Lab MEN - Bai Thuc Hanh

Chuong trnh boi dung kin thuc v cng ngh MEN
1

HOC VIEN BUU CHNH VIN THNG VIET NAM
HOC VIEN BUU CHNH VIN THNG
TRUNG TM CNG NGHJ THNG TIN

HUNG DN THUC HNH
CNG NGHE MEN

H Ni, thng 05 nm 2009


2

LI NI DAU
Cng voi xu huong pht trin cng ngh v mang vin thng trn th gioi, Tap don
dang trin khai manh me mang th h sau ca o mang li v o phan truy nhap. Tai cc
tinh, Tap don d c k hoach trin khai mang Metro dua trn cng ngh Ethernet d
dp ung yu cau v truyn tai bng rong. Cng ngh mang Metro l cng ngh moi v
c mot so van d van cn dang trong qu trnh chuan ho. Do vay doi ng kv su v
cn bo kv thuat vin thng can phai duoc boi dung, cap nhat kin thuc v cng ngh
moi ny, c nhu vay ho moi du kha nng v trnh do d van hnh, khai thc, quan l
v trin khai cc dich vu mot cch hiu qua.
Chuong trnh "Bi dung kin thc v cng ngh MEN" cua Tap don duoc xy
dung voi muc dch cung cap kin thuc v kv nng co ban lin quan toi mang Metro
Ethernet cho cc cn bo se truc tip trin khai, quan l v khai thc nhm dp ung yu
cau v vic trin khai v quan l mang Metro Ethernet trong thoi gian sp toi.
Joi diu kin co so ha tang hin tai, chi c thit bi mang Metro Ethernet cua Cisco, do
d ti liu ny se trnh by cc bi thuc hnh trn thit bi cua Cisco.
Cuon ti liu thuc hnh v mang MEN bao gom 7 bi:
Bi 1: Cau hnh mang co ban
Bi 2 : Cau hnh MPLS Core
Bi 3 : Cau hnh dich vu ERS
Bi 4 : Cau hnh dich vu EWS
Bi 5 : Cau hnh dich vu EMS
Bi 6 : Cau hnh dich vu ERMS
Bi 7 : Bao mat cho cc thit bi mang
Ti liu duoc hon thnh trong thoi gian ngn nn khng trnh khoi thiu st. Tc gia
rat mong nhan duoc kin dng gp kin cua qu doc gia v cc dong nghip.

TRUNG TM CNG NGHE THNG TIN


3
MJC LJC

LI NI DAU............................................................................................................ 2
MJC LJC .................................................................................................................. 3
DANH SCH HNH V............................................................................................ 6
DANH SCH BANG ................................................................................................. 7
BI 1: CU HNH MANG CO BAN .................................................................. 8
1.1. Muc dch ....................................................................................................... 8
1.2. Danh sch thit bi v cu hnh mang.............................................................. 8
1.2.1. Danh sch thit bi ........................................................................................... 8
1.2.2. Cu hnh mang ................................................................................................ 9
1.3. Yu cu bi thuc hnh ................................................................................... 9
1.4. Cc buoc thuc hnh ..................................................................................... 10
1.4.1. Phn vng HNI ............................................................................................. 10
1.4.2. Phn vng DNG ............................................................................................ 13
1.4.3. Phn vng HCM ........................................................................................... 16
BI 3: CU HNH MPLS CORE ..................................................................... 20
3.1. Muc dch ..................................................................................................... 20
3.2. Danh sch thit bi v cu hnh mang............................................................ 20
3.2.1. Danh sch thit bi ......................................................................................... 20
3.2.2. Cu hnh mang .............................................................................................. 21
3.3. Yu cu bi thuc hnh ................................................................................. 21
3.4. Cc buoc thuc hnh ..................................................................................... 22
3.4.1. Phn vng HNI ............................................................................................. 23
3.4.2. Phn vng DNG ............................................................................................ 34
3.4.3. Phn vng HCM ........................................................................................... 46
BI 4: CU HNH CHO DJCH VJ ERS ......................................................... 57
4.1. Muc dch ..................................................................................................... 57
4.2.1. Danh sch thit bi: ........................................................................................ 57
4.2.2. Cu hnh mang: ............................................................................................. 58
4.3. Yu cu bi thuc hnh ................................................................................. 58
4.4. Cc buoc thuc hnh ..................................................................................... 60


4
4.4.1. Phn vng HNI ............................................................................................. 61
4.4.2. Cu hnh cho phn vng DNG ...................................................................... 68
4.4.3. . Cu hnh cho phn vng HCM .................................................................... 75
BI 5: CU HNH DJCH VJ EWS.................................................................. 82
5.1. Muc dch ..................................................................................................... 82
5.2.1. Danh sch thit bi ......................................................................................... 82
5.2.2. Cu hnh mang .............................................................................................. 83
5.3. Yu cu bi thuc hnh ................................................................................. 83
5.4. Cc buoc thuc hnh ..................................................................................... 85
5.4.1. Phn vng HNI ............................................................................................. 86
5.4.2. Phn vng DNG ............................................................................................ 91
5.4.3. Phn vng HCM ........................................................................................... 97
BI 6: CU HNH DJCH VJ EMS ................................................................ 102
6.1. Muc dch ................................................................................................... 102
6.2. Danh sch thit bi v cu hnh mang.......................................................... 102
6.2.1. Danh sch thit bi ....................................................................................... 102
6.2.2. Cu hnh mang ............................................................................................ 103
6.3. Yu cu bi thuc hnh ............................................................................... 103
6.4. Cc buoc thuc hnh ................................................................................... 104
6.4.1. Phn vng HNI ........................................................................................... 105
6.4.2. Phn vng DNG .......................................................................................... 110
6.4.3. Phn vng HCM ......................................................................................... 114
BI 7: CU HNH DJCH VJ ERMS ............................................................. 119
7.1. Muc dch ................................................................................................... 119
7.2.1. Danh sch thit bi ....................................................................................... 119
7.2.2. Cu hnh mang ............................................................................................ 120
7.3. Yu cu bi thuc hnh ............................................................................... 120
7.4. Cc buoc thuc hnh ................................................................................... 122
7.4.1. Phn vng HNI ........................................................................................... 123
7.4.2. Phn vng DNG .......................................................................................... 128
7.4.3. Phn vng HCM ......................................................................................... 134
BI 8: BAO MAT CHO CC THIET BJ MANG ......................................... 140


5
8.1. Muc dch ................................................................................................... 140
8.2.1. Danh sch thit bi ....................................................................................... 140
8.2.2. Cu hnh mang ............................................................................................ 141
8.3. Yu cu bi thuc hnh ............................................................................... 141
8.4. Cc buoc thuc hin .................................................................................... 143
8.4.1. Bao mt chung cho cc thit bi .................................................................... 143
8.4.2. Bao mt cho 7604 ....................................................................................... 147
8.4.3. Bao mt cho 3750 ....................................................................................... 149
THUAT NG VIET TAT ..................................................................................... 154
PHJ LJC ............................................................................................................... 156
Phu luc A: Cc lnh lin quan toi cu hnh .......................................................... 156
Phu luc B: Tham khao cu hnh dich vu L3 VPN trn nn MPLS ........................ 159
1. ERS L3 ........................................................................................................... 159
2. EWS L3 .......................................................................................................... 167
3. EMS L3 .......................................................................................................... 168
4. ERMS L3 ....................................................................................................... 169


6
DANH SCH HNH V

Hnh 1.1: So d mang co ban ....................................................................................... 9
Hnh 2.1: So d mang MPLS Core............................................................................. 21
Hnh 3.1: So d mang cu hnh dich vu ERS ............................................................. 58
Hnh 4.1: So d mang cu hnh dich vu EWS ............................................................ 83
Hnh 5.1: So d mang cu hnh dich vu EMS........................................................... 103
Hnh 6.1: So d mang cu hnh dich vu ERMS ........................................................ 120
Hnh 7.1: So d mang cu hnh bao mt ................................................................... 141


7
DANH SCH BANG

Bang 1.1: Danh sch thit bi cu hnh mang co ban ..................................................... 8
Bang 1.2: Cc tham s cho cu hnh mang co ban...................................................... 10
Bang 2.1: Danh sch thit bi mang MPLS Core ......................................................... 20
Bang 2.2: Cc tham s cu hnh mang MPLS Core .................................................... 22
Bang 3.1: Danh sch thit bi mang cu hnh dich vu ERS .......................................... 57
Bang 3.2: Cc tham s cu hnh dich vu ERS ............................................................ 60
Bang 4.1: Danh sch thit bi mang cu hnh dich vu EWS ......................................... 82
Bang 4.2: Cc tham s cu hnh dich vu EWS ........................................................... 85
Bang 5.1: Danh sch thit bi mang cu hnh dich vu EMS ....................................... 102
Bang 5.2: Cc tham s cu hnh dich vu EMS.......................................................... 104
Bang 6.1: Danh sch thit bi mang cu hnh dich vu ERMS .................................... 119
Bang 6.2: Cc tham s cu hnh dich vu ERMS ....................................................... 122
Bang 7.1: Danh sch thit bi mang cu hnh bao mt ............................................... 140
Bang 7.2: Cc tham s cu hnh dich vu ERMS dng trong cu hnh bao mt .......... 143
Thc hnh cng ngh MEN


8
BI 1: CU HNH MANG CO BAN

1.1. Mc dch
Bi thuc hnh cung cp kin thuc v cu hnh co ban cho thit bi mang cua
Cisco, kin thuc v VLAN, cc loai VLAN. Sau bi thuc hnh hoc vin c th nm
vung:
- Cc tham s co ban khi cu hnh truy nhp cng Router hoc Switch.
- Khi nim VLAN, p dung vic khoi tao VLAN v cu hnh VLAN o ch d
Trunk, Access.
- Kim tra cu hnh co ban v thuc hin kt ni cc my tnh trn cng VLAN thng
qua dia chi IP.
1.2. Danh sch thit b| v cu hnh mng
1.2.1. Danh sch thit b|

STT Vai tr
thit b|
Tn thit b| Loi thit b| Giao din su dng
1.
NPE
7600HNI Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 4/1, GE 4/2
2. 7600DNG GE 4/1, GE 4/2
3. 7600HCM GE 4/1, GE 4/2
4.
UPE
3750HNI Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1

Bang 1.1: Danh sch thit bi cau hnh mang co ban
Thc hnh cng ngh MEN


9
1.2.2. Cu hnh mng

Hnh 1.1: So do mang co ban
1.3. Yu cu bi thc hnh
- Chun bi cc trang thit bi v kt ni mang nhu hnh 1.1
- Cu hnh thit lp mang co ban gm 3 site, mi site gm b chuyn mach 3750 v
b dinh tuyn 7604 cua Cisco voi cc tham s nhu bang 1.2
- Kim tra cu hnh v thu ping trn cc VLAN

Phn vng Thit b| Giao din
D|a chi IP
/VLAN
Subnet Mask/
Thng tin khc
HNI
7600HNI
DCN VLAN 100 10.0.0.1 255.255.255.0
GE 4/2 100 Access port
GE 4/1 100 Trunk
3750HNI
DCN VLAN 100 10.0.0.11 255.255.255.0
GE1/1/1 100 Trunk
FE 1/0/1 100 Access port
DNG
7600DNG
DCN VLAN 100 10.0.0.2 255.255.255.0
GE 4/1 100 Trunk
3750DNG
DCN VLAN 100 10.0.0.12 255.255.255.0
GE1/1/1 100 Trunk
Thc hnh cng ngh MEN


10
HCM
7600HCM
DCN VLAN 100 10.0.0.3 255.255.255.0
GE 4/1 100 Trunk
3750HCM
DCN VLAN 100 10.0.0.13 255.255.255.0
GE1/1/1 100 Trunk
Bang 1.2: Cc tham so cho cau hnh mang co ban

1.4. Cc buc thc hnh
M ta tng qut:
- Dt tn cho cc thit bi.
- Cu hnh cc tham s cho cng console, telnet tt ca cc thit bi.
- Cu hnh mt khu v nguoi dng trn cc thit bi.
- Cu hnh VTP o ch d transparent cho cc thit bi.
- Tao cc L2 VLAN.
- Tao SVI.
- Khoi tao cc giao din 802.1q trunk giua 3750 v 7600.
- Khoi tao cc giao din 802.1q access trn cc cng truy nhp cua 3750.
- Ping giua cc giao din SVI cua 3750 v 7600.
M ta chi tit:
1.4.1. Phn vng HNI
Phn ny minh ha vi 7600HNI, hc vin thc hin tuong t vi 3750HNI.
Buc 1: Dt tn cho cc thit bi 7600HNI, 3750HNI
Router(config)#hostname 7600HNI

Buc 2: Tt cc Domain Name Lookup
7600HNI(config)#no ip domain lookup

Thc hnh cng ngh MEN


11
Buc 3: Cu hnh cc tham s cng console
7600HNI(config)#line console 0
7600HNI(config-line)#logging synchronous
7600HNI(config-line)#exec-timeout 0 0
7600HNI(config-line)#password mane

Buc 4: Dt mt khu cho cc duong telnet.
7600HNI(config)#line vty 0 15
7600HNI(config-line)#password mane
7600HNI(config-line)#login

Buc 5: Cu hnh nguoi dng v mt khu voi lnh sau:
7600HNI(config)#username mane password mane
7600HNI(config)#enable secret mane

Buc 6: Kim tra trang thi VTP trn cc thit bi, cu hnh VTP o ch d
transparent:
7600HNI#show vtp status
7600HNI#config terminal
7600HNI(config)#vtp mode transparent
7600HNI(config)#end

Buc 7: Tao cc L2 VLAN cho quan l. Cc VLAN duoc m ta trong bang 1.2.
7600HNI(config)#vlan 100
7600HNI(config-vlan)#name DCN-VLAN
7600HNI(config-vlan)#exit

Buc 8: Tao SVI d quan l VLAN v gn IP theo m ta o bang 1.2.
Voi mi SVI duoc tao ra, cn gn dia chi IP cho SVI d.
7600HNI(config)#interface vlan ___
7600HNI(config-if)#ip address ___ ___
7600HNI(config-if)#no shutdown
Thc hnh cng ngh MEN


12

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750HNI v
7600HNI cho php luu luong VLAN 100 di qua.
7600:
7600HNI#configure terminal
7600HNI(config)#interface gigabitEthernet 4/1
7600HNI(config-if)#switchport
7600HNI(config-if)#switchport trunk encapsulation dot1q
7600HNI(config-if)#switchport mode trunk
7600HNI(config-if)#switchport trunk allowed vlan 100

3750:
3750HNI (config)#interface gigabitEthernet 1/1/1
3750HNI (config-if)#switchport
3750HNI (config-if)#switchport mode trunk
3750HNI (config-if)#switchport trunk allowed vlan 100
3750HNI (config-if)#no shutdown

Buc 10: Cu hnh access port cho cc giao din cua 7600HNI v 3750HNI:

7600:
7600HNI(config-if)#switchport mode access
7600HNI(config-if)#switchport access vlan 100

3750:
Thc hnh cng ngh MEN


13
3750HNI(config)#interface fastEthernet 1/0/1
3750HNI (config-if)#switchport
3750HNI (config-if)#switchport mode access
3750HNI (config-if)#switchport access vlan 100
3750HNI (config-if)#no shutdown

Buc 11: Kim tra cu hnh

Show run
Show ip interface brief
Show vtp status
Show vlan
Show interface trunk
Kim tra rng ban c th thuc hin lnh PING thnh cng tu 7600HNI dn
3750HNI v nguoc lai thng qua dia chi IP cua VLAN.

1.4.2. Phn vng DNG
Phn ny minh ha vi 7600DNG, hc vin thc hin tuong t vi 3750DNG.
Buc 1: Dt tn cho cc thit bi 7600DNG, 3750DNG
Router(config)#hostname 7600DNG

7600DNG(config)#no ip domain lookup

7600DNG(config)#line console 0
7600DNG(config-line)#logging synchronous
7600DNG(config-line)#exec-timeout 0 0
7600DNG(config-line)#password mane

7600DNG(config)#line vty 0 15
Thc hnh cng ngh MEN


14
7600DNG(config-line)#password mane
7600DNG(config-line)#login

7600DNG(config)#username mane password mane
7600DNG(config)#enable secret mane

transparent:
7600DNG#show vtp status
7600DNG#config terminal
7600DNG(config)#vtp mode transparent
7600DNG(config)#end

7600DNG(config)#vlan 100
7600DNG(config-vlan)#name DCN-VLAN
7600DNG(config-vlan)#exit

7600DNG(config)#interface vlan ___
7600DNG(config-if)#ip address ___ ___
7600DNG(config-if)#no shutdown

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750DNG v
7600DNG cho php luu luong VLAN 100 di qua

7600:
7600DNG#configure terminal
7600DNG(config)#interface gigabitEthernet 4/1
7600DNG(config-if)#switchport
Thc hnh cng ngh MEN


15
7600DNG(config-if)#switchport trunk encapsulation dot1q
7600DNG(config-if)#switchport mode trunk
7600DNG(config-if)#switchport trunk allowed vlan 100

3750:
3750DNG (config)#interface gigabitEthernet 1/1/1
3750DNG (config-if)#switchport
3750DNG (config-if)#switchport mode trunk
3750DNG (config-if)#switchport trunk allowed vlan 100
3750DNG (config-if)#no shutdown

Buc 10:
Cu hnh access port cho cc giao din cua 3750DNG v 7600DNG:
7600:
7600DNG(config-if)#switchport mode access
7600DNG(config-if)#switchport access vlan 100

3750:
3750DNG(config)#interface fastEthernet 1/0/1
3750DNG (config-if)#switchport
3750DNG (config-if)#switchport mode access
3750DNG (config-if)#switchport access vlan 100
3750DNG (config-if)#no shutdown

Thc hnh cng ngh MEN


16
Show run
Show vtp status
Show vlan
Kim tra rng ban c th thuc hin lnh PING thnh cng tu 7600DNG dn
3750DNG v nguoc lai thng qua dia chi IP cua VLAN.

1.4.3. Phn vng HCM
Phn ny minh ha vi 7600HCM, hc vin thc hin tuong t vi 3750HCM.
Buc 1: Dt tn cho cc thit bi 7600HCM, 3750HCM
Router(config)#hostname 7600HCM

7600HCM(config)#no ip domain lookup

7600HCM(config)#line console 0
7600HCM(config-line)#logging synchronous
7600HCM(config-line)#exec-timeout 0 0
7600HCM(config-line)#password mane

7600HCM(config)#line vty 0 15
7600HCM(config-line)#password mane
7600HCM(config-line)#login

7600HCM(config)#username mane password mane
7600HCM(config)#enable secret mane

Thc hnh cng ngh MEN


17
transparent:
7600HCM#show vtp status
7600HCM#config terminal
7600HCM(config)#vtp mode transparent
7600HCM(config)#end

7600HCM(config)#vlan 100
7600HCM(config-vlan)#name DCN-VLAN
7600HCM(config-vlan)#exit

7600HCM(config)#interface vlan ___
7600HCM(config-if)#ip address ___ ___
7600HCM(config-if)#no shutdown

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750HCM v
7600HCM cho php luu luong VLAN 100 di qua

7600:
7600HCM#configure terminal
7600HCM(config)#interface gigabitEthernet 4/1
7600HCM(config-if)#switchport
7600HCM(config-if)#switchport trunk encapsulation dot1q
7600HCM(config-if)#switchport mode trunk
7600HCM(config-if)#switchport trunk allowed vlan 100

Thc hnh cng ngh MEN


18
3750:
3750HCM (config)#interface gigabitEthernet 1/1/1
3750HCM (config-if)#switchport
3750HCM (config-if)#switchport mode trunk
3750HCM (config-if)#switchport trunk allowed vlan 100
3750HCM (config-if)#no shutdown

Buc 10:
Cu hnh access port cho cc giao din cua 3750HCM v 7600HCM:

7600:
7600HCM(config-if)#switchport mode access
7600HCM(config-if)#switchport access vlan 100

3750:
3750HCM(config)#interface fastEthernet 1/0/1
3750HCM (config-if)#switchport
3750HCM (config-if)#switchport mode access
3750HCM (config-if)#switchport access vlan 100
3750HCM (config-if)#no shutdown

Show run
Show vtp status
Show vlan
Thc hnh cng ngh MEN


19
Kim tra rng c th thuc hin lnh PING thnh cng tu 7600HCM dn 3750HCM
v nguoc lai thng qua dia chi IP cua VLAN.

Thc hnh cng ngh MEN


20
BI 2: CU HNH MPLS CORE

2.1. Mc dch
Bi thuc hnh cung cp cho hoc vin kin thuc co ban v hoat dng mang trn
nn tang cng ngh MPLS. Kt thc bi thuc hnh, hoc vin c th nm vung:
- Cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh MPLS.
- Cc tham s dc bit v MTU, LDP.
- Hoat dng gn nhn, hon di nhn v chuyn tip gi MPLS.
- Kim tra v khc phuc li cu hnh MPLS.

STT
Vai tr
thit b|
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M),
Version 12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1

Bang 2.1: Danh sch thit bi mang MPLS Core
Thc hnh cng ngh MEN


21
2.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 2.1: So do mang MPLS Core

- Chun bi trang thit bi v kt ni mang nhu hnh 2.1.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF.
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, mo rng min
MPLS xung toi thit bi 3750 voi cc tham s nhu bang 2.2.
- Kim tra cu hnh d thit lp.

Phn vng Thit b| Giao din D|a chi IP /VLAN
Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17
255.255.255.252
MTU =1546
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
Thc hnh cng ngh MEN


22
DNG

7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21
255.255.255.252
MTU =1546
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25
255.255.255.252
MTU =1546
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252

Bang 2.2: Cc tham so cau hnh mang MPLS Core

2.4. Cc buc thc hnh
M ta tng qut:
- Thuc hin cu hnh mang co ban.
- Cu hnh mang IP su dung dia chi IP nhu trong bang thng s cu hnh, giao
thuc dinh tuyn OSPF voi Process-id =1, Passive interface l cng loopback
cua thit bi.
- Kim tra dinh tuyn xem d hoc dng duoc ht cc mang chua? Ping v
traceroute giua cc thit bi?
- Cu hnh MPLS:
a. Kch hoat chuc nng dinh tuyn trn cc thit bi 3750
b. Kch hoat chuc nng IP CEF cho cc thit bi min MPLS
c. Kch hoat giao thuc LDP v dt cng loopback lm Router-ID cho LDP
Thc hnh cng ngh MEN


23
d. Cu hnh jumbo-mtu cho 7600 v system-mtu, jumbo-mtu cho 3750
e. Kch hoat chuc nng MPLS trn cc giao din trong min MPLS
f. Kim tra bang chuyn tip MPLS, qu trnh gn nhn, hon di nhn
M ta chi tit:
2.4.1. Phn vng HNI
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400HNI, 3750HNI,
7600HNI (tuong tu bi 1)
- Dt tn hostname cho cc thit bi
- Tt cc Domain Name Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi

Buc 2: Cu hnh mang IP voi giao thuc dinh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi theo cc thng s trong bang 2.2:
7600HNI(config)#int loopback 0
7600HNI(config-int)#ip address ___ ___
7600HNI(config-int)#no shutdown

3750HNI(config)#int loopback 0

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600HNI nhu bang 2.2
7600HNI(config)#interface gigabitEthernet ___

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600HNI nhu bang 2.2
7600HNI(config-int)#no switchport
Thc hnh cng ngh MEN


24
- Dt dia chi IP cho cc giao din Gi 1/1/1 cua 3750HNI nhu bang 2.2
3750HNI(config-if)#no switchport

- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0)
7600:
7600HNI(config)#router ospf 1
7600HNI(config- router)#passive-interface Loopback 0
7600HNI(config- router)#network Dja ch mng Wildcard mask area 0
7600HNI(config- router)#network 1.1.1.1 0.0.0.0 area 0
7600HNI(config- router)#log-adjacency-changes

3750:
- Kch hoat chuc nng dinh tuyn:
3750HNI (config)#ip routing:
- Cu hnh dinh tuyn:
3750HNI(config)#router ospf 1
3750HNI(config-router)#passive-interface Loopback0
3750HNI(config-router)# network Dja ch mng Wildcard mask area 0
3750HNI(config-router)#network 4.4.4.4 0.0.0.0 area 0
3750HNI(config-router)#network 10.1.1.18 0.0.0.3 area 0
3750HNI(config-router)#log-adjacency-changes

Thc hnh cng ngh MEN


25
Kim tra bang djnh tuyn:
Show ip route

Thc hnh cng ngh MEN


26

Kim tra thng s cu hnh OSPF:
show ip ospf database
show ip ospf interface
show ip ospf neighbor
Thc hnh cng ngh MEN


27

- Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc
thit bi 3750 v 7600 khc.

Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS:
7600HNI (config)#ip cef distributed
3750HNI (config)#ip cef distributed

- Kch hoat giao thuc phn phi nhn LDP v dt Loopback0 lm router-id:
7600HNI(config)#mpls label protocol ldp
7600HNI(config)#mpls ldp router-id loopback 0

3750HNI(config)#mpls label protocol ldp
3750HNI(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600HNI:
7600HNI(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600HNI:
7600HNI(config)#interface ___
7600HNI(config-if)#mpls ip
7600HNI(config-if)#exit
Thc hnh cng ngh MEN


28
- Dt gi tri mtu =1546 cho 3750HNI:
3750HNI(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI:
3750HNI(config)#interface gigabitEthernet 1/1/1
3750HNI(config-if)#mpls ip

- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
7600HNI(config-if)#mtu 1546

Buc 4: Kim tra cc thng s
- Show ip interface brief:
Kim tra cc giao din duoc dt dia chi IP dng v o trang thi UP
- Kim tra chuc nng CEF:

Thc hnh cng ngh MEN


29

Thc hnh cng ngh MEN


30

Thc hnh cng ngh MEN


31
- Kim tra cc giao din d kch hoat MPLS chua? Bang chuyn mach nhn d
dy du chua? Truyn nhn LDP chua? Thng s LDP neighbor?:
Trn 7600:

Thc hnh cng ngh MEN


32

Thc hnh cng ngh MEN


33
Trn 3750:

- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Thc hnh cng ngh MEN


34
2.4.2. Phn vng DNG
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400DNG, 3750DNG,
7600DNG (tuong tu bi 1)

- Dt dia chi IP Loopback cho cc thit bi theo cc thng s trong bang 2.2:
7600DNG(config)#int loopback 0
7600DNG(config-int)#ip address ___ ___
7600DNG(config-int)#no shutdown

3750DNG(config)#int loopback 0

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600DNG nhu bang 2.2
7600DNG(config)#interface gigabitEthernet ___

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600DNG nhu bang 2.2
7600DNG(config-int)#no switchport

- Dt dia chi IP cho cc giao din Gi 1/1/1 cua 3750DNG nhu bang 2.2
3750DNG(config-if)#no switchport
Thc hnh cng ngh MEN


35

(area0)
7600:
7600DNG(config)#router ospf 1
7600DNG(config-router)#passive-interface Loopback0
7600DNG(config-router)#network Dja ch mng Wildcard mask area 0
7600DNG(config-router)#network 2.2.2.2 0.0.0.0 area 0
7600DNG(config-router)#log-adjacency-changes

3750:
3750DNG (config)#ip routing
- Cu hnh dinh tuyn:
3750DNG(config)#router ospf 1
3750DNG(config-router)#passive-interface Loopback0
3750DNG(config-router)#network Dja ch mng Wildcard mask area 0
3750DNG(config-router)#log-adjacency-changes

Thc hnh cng ngh MEN


36

Thc hnh cng ngh MEN


37

Thc hnh cng ngh MEN


38

show ip ospf neighbor
Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc thit
bi 3750 v 7600 khc

Buc 3: Cu hnh MPLS

7600DNG (config)#ip cef distributed
3750DNG (config)#ip cef distributed

Thc hnh cng ngh MEN


39
7600DNG(config)#mpls label protocol ldp
7600DNG(config)#mpls ldp router-id loopback 0

3750DNG(config)#mpls label protocol ldp
3750DNG(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600DNG:
7600DNG(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600DNG:
7600DNG(config)#interface ___
7600DNG(config-if)#mpls ip
7600DNG(config-if)#exit

- Dt gi tri mtu =1546 cho 3750DNG:
3750DNG(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG:
3750DNG(config)#interface gigabitEthernet 1/1/1
3750DNG(config-if)#mpls ip

- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
7600DNG(config-if)#mtu 1546

Thc hnh cng ngh MEN


40

Thc hnh cng ngh MEN


41

Thc hnh cng ngh MEN


42

Thc hnh cng ngh MEN


43
Trn 7600:

Thc hnh cng ngh MEN


44

Thc hnh cng ngh MEN


45
Trn 3750:

7600DNG#debug mpls ldp messages sent
7600DNG#debug mpls ldp messages received
Thc hnh cng ngh MEN


46
2.4.3. Phn vng HCM
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400HCM,
3750HCM, 7600HCM (tuong tu bi 1)

- Dt dia chi IP Loopback cho cc thit bi theo thng s trong bang 2.2:
7600HCM(config)#int loopback 0
7600HCM(config-int)#ip address ___ ___
7600HCM(config-int)#no shutdown

3750HCM(config)#int loopback 0

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600HCM nhu bang 2.2
7600HCM(config)#interface gigabitEthernet ___

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600HCM nhu bang 2.2
7600HCM(config)#interface gigabitEthernet ___
7600HCM(config)#no switchport

- Dt dia chi IP cho giao din Gi 1/1/1 cua 3750HCM nhu bang 2.2
3750HCM(config)#interface fastEthernet ___
3750HCM(config-if)#no switchport
Thc hnh cng ngh MEN


47

(area0)
7600:
7600HCM(config)#router ospf 1
7600HCM(config- router)#passive-interface Loopback0
7600HCM(config- router)#network Dja ch mng Wildcard mask area 0
7600HCM(config- router)#network 3.3.3.3 0.0.0.0 area 0
7600HCM(config- router)#log-adjacency-changes

3750:
3750HCM (config)#ip routing
- Cu hnh dinh tuyn:
3750HCM(config)#router ospf 1
3750HCM(config-router)#passive-interface Loopback0
3750HCM(config-router)# network Dja ch mng Wildcard mask area 0
3750HCM(config-router)#network 6.6.6.6 0.0.0.0 area 0
3750HCM(config-router)#network 10.1.1.26 0.0.0.3 area 0
3750HCM(config-router)#log-adjacency-changes

Thc hnh cng ngh MEN


48

Thc hnh cng ngh MEN


49

Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc thit
bi 3750 v 7600 khc.

Thc hnh cng ngh MEN


50
Buc 3: Cu hnh MPLS
7600HCM (config)#ip cef distributed
3750HCM (config)#ip cef distributed

7600HCM(config)#mpls label protocol ldp
7600HCM(config)#mpls ldp router-id loopback 0

3750HCM(config)#mpls label protocol ldp
3750HCM(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600HCM:
7600HCM(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600HCM:
7600HCM(config)#interface ___
7600HCM(config-if)#mpls ip
7600HCM(config-if)#exit

- Dt gi tri mtu =1546 cho 3750HCM:
3750HCM(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM:
3750HCM(config-if)#mpls ip

- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbomtu.
7600HCM(config-if)#mtu 1546
Thc hnh cng ngh MEN


51


Thc hnh cng ngh MEN


52

Thc hnh cng ngh MEN


53

Thc hnh cng ngh MEN


54
Trn 7600:

Thc hnh cng ngh MEN


55

Thc hnh cng ngh MEN


56
Trn 3750:

7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Thc hnh cng ngh MEN


57
BI 3: CU HNH CHO DJCH VJ ERS
3.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Relay Service cung cp cho hoc vin
cc kin thuc lin quan dn dich vu E-LINE dua trn cng ngh EoMPLS v k nng
cu hnh cho dich vu ERS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi thuc
hnh, hoc vin c kha nng:
- Nm vung cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh
MPLS.
- Cu hnh cho dich vu ERS dua trn cng ngh EoMPLS.
- Kim tra v khc phuc li cu hnh ERS.
3.2.1. Danh sch thit b|:
STT
Vai tr
thit b|
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI Switch 3750 Cisco
(IOS: C3750ME
Software (C3750ME-
I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
(IOS: ME340x
Software (ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 3.1: Danh sch thit bi mang cau hnh dich vu ERS
Thc hnh cng ngh MEN


58
3.2.2. Cu hnh mng:
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 3.1: So do mang cau hnh dich vu ERS

- Chun bi trang thit bi v kt ni mang nhu hnh 3.1.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF.
MPLS xung toi thit bi 3750.
- Cu hnh dich vu ERS trn thit bi 3750 voi 3 E-LINE tuong ung 3 gi tri VC-
ID khc nhau cho php kt ni cc cp sites: E-LINE giua HNI v DNG (VC-
ID 130); E-LINE giua HNI v HCM (VC-ID 131); E-LINE giua DNG v HCM
(VC-ID 132). Cu hnh cho thit bi khch hng tai cc sites truy nhp vo cc
VLAN tuong ung: HNI (130, 131); DNG (130,132); HCM (131,132). Cc tham
s duoc m ta chi tit trong bang 3.2.
- Kim tra cu hnh v thu dich vu giua cc cp Sites.

Thc hnh cng ngh MEN


59
Phn
vng
Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17 255.255.255.252
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
FE 1/0/1 Add VLAN 130, 131 Trunk (UNI)
VLAN 130 VCID 130 SVI to DNG
VLAN 131 VCID 131 SVI to HCM
3400HNI
FE 0/1 VLAN 130, 131 Trunk
VLAN 130 192.168.30.1 255.255.255.0
VLAN 131 192.168.31.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21 255.255.255.252
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
FE 1/0/1 Add VLAN 130, 132 Trunk(UNI)
VLAN 130 VCID 130 SVI to HNI
VLAN 132 VCID 132 SVI to HCM
3400DNG
VLAN 130 192.168.30.2 255.255.255.0
Thc hnh cng ngh MEN


60
VLAN 132 192.168.32.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25 255.255.255.252
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252
FE 1/0/1 Add VLAN 131,132 Trunk(UNI)
VLAN 131 VCID 131 SVI to HNI
VLAN 132 VCID 132 SVI to DNG
3400HCM
VLAN 131 192.168.31.2 255.255.255.0
VLAN 132 192.168.32.2 255.255.255.0
Bang 3.2: Cc tham so cau hnh dich vu ERS

3.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF cho cc thit bi 7600 v
3750.
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP v mo rng min
MPLS xung toi thit bi 3750.
- Cu hnh dich vu ERS:
a. Trn thit bi 3750:
Tao cc L2 VLAN (VLAN 130, VLAN 131)
Cu hnh 802.1q trunk cho giao din kt ni toi 3400
Cu hnh SVI
Tao danh sch truy nhp EoMPLS trn cc SVI
Thc hnh cng ngh MEN


61
Cu hnh EoMPLS thuc hin xconnect trn SVI voi gi tri VC-ID l 130 v
131, dia chi peer l dia chi cua 3750-DNG v 3750-HCM
b. Trn thit bi 3400:
Tao L2 VLAN (130, 131)
Cu hnh 802.1q Trunk cho giao din kt ni toi 3750
Cu hnh L3 VLAN
c. Kim tra bng cch Ping thnh cng tu dia chi IP cua interface VLAN trn
cc thit bi 3400
Kim tra trang thi cc EoMPLS Tunnel:
Ping tu cc interface VLAN trn 3400:
Kim tra bang MAC

M ta chi tit:
3.4.1. Phn vng HNI
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 3.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 theo cc
thng s trong bang 3.2
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HNI
Thc hnh cng ngh MEN


62
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HNI
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HNI
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI
mtu =1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
- show ip interface brief
- show ip cef summary
- show mpls interface
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
Buc 5: Cu hnh d|ch v ERS
Phan ny chi thuc hin trn thit bi 3750HNI v 3400HNI
Cu hnh cho UPE-3750HNI:
- Tao cc L2 VLAN ( VLAN 130, VLAN 131) trn thit bi 3750HNI kt ni toi
3400HNI cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750HNI(config-vlan)#name ERS-130

- Cu hnh giao din Fa 1/0/1 kt ni toi CE o ch d trunking cho php luu
luong trn VLAN 130, 131 di qua:
3750HNI(config)#interface FastEthernet 1/0/1
3750HNI(config-if)#description Trunk to 3400HNI
Thc hnh cng ngh MEN


63
3750HNI(config-if)#switchport trunk allowed vlan 130,131

- Tao cc SVI trn VLAN 130, VLAN 131 tuong ung voi gi tri VC-ID =130,
VC-ID =131 v dia chi IP tuong ung 5.5.5.5, 6.6.6.6 lm dia chi peer toi phn
vng DNG, HCM:
3750HNI(config-if)#no ip address
3750HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
3750HNI (config)#access-list 11 permit 1.1.1.1
3750HNI (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400HNI:
- Tao cc L2VLAN (VLAN 130, 131) cho khch hng

- Cu hnh giao din Fa 0/1 kt ni toi 3750 o ch d trunking, cho php luu
luong cua VLAN 130, 131 di qua:
Thc hnh cng ngh MEN


64
3400HNI(config-if)#switchport trunk allowed vlan 130,131

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 130, 131 ln luot l
192.168.30.1/24 v 192.168.31.1/24
3400HNI(config)#int vlan ___
3400HNI(config-if)#ip add ___ ___

- Cu hnh policy PING-PO
3400HNI(config)#access-list 100 permit ip any any
3400HNI(config)#class-map CLASS
3400HNI(config-cmap)#match access-group 100
3400HNI(config)#policy-map PING-PO
3400HNI(config-pmap)#class CLASS
3400HNI(config-pmap-c)#police cir 1000000

- Cu hnh dich vu PING-PO trn cng f 0/1
3400HNI(config)#interface fastEthernet 0/1
3400HNI(config-if)#service-policy input PING-PO

Kim tra cc thng so v VC v kt noi qua ERS:
- Kim tra cu hnh MPLS d dng chua?
- Kim tra xem EVC d dng chua? C o trang thi UP khng?
Thc hnh cng ngh MEN


65

- Kim tra chi tit thng s cc EVC d cu hnh?

Thc hnh cng ngh MEN


66

- Kim tra thng s duong Trunking, cc VLAN d cu hnh v thuc hin ping,
traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v 3400HCM bng
dia chi IP cua VLAN 130, 131 d chung to kt ni ERS tu phn vng HNI toi
DNG v HCM thnh cng.

Thc hnh cng ngh MEN


67

Thc hnh cng ngh MEN


68

3.4.2. Cu hnh cho phn vng DNG
- Dt tn hostname
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 theo cc
thng s trong bang 3.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
- Dt gi tri jumbo-mtu =9100 cho 7600DNG
7600DNG
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750DNG
Thc hnh cng ngh MEN


69
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG
mtu =1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
- show mpls interface:
Phan ny chi thuc hin trn thit bi 3750DNG v 3400DNG
Cu hnh cho UPE-3750DNG:
- Tao cc L2 VLAN ( VLAN 130, VLAN 132) trn thit bi 3750DNG kt ni toi
3400DNG cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750DNG(config-vlan)#name ERS-130

3750DNG(config)#interface FastEthernet 1/0/1
3750DNG(config-if)#description Trunk to 3400DNG
Thc hnh cng ngh MEN


70
3750DNG(config-if)#switchport trunk allowed vlan 130,132

vng DNG, HCM:
3750DNG(config-if)#no ip address
3750DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

3750DNG (config)#access-list 11 permit 1.1.1.1
3750DNG (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400DNG:

3400DNG(config)#interface fastEthernet 0/1
Thc hnh cng ngh MEN


71
3400DNG(config-if)#switchport trunk allowed vlan 130,132

192.168.30.2/24 v 192.168.32.1/24
3400DNG(config)#int vlan ___
3400DNG(config-if)#ip add ___ ___

3400DNG(config)#access-list 100 permit ip any any
3400DNG(config)#class-map CLASS
3400DNG(config-cmap)#match access-group 100
3400DNG(config)#policy-map PING-PO
3400DNG(config-pmap)#class CLASS
3400DNG(config-pmap-c)#police cir 1000000

3400DNG(config)#interface fastEthernet 0/1
3400DNG(config-if)#service-policy input PING-PO

Thc hnh cng ngh MEN


72


Thc hnh cng ngh MEN


73

traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v 3400HCM bng
dia chi IP cua VLAN 130, 132 d chung to kt ni ERS tu phn vng DNG toi
HNI v HCM thnh cng.
Thc hnh cng ngh MEN


74

Thc hnh cng ngh MEN


75

3.4.3. . Cu hnh cho phn vng HCM
- Dt tn hostname
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
3.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
- Dt gi tri jumbo-mtu =9100 cho 7600HCM
Thc hnh cng ngh MEN


76
7600HCM
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HCM
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM
mtu =1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbo-mtu.
Phan ny chi thuc hin trn thit bi 3750HCM v 3400HCM
Cu hnh cho UPE-3750HCM:
- Tao cc L2 VLAN ( VLAN 131, VLAN 132) trn thit bi 3750HCM kt ni toi
3400HCM cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750HCM(config-vlan)#name ERS-131

3750HCM(config)#interface FastEthernet 1/0/1
3750HCM(config-if)#description Trunk to 3400HCM
Thc hnh cng ngh MEN


77
3750HCM(config-if)#switchport trunk allowed vlan 131,132

vng HCM, HCM:
3750HCM(config-if)#no ip address
3750HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

3750HCM (config)#access-list 11 permit 1.1.1.1
3750HCM (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400HCM:
Thuc hin tuong tu voi VLAN 132

3400HCM(config)#interface fastEthernet 0/1
Thc hnh cng ngh MEN


78
3400HCM(config-if)#switchport trunk allowed vlan 131,132

192.168.31.2/24 v 192.168.32.2/24
3400HCM(config)#int vlan ___
3400HCM(config-if)#ip add ___ ___

3400HCM(config)#access-list 100 permit ip any any
3400HCM(config)#class-map CLASS
3400HCM(config-cmap)#match access-group 100
3400HCM(config)#policy-map PING-PO
3400HCM(config-pmap)#class CLASS
3400HCM(config-pmap-c)#police cir 1000000

3400HCM(config)#interface fastEthernet 0/1
3400HCM(config-if)#service-policy input PING-PO

Thc hnh cng ngh MEN


79


Thc hnh cng ngh MEN


80

traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM v 3400DNG
bng dia chi IP cua VLAN 131, 132 d chung to kt ni ERS tu phn vng
HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


81

Thc hnh cng ngh MEN


82
BI 4: CU HNH DJCH VJ EWS

4.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Wire Service cung cp cho hoc vin
cc kin thuc lin quan dn dich vu E-LINE dua trn cng ngh EoMPLS v k nng
cu hnh cho dich vu EWS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi
thuc hnh, hoc vin c kha nng:
MPLS.
- Cu hnh cho dich vu EWS dua trn cng ngh EoMPLS.
- Kim tra v khc phuc li cu hnh EWS.
STT
Vai tr
thit b|
Tn thit
b|
Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
(IOS: C3750ME
Software (C3750ME-I5-
M), Version
12.2(25)EY4)
GE 1/1/1; FE 1/0/1; FE 1/0/2
5. 3750DNG GE 1/1/1; FE 1/0/1; FE 1/0/2
6. 3750HCM GE 1/1/1, FE 1/0/1; FE 1/0/2
7.
CE
(IOS: ME340x Software
(ME340x-
METROBASE-M),
FE 0/1; FE 0/2; FE 0/3; FE 0/4
8. 3400DNG FE 0/1; FE 0/2; FE 0/3; FE 0/4
9. 3400HCM FE 0/1; FE 0/2; FE 0/3; FE 0/4

Bang 4.1: Danh sch thit bi mang cau hnh dich vu EWS

Thc hnh cng ngh MEN


83
4.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 4.1: So do mang cau hnh dich vu EWS

- Chun bi trang thit bi v kt ni mang nhu hnh 4.1
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF
MPLS xung toi thit bi 3750
- Cu hnh dich vu EWS trn thit bi 3750 voi 3 E-LINE tuong ung 3 gi tri VC-
ID khc nhau cho php kt ni cc cp sites: E-LINE giua HNI v DNG (VC-
ID 140); E-LINE giua HNI v HCM (VC-ID 141); E-LINE giua DNG v HCM
(VC-ID 142). Cu hnh cho thit bi khch hng tai cc sites truy nhp vo cc
C-VLAN: HNI (140, 141); DNG (140,142); HCM (141, 142). Cc tham s
duoc m ta chi tit trong bang 4.2
- Kim tra cu hnh v thu dich vu giua cc cp Sites

Thc hnh cng ngh MEN


84
Phn vng Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17 255.255.255.252
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
FE1/0/1 Add VLAN 140 Tunnel port (UNI)
VLAN 140 VCID - 140 SVI to DNG
FE 1/0/2 Add VLAN 141 Tunnel port (UNI)
VLAN 141 VCID - 141 SVI to HCM
3400HNI
FE 0/1 VLAN 104 Trunk port
FE 0/3 VLAN 104 Access port
VLAN 104 192.168.40.1 255.255.255.0
VLAN 114 192.168.41.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21 255.255.255.252
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
VLAN 140 VCID - 140 SVI to HNI
VLAN 142 VCID - 142 SVI to HCM
3400DNG
VLAN 104 192.168.40.2 255.255.255.0
Thc hnh cng ngh MEN


85
VLAN 124 192.168.42.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25 255.255.255.252
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252
VLAN 141 VCID - 141 SVI to HNI
VLAN 142 VCID - 142 SVI to DNG
3400HCM
VLAN 114 192.168.41.2 255.255.255.0
VLAN 124 192.168.42.2 255.255.255.0
Bang 4.2: Cc tham so cau hnh dich vu EWS

4.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi
3750
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP v mo rng min
MPLS xung toi thit bi 3750
- Cu hnh EWS:
a. Trn thit bi 3750
Tao cc L2 VLAN (VLAN 140, VLAN 141)
Cu hnh cho 2 giao din kt ni toi CE (FE 1/0/1 v Fa 1/0/2) o ch d
Dot1q-tunnel
Cu hnh L2TP cho cc giao din trn
Thc hnh cng ngh MEN


86
Thuc hin tao SVI, cu hnh EoMPLS thuc hin xconnect trn SVI voi gi tri
VC-ID l 140 v 141, dia chi peer l dia chi cua 3750-DNG v 3750-HCM
b. Trn thit bi 3400
Tao L2 VLAN (140, 141)
Cu hnh 802.1q Trunk cho 2 giao din kt ni toi 3750
Cu hnh L3 VLAN
c. Kim tra
Kim tra tnh trong sut dich vu

M ta chi tit:
4.4.1. Phn vng HNI
- Dt tn hostname
4.2.
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
Thc hnh cng ngh MEN


87
7600HNI
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HNI
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI
- show ip interface brief:
Buc 5: Cu hnh d|ch v EWS
Phan ny chi thuc hin voi cc thit bi 3750HNI v 3400HNI.
Cu hnh trn 3750HNI:
- Tao cc L2 VLAN ( VLAN 140, VLAN 141) trn thit bi 3750HNI kt ni toi
3400HNI - CE cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc
dng cho dich vu EWS.
3750HNI(config-vlan)#name EWS-140
3750HNI(config-vlan)#name EWS-141

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE o ch d tunnel port cho
php luu luong khch hng di qua 3750 duoc gn tuong ung S-VLAN 140 v
141:
3750HNI(config)#interface FastEthernet ___
Thc hnh cng ngh MEN


88
3750HNI(config-if)#description Tunnelling to 3400HNI
3750HNI(config-if)#switchport access vlan ___
3750HNI(config-if)#switchport mode dot1q-tunnel

- Cu hnh L2TP cho cc giao din Fa 1/0/1 v Fa 1/0/2:
3750HNI(config)#interface FastEthernet ___
3750HNI(config-if)#duplex full
3750HNI(config-if)#speed 100
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HNI(config-if)#l2protocol-tunnel cdp
3750HNI(config-if)#l2protocol-tunnel stp
3750HNI(config-if)#l2protocol-tunnel vtp

vng DNG, HCM:

Cu hnh trn CE-3400HNI:
- Tao L2VLAN: VLAN 104, VLAN 114 dng vai tr l C-VLAN cho khch
hng:
Thc hnh cng ngh MEN


89
3400HNI(config-vlan)#name C-VLAN-104
3400HNI(config-vlan)#name C-VLAN-114

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO:
Thuc hin tuong tu bi 3

- Cu hnh giao din Fa 0/1 v Fa 0/2 kt ni toi 3750 o ch d trunking cho
php luu luong khch hng tuong ung VLAN 104 v VLAN 114 di qua:
3400HNI(config-if)#switchport trunk allowed vlan ___

192.168.40.1/24 v 192.168.41.1/24
3400HNI(config)#int vlan ___
3400HNI(config-if)#ip add ___ ___

Kim tra cc thng so v VC v kt noi qua EWS:
- Kim tra trn 3750HNI xem cc VC d UP chua, VC-ID c dng khng?
Thc hnh cng ngh MEN


90

- Kim tra thng s trn thit bi 3400HNI:

Thc hnh cng ngh MEN


91

- Thuc hin ping, traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v
3400HCM bng dia chi IP cua VLAN 104 v 114 d chung to kt ni EWS tu
phn vng HNI toi DNG v HCM thnh cng.

4.4.2. Phn vng DNG
- Dt tn hostname

4.2
Thc hnh cng ngh MEN


92
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600DNG
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750DNG
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG
Phan ny chi thuc hin voi cc thit bi 3750DNG v 3400DNG.
Cu hnh trn 3750DNG:
- Tao cc L2 VLAN ( VLAN 140, VLAN 142) trn thit bi 3750DNG kt ni toi
3400DNG cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc dng
cho dich vu EWS.
3750DNG(config-vlan)#name EWS-140

Thc hnh cng ngh MEN


93
3750DNG(config-vlan)#name EWS-142

142:
3750DNG(config)#interface FastEthernet ___
3750DNG(config-if)#description Tunnelling to 3400DNG
3750DNG(config-if)#switchport access vlan ___
3750DNG(config-if)#switchport mode dot1q-tunnel

3750DNG(config)#interface FastEthernet ___
3750DNG(config-if)#duplex full
3750DNG(config-if)#speed 100
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750DNG(config-if)#l2protocol-tunnel cdp
3750DNG(config-if)#l2protocol-tunnel stp
3750DNG(config-if)#l2protocol-tunnel vtp

vng DNG, HCM:
Thc hnh cng ngh MEN


94

Cu hnh trn CE-3400DNG:
hng:
3400DNG(config-vlan)#name C-VLAN-104
3400DNG(config-vlan)#name C-VLAN-124

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO:

3400DNG(config)#interface ____
3400DNG(config-if)#switchport trunk allowed vlan ___

192.168.40.2/24 v 192.168.42.1/24
3400DNG(config)#int vlan ___
3400DNG(config-if)#ip add ___ ___
Thc hnh cng ngh MEN


95

- Kim tra trn 3750DNG xem cc VC d UP chua, VC-ID c dng khng?

- Kim tra thng s trn thit bi 3400DNG:
Thc hnh cng ngh MEN


96

- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v
3400HCM bng dia chi IP cua VLAN 104 v 124 d chung to kt ni EWS tu
phn vng DNG toi HNI v HCM thnh cng.

Thc hnh cng ngh MEN


97
4.4.3. Phn vng HCM
- Dt tn hostname
4.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600HCM
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HCM
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM

Thc hnh cng ngh MEN


98
Phan ny chi thuc hin voi cc thit bi 3750HCM v 3400HCM.
Cu hnh trn 3750HCM:
- Tao cc L2 VLAN ( VLAN 141, VLAN 142) trn thit bi 3750HCM kt ni toi
3400HCM cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc dng
cho dich vu EWS.
3750HCM(config-vlan)#name EWS-141
3750HCM(config-vlan)#name EWS-142

142:
3750HCM(config)#interface FastEthernet ___
3750HCM(config-if)#description Tunnelling to 3400HCM
3750HCM(config-if)#switchport access vlan ___
3750HCM(config-if)#switchport mode dot1q-tunnel

3750HCM(config)#interface FastEthernet ___
3750HCM(config-if)#duplex full
3750HCM(config-if)#speed 100
Thc hnh cng ngh MEN


99
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HCM(config-if)#l2protocol-tunnel cdp
3750HCM(config-if)#l2protocol-tunnel stp
3750HCM(config-if)#l2protocol-tunnel vtp

vng HCM, HCM:

Cu hnh trn CE-3400HCM:
hng:
3400HCM(config-vlan)#name C-VLAN-114
3400HCM(config-vlan)#name C-VLAN-124

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO

Thc hnh cng ngh MEN


100
3400HCM(config-if)#switchport trunk allowed vlan ___

192.168.41.2/24 v 192.168.42.2/24
3400HCM(config)#int vlan ___
3400HCM(config-if)#ip add ___ ___

- Kim tra trn 3750HCM xem cc VC d UP chua, VC-ID c dng khng?

Thc hnh cng ngh MEN


101
- Kim tra thng s trn thit bi 3400HCM:

- Thuc hin ping, traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM
v 3400DNG bng dia chi IP cua VLAN 114 v 124 d chung to kt ni EWS tu
phn vng HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


102
BI 5: CU HNH DJCH VJ EMS
5.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Multipoint Service cung cp cho hoc
vin cc kin thuc lin quan dn dich vu E-LAN dua trn cng ngh EoMPLS v k
nng cu hnh cho dich vu EMS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi
thuc hnh, hoc vin c kha nng:
MPLS
- Cu hnh cho dich vu EMS dua trn cng ngh EoMPLS
- Kim tra v khc phuc li cu hnh EMS
STT
Vai tr
thit b|
Tn thit
b|
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
C3750ME Software
(C3750ME-I5-M),
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
ME340x Software
(ME340x-
METROBASE-M),
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 5.1: Danh sch thit bi mang cau hnh dich vu EMS

Thc hnh cng ngh MEN


103
5.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 5.1: So do mang cau hnh dich vu EMS

- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, min MPLS chi
gioi han dn b dinh tuyn 7604.
- Cu hnh dich vu EMS trn thit bi 7604 voi 1 E-LAN c gi tri VC-ID 150 cho
php kt ni 3 sites. Cu hnh cho thit bi khch hng tai cc sites cng truy
nhp vo C-VLAN 105. Cc tham s duoc m ta chi tit trong bang 5.2

Phn vng Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI 7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 Add VLAN 150 Trunk
VLAN 150 VPNID - 150 To DNG, HCM
Thc hnh cng ngh MEN


104
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 150 Trunk
FE 1/0/1 Add VLAN 150 Tunnel Port (UNI)
3400HNI
VLAN 105 192.168.5.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
VLAN 150 VPNID - 150 To HNI, HCM
3750DNG
Loopback 5.5.5.5 255.255.255.255
3400DNG
VLAN 105 192.168.5.2 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
VLAN 150 VPNID - 150 To HNI, DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
3400HCM
VLAN 105 192.168.5.3 255.255.255.0
Bang 5.2: Cc tham so cau hnh dich vu EMS

5.4. Cc buc thc hnh
M ta tng qut:
3750
Thc hnh cng ngh MEN


105
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP
- Cu hnh EWS:
a. Trn thit bi 7600
Kt ni toi 3750HNI thng qua giao din GE 4/1 o ch d Trunking
Tao L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM
Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI bng cch
xconnect trn SVI
b. Trn thit bi 3750
Tao L2 VLAN (150)
Cu hnh cho giao din kt ni toi CE (FE 1/0/1) o ch d Dot1q-tunnel
Cu hnh L2TP cho cc giao din trn
Cu hnh cho giao din kt ni toi NPE o ch d 802.1q Trunk
c. Trn thit bi 3400
Tao L2 VLAN (105) khch hng
Cu hnh L3 VLAN
d. Kim tra
Kim tra tnh trong sut dich vu

M ta chi tit:
5.4.1. Phn vng HNI
- Dt tn hostname
Thc hnh cng ngh MEN


106
5.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600HNI
Buc 5: Cu hnh cho EMS
Cu hnh trn 7600HNI:
- Tao VLAN 150:
7600HNI(config-vlan)#name EMS-150

- Thuc hin kt ni toi 3750HNI thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong S-VLAN 150 di qua:
Thc hnh cng ngh MEN


107

- Tao ra L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM:
7600HNI(config)#l2 vfi EMS_150 manual
7600HNI(config-vfi)#vpn id 150
7600HNI(config-vfi)#neighbor 2.2.2.2 encapsulation mpls
7600HNI(config-vfi)#neighbor 3.3.3.3 encapsulation mpls
7600HNI(config-vfi)#exit

- Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI:
7600HNI(config)#interface vlan 150
7600HNI(config-if)#xconnect vfi EMS_150

Cu hnh trn 3750HNI:
- Tao VLAN 150 d thuc hin vic gn moi luu luong khch hng vo S-VLAN:
3750HNI(config-vlan)#name EMS-150

- Khoi tao S-VLAN 150 cho vic mang luu luong khch hng v cu hnh cho
giao din Fa 1/0/1 kt ni toi 3400HNI o ch d tunnel port:
Thc hnh cng ngh MEN


108
3750HNI(config)#interface Fa 1/0/1
3750HNI(config-if)#switchport access vlan 150
3750HNI(config-if)#switchport mode dot1q-tunnel

- Thuc hin lun vic cu hnh L2TP trn cng Fa 1/0/1:
3750HNI(config-if)#duplex full
3750HNI(config-if)#speed 100
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HNI(config-if)#l2protocol-tunnel cdp
3750HNI(config-if)#l2protocol-tunnel stp
3750HNI(config-if)#l2protocol-tunnel vtp

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HNI o ch d Trunk, cho php
luu luong S-VLAN 150 di qua:
3750HNI(config)#interface Gi 1/1/1

Cu hnh trn 3400HNI:
- Tao C-VLAN 105 trn thit bi khch hng:
3400HNI(config-vlan)#name C-VLAN-EMS
Thc hnh cng ngh MEN


109

- Tao L3 VLAN bng vic gn dia chi IP 192.168.5.1/24 cho giao din C-VLAN:

- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HNI o ch d Trunk, cho php
luu luong VLAN 105 di qua:
3400HNI(config)#interface Fa 0/1

Kim tra cc thng so v VC v kt noi qua EMS:
- Kim tra xem VC d UP chua, VC-ID c dng khng?

Thc hnh cng ngh MEN


110
3400HCM bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng HNI toi DNG v HCM thnh cng thng qua VFI EMS_150.

5.4.2. Phn vng DNG
- Dt tn hostname
5.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600DNG
Thc hnh cng ngh MEN


111
Cu hnh trn 7600DNG:
- Tao VLAN 150:
7600DNG(config-vlan)#name EMS-150

- Thuc hin kt ni toi 3750DNG thng qua giao din Gi 4/1 o ch d Trunking

loopback cua 7600HNI, 7600HCM:
7600DNG(config)#l2 vfi EMS_150 manual
7600DNG(config-vfi)#vpn id 150
7600DNG(config-vfi)#neighbor 1.1.1.1 encapsulation mpls
7600DNG(config-vfi)#neighbor 3.3.3.3 encapsulation mpls
7600DNG(config-vfi)#exit

7600DNG(config)#interface vlan 150
Thc hnh cng ngh MEN


112
7600DNG(config-if)#xconnect vfi EMS_150

Cu hnh trn 3750DNG:
3750DNG(config-vlan)#name EMS-150

giao din Fa 1/0/1 kt ni toi 3400DNG o ch d tunnel port:
3750DNG(config)#interface Fa 1/0/1
3750DNG(config-if)#switchport access vlan 150
3750DNG(config-if)#switchport mode dot1q-tunnel

- Thuc hin lun vic cu hnh L2TP cho cng Fa 1/0/1:
3750DNG(config-if)#duplex full
3750DNG(config-if)#speed 100
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750DNG(config-if)#l2protocol-tunnel cdp
3750DNG(config-if)#l2protocol-tunnel stp
3750DNG(config-if)#l2protocol-tunnel vtp

Thc hnh cng ngh MEN


113
- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600DNG o ch d Trunk, cho
php luu luong S-VLAN 150 di qua:
3750DNG(config)#interface Gi 1/1/1

Cu hnh trn 3400DNG:
3400DNG(config-vlan)#name C-VLAN-EMS


- Cu hnh cho giao din Fa 0/1 kt ni dn 3750DNG o ch d Trunk, cho php
3400DNG(config)#interface Fa 0/1

Thc hnh cng ngh MEN


114

- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v
3400HCM bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng DNG toi HNI v HCM thnh cng thng qua VFI EMS_150.

5.4.3. Phn vng HCM
- Dt tn hostname
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu hnh
v. Dng cc dia chi IP trong huong dn.
Thc hnh cng ngh MEN


115
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600HCM
Cu hnh trn 7600HCM:
- Thuc hin kt ni toi 3750HCM thng qua giao din Gi 4/1 o ch d Trunking
7600HCM(config)#interface giagaEthernet 4/1
Thc hnh cng ngh MEN


116
loopback cua 7600HNI, 7600DNG:
7600HCM(config)#l2 vfi EMS_150 manual
7600HCM(config-vfi)#vpn id 150
7600HCM(config-vfi)#neighbor 1.1.1.1 encapsulation mpls
7600HCM(config-vfi)#neighbor 2.2.2.2 encapsulation mpls
7600HCM(config-vfi)#exit

7600HCM(config)#interface vlan 150
7600HCM(config-if)#xconnect vfi EMS_150

Cu hnh trn 3750HCM:
3750HCM(config-vlan)#name EMS-150

giao din Fa 1/0/1 kt ni toi 3400HCM o ch d tunnel port:
3750HCM(config)#interface Fa 1/0/1
3750HCM(config-if)#switchport access vlan 150
3750HCM(config-if)#switchport mode dot1q-tunnel

- Thuc hin lun vic cu hnh L2TP cho cng Fa 1/0/1:
3750HCM(config-if)#duplex full
Thc hnh cng ngh MEN


117
3750HCM(config-if)#speed 100
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HCM(config-if)#l2protocol-tunnel cdp
3750HCM(config-if)#l2protocol-tunnel stp
3750HCM(config-if)#l2protocol-tunnel vtp

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HCM o ch d Trunk, cho
php luu luong S-VLAN 150 di qua:
3750HCM(config)#interface Gi 1/1/1

Cu hnh trn 3400HCM:
3400HCM(config-vlan)#name C-VLAN-EMS


Thc hnh cng ngh MEN


118
- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HCM o ch d Trunk, cho php
3400HCM(config)#interface Fa 0/1


v 3400DNG bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng HCM toi HNI v DNG thnh cng thng qua VFI EMS_150.
Thc hnh cng ngh MEN


119
BI 6: CU HNH DJCH VJ ERMS
6.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Relay Multipoint Service cung cp cho
hoc vin cc kin thuc lin quan dn dich vu E-LAN dua trn cng ngh EoMPLS v
k nng cu hnh cho dich vu ERMS dua trn cc thit bi Cisco h tro MPLS. Kt thc
bi thuc hnh, hoc vin c kha nng:
MPLS
- Cu hnh cho dich vu ERMS dua trn cng ngh EoMPLS
- Kim tra v khc phuc li cu hnh ERMS
STT
Vai tr
thit b|
Tn thit
b|
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
C3750ME Software
(C3750ME-I5-M),
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
ME340x Software
(ME340x-
METROBASE-M),
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 6.1: Danh sch thit bi mang cau hnh dich vu ERMS
Thc hnh cng ngh MEN


120
6.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 6.1: So do mang cau hnh dich vu ERMS

- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, min MPLS chi
mo rng toi thit bi 7604
- Cu hnh dich vu ERMS trn thit bi 7604 voi 1 E-LAN v 3 E-LINE tuong
ung 4 gi tri VC-ID khc nhau cho php kt ni cc cp sites: E-LAN kt ni ca
3 sites voi nhau voi VC-ID 160 tao thnh kt ni da dim; E-LINE giua HNI v
DNG (VC-ID 161); E-LINE giua HNI v HCM (VC-ID 162); E-LINE giua
DNG v HCM (VC-ID 163). Cu hnh cho thit bi khch hng tai cc sites truy
nhp vo cc C-VLAN: HNI (160,161,162); DNG (160,161,163); HCM
(160,162,163). Cc tham s duoc m ta chi tit trong bang 6.2

Thc hnh cng ngh MEN


121
Phn
vng
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 Add VLAN 160, 161, 162 Trunk
VLAN 160 VFI-ID 160 To DNG, HCM
VLAN 161 VC-ID 161 To DNG
VLAN 162 VC-ID 162 To HCM
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 162 Trunk
FE 1/0/1 Add VLAN 160, 161, 162 Trunk
3400HNI
FE 0/1 VLAN 160, 161, 162 Trunk port
VLAN 160 192.168.60.1 255.255.255.0
VLAN 161 192.167.61.1 255.255.255.0
VLAN 162 192.167.62.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
VLAN 160 VFI-ID 160 To HNI, HCM
VLAN 161 VC-ID 161 To HNI
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 163 Trunk
FE 1/0/1 Add VLAN 160, 161, 163 Trunk
3400DNG
VLAN 160 192.168.60.2 255.255.255.0
VLAN 161 192.167.61.2 255.255.255.0
VLAN 163 192.167.63.1 255.255.255.0
HCM 7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
Thc hnh cng ngh MEN


122
GE 3/0/0 10.1.1.14 255.255.255.252
VLAN 160 VFI-ID 160 To HNI, DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 Add VLAN 160, 162, 163 Trunk
FE 1/0/1 Add VLAN 160, 162, 163 Trunk
3400HCM
VLAN 160 192.168.60.3 255.255.255.0
VLAN 162 192.167.62.2 255.255.255.0
VLAN 163 192.167.63.2 255.255.255.0
Bang 6.2: Cc tham so cau hnh dich vu ERMS

6.4. Cc buc thc hnh
M ta tng qut:
3750
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP
- Cu hnh EWS:
a. Trn thit bi 7600
Tao cc L2 VLAN (VLAN 160, 161, 162)
Kt ni toi 3750HNI thng qua giao din GE 4/1 o ch d Trunking
Tao L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM
Tao SVI trn VLAN 160. Gn L2 VFI tao ra o trn vo SVI bng cch
xconnect trn SVI
Tao cc SVI trn VLAN 161, VLAN 162 tuong ung voi gi tri VC-ID =
161, VC-ID =162 v dia chi IP 2.2.2.2, 3.3.3.3 lm dia chi peer toi phn
vng DNG, HCM
b. Trn thit bi 3750
Tao cc L2 VLAN (160, 161,162)
Thc hnh cng ngh MEN


123
Cu hnh cho giao din kt ni toi CE (FE 1/0/1) o ch d 802.1q Trunk
Cu hnh cho giao din kt ni toi NPE o ch d 802.1q Trunk
c. Trn thit bi 3400
Tao L2 VLAN 160, 161, 162
Cu hnh L3 VLAN
d. Kim tra
Kim tra bang chuyn tip nhn MPLS
Kim tra trang thi cc EoMPLS Tunnel
Ping tu cc interface VLAN trn 3400

M ta chi tit:
6.4.1. Phn vng HNI
- Dt tn hostname
6.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
Thc hnh cng ngh MEN


124
7600HNI
Buc 5: Cu hnh cho ERMS
Cu hnh trn 7600HNI:
- Thuc hin kt ni toi 3750HNI thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong VLAN 160, 161, 162 di qua:
7600HNI(config-if)#switchport trunk allowed vlan 160,161,162

- Tao cc L2 VLAN 160, 161, 162:
7600HNI(config-vlan)#name ERMS-160
Thuc hin tuong tu voi VLAN 161 v 162
Thc hnh cng ngh MEN


125
- Tao ra L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
cua 7600DNG, 7600HCM:
7600HNI(config)#l2 vfi ERMS_160 manual
7600HNI(config)#vpn id 160
7600HNI(config)#neighbor 2.2.2.2 encapsulation mpls
7600HNI(config)#neighbor 3.3.3.3 encapsulation mpls

- Tao SVI trn VLAN 160. Gn L2 VFI d tao o trn vo SVI:
7600HNI(config-if)#xconnect vfi ERMS_160

VC-ID =162 v dia chi IP 2.2.2.2, 3.3.3.3 lm dia chi peer toi phn vng DNG,
HCM:

Cu hnh trn 3750HNI:
- Tao VLAN 160, 161, 162 d thuc hin vic gn moi luu luong khch hng vo
cc VLAN:

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400HNI o ch d Trunk, cho php
luu luong cc VLAN 160, 161, 162 di qua:
Thc hnh cng ngh MEN


126
3750HNI(config)#interface Fa 1/0/1

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HNI o ch d Trunk, cho php
luu luong cc VLAN 160, 161, 162 di qua:
3750HNI(config)#interface Gi 1/1/1

Cu hnh trn 3400HNI:
- Tao C-VLAN 160, 161, 162 trn thit bi khch hng:

- Tao L3 VLAN bng vic gn dia chi IP 192.168.60.1/24, 192.167.61.1/24,
192.167.62.1/24 cho giao din C-VLAN 160, 161, 162:
Thc hnh cng ngh MEN


127
- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HNI o ch d Trunk, cho php
luu luong VLAN 160, 161, 162 di qua:
3400HNI(config)#interface Fa 0/1
- Cu hnh cho giao din Fa 0/2, Fa 0/3, Fa 0/4 o ch d Access, thuc VLAN
160, 161, 163 v gn dia chi IP cho PC kt ni vo giao din ny:
3400HNI(config-if)#switchport mode access
3400HNI(config-if)#switchport access vlan ____

Kim tra cc thng so v VC v kt noi qua ERMS:

Thc hnh cng ngh MEN


128

- Kim tra vic cc router d hoc duoc dia chi MAC cua nhau thng qua dich vu
ERMS chua?
7600-HNI#show mac-address-table vlan 160
- Kim tra cc giao din trunking v thng s cc VLAN cua 3750:

3400-HNI#show int trunk
3400-HNI#show vlan bri
3400-HNI#show ip int bri
3400HCM bng dia chi IP cua VLAN 160, 161, 162 d chung to kt ni ERMS
tu phn vng HNI toi DNG v HCM thnh cng.

6.4.2. Phn vng DNG
- Dt tn hostname
Thc hnh cng ngh MEN


129
6.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600DNG
Cu hnh trn 7600DNG:
- Thuc hin kt ni toi 3750DNG thng qua giao din Gi 4/1 o ch d Trunking
Thc hnh cng ngh MEN


130
7600DNG(config-if)#switchport trunk allowed vlan 160,161,163

- Tao cc L2 VLAN 160, 161, 163:
7600DNG(config-vlan)#name ERMS-160

cua 7600DNG, 7600HCM:
7600DNG(config)#l2 vfi ERMS_160 manual
7600DNG(config)#vpn id 160
7600DNG(config)#neighbor 1.1.1.1 encapsulation mpls
7600DNG(config)#neighbor 3.3.3.3 encapsulation mpls

7600DNG(config-if)#xconnect vfi ERMS_160

VC-ID =163 v dia chi IP 1.1.1.1, 3.3.3.3 lm dia chi peer toi phn vng DNG,
HCM:

Thc hnh cng ngh MEN


131
Cu hnh trn 3750DNG:
cc VLAN:

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400DNG o ch d Trunk, cho
php luu luong cc VLAN 160, 161, 163 di qua:
3750DNG(config)#interface Fa 1/0/1

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600DNG o ch d Trunk, cho
3750DNG(config)#interface Gi 1/1/1

Cu hnh trn 3400DNG:
Thc hnh cng ngh MEN


132


- Cu hnh cho giao din Fa 0/1 kt ni dn 3750DNG o ch d Trunk, cho php
3400DNG(config)#interface Fa 0/1

3400DNG(config)#interface Fa ___
3400DNG(config-if)#switchport mode access
3400DNG(config-if)#switchport access vlan ___

Thc hnh cng ngh MEN


133


ERMS chua?
7600-DNG#sh mac-address-table vlan 160

3400-DNG#show int trunk
3400-DNG#show vlan bri
Thc hnh cng ngh MEN


134
3400-DNG#show ip int bri
- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG
v 3400HCM bng dia chi IP cua VLAN 160, 161, 163 d chung to kt ni
ERMS tu phn vng DNG toi HNI v HCM thnh cng.

6.4.3. Phn vng HCM
- Dt tn hostname
6.2
- Kim tra dinh tuyn
Buc 3: Cu hnh MPLS
7600HCM
Thc hnh cng ngh MEN


135
Cu hnh trn 7600HCM:
- Thuc hin kt ni toi 3750HCM thng qua giao din Gi 4/1 o ch d Trunking
7600HCM(config-if)#switchport trunk allowed vlan 160,162,163

- Tao cc L2 VLAN 160, 162, 163:
7600HCM(config-vlan)#name ERMS-160

cua 7600HCM, 7600HCM:
7600HCM(config)#l2 vfi ERMS_160 manual
7600HCM(config)#vpn id 160
7600HCM(config)#neighbor 1.1.1.1 encapsulation mpls
7600HCM(config)#neighbor 2.2.2.2 encapsulation mpls

Thc hnh cng ngh MEN


136
7600HCM(config-if)#xconnect vfi ERMS_160

VC-ID =163 v dia chi IP 1.1.1.1, 2.2.2.2 lm dia chi peer toi phn vng HNI,
DNG:

Cu hnh trn 3750HCM:
cc VLAN:

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400HCM o ch d Trunk, cho
3750HCM(config)#interface Fa 1/0/1
Thc hnh cng ngh MEN


137
- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HCM o ch d Trunk, cho
3750HCM(config)#interface Gi 1/1/1

Cu hnh trn 3400HCM:


- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HCM o ch d Trunk, cho php
3400HCM(config)#interface Fa 0/1
Thc hnh cng ngh MEN


138

3400HCM(config)#interface Fa ___
3400HCM(config-if)#switchport mode access
3400HCM(config-if)#switchport access vlan ___



Thc hnh cng ngh MEN


139
ERMS chua?
7600-HCM#show mac-address-table vlan 160

3400-HCM#show int trunk
3400-HCM#show vlan bri
3400-HCM#show ip int bri

v 3400DNG bng dia chi IP cua VLAN 160, 162, 163 d chung to kt ni
ERMS tu phn vng HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


140
BI 7: BAO MAT CHO CC THIET BJ MANG

7.1. Mc dch
Bi thuc hnh cung cp cho hoc vin cc kin thuc lin quan dn cc cch thuc
dam bao an ninh cho h thng mang MANE v mt s cu hnh co ban d dam bao an
ton bao mt. Kt thc bi thuc hnh, hoc vin c th nm vung:
- Mt s cch thuc tn cng thit bi mang
- Cu hnh bao mt co ban cho thit bi NPE, UPE sau khi thuc hin dich vu E-
LAN v E-LINE: VTP, bao mt cng, mt khu, VLAN, CDP, loc dia chi
MAC,
- Cch kim tra v tm li cho cu hnh bao mt
STT
Vai tr
thit b|
Tn thit
b|
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
(IOS: C3750ME
Software (C3750ME-
I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
(IOS: ME340x
Software (ME340x-
METROBASE-M),
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 7.1: Danh sch thit bi mang cau hnh bao mat
Thc hnh cng ngh MEN


141
7.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 7.1: So do mang cau hnh bao mat
- Tin hnh cu hnh bao mt sau khi d cu hnh chun xc cho dich vu ERMS
voi cc tham s cu hnh dich vu nhu bang 7.2
- Kim tra trang thi VTP trn cc thit bi v dam bao rng VTP o ch d
transparent
- Cu hnh bao mt password trong cc truong hop: console, telnet, ssh, pass cho
nguoi dng
- Tt CDP trn cc giao din UNI cua dich vu ERMS
- Loc reserved VLANs bng cch tao ra cc danh sch truy nhp mo rng dia chi
MAC

Phn
vng
Thng tin khc
HNI 7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
VLAN 160 VFI-ID 160 To DNG, HCM
Thc hnh cng ngh MEN


142
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 162 Trunk
FE 1/0/1 Add VLAN 160, 161, 162 Trunk
3400HNI
VLAN 160 192.168.60.1 255.255.255.0
VLAN 161 192.168.61.1 255.255.255.0
VLAN 162 192.168.62.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
VLAN 160 VFI-ID 160 To HNI, HCM
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 163 Trunk
FE 1/0/1 Add VLAN 160, 161, 163 Trunk
3400DNG
VLAN 160 192.168.60.2 255.255.255.0
VLAN 161 192.168.61.2 255.255.255.0
VLAN 163 192.168.63.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
VLAN 160 VFI-ID 160 To HNI, DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 Add VLAN 160, 162, 163 Trunk
FE 1/0/1 Add VLAN 160, 162, 163 Trunk
3400HCM FE 0/1 VLAN 160, 162, 163 Trunk port
Thc hnh cng ngh MEN


143
VLAN 160 192.168.60.3 255.255.255.0
VLAN 162 192.168.62.2 255.255.255.0
VLAN 163 192.168.63.2 255.255.255.0
Bang 7.2: Cc tham so cau hnh dich vu ERMS dng trong cau hnh bao mat

7.4. Cc buc thc hin
7.4.1. Bao mt chung cho cc thit b|
Cu hnh cho phn vng HNI:

- Kim tra trang thi VTP Disabled trn 7600 v 3750:
Show vtp status

- Nu ch d hoat dng hin tai khng phai l transparent th dng lnh duoi dy
d chuyn trang thi:
7600HNI(config)#vtp mode transparent
7600HNI(config)#exit

- Passwords: C 2 muc truy nhp thit bi l User v Privilege.
7600-HNI(config)#service password-encryption

- Cu hnh mt khu trn tt ca cc line:
7600HNI(config)#line vty 0 15
7600HNI(config -line)#password LINE_PASSWORD

- Disable cc vty khng cn thit
7600HNI(config)#no line vty 5
Kim tra: Show run

- Cu hnh cho cng console:
Khng su dung cc account mc dinh v pass mc dinh. Thit lap user v level
cho truy cap bng console nhu sau:
7600-HNI(config)#username MANE privilege 15
Thc hnh cng ngh MEN


144
7600-HNI(config)#line console 0
7600-HNI(config-line)#privilege level 15
Kim tra: Show privilege

- Thit lp timeout:
7600-HNI(config-line)#exec-timeout 5 0

- Thit lp banner-motd:
7600-HNI(config)#banner motd Don't access to HNI

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo
rng.
O dy thuc hin tao ACL 101 cho php cc Router 7600-DNG v 7600-HCM
duoc php Telnet vo 7600-HNI.
7600-HNI(config)#access-list 101 remark PERMIT_TELNET_TO_HNI
7600-HNI(config)#access-list 101 permit tcp host 10.1.1.10 any eq 23 log
7600-HNI(config)#access-list 101 permit tcp host 10.1.1.6 any eq 23 log
7600-HNI(config)#line vty 0 14
7600-HNI(config-line)#access-class 101 in

Cu hnh cho phn vng DNG:
Show vtp status

d chuyn trang thi:
7600DNG(config)#vtp mode transparent
7600DNG(config)#exit

7600-DNG(config)#service password-encryption

Thc hnh cng ngh MEN


145
7600DNG(config)#line vty 0 15
7600DNG(config -line)#password LINE_PASSWORD

7600DNG(config)#no line vty 5
Kim tra: Show run

Khng su dung cc account mc dinh v pass mc dinh. Thit lap user v level
cho truy cap bng console nhu sau:
7600-DNG(config)#username MANE privilege 15
7600-DNG(config)#line console 0
7600-DNG(config-line)#privilege level 15

- Thit lp timeout:
7600-DNG(config-line)#exec-timeout 5 0

7600-DNG(config)#banner motd Don't access to DNG

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo rng
O dy thuc hin tao ACL 102 cho php cc Router 7600-HNI v 7600-HCM
duoc php Telnet vo 7600-DNG.
7600-DNG(config)#access-list 102 remark PERMIT_TELNET_TO_DNG
7600-DNG(config)#access-list 102 permit tcp host 10.1.1.14 any eq 23 log
7600-DNG(config)#access-list 102 permit tcp host 10.1.1.5 any eq 23 log
7600-DNG(config)#line vty 0 14
7600-DNG(config-line)#access-class 102 in

Cu hnh cho phn vng HCM:
Thc hnh cng ngh MEN


146
Show vtp status

d chuyn trang thi:
7600HCM(config)#vtp mode transparent
7600HCM(config)#exit

7600-HCM(config)#service password-encryption

7600HCM(config)#line vty 0 15
7600HCM(config -line)#password LINE_PASSWORD

7600HCM(config)#no line vty 5
Kim tra: Show run

Khng su dung cc account mc dinh v pass mc dinh. Thit lp user v level
cho truy cp bng console nhu sau:
7600-HCM(config)#username MANE privilege 15
7600-HCM(config)#line console 0
7600-HCM(config-line)#privilege level 15

- Thit lp timeout:
7600-HCM(config-line)#exec-timeout 5 0

7600-HCM(config)#banner motd Don't access to HCM
Thc hnh cng ngh MEN


147

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo rng
O dy thuc hin tao ACL 103 cho php cc Router 7600-DNG v 7600-HNI duoc
php Telnet vo 7600-HCM.
7600-HCM(config)#access-list 103 remark PERMIT_TELNET_TO_HCM
7600-HCM(config)#access-list 103 permit tcp host 10.1.1.9 any eq 23 log
7600-HCM(config)#access-list 103 permit tcp host 10.1.1.13 any eq 23 log
7600-HCM(config)#line vty 0 14
7600-HCM(config-line)#access-class 103 in

7.4.2. Bao mt cho 7604
- Cu hnh bao v root cho duong downlink kt ni toi 3750HNI (gn trn port
khng phai root port )
7600-HNI(config)#interface gigabitEthernet 4/1
7600-HNI(config-if)#spanning-tree guard root
06:13:33: %SPANTREE-SP-2-ROOTGUARD_CONFIG_CHANGE: Root guard
enabled on port GigabitEthernet3/1.

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750HNI voi:
Ti da 5 dia chi MAC an ton trn cc VLAN 160,161,162; Vuot qu gi tri 5 dia
chi duoc php cho qua ny, cc gi tin c dia chi MAC ngun khng xc dinh s
bi bo qua:
7600-HNI(config)#interface gigabitEthernet 4/1
7600-HNI(config-if)#switchport
7600-HNI(config-if)#switchport port-security maximum 5 vlan 160-162
7600-HNI(config-if)#switchport port-security violation restrict

- Kim tra cu hnh bng lnh:
show port-security
Thc hnh cng ngh MEN


148
- Cu hnh bao v root cho duong downlink kt ni toi 3750DNG (gn trn port
khng phai root port)
7600-DNG(config)#interface gigabitEthernet 4/1
7600-DNG(config-if)#spanning-tree guard root

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750DNG voi:
bi bo qua:
7600-DNG(config)#interface gigabitEthernet 4/1
7600-DNG(config-if)#switchport
7600-DNG(config-if)#switchport port-security maximum 5 vlan 160,161,163
7600-DNG(config-if)#switchport port-security violation restrict

show port-security
- Cu hnh bao v root cho duong downlink kt ni toi 3750HCM (gn trn port
khng phai root port )
7600-HCM(config)#interface gigabitEthernet 4/1
7600-HCM(config-if)#spanning-tree guard root

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750HCM voi:
bi bo qua:
7600-HCM(config)#interface gigabitEthernet 4/1
Thc hnh cng ngh MEN


149
7600-HCM(config-if)#switchport
7600-HCM(config-if)#switchport port-security maximum 5 vlan 160,162,163
7600-HCM(config-if)#switchport port-security violation restrict

show port-security

7.4.3. Bao mt cho 3750
- Ban du cu hnh cho php CDP chay trn 3750
3750-HNI(config)#cdp run
3750-HNI(config)#interface gigabitEthernet 1/1/1
3750-HNI(config-if)#cdp enable

- Loc cc VLANs dnh ring bng vic tao ra danh sch truy nhp mo rng
MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600HNI:
3750-HNI(config)#mac access-list extended PERMIT_VLAN_1
3750-HNI(config-ext-macl)#permit any any
3750-HNI(config-ext-macl)#exit

- Gn ACL ny vo giao din Gi 1/1/1:
3750-HNI(config-if)#mac access-group PERMIT_VLAN_1 in
3750-HNI(config-if)#exit

- Tao cc nh xa VLAN v loc VLAN 1 khch hng v cc VLAN dnh ring
cho ERMS 160, 161, 162:
3750-HNI(config)#vlan access-map DROP_VLAN_1_CE
3750-HNI(config-access-map)#action drop
3750-HNI(config-access-map)#exit
3750-HNI(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-HNI(config-access-map)#action drop
Thc hnh cng ngh MEN


150
3750-HNI(config-access-map)#exit
3750-HNI(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
3750-HNI(config)#vlan filter DROP_RESERVED_VLAN__CE vlan-list 160-162

- Kim tra xem c thy 3400 tu 3750 v nguoc lai?

- Khoi tao b loc BPDU v tt CDP:
3750-HNI(config-if)#no cdp enable
3750-HNI(config-if)#spanning-tree bpdufilter enable
3750-HNI(config-if)#exit
Kim tra: show cdp neighbors
3750-DNG(config)#cdp run
3750-DNG(config)#interface gigabitEthernet 1/1/1
3750-DNG(config-if)#cdp enable

MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600DNG:
3750-DNG(config)#mac access-list extended PERMIT_VLAN_1
Thc hnh cng ngh MEN


151
3750-DNG(config-ext-macl)#permit any any
3750-DNG(config-ext-macl)#exit

3750-DNG(config-if)#mac access-group PERMIT_VLAN_1 in
3750-DNG(config-if)#exit

cho ERMS 160, 161, 163:
3750-DNG(config)#vlan access-map DROP_VLAN_1_CE
3750-DNG(config-access-map)#action drop
3750-DNG(config-access-map)#exit
3750-DNG(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-DNG(config-access-map)#action drop
3750-DNG(config-access-map)#exit
3750-DNG(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
3750-DNG(config)#vlan filter DROP_RESERVED_VLAN_CE vlan-list
160,161,163


Thc hnh cng ngh MEN


152
3750-DNG(config-if)#no cdp enable
3750-DNG(config-if)#spanning-tree bpdufilter enable
3750-DNG(config-if)#exit
Kim tra: show cdp neighbors
3750-HCM(config)#cdp run
3750-HCM(config)#interface gigabitEthernet 1/1/1
3750-HCM(config-if)#cdp enable

MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600HCM:
3750-HCM(config)#mac access-list extended PERMIT_VLAN_1
3750-HCM(config-ext-macl)#permit any any
3750-HCM(config-ext-macl)#exit

3750-HCM(config-if)#mac access-group PERMIT_VLAN_1 in
3750-HCM(config-if)#exit

cho ERMS 160, 162, 163:
3750-HCM(config)#vlan access-map DROP_VLAN_1_CE
3750-HCM(config-access-map)#action drop
3750-HCM(config-access-map)#exit
3750-HCM(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-HCM(config-access-map)#action drop
3750-HCM(config-access-map)#exit
3750-HCM(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
Thc hnh cng ngh MEN


153
3750-HCM(config)#vlan filter DROP_RESERVED_VLAN__CE vlan-list
160,162,163

3750-HCM(config-if)#no cdp enable
3750-HCM(config-if)#spanning-tree bpdufilter enable
3750-HCM(config-if)#exit
- Kim tra: show cdp neighbors

Thc hnh cng ngh MEN


154
THUAT NG VIET TAT
T vit tt Vit dng dy du
ACL Access list
BPDU Bridge Protocol Data Unit
CDP Cisco Discovery Protocol
CE Customer Edge device
CEF Cisco Express Forwarding
C-VLAN Custormer VLAN
E-LINE Ethernet LINE
E-LAN Ethernet LAN
EMS Ethernet Multipoint Service
EoMPLS Ethernet over MPLS
ERS Ethernet Relay Service
ERMS Ethernet Relay Multipoint Service
EVC Ethernet Virtual Circuit
EWS Ethernet Wire Service
FE Fast Ethernet
GE Gigibit Ethernet
L2TP Layer 2 Tunneling Protocol
L2 VLAN Layer 2 VLAN
L2 VPN Layer 2 VPN
L3 VLAN Layer 3 VLAN
L3 VPN Layer 3 VPN
LDP Label Distribution Protocol
MAC Media Access Control
Thc hnh cng ngh MEN


155
MEN Metro Area Network Ethernet
MPLS Multi Protocol Label Switching
MTU Maximum Transmission Unit
MST Multiple Spanning Tree
NPE Network Provider Edge device
PING Packet Internet Groper
OSPF Open Shortest Path First
POP Point of Presence
PVST Per VLAN Spanning Tree
SVI Switched Virtual Interface
S-VLAN Service Provider VLAN
UNI User Network Interface
UPE UNI Provider Edge device
VC Virtual Circuit
VC-ID Virtual Circuit Identifier
VFI Virtual Forwarding Instance
VLAN Virtual Local Area Network
VPLS Virtual Private Line Service
VPN Virtual Private Network
VTP VLAN Trunking Protocol
VTY Virtual Type Terminal
VPN-ID Virtual Private Network Identifier

Thc hnh cng ngh MEN


156
PHJ LJC
Ph lc A: Cc lnh lin quan ti cu hnh

Lnh Giai thch
Access-list <access-list number>
<permit | deny><protocol>
<source><source-wildcard>
<destination><destination-
wildcard><>
Dinh nghia danh sch truy nhp mo rng

Interface vlan <vlan ID> Tao ra mt VLAN lop 3 (cn goi l SVI)
L2 vfi <VFI name>manual Tao L2 VFI cho dich vu da dim-da dim
L2protocol-tunnel <protocol>
Dinh nghia giao thuc duoc dt vo duong hm
trn giao din kt ni o ch d Dot1q-tunnel
Mac access-list extended
<name>
Tao ra mt danh sch truy nhp MAC mo rng
Mpls ip
Khoi tao vic chuyn tip MPLS cho cc gi
tin IPv4 theo cc duong dinh tuyn (cho giao
din hoc ton h thng)
Mpls label protocol ldp
Chi ra LDP l giao thuc phn phi nhn mc
dinh cho thit bi
Mpls ldp router-id <interface>
Chi ra giao din duoc xc dinh lm Router-ID
cho LDP
Neighbor <IP address><VPN-
ID>encapsulation mpls
Tao kt ni da dim-da dim cho dich vu
EoMPLS toi cc du cui c cng VPN-ID
Policy-map <policy-map name> Tao ra nh xa chnh sch voi chnh sch d c
Service-policy input <policy-
map name>
Gn nh xa chnh sch vo giao din
Show cdp neighbor
Hin thi thng tin v cc thit bi lin k nho
giao thuc CDP
Show interface trunk Hin thi cc duong trunk duoc cu hnh
Thc hnh cng ngh MEN


157
Show interface vlan <vlan ID>
Hin thi thng tin giao din trn VLAN lop 3
(SVI)
Hin thi thng tin v ton b cc giao din m
thit bi c
Show ip route Hin thi bang dinh tuyn
Show mpls forwarding-table
Hin thi thng tin v bang chuyn tip chuyn
mach nhn
Show mpls interface
Hin thi thng tin trang thi cc giao din duoc
cu hnh chuyn mach nhn
Show vlan
Hin thi thng tin v cc VLAN lop 2 duoc cu
hnh trn thit bi
Switchport
Dinh nghia mt cng nhu l cng chuyn mach
lop 2
Switchport access vlan <vlan
ID>
Gn cng truy nhp vo VLAN
Switchport mode dot1q-tunnel
Khoi tao vic dnh du Q-in-Q trn cng truy
nhp
Switchport mode trunk
Dinh nghia cng chuyn mach lop 2 nhu cng
trunk
Switchport trunk allowed vlan
<vlan>
Dinh nghia cc VLAN duoc php di qua trn
cng trunk
Switchport trunk allowed vlan
add <vlan>
Thm cc VLAN vo danh sch cc VLAN
trn duong trunk
System jumbomtu <size>
Dt kch thuoc MTU ln gi tri rt lon (h tro
cho MPLS) cho cc gi tin v khung trn 7600
System mtu <size>
Dt kch thuoc MTU cho cc gi tin v khung
trn b chuyn mach
System mtu jumbo <size>
Dt kch thuoc MTU ln gi tri rt lon (h tro
cho MPLS) cho cc gi tin v khung trn b
chuyn mach
Vpn id <VPN-ID>
Dt gi tri VPN-ID dng chung cho dich vu da
Thc hnh cng ngh MEN


158
dim da dim
Xconnect <IP address ><VC-
ID>encapsulation mpls
Tao kt ni dim - dim cho dich vu EoMPLS
Xconnect <VFI ><VFI name> Gn VFI d tao ra vo SVI

Thc hnh cng ngh MEN


159
Ph lc B: Tham khao cu hnh d|ch v L3 VPN trn nn MPLS
1. ERS L3
Phn vng HNI:
Cu hnh cho UPE-HNI l Router
- Tao cc L2 VLAN ( VLAN 130, VLAN 131) trn thit bi UPE-HNI kt ni toi
3400HNI cho 2 dich vu ERS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu ERS
UPE-HNI(config)#vlan 130
UPE-HNI(config-vlan)#name ERS-130
UPE-HNI(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1 kt ni toi CPE:
UPE-HNI(config)#interface FastEthernet 1/0/1
UPE-HNI(config-if)#description Trunk to 3400HNI
UPE-HNI(config-if)#no switchport
UPE-HNI(config-if)#no ip address
UPE-HNI(config-if)#mtu 1546
UPE-HNI(config-if)#no shutdown
UPE-HNI(config-if)#exit

- Tao cc SVI trn cc giao din subinterfaces cu hnh cho php luu luong
khch hng thuc cc EVC tuong ung voi gi tri VC-ID =130, VC-ID =131 v
dia chi IP tuong ung 5.5.5.5, 6.6.6.6 lm dia chi peer toi phn vng DNG,
HCM:
UPE-HNI(config)#interface Fa 1/0/1.130
UPE-HNI(config-if)#encapsulation dot1Q VC-ID
UPE-HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

UPE-HNI(config)#interface Fa 1/0/1.131
Thc hnh cng ngh MEN


160
UPE-HNI(config-if)#encapsulation dot1Q VC-ID

UPE-HNI (config)#access-list 11 permit 1.1.1.1
UPE-HNI (config)#mpls ldp discovery tageted-hello accept from 11

Cu hnh cho trung hp CPE-HNI l Switch
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-HNI
switchport
switchport mode trunk
switchport trunk encapsulation dot1Q
no ip address
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
switchport
switchport mode access
switchport access vlan 130
no ip address
no shut

Cu hnh cho CPE-HNI l Router
interface Fa 0/1
description Connect To UPE-HNI
no switchport
Thc hnh cng ngh MEN


161
no ip address
no shut

- Cu hnh giao din kt ni toi CPE-DNG:
interface Fa 0/1.130
description Connect To Router CPE-DNG
ip address 192.168.130.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi CPE-HCM:
description Connect To Router CPE-HCM
ip address 192.168.131.1 255.255.255.0
no shut

interface Fa 0/2
ip address 192.168.11.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.12.0 255.255.255.0 192.186.130.2
Ip route 192.168.13.0 255.255.255.0 192.186.132.2

Phn vng DNG:
Cu hnh cho UPE-DNG l Router
- Tao cc L2 VLAN ( VLAN 130, VLAN 132) trn thit bi UPE-DNG kt ni
toi 3400DNG cho 2 dich vu ERS.
UPE-DNG(config)#vlan 130
UPE-DNG(config-vlan)#name ERS-130
Thc hnh cng ngh MEN


162
UPE-DNG(config-vlan)#exit

UPE-DNG(config)#interface FastEthernet 1/0/1
UPE-DNG(config-if)#description Trunk to CPE
UPE-DNG(config-if)#no switchport
UPE-DNG(config-if)#no ip address
UPE-DNG(config-if)#mtu 1546
UPE-DNG(config-if)#no shutdown
UPE-DNG(config-if)#exit

khch hng thuc cc EVC tuong ung voi gi tri VC-ID =130, VC-ID =132
v dia chi IP tuong ung 4.4.4.4, 6.6.6.6 lm dia chi peer toi phn vng HNI,
HCM:
UPE-DNG(config)#interface Fa 1/0/1.130
UPE-DNG(config-if)#encapsulation dot1Q VC-ID
UPE-DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

UPE-DNG(config)#interface Fa 1/0/1.132
UPE-DNG(config-if)#encapsulation dot1Q VC-ID
UPE-DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

UPE-DNG (config)#access-list 11 permit 1.1.1.1
UPE-DNG (config)#mpls ldp discovery tageted-hello accept from 11

Thc hnh cng ngh MEN


163
Cu hnh cho trung hp CPE-DNG l Switch
interface Fa 0/1
description Connect To UPE-DNG
switchport
no ip address
no shut

interface Fa 0/2
switchport
no ip address
no shut

Cu hnh cho CPE-DNG l Router
interface Fa 0/1
description Connect To UPE-DNG
no switchport
no ip address
no shut

- Cu hnh giao din kt ni toi CPE-DNG:
description Connect To Router CPE-DNG
ip address 192.168.130.2 255.255.255.0
no shut
Thc hnh cng ngh MEN


164
ip address 192.168.132.1 255.255.255.0
no shut

interface Fa 0/2
ip address 192.168.12.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.11.0 255.255.255.0 192.186.130.1
Ip route 192.168.13.0 255.255.255.0 192.186.132.2

Phn vng HCM:
Cu hnh cho UPE-HCM l Router
- Tao cc L2 VLAN ( VLAN 131, VLAN 132) trn thit bi UPE-HCM kt ni
toi 3400HCM cho 2 dich vu ERS.
UPE-HCM(config)#vlan 131
UPE-HCM(config-vlan)#name ERS-131
UPE-HCM(config-vlan)#exit

UPE-HCM(config)#interface FastEthernet 1/0/1
UPE-HCM(config-if)#description Trunk to CPE
UPE-HCM(config-if)#no switchport
UPE-HCM(config-if)#no ip address
UPE-HCM(config-if)#mtu 1546
Thc hnh cng ngh MEN


165
UPE-HCM(config-if)#no shutdown
UPE-HCM(config-if)#exit

khch hng thuc cc EVC tuong ung voi gi tri VC-ID =131, VC-ID =132
v dia chi IP tuong ung 4.4.4.4, 5.5.5.5 lm dia chi peer toi phn vng HNI,
HCM:
UPE-HCM(config)#interface Fa 1/0/1.131
UPE-HCM(config-if)#encapsulation dot1Q VC-ID
UPE-HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

UPE-HCM(config)#interface Fa 1/0/1.132
UPE-HCM(config-if)#encapsulation dot1Q VC-ID
UPE-HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls

UPE-HCM (config)#access-list 11 permit 1.1.1.1
UPE-HCM (config)#mpls ldp discovery tageted-hello accept from 11

Cu hnh cho trung hp CPE-HCM l Switch
interface Fa 0/1
description Connect To UPE-HCM
switchport
no ip address
Thc hnh cng ngh MEN


166
no shut

interface Fa 0/2
switchport
no ip address
no shut

Cu hnh cho CPE-HCM l Router
interface Fa 0/1
description Connect To UPE-HCM
no switchport
no ip address
no shut

ip address 192.168.131.2 255.255.255.0
no shut

ip address 192.168.132.2 255.255.255.0
no shut

Thc hnh cng ngh MEN


167
interface Fa 0/2
ip address 192.168.13.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.11.0 255.255.255.0 192.186.131.1
Ip route 192.168.12.0 255.255.255.0 192.186.132.1

2. EWS L3

Cu hnh trn UPE-HNI:

- Tao cc L2 VLAN ( VLAN 140, VLAN 141) trn thit bi UPE-HNI kt ni toi
3400HNI - CE cho 2 dich vu EWS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu EWS
UPE-HNI(config)#vlan 140
UPE-HNI(config-vlan)#name EWS-140
UPE-HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 141.

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE cho php luu luong
khch hng thuc EVC 140 v 141 voi dia chi IP tuong ung 5.5.5.5, 6.6.6.6
lm dia chi peer toi phn vng HNI, HNI:
UPE-HNI(config)#interface FastEthernet ___
UPE-HNI(config-if)#description Tunnelling to 3400HNI
UPE-HNI(config-if)#no switchport
UPE-HNI(config-if)#exit

Thc hnh cng ngh MEN


168
3. EMS L3
Min MPLS mo rng toi thit bi UPE.

Cu hnh cho NPE
- Cu hnh VFI, tao EoMPLS dn cc NPE khc v dn UPE

l2 vfi EMS_150 manual
vpn id 150
neighbor 2.2.2.2 encapsulation mpls
neighbor 4.4.4.4 encapsulation mpls no-split-horizon

- Tao VLAN trn NPE:

vlan 150
name VLAN-EMS-150
exit

- Gn VFI tao ra o trn vo SVI:

interface vlan 150
xconnect vfi EMS_150
no shutdown

Cu hnh cho thit bi UPE
- Cu hnh giao din kt ni toi CPE xconnect toi NPE

interface Fa 1/0/1
description EMS Port Based
no switchport
no ip address
xconnect 1.1.1.1 150 encapsulation mpls
Thc hnh cng ngh MEN


169
Cu hnh cho CPE
interface f0/1
description Connect To ISP
ip address 172.16.0.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi mang LAN:
interface Fa 0/2
ip address 192.168.11.1 255.255.255.0
no shut

- Cu hnh dinh tuyn dn LAN tai cc sites:
Ip route 192.168.11.0 255.255.255.0 192.168.
Ip route 192.168.12.0 255.255.255.0 192.186.132.1

4. ERMS L3
Min MPLS mo rng toi thit bi UPE.

Cu hnh cho NPE
- Cu hnh VFI, tao EoMPLS dn cc NPE khc v dn UPE

l2 vfi EMS_160 manual
vpn id 160
neighbor 4.4.4.4 encapsulation mpls no-split-horizon

- Tao VLAN trn NPE:
vlan 160
name VLAN-EMS-160
Thc hnh cng ngh MEN


170
exit

- Gn VFI tao ra o trn vo SVI:

interface vlan 160
xconnect vfi EMS_160
no shutdown

Cu hnh cho thit bi UPE
- Cu hnh giao din kt ni toi CPE xconnect toi NPE de tao ket noi Multipoint
va xconnect toi cac UPE con lai de tao 2 ket noi Point-to-point:

interface Fa 1/0/1
description EMS Port Based
no switchport
no ip address

interface Fa 1/0/1.160



Cu hnh cho CPE
- Cau hinh giao dien uplink ket noi toi UPE
interface f0/1
description Connect To ISP
no ip address
no shut
Thc hnh cng ngh MEN


171
interface f0/1.160
ip address 172.16.0.1 255.255.255.252

interface f0/1.161
ip address 172.16.161.1 255.255.255.0

interface f0/1.162
ip address 172.16.162.1 255.255.255.0

- <Cu hnh dinh tuyn dn LAN tai cc Site>

Thc hnh cng ngh MEN


172
Ti liu tham khao

[1] http://www.metroethernetforum.org
[2] http://www.cisco.com
[3]Advanced Services Metro Ethernet: Switching Deployment Boot Camp Vol 1,2,3
Version 5.0; Cisco Press, 2007

Lab MEN - Bai Thuc Hanh

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab MEN - Bai Thuc Hanh

Uploaded by

Copyright:

Available Formats

Chuong trnh boi dung kin thuc v cng ngh MEN

You might also like