connection Identifier (DLCI) differentiates VCs being valid only on the local interface and its directly connected remote interfaces.
PAGE 295
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration You need to manually maintain static mapping. Its security and reliability is higher than the dynamic FR address mapping. FR LMI protocol The LMI protocol maintains the link and PVC status of the FR through the status enquiry packet and the status packet.
PAGE 296
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z N391 where DTE sends a status request packet at certain intervals (determined by T391). There are two types of status request packets, namely link integrity verification packet and link status query packet. N391 defines the sending ratio of the two types of status request packets. The formula is link integrity verification packet number: link status query packet number = (N391-1):1.
PAGE 297
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.1.2 PVC standby of frame relay switching PVC standby groups of FR switching application With SR8000 providing FR switching, you can use a router as a DCE device. In practical networking, there are two options to improving the network reliability.
PAGE 298
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration transmitted over the master PVCs. After the switching, however, the traffic transmits over the slave PVCs. You can configure several standby groups on a router. NOTE The SR8000 implements the IP Tunnel as a standby link to back up FR over IP. A PVC and IP Tunnel standby link can exist in one standby group at the same time. Figure 8-2 shows an example for switching PVC with IP Tunnel.
PAGE 299
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration One MFR interface corresponds to one bundle, which may contain multiple bundle links. One bundle link corresponds to one physical interface. A bundle manages its bundle links.
PAGE 300
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z Sub-interface. A sub-interface is a logical interface that can be used to configure protocol address and PVC. One physical interface includes multiple sub-interfaces. For the network layer, you can use both the sub-interface and main interface to configure the PVC to connect to the remote equipment. Data Link Connection Identifier is locally valid.
PAGE 301
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration interface interface-type interface-number The FR interface view appears. Step 3 Run: link-protocol fr [ ietf | nonstandard ] The command configures the link layer protocol of the interface as FR. By default, the link layer protocol encapsulation of the interface is PPP. When the FR protocol is encapsulated, by default, the encapsulation format of the frame is IETF.
PAGE 302
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Configuring basic frame relay DCE capability Do as follows on the routers at DCE side: Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The FR interface view appears. Step 3 Run: link-protocol fr [ ietf | nonstandard ] The command configures the link layer protocol of the interface as FR.
PAGE 303
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.2.4 Configuring frame relay sub-interfaces capability Create an frame relay sub-interface Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The FR interface view appears. Step 3 Run: link-protocol fr [ ietf | nonstandard ] The command configures the link layer protocol of the interface as FR.
PAGE 304
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration interface interface-type interface-number.subnumber The FR sub-interface view appears. Step 3 Run: fr dlci dlci The command configures the DLCI of the interface. For an FR sub-interface, must be consistent. you must configure the DLCI. In addition, DLCIs on both ends ----End 8.2.5 Checking the configuration Run the following commands to check the previous configuration.
PAGE 305
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration The FR static address mapping guarantees the stability of network links and improves the network security by preventing attacks from unknown users. Preconfiguration tasks Before configuring the FR static address mapping, complete Configuring . Data preparation Before configuring the FR static address mapping, you need the following data. No.
PAGE 306
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration NOTE z You cannot configure this command on a P2P sub-interface. z If you configure an interface with static mapping, you do not configure the interface with DLCI. z If you configure DCE devices with static mapping and DTE devices with dynamic mapping, two ends can communicate. If you configure DCE devices with dynamic mapping while DTE devices with static mapping, two ends cannot communicate. ----End 8.3.
PAGE 307
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration After a physical interface is encapsulated with MFR, the interface becomes a part of MFR and you cannot configure with other FR commands besides MFR. At the same time, you configure the queue type on the interface as FIFO. If you use other queue types before the interface encapsulation, they are automatically changed into FIFO queues. In the current realization, MFR does not support inter-board bundle.
PAGE 308
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration NOTE Before you create an MFR sub-interface, ensure that the MFR main interface exists; otherwise, you cannot create an MFR sub-interface. Step 3 Run ip address ip-address { mask | mask-length } The IP address of the MFR interface is configured. Step 4 Run: fr interface-type dte The command configures the FR interface type as DTE.
PAGE 309
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration ip address ip-address { mask | mask-length } The command configures the IP address of the MFR interface. Step 4 Run: fr interface-type dce The command configures the FR interface type as DCE. NOTE The fr interface-type dce command is valid only for MFR main interfaces. Step 5 Run: fr dlci dlci-number The command configures the DLCI of the interface. Step 6 Run: quit Return to the interface view.
PAGE 310
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.4.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check statistics about the FR RARP. display fr inarp-info [ interface interface-type interface-number ] Check the status and configuration of the MFR interface. display interface mfr [ interface-number ] [ | { begin | exclude | include } regular-expression ] Run the display fr inarp-info command.
PAGE 311
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.5 Configuring frame relay LMI type and related parameters 8.5.1 Establishing the configuration task Applicable environment If the LMI protocol is required to maintain the link status and the PVC status of FR and optimize the running of the device, you need to configure the LMI type and related parameters.
PAGE 312
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z Run the interface interface-type interface-number command to enter the FR interface view. z Run the interface mfr interface-number command to enter the MFR interface view. Step 3 Run: fr lmi type { ansi | nonstandard | q933a } The FR LMI type is configured. Step 4 Run: timer hold seconds The command configures the polling interval (determined by T391) on the DCE device.
PAGE 313
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration The command configures the timeout period (determined by T392) for the DCE device to wait for a status request packet and the LMI N391 parameters on the DTE device. Step 5 Run: fr lmi n392dce n392-value The command configures the DCE N392 parameter. Step 6 Run: fr lmi n393dce n393-value The command configures the DCE N393 parameter. ----End 8.5.
PAGE 314
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z You must specify the FR switching route to transmit egress and the number for a VC and to set a packet switching route; z You must configure the FR switching PVC to create packets switching route between any two interfaces of the router. It is often used to backup the route. For a detailed configuration, see Configuring the switching PVC backup function.
PAGE 315
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration NOTE You cannot configure the fr dlci-switch command in the sub-interface view. You cannot specify the outgoing interface command as a sub-interface. z Run the interface interface-type interface-number command to enter the FR interface view. z Run the interface mfr interface-number command to enter the MFR interface view.
PAGE 316
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Run the display fr dlci-switch command. The configuration succeeds when information about the FR switching appears. For example: display fr dlci-switch Frame relay switch statistics for board 6 Status Interface(Dlci) Active Serial6/0/0(500) ----------> Interface(Dlci) Serial6/0/1(600) Run the display fr switch-table command. The configuration succeeds when statistics about the FR switching PVC appears.
PAGE 317
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z Configuring basic frame relay DTE capability or Configuring basic frame relay DCE capability z Create the tunnel interface and configure source and destination address for the interfaces if the PVC is backed up through tunnel interfaces Data preparation To configure PVC standby groups of FR switching, you need the following data.
PAGE 318
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration The command configures the master PVC d. NOTE interface-type in the command of Step 3 is generally physical interface. Step 4 Run: quit Return to the system view. Step 5 Choose one of the following steps to configure the FR backup link as required.
PAGE 319
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.7.4 Configuring the manual switching mode Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: fr standby group group-number switch manual The command configures the manual switching mode. NOTE You must manually enable the switching from the slave PVCs to the master PVCs. Step 3 Choose one of the following steps to switch the link as required.
PAGE 320
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Bad PVCs list: Good PVCs list: OUT Serial5/0/0:0 VC:200 STATUS:GOOD; IN Serial5/0/2:0 VC:100 STATUS:GOOD SLAVE,Total 1 PVCs, 0 PVCs is ok; UP PVCs critical value:100% Bad PVCs list: OUT Serial5/0/0:1 VC:300 STATUS:BAD; IN Serial5/0/2:0 VC:100 STATUS:GOOD Good PVCs list: 8.8 Configuring frame relay over an IP network 8.8.
PAGE 321
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Data preparation To configure FR over an IP network, you need the following data.
PAGE 322
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration After you configure FR routes with the fr dlci-switch interface tunnel command, you add two routes into the FR routing table of the router. The inbound interface and outbound interface of one route are "tunnel" and "serial" respectively, while those of the other are "serial" and "tunnel". A PVC whose DLCI number is out-dlci is generated on the tunnel interface. The state of this PVC determines the state of a route. 8.
PAGE 323
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration The main interface of FR is the point-to-multipoint interface. The sub-interface has the P2P interface and the P2MP interface. FR compression includes configuration on a point-to-point interface or on a point-to-multipoint interface. NOTE z The FRF.9 compression is applicable for low-speed links. z The MFR link does not use the FRF.9 compression function. z The FRF.9 compression involves a synchronization process.
PAGE 324
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Step 2 Run: interface interface-type interface-number.subnumber p2p The command creates the FR sub-interface view is created and appears. The sub-interface type is point-to-point. Step 3 Run: fr dlci dlci The command configures the DLCI. Step 4 Run: quit Return to the FR sub-interface view. Step 5 Run: fr compression frf9 The command enablesFR FRF.9 compression.
PAGE 325
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration fr map ip { ip-address [ mask ] | default } dlci-number compression frf9 The command creates an FR mapping and enables FR FRF.9 compression on DLCI. You configure this command only on the FR main interface or point-to-multipoint FR sub-interface, and the packet encapsulation type must be IETF. If the packet encapsulation type is nonstandard, and when you run the command to enable the FR FRF.
PAGE 326
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration PVC Is In FRF9 Compress OPERATION Status Run the display fr compress command. The configuration succeeds when statistics about the FR FRF.9 compression appears. display fr compress Serial6/0/0.
PAGE 327
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Configuration procedures No. Procedure 1 Configuring IPHC on an frame relay main interface 2 Configuring IPHC on an freame relay P2MP sub-interface 3 Checking the configuration 8.10.2 Configuring IPHC on an frame relay main interface Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Choose one of the following steps to enter the corresponding interface view as required.
PAGE 328
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z Run the interface interface-type interface-number.subnumber p2mp command to enter the FR P2MP sub-interface view. z Run the interface MFR interface-number.subnumber p2mp command to enter the MFR P2MP sub-interface view. Step 3 Run: fr map ip { ip-address [ mask ] | default } dlci-number compression iphc connections connections-number The command enables IPHC on the interface. ----End 8.10.
PAGE 329
Nortel Secure Router 8000 Series Configuration -WAN Access z 8 Frame relay configuration Before configuring the hello packet parameters of the MFR bundle link, complete the following tasks: − Configuring physical parameters for FR interfaces − Creating and configuring the MFR interface − Bundling the current interface onto the specified MFR interface Data preparation To configure MFR bundle and bundle link identifiers, you need the following data.
PAGE 330
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Step 2 Run: interface mfr interface-number The command creates an MFR interface and the MFR main interface view appears. Step 3 Run: mfr bundle-name [ name ] The command configures the bundle identifier. By default, the MFR bundle identifier is "mfr + the bundle interface number". NOTE You use the mfr bundle-name command in the main interface of MFR but not in the sub-interface. ----End 8.11.
PAGE 331
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration mfr timer hello seconds The command configures the hello packet sending period of MFR bundle link. Step 4 Run: mfr timer ack seconds The command configures the waiting time before MFR bundle link resends hello packets. Step 5 Run: mfr retry number The command configures the maximum times that MFR bundle link can resend hello packet. By default, the hello packet sending period of a bundle link is 10 seconds.
PAGE 332
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Data preparation To configure MFR restriction parameters, you need the following data. No Data 1 Interface number of FR interfaces 2 Interface number of the MFR interface 3 Maximum fragment permitted by bundle links 4 MFR sliding window size Configuration procedures No. Procedure 1 Configuring the MFR fragment size 2 Configuring the MFR sliding window size 3 Checking the configuration 8.12.
PAGE 333
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Configuring the MFR fragment size in the MFR interface view Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface mfr interface-number The MFR interface view appears. Step 3 Run: mfr fragment The command enables the MFR fragmentation. Step 4 Run: mfr fragment-size bytes The command configures the maximum fragment permitted by bundle links.
PAGE 334
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.12.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the configuration and status of the MFR interface. display interface mfr [ interface-number ] [ | { begin | exclude | include } regular-expression ] 8.
PAGE 335
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.13.2 Debugging frame relay and MFR Debugging affects the performance of the system. After debugging, run the undo debugging all command to disable it immediately. When a fault of FR or MFR occurs, execute the following debugging commands in user view to debug FR or MFR and to locate the fault.
PAGE 336
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z Example for connecting LANs through the private line z Example for configuring frame relay switching routes z Example for configuring the frame realy switching PVC z Example for configuring the PVC backup of frame relay switching z Example for configuring the backup of frame relay over IP z Example for configuring frame relay over IP z Example for configuring the frame relay frf9 compression z Example fo
PAGE 337
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z The IP address of each interface and the VC number of each network segment are shown in Figure 8-5. z The router works as the user device; the interface works in the FR DTE mode. Configuration procedure Step 1 Configure Router A. # Encapsulate the interface with FR.
PAGE 338
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration # Configure the static address mapping. [RouterC] interface serial 1/0/0.1 [RouterC-Serial1/0/0.1] fr dlci 80 [RouterC-fr-dlci-Serial1/0/0.1-80] quit [RouterC-Serial1/0/0.1] ip address 202.38.164.252 24 [RouterC-Serial1/0/0.1] fr map ip 202.38.164.251 80 [RouterC-Serial1/0/0.1] quit Step 4 Check the configuration. On Router A, ping the interface on Router B. [RouterA] ping 202.38.163.252 PING 202.38.163.
PAGE 339
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration interface Serial1/0/0 link-protocol fr # interface Serial1/0/0.1 fr map ip 202.38.163.251 70 fr dlci 70 ip address 202.38.163.252 255.255.255.0 # return z Configuration file of Router C # sysname RouterC # interface Serial1/0/0 link-protocol fr # interface Serial1/0/0.1 fr map ip 202.38.164.251 80 fr dlci 80 ip address 202.38.164.252 255.255.255.0 # return 8.14.
PAGE 340
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Data preparation To connect LANs through the private line, you need the following data: z The IP addresses of each interface and the VC number is shown in Figure 8-6. z Router A works in the DCE mode. z Router B works in the DTE mode. Configuration procedure Step 1 Configure Router A. # Encapsulate the interface with FR. system-view [RouterA] interface serial 1/0/0 [RouterA-Serial1/0/0] ip address 202.
PAGE 341
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration ----End Configuration files z Configuration file of Router A (the static address mapping) # sysname RouterA # interface Serial1/0/0 link-protocol fr fr interface-type dce fr map ip 202.38.163.252 100 fr dlci 100 ip address 202.38.163.251 255.255.255.0 # return The dynamic address mapping is similar to this, but there is no fr map ip 202.38.163.252 100.
PAGE 342
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 1. Configure the link protocol on each interface to FR. 2. Configure the working mode of each interface. 3. Configure the VC number of each network segment. 4. Enable the FR switching on Router B and Router C in the system view. 5. Configure the FR switching route. Data preparation To configure the FR switching route, you need the following data: z The VC number of each network segment is shown in Figure 8-7.
PAGE 343
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterB-Serial2/0/0] fr dlci-switch 300 interface Serial1/0/0 dlci 100 [RouterB-Serial2/0/0] quit Step 3 Configure Router C. # Configure Serial 1/0/0 and NNI.
PAGE 344
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterC] display fr dlci-switch Frame relay switch statistics for board 1 Status Interface(Dlci) Active Serial1/0/0(300) ----------> Interface(Dlci) Serial2/0/0(200) Active Serial2/0/0(200) Serial1/0/0(300) After the you complete the configuration complete, Router A and Router D can ping each other successfully.
PAGE 345
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration link-protocol fr fr interface-type nni fr dlci-switch 300 interface Serial1/0/0 dlci 200 fr dlci 200 # return z Configuration file of Router D sysname RouterD # interface Serial2/0/0 link-protocol fr ip address 196.1.1.2 255.255.255.0 # return 8.14.
PAGE 346
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterA-Serial1/0/0] quit Step 2 Configure Router B, # Configure Serial 1/0/0. system-view [RouterB] interface serial 1/0/0 [RouterB-Serial1/0/0] link-protocol fr [RouterB-Serial1/0/0] fr interface-type dce [RouterB-Serial1/0/0] fr dlci 100 [RouterB-fr-dlci-Serial1/0/0-100] quit [RouterB-Serial1/0/0] quit # Configure Serial 2/0/0.
PAGE 347
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterC] fr switch pvc2 interface Serial1/0/0 dlci 300 interface Serial2/0/0 dlci 200 [RouterC-fr-switching-pvc2] quit Step 4 Configure Router D. # Configure Serial 2/0/0. system-view [RouterD] interface serial 2/0/0 [RouterD-Serial2/0/0] link-protocol fr [RouterD-Serial2/0/0] ip address 196.1.1.2 255.255.255.0 [RouterD-Serial2/0/0] quit Step 5 Verify the configuration.
PAGE 348
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration return z Configuration file of Router C # sysname RouterC # fr switching # interface Serial1/0/0 link-protocol fr fr interface-type nni fr dlci 300 # interface Serial2/0/0 link-protocol fr fr interface-type dce fr dlci 200 # fr switch pvc2 interface Serial1/0/0 dlci 300 interface Serial2/0/0 dlci 200 # return z Configuration file of Router D # sysname RouterD # interface Serial2/0/0 link-protocol fr ip address 196.1.
PAGE 349
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Figure 8-8 Networking diagram of PVC standby groups of FR switching SGSN 1 PVC 1 Basic station controller Serial1/0/0 Serial2/0/0 DLCI 200 RouterA DLCI 100 PVC 2 Serial3/0/0 DLCI 300 SGSN 2 Configuration roadmap The configuration roadmap is as follows: 1. Configure the link protocol to FR. 2. Enable the FR switching in the global mode. 3. Configure the VC number of each network segment. 4.
PAGE 350
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterA-Serial2/0/0] fr interface-type dce [RouterA-Serial2/0/0] fr dlci 200 [RouterA-fr-dlci-Serial2/0/0-200] quit [RouterA-Serial2/0/0] quit [RouterA] interface serial 3/0/0 [RouterA-Serial3/0/0] link-protocol fr [RouterA-Serial3/0/0] fr interface-type dce [RouterA-Serial3/0/0] fr dlci 300 [RouterA-fr-dlci-Serial3/0/0-300] quit [RouterA-Serial3/0/0] quit # Create a master PVC1.
PAGE 351
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration interface Serial2/0/0 link-protocol fr fr interface-type dce fr dlci 200 # interface Serial3/0/0 link-protocol fr fr interface-type dce fr dlci 300 # fr switch pvc1 interface serial 1/0/0 dlci 100 interface serial 2/0/0 dlci 200 group 1 fr switch pvc2 interface serial 1/0/0 dlci 100 interface serial 3/0/0 dlci 300 standby pvc1 group 1 # return 8.14.
PAGE 352
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Data preparation To configure the backup of the FR over IP, you need the following data: z The IP addresses of Router A and Router D are 196.1.1.1/24 and 196.1.1.2/24 respectively. z The VC number of the network segment between Router A and Router B are 100. z The VC number of the network segment between Router B and Router C are 300. z The VC number of the network segment between Router C and Router D are 200.
PAGE 353
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterB] fr switch pvc interface Serial1/0/0 dlci 100 interface Serial2/0/0 dlci 300 group 1 [RouterB-fr-switching-pvc] quit [RouterB] fr switch pvc1 interface Serial1/0/0 dlci 100 interface tunnel 3/0/1 dlci 300 standby pvc group 1 [RouterB-fr-switching-pvc1] qui Step 3 Configure Router C. # Encapsulate Serial 2/0/0 with FR and configure the interface type as NNI.
PAGE 354
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Check the status of the master and the standby groups as GOOD on Router B.
PAGE 355
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration fr dlci 100 # interface Serial2/0/0 link-protocol fr fr interface-type nni fr dlci 300 # interface Tunnel3/0/1 source 10.1.1.1 destination 10.1.1.
PAGE 356
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.14.7 Example for configuring frame relay over IP Networking requirements As shown in Figure 8-10, you connect two FR networks through Router A and Router B. Enable the FR over IP function on Router A and Router B to connect two FR networks over an IP network. Figure 8-10 Networking diagram of FR over IP RouterA Serial 1/0/0 Tunnel 2/0/1 10.120.21.5/24 DLCI 200 Serial 2/0/0 10.120.20.
PAGE 357
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration # Configure the FR interface Serial 1/0/0. [RouterA] interface serial 1/0/0 [RouterA-Serial1/0/0] link-protocol fr [RouterA-Serial1/0/0] fr interface-type dce [RouterA-Serial1/0/0] fr dlci 100 [RouterA-fr-dlci-Serial1/0/0-100] quit [RouterA-Serial1/0/0] quit # Configure the IP interface Serial 2/0/0. [RouterA] interface serial 2/0/0 [RouterA-Serial2/0/0] ip address 10.120.20.1 255.255.255.
PAGE 358
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterB-Serial1/0/0] fr dlci-switch 300 interface tunnel 2/0/1 dlci 200 [RouterB-Serial1/0/0] quit Step 3 Check the configuration. Check whether the frame relay switch is Active on Router B.
PAGE 359
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration # interface Tunnel2/0/1 source 10.120.20.2 destination 10.120.20.1 # return 8.14.8 Example for configuring the frame relay frf9 compression Networking requirements As shown in Figure 8-11, connect Router A and Router B over the FR network and FR frf9 enable compression between them. Figure 8-11 Networking diagram of FR compression Serial4/0/0 10.110.40.1/24 DLCI=100 Serial4/0/0 IP:10.110.40.
PAGE 360
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration [RouterA-Serial4/0/0] qui Step 2 Configure Router B. system-view [RouterB] interface serial 4/0/0 [RouterB-Serial4/0/0] ip address 10.110.40.2 255.255.255.0 [RouterB-Serial4/0/0] link-protocol fr [RouterB-Serial4/0/0] fr interface-type dte [RouterB-Serial4/0/0] fr dlci 100 [RouterB-fr-dlci-Serial4/0/0-100] quit [RouterB-Serial4/0/0] fr map ip 10.110.40.
PAGE 361
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration fr map ip 10.110.40.2 100 ietf compression frf9 fr dlci 100 ip address 10.110.40.1 255.255.255.0 # return z Configuration file of Router B # sysname RouterB # interface Serial4/0/0 link-protocol fr fr interface-type dce fr map ip 10.110.40.1 100 ietf compression frf9 fr dlci 100 ip address 10.110.40.2 255.255.255.0 # return 8.14.
PAGE 362
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Configuration procedure Step 1 Configure Router A. # Create and configure MFR 4/0/100. system-view [RouterA] interface mfr 4/0/100 [RouterA-MFR4/0/100] ip address 10.1.1.1 255.255.255.0 [RouterA-MFR4/0/100] fr interface-type dte [RouterA-MFR4/0/100] quit # Bind Serial4/0/0 and Serial4/0/1 into MFR 4/0/100.
PAGE 363
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration # return z Configuration file of Router B # sysname RouterB # interface Serial4/0/0 link-protocol fr MFR4/0/200 # interface Serial4/0/1 link-protocol fr MFR4/0/200 # interface MFR4/0/200 fr interface-type dce fr dlci 100 ip address 10.1.1.2 255.255.255.0 # return 8.
PAGE 364
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration 8.15.2 Failure of pinging the peer after configuring the frame relay Fault description Failed to ping the peer after the frame relay switch is configured. Fault analysis The possible causes are: z The exchange of the DLCI fails. z The two ends cannot learn the host route to the peer in time.
PAGE 365
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration Troubleshooting procedure Do as follows on the routers: Step 1 Check whether there are routes to the peer by using the display ip routing-table command. If there are no routes to the peer, run the display this interface command in the interface view, and check whether the physical status and the link protocol of the interface are Up. Step 2 Check the interface status by using the display this interface command.
PAGE 366
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration interface Serial1/0/0 link-protocol fr fr dlci 17 ip address 2.2.2.67 255.255.255.0 # The configuration file on Router B is as follows: # interface Serial1/0/0 link-protocol fr fr interface-type dce # interface Serial1/0/0.1 fr dlci 17 ip address 2.2.2.65 255.255.255.0 # interface Serial1/0/0.2 fr dlci 18 ip address 3.1.1.1 255.255.255.0 # After the configuration, Router B can ping through 2.2.2.67.
PAGE 367
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration z When Router A pings 2.2.2.65, according to the map table, it chooses the PVC with DLCI as 17 to send the packet. When the packet reaches Router B, FR of Router B cannot find the mapping information with DLCI as 17. Thus, the packet is discarded. Therefore, Router A cannot ping through 2.2.2.65. z When Router B pings 2.2.2.67, it chooses the PVC with DLCI as 18 to send the packet.
PAGE 368
Nortel Secure Router 8000 Series Configuration -WAN Access 8 Frame relay configuration produce the mapping information on Router B. Therefore, Router A cannot ping through 2.2.2.65. 8-78 Nortel Networks Inc. Issue 5.
PAGE 369
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 9 HDLC configuration..................................................................................................................9-1 9.1 Introduction ...................................................................................................................................................9-2 9.2 Configuring HDLC ....................................................................................................................
PAGE 370
PAGE 371
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 9-1 Networking diagram of the HDLC functions ...................................................................................9-6 Figure 9-2 Networking diagram of the HDLC basic function............................................................................9-8 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 372
PAGE 373
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration 9 HDLC configuration About this chapter The following table shows the contents of this chapter. Section Description 9.1 Introduction This section describes concepts of HDLC. 9.2 Configuring HDLC This section describes how to configure HDLC. See: z Example for configuring HDLC z Example for configuring IP address unnumbered for HDLC 9.3 Maintaining HDLC This section describes how to maintain HDLC. 9.
PAGE 374
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration 9.1 Introduction The High-level Data Link Control (HDLC) is a bit-oriented link layer protocol featured by its transparent transmission of any kind of bit flow. The data is not required to be a character set. The protocols in standard HDLC suite operate on the synchronous serial lines. 9.2 Configuring HDLC 9.2.
PAGE 375
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears. Step 3 Run: link-protocol hdlc The command configures the interface with HDLC. ----End 9.2.3 Configuring the IP address of the interface Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears.
PAGE 376
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration z If you use static route and the IP address of the lender adopts a mask less than 32 bits, the length of the static route mask should be longer than that of the lender's IP address mask. 9.2.4 Setting the Polling Interval Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface interface-type interface-number The interface view appears.
PAGE 377
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration 9.3.1 Clearing HDLC statistics To clear the HDLC statistics, run the reset command in the user view. Action Command Clear the statistics of the interface reset counters interface [ interface-type [ interface-number ] ] 9.3.2 Debugging HDLC Debugging affects the performance of the system.After debugging, run the undo debugging all command to disable it immediately.
PAGE 378
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration 9.4.1 Example for configuring HDLC Networking requirements Connect Router A and Router B by the POS interface, and t require them to run HDLC. Figure 9-1 Networking diagram of the HDLC functions POS1/0/0 100.1.1.1/24 POS1/0/0 100.1.1.2/24 RouterA RouterB Configuration roadmap The configuration roadmap is as follows: 1. Configure the link protocol of each interface to HDLC. 2. Configure the IP address of each interface.
PAGE 379
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration PING 100.1.1.2: 56 data bytes, press CTRL_C to break Reply from 100.1.1.2: bytes=56 Sequence=1 ttl=255 time=31 ms Reply from 100.1.1.2: bytes=56 Sequence=2 ttl=255 time=31 ms Reply from 100.1.1.2: bytes=56 Sequence=3 ttl=255 time=31 ms Reply from 100.1.1.2: bytes=56 Sequence=4 ttl=255 time=31 ms Reply from 100.1.1.2: bytes=56 Sequence=5 ttl=255 time=31 ms --- 100.1.1.
PAGE 380
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration 9.4.2 Example for configuring IP address unnumbered for HDLC Networking requirements Connect Router A and Router B through the POS interface, and require them to run HDLC. POS 1/0/0 of Router A borrows the IP address of Loopback interface. The mask of Loopback interface is 32 bits. Figure 9-2 Networking diagram of the HDLC basic function Loopback1 100.1.1.1/24 POS1/0/0 100.1.1.
PAGE 381
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration Step 2 Configure Router B. system-view [Nortel] sysname RouterB [RouterB] interface pos 1/0/0 [RouterB-Pos1/0/0] link-protocol hdlc [RouterB-Pos1/0/0] ip address 100.1.1.2 24 [RouterB-Pos1/0/0] shutdown [RouterB-Pos1/0/0] undo shutdown [RouterB-Pos1/0/0] quit Step 3 Configure the static routing on Router A. [RouterA] ip route-static 100.1.1.0 24 pos 1/0/0 Step 4 Verify the configuration.
PAGE 382
Nortel Secure Router 8000 Series Configuration -WAN Access 9 HDLC configuration ip address 100.1.1.1 255.255.255.255 # ip route-static 100.1.1.0 255.255.255.0 Pos1/0/0 # return z Configuration file of Router B # sysname RouterB # interface Pos1/0/0 link-protocol hdlc ip address 100.1.1.2 255.255.255.0 # return 9-10 Nortel Networks Inc. Issue 5.
PAGE 383
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 10 Low-speed ATM configuration ...........................................................................................10-1 10.1 Introduction ...............................................................................................................................................10-3 10.1.1 ATM protocol stack..........................................................................................................................
PAGE 384
Nortel Secure Router 8000 Series Configuration -WAN Access 10.7.3 Checking the configuration............................................................................................................10-25 10.8 Creating a PVC-group and configuring the PVC service mapping .........................................................10-26 10.8.1 Establishing the configuration task ................................................................................................10-26 10.8.
PAGE 385
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 10-1 ATM protocol model.....................................................................................................................10-4 Figure 10-2 Working schematic diagram of the AIS/RDI cells ........................................................................10-7 Figure 10-3 Networking diagram for IPoA configuration ..............................................................................
PAGE 386
PAGE 387
Nortel Secure Router 8000 Series Configuration -WAN Access 10 10 Low-speed ATM configuration Low-speed ATM configuration About this chapter The following table shows the contents of this chapter. Section Description 10.1 Introduction This section describes concepts and applications of ATM. 10.2 Configuring ATM interfaces This section describes how to configure an ATM interface. 10.3 Configuring ATM-classes This section describes how to configure ATM-class. 10.
PAGE 388
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10-2 Section Description 10.13 Troubleshooting This section describes how to diagnose and remove the ATM faults. Nortel Networks Inc. Issue 5.
PAGE 389
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.1 Introduction This section covers the following topics that you need to know before you configure ATM: z ATM protocol stack z ATM interface z ATM OAM z ATM applications z references 10.1.
PAGE 390
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Figure 10-1 ATM protocol model Management plane Control plane User plane ATM adaptation layer Plane management Upper layer protocols Layer management Upper layer protocols ATM layer Physical layer The AAL is responsible for forwarding the information between the ATM Layer and the upper layer protocols. The following are the four types of AAL: AAL1, AAL2, AAL3/4 and AAL5.
PAGE 391
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration z The ATM OC-3/STM-1 interface that carries ATM service over SONET/SDH. z The single ATM E3 interface that carries ATM service over E3 line. These ATM interfaces supported by the SR8000 have the following features: z Supports Permanent Virtual Circuit (PVC). z Supports traffic shaping based on VP/VC. z Supports User-to-Network Interface (UNI) signaling.
PAGE 392
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration z F4 flow is the OAM cell flow in the Virtual Path Connect (VPC) and provides the operation management and maintenance of the VP layer. z F5 flow is the Virtual Channel Connect (VCC) and provides the operation management and maintenance of the VC layer.
PAGE 393
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration The segment point is defined in I.610. One ATM link may consist of many segments. The segment points can terminate all the segment cells but not the end cells. If the segment points detect that the link is faulty, they insert the end Alarm Indication Signal (AIS) cells into the downstream nodes and the segment RDI cells into the upstream nodes.
PAGE 394
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration NOTE The nodes 2, 3, and 4 represent the common ATM switches. SR8000 only perform the functions of nodes 1 and 3. 10.1.4 ATM applications The ATM interface of the SR8000 supports PVCs and the following four applications: IPoA, IPoEoA, PPPoA and PPPoEoA. IPoA IP over AAL5 (IPoA) carries IP packets. The AAL5 serves as the data link layer for the communications between IP hosts in the same network.
PAGE 395
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.1.5 references For more information about the ATM principle, refer to: z RFC1755: ATM Signaling Support for IP over ATM z RFC1926: An Experimental Encapsulation of IP Datagrams on Top of ATM z RFC1932: IP over ATM: A Framework Document z RFC2684: Multiprotocol Encapsulation over ATM Adaptation Layer 5 10.2 Configuring ATM interfaces 10.2.
PAGE 396
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.2.2 Configuring the parameters of ATM OC-3/STM-1 interfaces Configuring the clock mode Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number The ATM interface view appears. Step 3 Run: clock { master | slave } The command configures the clock mode. By default, the clock modes of ATM OC-3/STM-1 are slave.
PAGE 397
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration The ATM interface view appears. Step 3 Run: frame-format { sdh | sonet } The command configures the frame format. ATM interface uses SDH frame format when the optical interface is STM-1 . The ATM interface uses SONET frame format when the interface is OC-3 or . By default, SDH frame format is used. ----End Configuring the MTU Change the MTU of the interface by using the mtu command.
PAGE 398
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration The system view appears. Step 2 Run: interface atm interface-number The ATM interface view appears. Step 3 Run: Scramble The command enables the scrambling. By default, the scrambling is enabled. It is valid only for payloads and does not influence the cell header. The scrambling can effectively avoid continuous "0"s or "1"s. ----End 10.2.
PAGE 399
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Configuring the frame format Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number The ATM interface view appears. Step 3 Run frame-format { g832-adm | g751-adm | g751-plcp } The command configures the frame formatd. The ATM E3 interface supports several types of frame formats.
PAGE 400
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number The ATM interface view appears. Step 3 Run: loopback { local | payload | remote } The command configures the Loopback mode. You use the loopback function is generally specific test purposes: z local: indicates the internal loop used to detect whether the local service chip is normal.
PAGE 401
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Usage of input bandwidth: 0.00%, Usage of output bandwidth: 0.00% Input: 0 packets, 0 bytes 0 input errors, 0 CRC, 0 giants 0 pads, 0 aborts, 0 overflows Output:0 packets, 0 bytes 0 output errors, 0 underflows, 0 overflows 10.3 Configuring ATM-classes 10.3.
PAGE 402
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.3.2 Creating an ATM-class Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: atm class atm-class-name The command configures an ATM-class. After creating the ATM-class, set all the necessary parameters under its view.
PAGE 403
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 3 Run: atm-class atm-class-name The command applies the ATM-class. ----End Applying the ATM-class to a PVC Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears. Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } The command creates a PVC and the PVC view appears.
PAGE 404
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.4 Configuring the IPoA application 10.4.1 Establishing the configuration task Applicable environment To enable the ATM to carry IP packets, you need to create PVC first. You can configure the IPoA application mapping on the PVC to make AAL5 bear IP packets.
PAGE 405
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears. Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } A PVC is created and the PVC view appears. NOTE z In normal cases, the vci values 3 and 4 are reserved for special usage. Nortel recommends users to not use these two values. z The values of vpi and vci cannot be 0 at the same time.
PAGE 406
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.5 Configuring the IPoEoA application 10.5.1 Establishing the configuration task Applicable environment To make ATM bear IPoE packets, you need to create PVC first. Configure the IPoEoA application mapping on the PVC to enable the AAL5 to carry the IPoE packets.
PAGE 407
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears. Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } The command creates a PVC and the PVC view appears. NOTE z In normal cases, the vci values 3 and 4 are reserved for special usage. Nortel recommends users to not use these two values. z The values of vpi and vci cannot be 0 at the same time.
PAGE 408
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.6 Configuring the PPPoA application 10.6.1 Establishing the configuration task Applicable environment To enable the ATM to carry PPPoA packets, you need to create PVC first. Configure the PPPoA application mapping on the PVC to enable the AAL5 to carry PPPoA packets.
PAGE 409
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears. Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } The command creates a PVC and the PVC view appears. NOTE z In normal cases, the vci values 3 and 4 are reserved for special usage. Nortel recommends users to not use these two values. z The values of vpi can vci cannot be 0 at the same time.
PAGE 410
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.7 Configuring the PPPoEoA application 10.7.1 Establishing the configuration task Applicable environment To enable the ATM to carry PPPoE packets, you need to create PVC first. You can configure PPPoEoA application mapping on the PVC to enable the AAL5 to carry PPPoE packets.
PAGE 411
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears. Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } A PVC is created and the PVC view appears. NOTE z In normal cases, the vci values 3 and 4 are reserved for special usage. Nortel recommends users to not use these two values.
PAGE 412
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Action Command Check information about the PVC mapping. display atm map-info [ interface interface-type interface-number [ .subinterface ] [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] 10.8 Creating a PVC-group and configuring the PVC service mapping 10.8.1 Establishing the configuration task Applicable environment A PVC-group is a group of PVCs that carry different services.
PAGE 413
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Configuration procedures No. Procedure 1 Creating a PVC-group and configuring PVC service mapping 2 Checking the configuration 10.8.2 Creating a PVC-group and configuring PVC service mapping Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears.
PAGE 414
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.8.3 Checking the configuration Run the following commands to check the previous configuration. Action Command Check information about the PVC. display atm pvc-info [ interface interface-type interface-number [ .subinterface ] [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] Check information about the PVC-group. display atm pvc-group [ interface { interface-type interface-number [ .
PAGE 415
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration No.
PAGE 416
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration z Run the service vbr-rt output-pcr output-scr output-mbs command to configure the service type as Variable Bit Rate-Real Time (VBR-RT). ----End 10.9.3 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the configuration and status of the ATM (sub) interface. display interface atm [ interface-number [.
PAGE 417
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration No. Data 5 Interval of sending OAM F5 Loopback cells 6 Number of the OAM F5 Loopback cells received correctly and continuously before PVC becomes Up or Down 7 Interval of sending OAM F5 Loopback cells for retransmission detection before PVC becomes Up or Down Configuration Procedures To configure ATM OAM loopback, perform the following procedures. No.
PAGE 418
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Only when the OAM attributes of the connection point is applied to the transparent transmission of the ATM cells, you need to configure the OAM attributes of the connection point of the PE device as end-middle and seg-middle. In other cases, the two types of attributes such as end-middle and seg-middle are not supported.
PAGE 419
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration The system view is displayed. Step 2 Run: interface interface-type interface-number[.subinterface-number ]] The ATM interface view is displayed. Step 3 Run: oam An OAM interface view is displayed. Step 4 Run: loopback vpi/vci { end-loopback | seg-loopback [ llid llid ] } [ times ] The cell loopback function is configured. The OAM provides the loopback test function for the convenient fault location and test.
PAGE 420
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration interface interface-type interface-number[.subinterface-number ] The ATM interface view is displayed. Step 3 Run: oam The OAM interface view is displayed. z Running the insert command can cause that the status of PVC turns Down. So, be cautious to use this command.
PAGE 421
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 3 Run: pvc { pvc-name vpi/vci | vpi/vci } A PVC is created and the PVC view is displayed. Step 4 Run: oam frequency frequency [ up up-count down down-count retry-frequency retry-frequency ] The sending and retransmission detection of OAM F5 loopback cells is enabled. up-count should be smaller than that of down-count.
PAGE 422
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Number of received Segment AIS Cells : 0 Number of received RDI Cells : 0 Number of received End RDI Cells : 0 Number of received Segment RDI Cells : 0 Number of received CC cells : 0 Number of received Loopback cells : 0 Number of received My loopback cells : 0 Total number of sent OAM Cells Number of sent AIS Cells : 0 : 0 Number of sent End AIS Cells : 0 Number of sent Segment AIS Cells Number of sent R
PAGE 423
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Action Command Set the local loopback on the ATM interface. loopback { cell | local | remote } 10.11.3 Debugging ATM Debugging affects the system performance. After the debugging, run the undo debugging all command to disable it immediately. When ATM runs abnormally, run the debugging command in user view to debug the ATM interface and locate the fault.
PAGE 424
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.12.1 Example for configuring IPoA Networking requirements In Figure 10-3, connect routers A, B and C to the ATM network. All the PVCs on ATM interfaces of the three routers use IPoA application mode. Figure 10-3 Networking diagram for IPoA configuration RouterB RouterA ATM network IP:202.38.160.1/24 To B: 0/40 To C: 0/41 Interface: ATM 1/0/0 IP:202.38.160.
PAGE 425
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration [RouterA-Atm1/0/0] ip address 202.38.160.1 255.255.255.0 # Create a PVC and configure the IPoA mapping. [RouterA-Atm1/0/0] pvc to_b 0/40 [RouterA-atm-pvc-Atm1/0/0-0/40-to_b] map ip 202.38.160.2 [RouterA-atm-pvc-Atm1/0/0-0/40-to_b] quit [RouterA-Atm1/0/0] pvc to_c 0/41 [RouterA-atm-pvc-Atm1/0/0-0/41-to_c] map ip 202.38.160.3 Step 2 Configure Router B. # Enter the ATM interface and configure an IP address for it.
PAGE 426
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration # Router A can ping through Router B. [RouterA] ping 202.38.160.2 PING 202.38.160.2: 56 data bytes, press CTRL_C to break Reply from 202.38.160.2: bytes=56 Sequence=1 ttl=255 time=62 ms Reply from 202.38.160.2: bytes=56 Sequence=2 ttl=255 time=31 ms Reply from 202.38.160.2: bytes=56 Sequence=3 ttl=255 time=31 ms Reply from 202.38.160.2: bytes=56 Sequence=4 ttl=255 time=31 ms Reply from 202.38.160.
PAGE 427
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration interface Atm1/0/0 ip address 202.38.160.3 255.255.255.0 pvc to_a 0/41 map ip 202.38.160.1 pvc to_b 0/42 map ip 202.38.160.2 # return 10.12.2 Example for configuring IPoEoA Networking requirements Connect multiple hosts in the two Ethernets to the ATM network through an ADSL router. The hosts communicates with the router through the Digital Subscriber Line Access Multiplexer (DSLAM).
PAGE 428
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration z The VPI/VCI of the two PVCs connecting the router and DSLAM are 0/60 and 0/61, pointing to ADSL Router A and ADSL Router B respectively. Configuration procedure Step 1 Create a VE interface and configure an IP address for it. system-view [RouterC] interface virtual-ethernet 0/0/1 [RouterC-Virtual-Ethernet0/0/1] ip address 202.38.160.1 255.255.255.
PAGE 429
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.12.3 Example for configuring PPPoA Networking requirements As shown in Figure 10-5, you dial two hosts into ATM network through ADSL Router respectively. The hosts communicate with the router through DSLAM. The WAN port of the router and DSL interface of the ADSL router use the PPPoA application mode. You use the Password Authentication Protocol (PAP) to authenticate the access to the ADSL Router.
PAGE 430
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Configuration procedure Step 1 Configure local users for PPP authentication and create an IP local address pool on Router C. system-view [RouterC] aaa [RouterC-aaa] local-user user1 password simple pwd1 [RouterC-aaa] local-user user2 password simple pwd2 [RouterC-aaa] ip pool 1 202.38.162.1 202.38.162.
PAGE 431
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration ppp authentication-mode pap ip address 202.38.160.1 255.255.255.0 remote address pool 1 # interface Virtual-Template11 ppp authentication-mode pap ip address 202.38.161.1 255.255.255.0 remote address pool 1 # interface Atm1/0/0 pvc to_adsl_a 0/60 map ppp Virtual-Template10 pvc to_adsl_b 0/61 map ppp Virtual-Template11 # aaa local-user user2 password simple pwd2 local-user user1 password simple pwd1 ip pool 1 202.38.
PAGE 432
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Configuration roadmap The configuration roadmap is as follows: 1. Create the virtual interface template and encapsulate PPP. 2. Create the virtual Ethernet interface and encapsulate PPP. 3. Create the PVC and specify the PVC to bear PPPoE. Data preparation To complete the configuration, you need the following data: z The IP addresses of VT interfaces on the router are 202.38.160.1/24 and 202.38.161.
PAGE 433
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration [RouterC-Atm1/0/0] pvc to_adsl_a 0/60 [RouterC-atm-pvc-Atm1/0/0-0/60-to_adsl_a] map bridge virtual-ethernet 1/1/0 [RouterC-atm-pvc-Atm1/0/0-0/60-to_adsl_a] quit [RouterC-Atm1/0/0] pvc to_adsl_b 0/61 [RouterC-atm-pvc-Atm1/0/0-0/61-to_adsl_b] map bridge virtual-ethernet 1/1/1 Step 2 Verify the configuration. # Check the PVC status information on Router C.
PAGE 434
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.
PAGE 435
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration z When IPoA is used, the IP protocol address mapping is not configured correctly. z When PPPoA is used, the IP addresses at two points are of different network segments or the verification is not configured consistent. z The types of ATM interface fibers of two sides are not the same.
PAGE 436
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration 10.13.4 Pinging the peer fails though PVC is UP Fault description The PVC is UP, but after configuring the IPoA application, the peer cannot ping through. Fault analysis The possible causes are: z The application modes configured at both ends are different. z The protocol types encapsulated at both ends are different. z The values of VPI/VCI configured on the both ends are not consistent.
PAGE 437
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Step 2 Check the ATM interfaces of the two terminals to determine whether both are multimode fiber interface or single mode fiber interface. If their types are different, replace one of them to make both of them same. When directly connected, a multimode fiber interface and a single mode fiber interface may interconnect in most cases. The above mentioned fault might occur in certain rare cases. ----End 10.13.
PAGE 438
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration pvc 100/102 pvc 100/103 pvc 100/104 pvc 100/105 pvc 100/106 ip-precedence 255/2047 7 ip-precedence 100/100 6 ip-precedence 100/101 5 ip-precedence 100/102 4 ip-precedence 100/103 3 ip-precedence 100/104 2 ip-precedence 100/105 1 ip-precedence 100/106 default # Return z The configuration of the ATM1/0/0 of Router B # interface Atm1/0/0 ip address 20.2.100.2 255.255.255.
PAGE 439
Nortel Secure Router 8000 Series Configuration -WAN Access 10 Low-speed ATM configuration Fault analysis After the PVC of Router A is faulty or deleted, the PVC that connects Router B does not sense the status change of the remote PVC immediately, and the PVC of Router B still works normally but lose the packets. The OAM F5 Loopback function is a re-transmission detection mechanism, through which the local PVC can sense the status change of the remote PVC immediately.
PAGE 440
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 11 High-speed ATM configuration..........................................................................................11-1 11.1 Introduction ............................................................................................................................................... 11-2 11.1.1 ATM protocol stack ..........................................................................................................................
PAGE 441
PAGE 442
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 11-1 ATM protocol model ..................................................................................................................... 11-3 Figure 11-2 Networking diagram for IPoA configuration .............................................................................. 11-15 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 443
PAGE 444
Nortel Secure Router 8000 Series Configuration -WAN Access 11 11 High-speed ATM configuration High-speed ATM configuration About this chapter The following table shows the contents of this chapter. Section Description 11.1 Introduction This section describes concepts and applications of ATM. 11.2 Configuring ATM interfaces This section describes how to configure an ATM interface. 11.3 Configuring the IPoA application This section describes how to configure IPoA. 11.
PAGE 445
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration 11.1 Introduction z Only the Secure Router 8012 routers support the high-speed ATM interface card. z The command lines of the high-speed ATM interface card are different from those of the low-speed ATM interface card. Therefore, when configuring the ATM interfaces, you must identify the type of the ATM interface.
PAGE 446
Nortel Secure Router 8000 Series Configuration -WAN Access z 11 High-speed ATM configuration Plane Management is responsible for the system management and the communication between different planes. The relationships among layers and planes are shown in Figure 11-1.
PAGE 447
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration When you configure the sub-interface on the interface, you make the interval between running the shutdown command and running the undo shutdown command at least 15 seconds.
PAGE 448
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration When using an ATM interface, you need to configure its attributes. Preconfiguration tasks None. Data preparation To configure an ATM interface, you need the following data. No. Data 1 Number of the ATM interface on the router Configuration procedures No.
PAGE 449
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration z Slave mode indicates that the interface uses the line clock signals. When you use the ATM interface as a DTE device, use the slave clock mode. When you use the ATM interface as a DCE device, use the master clock mode. When you directly connect the ATM interfaces of two routers by optical fiber or Wavelength Division Multiplexing (WDM) devices, do the following.
PAGE 450
Nortel Secure Router 8000 Series Configuration -WAN Access z 11 High-speed ATM configuration To configure C2, J1 or S1, run: flag { c2 c2-value | j1 [ sonet ] j1-value | s1 s1-value } The command configures the overhead byte i. c2 c2-value: The signal label byte C2 belongs to the Higher-Order Path Overhead byte. You use it to indicate the multiplexing structure of the Virtual Container (VC) and the feature of the information payload. j0 j0-value specifies the regenerator trace byte.
PAGE 451
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration 11.2.6 Configuring the loopback mode Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number The ATM interface view appears. Step 3 Run: loopback { local | remote } The command configures loopback mode.
PAGE 452
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration PartNumber Mode : HFBR-57E0P : MultiMode LaserwaveLen : OC3-MM-SHORT REACH Length for 50/125um : 2000m Length for 62.5/125um : 2000m Physical layer is Packet over SDH, Scramble enabled, Clock Slave, Loopback not set Traffic statistics: Last 300 seconds input rate 16900276 bytes/sec, 3377 packets/sec Last 300 seconds output rate 0 bytes/sec, 0 packets/sec Usage of input bandwidth:87.
PAGE 453
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration Configuration procedures No. Procedure 1 Configuring IPoA mapping on a PVC 2 Checking the configuration 11.3.2 Configuring IPoA mapping on a PVC Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number[.subinterface ] The ATM interface or the sub-interface view appears.
PAGE 454
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration On the same ATM (sub) interface, you can configure only a single PVC with InARP. ----End 11.3.3 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the configuration and status of the ATM interface or sub-interface. display interface atm [ interface-number [ .
PAGE 455
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration No. Data 4 cbr: Peak rate of outputting ATM cells, variation range of cell delays 5 vbr: Peak rate of outputting ATM cells, maintainable rate and the maximum burst size 6 vbr-rt: Peak rate of outputting ATM cells, maintainable rate and the maximum burst size Configuration procedures No.
PAGE 456
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration ----End 11.4.3 Configuring the service type of a PVP Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface atm interface-number.subinterface The ATM sub-interface view appears. Step 3 Run: pvp vpi The command creates the PVP and the PVP view appears. You can only configure the PVP on the ATM sub interface view.
PAGE 457
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration 11.5 Maintaining ATM Debugging affects the system performance. After the debugging, run the undo debugging all command to disable it immediately. When ATM runs abnormally, run the debugging command in user view to debug the ATM interface and locate the fault.
PAGE 458
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration Figure 11-2 Networking diagram for IPoA configuration RouterB ATM network RouterA IP:202.38.160.1/24 To B: 0/40 To C: 0/41 Interface: ATM 1/0/0 IP:202.38.160.2/24 To A: 0/40 To C: 0/42 Interface: ATM 1/0/0 RouterC IP:202.38.160.3/24 To A: 0/41 To B: 0/42 Interface: ATM 1/0/0 Configuration roadmap The configuration roadmap is as follows: 1. Create the PVC of ATM interfaces on each router. 2.
PAGE 459
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration [RouterA-atm-pvc-Atm1/0/0-0/41-to_c] map ip 202.38.160.3 Step 2 Configure Router B. # Enter the ATM interface, and configure an IP address for it. system-view [RouterB] interface atm 1/0/0 [RouterB-Atm1/0/0] ip address 202.38.160.2 255.255.255.0 # Establish PVC to bear IP. [RouterB-Atm1/0/0] pvc to_a 0/40 [RouterB-atm-pvc-Atm1/0/0-0/40-to_a] map ip 202.38.160.
PAGE 460
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration Reply from 202.38.160.2: bytes=56 Sequence=3 ttl=255 time=31 ms Reply from 202.38.160.2: bytes=56 Sequence=4 ttl=255 time=31 ms Reply from 202.38.160.2: bytes=56 Sequence=5 ttl=255 time=31 ms --- 202.38.160.2 ping statistics --5 packet(s) transmitted 5 packet(s) received 0.
PAGE 461
Nortel Secure Router 8000 Series Configuration -WAN Access 11 High-speed ATM configuration # return 11-18 Nortel Networks Inc. Issue 5.
PAGE 462
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 12 PPPoE configuration..............................................................................................................12-1 12.1 Introduction ...............................................................................................................................................12-2 12.1.1 Concept of PPPoE.....................................................................................................................
PAGE 463
PAGE 464
Nortel Secure Router 8000 Series Configuration -WAN Access Figures Figure 12-1 PPPoE networking diagram ..........................................................................................................12-8 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 465
PAGE 466
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration 12 PPPoE configuration About this chapter The following table shows the contents of this chapter. Section Description 12.1 Introduction This section describes concepts and fundamentals of PPPoE. 12.2 Configuring basic PPPoE functions This section describes how to configure basic PPPoE functions. See Configuring basic PPPoE functions. 12.
PAGE 467
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration 12.1 Introduction On the SR8000, only the Ethernet interface of the low-speed card supports the PPPoE feature. This section covers the following topics that you need to know before you configure PPPoE: z Concept of PPPoE z Phase of discovery z Phase of PPP session 12.1.1 Concept of PPPoE Point-to-Point Protocol over Ethernet (PPPoE) is widely used in fields such as residential area networking.
PAGE 468
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration packet that is to be sent back to the host. If there are no errors, the server and the host enter the Phase of PPP Session. 12.1.3 Phase of PPP session After the host enters the Phase of PPP Session, the PPP packets transmit to the peer as the payload of PPPoE frames encapsulated in Ethernet frames. You make the session ID to be the ID determined at the Phase of Discovery, while the MAC address is that of the peer.
PAGE 469
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration No. Procedure 2 Configuring the PPPoE service name at the server side 3 Checking the configuration 12.2.2 Enabling PPPoE Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: interface { ethernet | gigabitethernet } interface-number The Ethernet interface view appears. Step 3 Run: pppoe-server bind virtual-template number The command binds the interface with the VT. ----End 12.
PAGE 470
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration If the shutdown and the undo shutdown commands or restart command are run after you configure the PPPoE service name, the users who have accessed the previous configurations are re-authenticated. 12.2.4 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the information about all PPPoE sessions.
PAGE 471
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration No. Data 3 The maximum number of PPPoE sessions that can be set up the on the local system Configuration procedures No.
PAGE 472
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration ----End 12.3.4 Setting the maximum number of sessions available on a peer MAC address Do as follows on the routers: Step 1 Run: system-view The system view appears. Step 2 Run: pppoe-server max-sessions remote-mac number The command configures the maximum number of sessions that can be set up on a peer MAC address. ----End 12.3.
PAGE 473
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration 12.4 Maintaining PPPoE After confirming the statistics about the PPPoE session to be cleared, run the following reset command. Action Command Clear the setup speed statistics of PPPoE sessions. reset pppoe-server session statistic interface interface-type interface-number 12.5 Configuration examples Networking requirements The host uses PPPoE to access the Internet through the Router.
PAGE 474
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration Data preparation To configure PPPoE, you need the following data: z The IP address of the virtual interface template is 10.111.10.1/24. z The PPPoE user name and the password are NE and nortel. z The IP address realm is from 10.111.10.2 to 10.111.10.10. Configuration procedure Step 1 Create and configure a virtual template.
PAGE 475
Nortel Secure Router 8000 Series Configuration -WAN Access 12 PPPoE configuration pppoe-server bind Virtual-Template 1 # interface Virtual-Template1 ppp authentication-mode chap ip address 10.111.10.1 255.255.255.0 remote address pool 1 # aaa local-user ne password simple nortel ip pool 1 10.111.10.2 10.111.10.10 # return 12.6 Troubleshooting Fault description The PC cannot access the router through the PPPoE client software.
PAGE 476
Nortel Secure Router 8000 Series Configuration -WAN Access Contents 13 Medium-MIB configuration ................................................................................................13-1 13.1 Introduction ...............................................................................................................................................13-2 13.2 Configuring attributes of the medium-MIB ..............................................................................................13-2 13.
PAGE 477
PAGE 478
Nortel Secure Router 8000 Series Configuration -WAN Access 13 13 Medium-MIB configuration Medium-MIB configuration About this chapter The following table shows the contents of this chapter. Section Description 13.1 Introduction This section describes the basic concepts of MIB. 13.2 Configuring attributes of the medium-MIB This section describes how to configure the MIB function to manage the router. Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 479
Nortel Secure Router 8000 Series Configuration -WAN Access 13 Medium-MIB configuration 13.1 Introduction The standard MIB includes the following: z The interface management MIB, including the Ethernet interface, the POS interface, the ATM interface, the serial interface, the T1/E1 interface, the T3/E3 interface, the FR interface, the X.
PAGE 480
Nortel Secure Router 8000 Series Configuration -WAN Access 13 Medium-MIB configuration Data preparation None. Configuration procedures No. Procedure 1 Enabling the MIB collecting of the interface 2 Enabling the router to send the trap packet 13.2.2 Enabling the MIB collecting of the interface Do as follows on the routers: Step 1 Run: system-view The system view appears.
PAGE 481
Nortel Secure Router 8000 Series Configuration -WAN Access 13 Medium-MIB configuration The command enables the router to send the trap packet. ----End 13-4 Nortel Networks Inc. Issue 5.
PAGE 482
Nortel Secure Router 8000 Series Configuration -WAN Access Contents Index ................................................................................................................................................ i-1 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 483
PAGE 484
Nortel Secure Router 8000 Series Configuration -WAN Access Index A D assigning a X.21 address. see setting a X.
PAGE 485
Nortel Secure Router 8000 Series Configuration -WAN Access HSSI interface, 2-11 synchronous serial interface, 2-8 baud rate, 2-5 DCD signal detection, 2-6 P T POS interface check word length of CRC, 4-13 frame format, 4-12 PPP compression, 6-20 PPPoE enabling, 12-4 service name, 12-4 PPPoE configuration parameter, 12-5 PVC automatic switching mode, 8-28 troubleshooting ATM, 10-41 S setting a X.
PAGE 486
Nortel Secure Router 8000 Series Configuration -WAN Access Copyright © 2009 Nortel Networks All Rights Reserved. Printed in Canada, India, and the United States of America Release: 5.3 Publication: NN46240-503 Document Revision: 01.01 Document status: Standard Document release date: 30 March 2009 To provide feedback or to report a problem in this document, go to www.nortel.com/documentfeedback. www.nortel.