Configuration Guide - IP Service(V100R002C00_05)

7/29/2019 Configuration Guide - IP Service(V100R002C00_05)

1/211

Quidway S9300 Terabit Routing Switch

V100R002C00

Configuration Guide - IP Service

Issue 05

Date 2010-01-08

Huawei Proprietary and Confidential

Copyright Huawei Technologies Co., Ltd.


2/211

Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. For any

assistance, please contact our local office or company headquarters.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Copyright Huawei Technologies Co., Ltd. 2010. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written

consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are the property of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and the

customer. All or part of the products, services and features described in this document may not be within the

purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,

and recommendations in this document are provided "AS IS" without warranties, guarantees or representations

of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute the warranty of any kind, express or implied.

Huawei Proprietary and Confidential

http://www.huawei.com/


3/211

Contents

About This Document.....................................................................................................................1

1 IP Address Configuration.........................................................................................................1-1

1.1 Introduction to IP Addresses...........................................................................................................................1-2

1.2 IP Address Features Supported by the S9300.................................................................................................1-21.3 Assigning IP Addresses to Interfaces..............................................................................................................1-2

1.3.1 Establishing the Configuration Task......................................................................................................1-2

1.3.2 Setting a Primary IP Address for an Interface........................................................................................1-3

1.3.3 Setting a Secondary IP Addresses for an Interface................................................................................1-4

1.3.4 Checking the Configuration...................................................................................................................1-4

1.4 Setting Unnumbered IP Addresses..................................................................................................................1-5


1.4.2 Setting the Primary IP Address..............................................................................................................1-6

1.4.3 Setting the Unnumbered IP Address......................................................................................................1-6


1.5 Configuration Examples..................................................................................................................................1-7

1.5.1 Example for Setting Primary and Secondary IP Addresses...................................................................1-7

1.5.2 Example for Configuring a Tunnel Interface to Borrow the IP Address of a Loopback Interface........1-9

2 DHCP Configuration.................................................................................................................2-1

2.1 Introduction to DHCP.....................................................................................................................................2-2

2.2 DHCP Features Supported by the S9300........................................................................................................2-2

2.3 Creating a IP address pool...............................................................................................................................2-2


2.3.2 Creating an Address Pool.......................................................................................................................2-3

2.3.3 Configuring the Network Segment of the IP address pool.....................................................................2-4

2.3.4 Configuring the Gateway Address.........................................................................................................2-4

2.3.5 (Optional) Configuring the DNS Server................................................................................................2-5

2.3.6 (Optional) Configuring the NetBIOS Server.........................................................................................2-5

2.3.7 (Optional) Setting the Lease of the IP address pool...............................................................................2-6

2.3.8 (Optional) Configuring a VPN Instance for a IP address pool...............................................................2-6

2.3.9 (Optional) Binding IP Addresses to MAC Addresses............................................................................2-7

2.3.10 (Optional) Configuring the Options of an IP Address Pool.................................................................2-7

2.3.11 (Optional) Locking the IP address pool...............................................................................................2-8


Configuration Guide - IP Service Contents

Issue 05 (2010-01-08) Huawei Proprietary and Confidential


i


4/211

2.3.12 (Optional) Reclaiming the IP Address That Cannot Be Released........................................................2-8

2.3.13 (Optional) Setting the Format of DHCP User Name and the Password..............................................2-9

2.3.14 Checking the Configuration...............................................................................................................2-10

2.4 Configuring the DHCP Server......................................................................................................................2-10

2.4.1 Establishing the Configuration Task....................................................................................................2-10

2.4.2 Enabling DHCP....................................................................................................................................2-11

2.4.3 Configuring the DHCP Server Based on the Global Address Pool.....................................................2-11

2.4.4 Configuring the DHCP Server Based on the Address Pool of a VLANIF Interface...........................2-12

2.4.5 (Optional) Preventing Repetitive Allocation of an IP Address............................................................2-13

2.4.6 Checking the Configuration.................................................................................................................2-13

2.5 Configuring the DHCP Relay Agent.............................................................................................................2-13


2.5.2 Configuring a DHCP Server Group.....................................................................................................2-14

2.5.3 Enabling DHCP Relay.........................................................................................................................2-152.5.4 Binding an Interface to a DHCP Server Group....................................................................................2-16

2.5.5 Configuring the S9300 to Request the DHCP Server to Release an IP Address of a Client...............2-16


2.6 Maintaining DHCP........................................................................................................................................2-18

2.6.1 Clearing DHCP Statistics.....................................................................................................................2-18

2.6.2 Monitoring the Running Status of DHCP............................................................................................2-18

2.7 Configuration Examples................................................................................................................................2-19

2.7.1 Example for Configuring the DHCP Server Based on the Global Address Pool................................2-19

2.7.2 Example for Configuring the DHCP Server Based on the Address Pool of a VLANIF Interface......2-22

2.7.3 Example for Configuring the DHCP Relay Agent...............................................................................2-24

2.7.4 Example for Configuring the DHCP Relay on a VPN.........................................................................2-27

3 IP Session Configuration..........................................................................................................3-1

3.1 Introduction to the IP Session.........................................................................................................................3-2

3.2 IP Session Supported by the S9300.................................................................................................................3-2

3.3 Configuring IP Session....................................................................................................................................3-3


3.3.2 Enabling the IP Session Function...........................................................................................................3-4

3.3.3 Binding a User Authentication Domain to an Interface.........................................................................3-4

3.3.4 Setting ARP Detection Parameters........................................................................................................3-5

3.3.5 Setting the Type of a NAS Interface......................................................................................................3-6

3.3.6 Binding a VPN Instance to an Interface.................................................................................................3-7


3.4 Example for Configuring IP Session...............................................................................................................3-7

3.4.1 Example for Configuring the IP Session................................................................................................3-8

4 IP Performance Configuration.................................................................................................4-1

4.1 Overview of IP Performance...........................................................................................................................4-2

4.2 IP Performance Supported by the S9300........................................................................................................4-2

4.3 Optimizing IP Performance.............................................................................................................................4-2

Contents



ii Huawei Proprietary and Confidential


Issue 05 (2010-01-08)


5/211


4.3.2 Enabling an Interface to Check the Source IP Addresses of Packets.....................................................4-3

4.3.3 Configuring Forcible Fragmentation of Outgoing Packets on an Interface...........................................4-4

4.3.4 Setting ICMP Parameters.......................................................................................................................4-5

4.3.5 Setting TCP Parameters.........................................................................................................................4-6

4.3.6 (Optional) Setting the Load Balancing Mode of IP Packet Forwarding................................................4-7


4.4 Maintaining IP Performance...........................................................................................................................4-8

4.4.1 Clearing IP Performance Statistics.........................................................................................................4-9

4.4.2 Monitoring the Running Status of IP Performance................................................................................4-9

4.4.3 Debugging IP Performance..................................................................................................................4-10


4.5.1 Example for Disabling the Sending of ICMP Redirection Packets.....................................................4-11

4.5.2 Example for Disabling the Sending of ICMP Host Unreachable Packets...........................................4-144.5.3 Example for Optimizing System Performance by Discarding Certain ICMP Packets........................4-17

5 IP Unicast PBR Configuration.................................................................................................5-1

5.1 Introduction to IP Unicast PBR.......................................................................................................................5-2

5.2 IP Unicast PBR Features Supported by the S9300.........................................................................................5-2

5.3 Configuring IP Unicast PBR...........................................................................................................................5-2


5.3.2 Defining Matching Rules for PBR.........................................................................................................5-3

5.3.3 Defining Actions of PBR.......................................................................................................................5-4

5.3.4 Applying a Policy-based Route..............................................................................................................5-55.3.5 Checking the Configuration...................................................................................................................5-6

5.4 Maintaining IP Unicast PBR...........................................................................................................................5-6

5.4.1 Monitoring the Running Status of IP Unicast PBR................................................................................5-6

5.4.2 Debugging IP Unicast PBR....................................................................................................................5-7


5.5.1 Example for Configuring PBR Based on the Protocol Type.................................................................5-7

5.5.2 Example for Configuring PBR Based on the Packet Length...............................................................5-11

5.5.3 Example for Configuring Flow-based PBR.........................................................................................5-14

6 UDP Helper Configuration......................................................................................................6-16.1 Introduction to UDP Helper............................................................................................................................6-2

6.2 UDP Helper Features Supported by the S9300...............................................................................................6-2

6.3 Configuring UDP Helper................................................................................................................................6-3


6.3.2 Enabling the UDP Helper Function.......................................................................................................6-4

6.3.3 Configuring the UDP Port on Which Packets Are Forwarded...............................................................6-4

6.3.4 Configuring the Destination Server to Which Packets of the UDP Port Need to Be Forwarded..........6-5


6.4 Maintaining UDP Helper................................................................................................................................6-6

6.4.1 Clearing UDP Helper Statistics..............................................................................................................6-6





iii


6/211

6.4.2 Monitoring the Running Status of UDP Helper.....................................................................................6-6


6.5.1 Example for Configuring UDP Helper...................................................................................................6-7

7 DNS Configuration....................................................................................................................7-17.1 DNS Overview................................................................................................................................................7-2

7.1.1 Introduction to DNS...............................................................................................................................7-2

7.1.2 DNS Supported by the S9300................................................................................................................ 7-2

7.2 Configuring DNS............................................................................................................................................ 7-2


7.2.2 Configuring Static DNS Entries.............................................................................................................7-3

7.2.3 Configuring Dynamic DNS....................................................................................................................7-3


7.3 Maintaining DNS............................................................................................................................................ 7-5

7.3.1 Clearing DNS Entries.............................................................................................................................7-6

7.3.2 Monitoring Network Operation Status of DNS......................................................................................7-6

7.3.3 Debugging DNS.....................................................................................................................................7-6


7.4.1 Example for Configuring DNS.............................................................................................................. 7-7

8 Basic Configurations of IPv6...................................................................................................8-1

8.1 Overview of IPv6............................................................................................................................................8-2

8.2 IPv6 Features Supported by the S9300...........................................................................................................8-2

8.3 Setting an IPv6 Address for an Interface.........................................................................................................8-4


8.3.2 Enabling the IPv6 Packet Forwarding Function.................................................................................... 8-5

8.3.3 Setting the IPv6 Link-Local Address for an Interface........................................................................... 8-6

8.3.4 Setting the IPv6 Global Unicast Address on an Interface......................................................................8-6


8.4 Configuring IPv6 Neighbor Discovery...........................................................................................................8-7


8.4.2 Configuring Static Neighbors.................................................................................................................8-8

8.4.3 Enabling the Function of Advertising of RA Messages.........................................................................8-8

8.4.4 Setting the Advertisement Period of RA Messages...............................................................................8-98.4.5 Enabling Stateful Auto-Configuration...................................................................................................8-9

8.4.6 (Optional) Configuring Information About the Address Prefix to Be Advertised...............................8-10

8.4.7 Configuring Other Information to Be Advertised................................................................................8-11


8.5 Setting the PMTU..........................................................................................................................................8-12


8.5.2 Creating Static PMTU Entries..............................................................................................................8-13


8.6 Maintaining IPv6...........................................................................................................................................8-14

8.6.1 Clearing IPv6 Statistics........................................................................................................................8-14

Contents



iv Huawei Proprietary and Confidential


Issue 05 (2010-01-08)


7/211

8.6.2 Monitoring the Running Status of IPv6...............................................................................................8-15

8.6.3 Debugging IPv6....................................................................................................................................8-15


8.7.1 Example for Setting an IPv6 Address for an Interface.........................................................................8-16

9 IPv6 DNS Configuration..........................................................................................................9-1

9.1 IPv6 DNS Overview........................................................................................................................................9-2

9.1.1 Introduction to IPv6 DNS......................................................................................................................9-2

9.1.2 IPv6 DNS Supported by the S9300........................................................................................................9-2

9.2 Configuring IPv6 DNS........................................................................................................... .........................9-2


9.2.2 Configuring a Static IPv6 DNS Entry....................................................................................................9-3

9.2.3 Configuring the Dynamic IPv6 DNS Services.......................................................................................9-3


9.3 Maintaining IPv6 DNS.............................................................................. ......................................................9-5

9.3.1 Clearing IPv6 DNS Entries....................................................................................................................9-6

9.3.2 Monitoring Network Operation Status of IPv6 DNS.............................................................................9-6


9.4.1 Example for Configuring IPv6 DNS......................................................................................................9-7

10 IPv6 over IPv4 Tunnel Configuration................................................................................10-1

10.1 Introduction to IPv6 over IPv4....................................................................................................................10-2

10.2 IPv6 over IPv4 Supported by the S9300.....................................................................................................10-2

10.3 Configuring the IPv4/IPv6 Stack................................................................................................................10-6

10.3.1 Establishing the Configuration Task..................................................................................................10-6

10.3.2 Enabling the IPv6 Packet Forwarding Capability..............................................................................10-7

10.3.3 Setting IPv4 and IPv6 Addresses for an Interface..............................................................................10-8


10.4 Configuring an IPv6 over IPv4 Tunnel.......................................................................................................10-9


10.4.2 Configuring an IPv6 over IPv4 Manual Tunnel...............................................................................10-10

10.4.3 Configuring a 6to4 Tunnel...............................................................................................................10-11

10.4.4 Configuring an ISATAP Tunnel......................................................................................................10-12

10.4.5 Configuring the Tunnel Routes........................................................................................................10-1310.4.6 Checking the Configuration.............................................................................................................10-13

10.5 Configuring 6PE........................................................................................................................................10-14

10.5.1 Establishing the Configuration Task................................................................................................10-14

10.5.2 Configuring the IPv4/IPv6 Stack.....................................................................................................10-14

10.5.3 Configuring MPLS Functions..........................................................................................................10-15

10.5.4 Configuring a Peer of the 6PE..........................................................................................................10-16

10.5.5 Checking the Configuration.............................................................................................................10-17

10.6 Maintaining IPv6 over IPv4 Tunnels........................................................................................................10-17

10.6.1 Monitoring the Running Status of the IPv6 over IPv4 Tunnel........................................................10-17

10.6.2 Debugging the IPv6 over IPv4 Tunnel.............................................................................................10-18





v


8/211

10.7 Configuration Examples............................................................................................................................10-18

10.7.1 Example for Configuring an IPv6 over IPv4 Tunnel Manually.......................................................10-18

10.7.2 Example for Configuring a 6to4 Tunnel..........................................................................................10-22

10.7.3 Example for Configuring a 6to4 Relay............................................................................................10-26

10.7.4 Example for Configuring an ISATAP Tunnel.................................................................................10-30

10.7.5 Example for Configuring 6PE..........................................................................................................10-33

11 IPv4 over IPv6 Tunnel Configuration................................................................................11-1

11.1 IPv4 over IPv6 Overview............................................................................................................................11-2

11.2 IPv4 over IPv6 Supported by the S9300.....................................................................................................11-2

11.3 Configuring an IPv4 over IPv6 Tunnel.......................................................................................................11-3


11.3.2 Configuring Tunnel Interfaces...........................................................................................................11-3

11.3.3 Configuring Routes for the Tunnel....................................................................................................11-4

11.3.4 Performing Other Configurations Related to the IPv4 over IPv6 Tunnel..........................................11-5


11.4 Maintaining the IPv4 over IPv6 Tunnel......................................................................................................11-6

11.4.1 Monitoring the Running Status of the IPv4 over IPv6 Tunnel..........................................................11-6

11.4.2 Debugging the IPv4 over IPv6 Tunnel...............................................................................................11-6

11.5 Configuration Examples..............................................................................................................................11-7

11.5.1 Example for Configuring an IPv6 over IPv4 Tunnel.........................................................................11-7

Contents



vi Huawei Proprietary and Confidential


Issue 05 (2010-01-08)


9/211

Figures

Figure 1-1 Networking diagram for setting IP addresses.....................................................................................1-7

Figure 1-2 Networking diagram for configuring a tunnel interface to borrow an IP address of a loopback interface

...............................................................................................................................................................................1-9

Figure 2-1 Networking diagram for configuring the DHCP server based on the global address pool..............2-19

Figure 2-2 Networking diagram for configuring the DHCP server based on the interface address pool..........2-22

Figure 2-3 Networking diagram for configuring the DHCP relay agent............................................................2-25

Figure 2-4 Networking diagram for configuring the DHCP relay on a VPN....................................................2-27

Figure 3-1 Typical application of IP session........................................................................................................3-2

Figure 3-2 Networking diagram of IPTV.............................................................................................................3-8

Figure 4-1 Networking diagram for disabling the sending of ICMP redirection packets..................................4-12

Figure 4-2 Networking diagram for disabling the sending of ICMP host unreachable packets........................4-15

Figure 4-3 Networking for configuring ICMP security function.......................................................................4-18

Figure 5-1 Networking diagram for configuring PBR based on the protocol type..............................................5-8

Figure 5-2 Networking diagram for configuring PBR based on the packet length............................................5-11Figure 5-3 Networking diagram for configuring flow-based PBR....................................................................5-15

Figure 6-1 Networking diagram for configuring UDP helper..............................................................................6-7

Figure 7-1 Networking diagram of DNS..............................................................................................................7-7

Figure 8-1 Networking diagram for setting IPv6 addresses...............................................................................8-16

Figure 9-1 DNS server connecting IPv4 and IPv6 networks................................................. ..............................9-3

Figure 9-2 Networking diagram of IPv6 DNS configurations.............................................................................9-7

Figure 10-1 Single-Stack and Dual-Stack Structures (Ethernet)........................................................................10-2

Figure 10-2 Schematic diagram of the IPv6 over IPv4 tunnel technology........................................................10-3

Figure 10-3 6to4 Tunnel and 6to4 Relay............................................................................................................10-4

Figure 10-4 Networking diagram of the 6PE.....................................................................................................10-6

Figure 10-5 Networking diagram for configuring the IPv6 over IPv4 tunnel manually..................................10-19

Figure 10-6 Networking diagram for configuring a 6to4 tunnel......................................................................10-23

Figure 10-7 Networking diagram for configuring the 6to4 relay.....................................................................10-27

Figure 10-8 Networking diagram of the ISATAP tunnel.................................................................................10-30

Figure 10-9 Networking diagram for configuring the 6PE..............................................................................10-34

Figure 11-1 Networking of the IPv4 over IPv6 tunnel.......................................................................................11-2

Figure 11-2 Networking diagram for configuring the IPv4 over IPv6 tunnel....................................................11-7


Configuration Guide - IP Service Figures



vii


10/211


11/211

Tables

Table 5-1 Relations between values and keywords..............................................................................................5-5

Table 6-1 Lists of default UDP ports on which packets are forwarded after the UDP helper function is enabled

...............................................................................................................................................................................6-2


Configuration Guide - IP Service Tables



ix


12/211


13/211

About This Document

Purpose

This document describes the configurations of the IP services of the S9300, including the basic

knowledge and configurations of secondary IP addresses, DHCP, IP performance, IP unicast

policy-based routing, UDP Helper, basic IPv6 functions, IPv6 over IPv4 tunnels, IPv4 over IPv6tunnels, and IP sessions. By reading this document, you can learn the concepts and configuration

procedures of IP services.

Related Versions

The following table lists the product versions related to this document.

Product Name Version

S9300 V100R002C00

Intended Audience

This document is intended for:

l Policy planning engineers

l Installation and commissioning engineers

l NM configuration engineers

l Technical support engineers

Organization

This document is organized as follows.

Chapter Description

1 IP Address Configuration Describes the general procedure for setting IP addresses.


Configuration Guide - IP Service About This Document



1


14/211

Chapter Description

2 DHCP Configuration Describes the principle of DHCP and provides configuration

procedures and examples of DHCP.

3 IP Session Configuration Describes the concepts of the IP session and provides theconfiguration procedures and examples of the IP session.

4 IP Performance

Configuration

Describes the principle of IP performance and provides

configuration procedures and examples of IP performance.

5 IP Unicast PBR

Configuration

Describes the principle of IP unicast PBR and provides

configuration procedures and examples of IP unicast PBR.

6 UDP Helper

Configuration

Describes the principle of UDP helper and provides

configuration procedures and examples of UDP helper.

7 DNS Configuration Describes the principle of DNS and provides configuration

procedures and examples of DNS.

8 Basic Configurations of

IPv6

Describes the concepts of IPv6 and provides configuration

procedures and examples of IPv6.

9 IPv6 DNS Configuration Describes the principle of IPv6 DNS and provides

configuration procedures and examples of IPv6 DNS.

10 IPv6 over IPv4 Tunnel

Configuration

Describes the principle of the IPv6 over IPv4 tunnel and

provides configuration procedures and examples of the IPv6

over IPv4 tunnel.

11 IPv4 over IPv6 Tunnel

Configuration

Describes the principle of the IPv4 over IPv6 tunnel and

provides configuration procedures and examples of the IPv4over IPv6 tunnel.

Conventions

Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol Description

DANGER

Indicates a hazard with a high level of risk, which if not

avoided, will result in death or serious injury.

WARNING

Indicates a hazard with a medium or low level of risk, which

if not avoided, could result in minor or moderate injury.

About This Document



2 Huawei Proprietary and Confidential


Issue 05 (2010-01-08)


15/211

Symbol Description

CAUTION

Indicates a potentially hazardous situation, which if not

avoided, could result in equipment damage, data loss,

performance degradation, or unexpected results.

TIP Indicates a tip that may help you solve a problem or save

time.

NOTE Provides additional information to emphasize or supplement

important points of the main text.

General Conventions

The general conventions that may be found in this document are defined as follows.

Convention Description

Times New Roman Normal paragraphs are in Times New Roman.

Boldface Names of files, directories, folders, and users are in

boldface. For example, log in as userroot.

Italic Book titles are in italics.

Courier New Examples of information displayed on the screen are in

Courier New.

Command Conventions

The command conventions that may be found in this document are defined as follows.


Boldface The keywords of a command line are in boldface.

Italic Command arguments are in italics.

[ ] Items (keywords or arguments) in brackets [ ] are optional.

{ x | y | ... } Optional items are grouped in braces and separated by

vertical bars. One item is selected.

[ x | y | ... ] Optional items are grouped in brackets and separated by

vertical bars. One item is selected or no item is selected.

{ x | y | ... }* Optional items are grouped in braces and separated by

vertical bars. A minimum of one item or a maximum of all

items can be selected.

[ x | y | ... ]* Optional items are grouped in brackets and separated by

vertical bars. Several items or no item can be selected.





3


16/211


& The parameter before the & sign can be repeated 1 to n times.

# A line starting with the # sign is comments.

GUI Conventions

The GUI conventions that may be found in this document are defined as follows.


Boldface Buttons, menus, parameters, tabs, window, and dialog titles

are in boldface. For example, clickOK.

> Multi-level menus are in boldface and separated by the ">"

signs. For example, choose File > Create > Folder.

Keyboard Operations

The keyboard operations that may be found in this document are defined as follows.

Format Description

Key Press the key. For example, press Enter and press Tab.

Key 1+Key 2 Press the keys concurrently. For example, pressing Ctrl+Alt

+A means the three keys should be pressed concurrently.

Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means

the two keys should be pressed in turn.

Mouse Operations

The mouse operations that may be found in this document are defined as follows.

Action Description

Click Select and release the primary mouse button without moving

the pointer.

Double-click Press the primary mouse button twice continuously and

quickly without moving the pointer.

Drag Press and hold the primary mouse button and move the

pointer to a certain position.

About This Document





Issue 05 (2010-01-08)


17/211

Update History

Updates between document issues are cumulative. Therefore, the latest document issue contains

all updates made in previous issues.

Updates in Issue 05 (2010-01-08)

Based on issue 04 (2009-11-10), the document is updated as follows:

The following information is added:

l DHCP Configuration: 2.7.4 Example for Configuring the DHCP Relay on a VPN



The following information is modified:

l DHCP Configuration: 2.5.3 Enabling DHCP Relay

l DHCP Configuration: 2.7.3 Example for Configuring the DHCP Relay Agent

l Basic Configurations of IPv6: 8.5.1 Establishing the Configuration Task

l Basic Configurations of IPv6: 8.5.3 Checking the Configuration

l IPv6 over IPv4 Tunnel Configuration: 10.7.1 Example for Configuring an IPv6 over

IPv4 Tunnel Manually

l IPv6 over IPv4 Tunnel Configuration: 10.7.2 Example for Configuring a 6to4 Tunnel

l IPv6 over IPv4 Tunnel Configuration: 10.7.5 Example for Configuring 6PE




l 2.4 Configuring the DHCP Server

l 2.7.1 Example for Configuring the DHCP Server Based on the Global Address Pool

l 2.7.2 Example for Configuring the DHCP Server Based on the Address Pool of a

VLANIF Interface

The following information is modified:

l 2.3.4 Configuring the Gateway Address

l 2.3.5 (Optional) Configuring the DNS Server

l 2.3.6 (Optional) Configuring the NetBIOS Server

l 2.3.9 (Optional) Binding IP Addresses to MAC Addresses








5


18/211

l 7 DNS Configuration

l 9 IPv6 DNS Configuration

l 5.5.3 Example for Configuring Flow-based PBR


Initial commercial release.

About This Document





Issue 05 (2010-01-08)


19/211

1 IP Address ConfigurationAbout This Chapter

This chapter describes the concept and configuration procedures of the IP addresses on the

S9300.

1.1 Introduction to IP Addresses

This section describes the concept of IP addresses.

1.2 IP Address Features Supported by the S9300

This section describes the methods for setting the IP addresses for the S9300.

1.3 Assigning IP Addresses to Interfaces

This section describes the procedure for assigning the IP addresses to interfaces.

1.4 Setting Unnumbered IP Addresses

This section describes how to configure a tunnel interface to use the address of the loopback

interface.

1.5 Configuration Examples

This section provides several examples of IP address configuration.


Configuration Guide - IP Service 1 IP Address Configuration



1-1


20/211

1.1 Introduction to IP Addresses

This section describes the concept of IP addresses.

Each host needs an IP address to communicate with each other on an IP network.

An IP address is a 32-bit address used on the Internet. It consists of a network ID and a host ID.

The network ID identifies a network and the host ID identifies a specific network device on the

network. If multiple network devices have the same network ID, they reside on the same network

regardless of their physical locations.

1.2 IP Address Features Supported by the S9300

This section describes the methods for setting the IP addresses for the S9300.

The S9300 supports the following methods for setting IP addresses:

l Setting static IP addresses for interfaces manually

l Configuring an interface to borrow an IP address from other interfaces

To save IP address spaces, the S9300 enables you to configure the address mask of an interface

as 31 bits. In this case, there are two IP addresses on a subnet: the subnet address and the broadcast

address of the subnet. Both the addresses are called host addresses.

1.3 Assigning IP Addresses to InterfacesThis section describes the procedure for assigning the IP addresses to interfaces.

1.3.1 Establishing the Configuration Task

1.3.2 Setting a Primary IP Address for an Interface

1.3.3 Setting a Secondary IP Addresses for an Interface

1.3.4 Checking the Configuration


Applicable Environment

To run IP services on an interface, you need to set an IP address for the interface. Each interface

of the S9300 can be assigned with multiple IP addresses, in which one is the primary IP address

and the others are secondary IP addresses.

Generally, only one IP address, namely, the primary IP address, is required for an interface. In

special cases, the secondary IP addresses need to be set for the interface. For example, the

S9300 is connected to a physical network through an interface. The hosts on this physical

network belong to two Class C networks. In this case, you need to set a primary IP address and

a secondary IP address on the interface of the S9300. The S9300 can then communicate with allthe hosts on the physical network.

1 IP Address Configuration



1-2 Huawei Proprietary and Confidential


Issue 05 (2010-01-08)


21/211

Pre-configuration Tasks

Before setting an IP address for an interface, complete the following tasks:

l Connecting interfaces and setting the physical parameters of each interface to make the

physical layer in Up state

l Setting parameters of the link layer protocol for interfaces and ensuring that the status of

the link layer protocol on the interfaces is Up

Data Preparation

To set an IP address for an interface, you need the following data.

No. Data

1 Interface number

2 IP address and subnet mask of the interface

3 (Optional) Secondary IP address and subnet

mask of the interface

1.3.2 Setting a Primary IP Address for an Interface

Context

NOTE

On the S9300, the GE main interface, Ethernet main interface except for the Eth interface, and the Eth-

Trunk main interface cannot be configured with IP addresses.

Do as follows on the S9300.

Procedure

Step 1 Run:system-view

The system view is displayed.

Step 2 Run:interfaceinterface-type interface-number

The interface view is displayed.

Step 3 Run:ip addressip-address { mask | mask-length }

The IP address of the interface is set.

One interface has only one primary IP address. If a primary IP address is already set on an

interface when a new primary IP address is set, the original primary IP address is deleted and

the new primary IP address takes effect.

----End





1-3


22/211

1.3.3 Setting a Secondary IP Addresses for an Interface

Context

NOTE

On the S9300, the GE main interface, Ethernet main interface except for the Eth interface, and the Eth-

Trunk main interface cannot be configured with IP addresses.


Procedure

Step 1 Run:

system-view


Step 2 Run:

interfaceinterface-type interface-number


Step 3 Run:

ip addressip-address { mask | mask-length } sub

The secondary IP address of the interface is set.

The secondary IP address with a 31-bit mask can be set for the interface.

Each interface supports up to 31 secondary IP addresses.

NOTE

The primary and secondary IP addresses of the same interface or different secondary IP addresses of the

same interface cannot be in the same network segment.

----End


ContextAll configurations are complete.

Procedure

Step 1 Run the display ip interface [ interface-type interface-number] command to view the settingsof IP addresses on the interface.

Step 2 Run the display ip interface brief[ interface-type [ interface-number] ] command to view briefinformation about IP addresses on the interface.

----End






Issue 05 (2010-01-08)


23/211

1.4 Setting Unnumbered IP Addresses

This section describes how to configure a tunnel interface to use the address of the loopback

interface.


1.4.2 Setting the Primary IP Address

1.4.3 Setting the Unnumbered IP Address



Applicable EnvironmentIn certain application environment, an interface needs to be configured to borrow an IP address

from another interface, thus saving IP addresses. Sometimes, an interface that is rarely used can

be configured to borrow an IP address from another interface. Configuring such interface with

a fixed IP address is unnecessary.

At present, the S9300 only allows the tunnel interface to borrow the IP address of the loopback

interface.


Before configuring an unnumbered address for an interface, complete the following tasks:

l Setting the physical attributes of the interface that borrows an IP address and the interface

that lends an IP address

l Setting the link layer protocol of the interface that borrows an IP address and the interface

that lends an IP address

Data Preparation

To set an unnumbered IP address for an interface, you need the following data.

No. Data

1 Number, IP address, and mask of the interfacethat lends an IP address

2 Number of the interface that borrows an IP

address

NOTE

This section describes only the configuration of IP address unnumbered.

Because the interface that borrows an IP address does not have an IP address itself, the dynamic routing

protocol cannot be enabled on such an interface. Therefore, you must manually set a static route to theremote network segment to implement the interconnectionbetween S9300s.





1-5


24/211

1.4.2 Setting the Primary IP Address

Context


Procedure





Step 3 Run:ip addressip-address { mask | mask-length }

The primary IP address of the interface is set.

----End

1.4.3 Setting the Unnumbered IP Address

Context


Procedure





Step 3 Run:ip address unnumbered interfaceinterface-type interface-number

The interface is configured to borrow the IP address of a specified interface.

----End


Context

All configurations are complete.






Issue 05 (2010-01-08)


25/211

Procedure

Step 1 Run the display ip interface [ interface-type interface-number] command to view informationabout IP addresses on the interface.

Step 2 Run the display ip interface brief[ interface-type [ interface-number] ] command to view briefinformation about the IP address on the interface.

----End


This section provides several examples of IP address configuration.

1.5.1 Example for Setting Primary and Secondary IP Addresses

1.5.2 Example for Configuring a Tunnel Interface to Borrow the IP Address of a LoopbackInterface

1.5.1 Example for Setting Primary and Secondary IP Addresses

Networking Requirements

As shown in Figure 1-1, GE 1/0/1 of the S9300 is connected to a LAN, in which hosts belong

to two different network segments, that is 172.16.1.0/24 and 172.16.2.0/24. It is required that

the S9300 can access the two network segments but the host in 172.16.1.0/24 cannot interconnect

with the host in 172.16.2.0/24.

Figure 1-1 Networking diagram for setting IP addresses

172.16.1.0/24

172.16.2.0/24

S9300

GE 1/0/1VLANIF 100

172.16.1.1/24172.16.2.1/24 sub

Configuration Roadmap

The configuration roadmap is as follows:





1-7


26/211

1. Analyze the address of the network segment to which each interface is connected.

2. Set the secondary IP addresses for an interface.

NOTE

Note that the primary and secondary IP addresses of the same interface or different secondary IP addressesof the same interface cannot be in the same network segment.

Data Preparation

To complete the configuration, you need the following data.

l Primary IP address and subnet mask of the interface

l Secondary IP address and subnet mask of the interface

Procedure

Step 1 Set the IP address for VLANIF 100 where GE 1/0/1 of the S9300 belongs.

system-view

[Quidway] vlan 100[Quidway-Vlan100] quit[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1]port hybrid pvid vlan 100

[Quidway-GigabitEthernet1/0/1]port hybrid untagged vlan 100[Quidway-GigabitEthernet1/0/1] quit[Quidway] interface vlanif 100

[Quidway-Vlanif100] ip address 172.16.1.1 24

[Quidway-Vlanif100] ip address 172.16.2.1 24 sub

Step 2 Verify the configuration.

# Ping a host on network segment 172.16.2.0 from S9300. The ping succeeds.

ping 172.16.1.2

PING 172.16.1.2: 56 data bytes, press CTRL_C to break

Reply from 172.16.1.2: bytes=56 Sequence=1 ttl=128 time=25 msReply from 172.16.1.2: bytes=56 Sequence=2 ttl=128 time=27 ms

Reply from 172.16.1.2: bytes=56 Sequence=3 ttl=128 time=26 ms


--- 172.16.1.2 ping statistics ---

5 packet(s) transmitted

5 packet(s) received0.00% packet loss

round-trip min/avg/max = 25/26/27 ms

Ping a host on network segment 172.16.2.0 from the S9300. The ping succeeds.

ping 172.16.2.2PING 172.16.2.2: 56 data bytes, press CTRL_C to break




Reply from 172.16.2.2: bytes=56 Sequence=5 ttl=128 time=26 ms--- 172.16.2.2 ping statistics ---


5 packet(s) received

0.00% packet lossround-trip min/avg/max = 25/25/26 ms

----End






Issue 05 (2010-01-08)


27/211

Configuration Files

Configuration file of the S9300

#

sysname Quidway#

vlan 100

#

interface Vlanif100ip address 172.16.1.1 255.255.255.0

ip address 172.16.2.1 255.255.255.0 sub

#

interface GigabitEthernet1/0/1port hybrid pvid vlan 100

port hybrid untagged vlan 100

#return

1.5.2 Example for Configuring a Tunnel Interface to Borrow the IPAddress of a Loopback Interface

Networking Requirements

As shown in Figure 1-2, Tunnel 3/0/15 of S9300-A is connected to S9300-C through a tunnel.

Tunnel 3/0/15 of S9300-A is rarely used. To save IP addresses, configure Tunnel 3/0/15 to

borrow the IP address of Loopback0. Tunnel 3/0/15 of S9300-C borrows the IP address of

Loopback0 of S9300-C.

Figure 1-2 Networking diagram for configuring a tunnel interface to borrow an IP address of a

loopback interface

LoopBack0

9.9.9.9/32

S9300-B

S9300-A S9300-C

Tunnel

PC 1 PC 2

LoopBack0

116.1

16.1

16.1

16/32

Tunnel 3/0/15 Tunnel 3/0/15

Configuration Roadmap

The configuration roadmap is as follows:

l Set addresses of the Loopback0 interfaces of S9300-A and S9300-C.

l Configure OSPF.





1-9


28/211

l Configure Tunnel 3/0/15 of S9300-A to borrow the IP address of Loopback0.

l Configure Tunnel 3/0/15 of S9300-C to borrow the IP address of Loopback0.

Data PreparationTo complete the configuration, you need the following data.

l IP address for Loopback0 of S9300-A

l IP address for Loopback0 of S9300-C

l Index for Loopback0 of S9300-A

l Index for Loopback0 of S9300-C

Procedure

Step 1 # Configure S9300-A.

# Set an IP address for Loopback0 of S9300-A.

system-view[Quidway] sysname S9300-A[S9300-A] interface loopback 0

[S9300-A-LoopBack0] ip address 116.116.116.116 32[S9300-A-LoopBack0] quit

Configure OSPF.

[S9300-A] ospf[S9300-A-ospf-1] area 0[S9300-A-ospf-1-area-0.0.0.0] network 116.116.116.116 0.0.0.0

[S9300-A-ospf-1-area-0.0.0.0] quit[S9300-A-ospf-1] quit

# Configure Tunnel 3/0/15 to borrow the IP address of Loopback0.

[S9300-A] interface tunnel 3/0/15[S9300-A-Tunnel3/0/15] ip address unnumbered interface loopback 0[S9300-A-Tunnel3/0/15] quit

Step 2 Configure S9300-C. The configuration procedure is the same as the configuration procedure ofS9300-A.

Step 3 Verify the configuration.

# Ping 9.9.9.9 on S9300-A.

[S9300-A]ping 9.9.9.9PING 9.9.9.9: 56 data bytes, press CTRL_C to break





--- 9.9.9.9 ping statistics ---


5 packet(s) received

0.00% packet lossround-trip min/avg/max = 2/2/3 ms

----End






Issue 05 (2010-01-08)


29/211

Configuration Files

l Configuration file of S9300-A

#

sysname S9300-A

#interface LoopBack0ip address 116.116.116.116 255.255.225.255

#

interface Tunnel3/0/15

ip address unnumbered interface LoopBack0#

ospf 1

area 0.0.0.0network 116.116.116.116 0.0.0.0

#

return

l Configuration file of S9300-C

#

sysname S9300-C

#interface LoopBack0

ip address 9.9.9.9 255.255.225.255#

interface Tunnel3/0/15

ip address unnumbered interface LoopBack0

#ospf 1

area 0.0.0.0

network 9.9.9.9 0.0.0.0

#return





1-11


30/211


31/211

2DHCP ConfigurationAbout This Chapter

This chapterdescribes the principle of the Dynamic Host Configuration Protocol (DHCP), and

provides configuration procedures and examples of DHCP.

2.1 Introduction to DHCP

This section describes the principle of DHCP.

2.2 DHCP Features Supported by the S9300

This section describes the DHCP features supported by the S9300.

2.3 Creating a IP address poolThis section describes how to create a IP address pool and set parameters for the IP address pool.

2.4 Configuring the DHCP Server

The S9300 can function as the DHCP server to assign IP addresses to users.

2.5 Configuring the DHCP Relay Agent

This section describes how to configure the DHCP relay agent so that DHCP requests from

clients can be sent to the DHCP server through the DHCP relay agent across the network

segment.

2.6 Maintaining DHCP

This section describes how to maintain DHCP.


This section provides several configuration examples of DHCP.


Configuration Guide - IP Service 2 DHCP Configuration



2-1


32/211

2.1 Introduction to DHCP

This section describes the principle of DHCP.

With the rapid growth in network scales and complexity, network configuration becomes more

complicated; the location of hosts such as portable computers and wireless networks changes;

the number of computers exceeds the number of assignable IP addresses. DHCP is developed

to solve the preceding problems.

DHCP works in client/server mode. DHCP clients request the configuration from the DHCP

server dynamically. Then, the DHCP server can send the configuration to the clients easily.

The early DHCP protocol is used on a subnet where the DHCP clients and DHCP server are

located, whereas it cannot work across the network segment. In this case, you need to configure

a DHCP server for each subnet, which wastes resources. DHCP relay is introduced to prevent

the wastage of resources.

2.2 DHCP Features Supported by the S9300

This section describes the DHCP features supported by the S9300.

The S9300 supports DHCP relay; therefore, the S9300 can provide relay services for DHCP

clients across subnets and the DHCP server. The S9300 then sends DHCP protocol messages to

the destination DHCP server or clients across the network segment. In this case, DHCP clients

on multiple networks can use the same DHCP server. This saves the costs and facilitates

centralized management.

The S9300 can assign IP addresses to online users as a DHCP server.

2.3 Creating a IP address pool

This section describes how to create a IP address pool and set parameters for the IP address pool.

Context

NOTE

At present, no route is generated after an IP address pool is created. You need to create routes manually.

The method for creating routes is not described in this section.


2.3.2 Creating an Address Pool

2.3.3 Configuring the Network Segment of the IP address pool

2.3.4 Configuring the Gateway Address

2.3.5 (Optional) Configuring the DNS Server

2.3.6 (Optional) Configuring the NetBIOS Server

2.3.7 (Optional) Setting the Lease of the IP address pool

2.3.8 (Optional) Configuring a VPN Instance for a IP address pool

2 DHCP Configuration





Issue 05 (2010-01-08)


33/211

2.3.9 (Optional) Binding IP Addresses to MAC Addresses

2.3.10 (Optional) Configuring the Options of an IP Address Pool

2.3.11 (Optional) Locking the IP address pool

2.3.12 (Optional) Reclaiming the IP Address That Cannot Be Released

2.3.13 (Optional) Setting the Format of DHCP User Name and the Password




Deploy services near users on the distributed network. As a convergence point, the S9300 assigns

IP addresses to users through the local DHCP server or the remote DHCP server to terminateclients on the S9300.

When the S9300 is used to assign IP addresses to users, the DHCP server needs to be set for the

S9300.


None

Data Preparation

To configure the IP address pool, you need the following data.

No. Data

1 Network segment address and gateway

address of the IP address pool

2 IP address of the DNS server

3 IP address of the NetBOIS server

2.3.2 Creating an Address Pool

Context


Procedure







2-3


34/211

Step 2 Run:ip poolip-pool-name

A IP address pool is created and the view of the IP address pool is displayed.

----End

2.3.3 Configuring the Network Segment of the IP address pool

Context


Procedure




The IP address pool view is displayed.

Step 3 Run:networkip-address [mask { mask | mask-length }

The IP address of the network segment that can be allocated is set for the IP address pool.

Step 4 (Optional) Run:excluded-ip-addressstart-ip-address [ end-ip-address ]

The disabled IP address is set.

----End

2.3.4 Configuring the Gateway Address

Context


Procedure





Step 3 Run:gateway-listip-address&






Issue 05 (2010-01-08)


35/211

The IP address is set for the egress gateway.

----End

2.3.5 (Optional) Configuring the DNS ServerContext


Procedure





Step 3 Run:dns-listip-address &

The DNS server is configured.

Step 4 Run:dns-suffix

The DNS suffix is set.

----End

2.3.6 (Optional) Configuring the NetBIOS Server

Context


NetBIOS indicates the Network Basic Input/Output System.

Procedure





Step 3 Run:nbns-listip-address &





2-5


36/211

The NetBIOS server is configured.

Step 4 Run:netbios-type {b-node | h-node |m-node |p-node }

The NetBIOS type of the client is set.

----End

2.3.7 (Optional) Setting the Lease of the IP address pool

Context


Procedure





Step 3 Run:lease { days [ hours [ minutes ] ] | unlimited}

The lease of the IP address pool is set.

By default, the lease is one day.

----End

2.3.8 (Optional) Configuring a VPN Instance for a IP address pool

Context


Procedure



Step 2 Run:ip vpn-instancevpn-instance-name

The VPN instance is created.

Step 3 Run:quit







Issue 05 (2010-01-08)


37/211



Step 5 Run:vpn-instancevpn-instance-name

The address pool is associated with a VPN instance.

----End

2.3.9 (Optional) Binding IP Addresses to MAC Addresses

Context

Certain clients may need fixed IP addresses. In this case, you need to bind IP addresses to theMAC addresses of these clients. When these clients apply for IP addresses through DHCP, the

DHCP server finds out the corresponding IP addresses according to their MAC addresses and

assign the IP addresses to the clients.

Procedure





Step 3 Run:static-bindip-addressip-addressmac-addressmac-address

The IP address is bound to a MAC address.

----End

2.3.10 (Optional) Configuring the Options of an IP Address Pool

Context

The Option field in a DHCP packet is used to carry control information and parameters that are

not defined in protocols. If the DHCP server is configured with the Option field, when a DHCP

client applies for an IP address, the client can obtain the configuration information in the Option

field of the DHCP reply packet from the server.

Procedure






2-7


38/211


Step 2 Run:

ip poolip-pool-name


Step 3 Run:

optioncode { asciiascii-string| hexhex-string| ip-addressip-address }

The Option of the IP address pool is configured.

After the option command is run, the specified option is carried by the DHCP reply packet

returned by the DHCP server. Before running this command, ensure that you know the functions

of the specified option.

----End

2.3.11 (Optional) Locking the IP address pool

Context


Procedure

Step 1 Run:

system-view


Step 2 Run:

ip poolip-pool-name


Step 3 Run:

lock

The address pool is locked.

CAUTION

After the lockcommand is run, the IP address pool is locked and cannot be used for assigning

IP addresses to clients.

----End

2.3.12 (Optional) Reclaiming the IP Address That Cannot Be

Released






Issue 05 (2010-01-08)


39/211

Context

If the IP addresses in the address pool cannot be released, you can reclaim the IP addresses

manually.

Procedure





Step 3 Run:

recyclestart-ip-address [ end-ip-address ]

The IP addresses that cannot be released are reclaimed.

----End

2.3.13 (Optional) Setting the Format of DHCP User Name and thePassword

Procedure



Step 2 Run:dhcp user-name format-include { ip-address |mac-address | option82 | sysname }

The format of the DHCP user name and the sequence of elements in the user name are specified.

By default, the DHCP user name is in the following format: system name + "-" + slot ID (two

digits, prefixed 0 if it contains only one digit) + subcard ID (one digit, set to 0 if the subcard

does not exist) + port number (two digits, prefixed 0 if it contains only one digit) + outer VLAN

ID (four digits, prefixed 0 if it contains less than four digits) + inner VLAN ID (five digits,

prefixed 0 if it contains less than five digits) + @ + access domain name, for example,

Quidway-02024000000768@domain1.

If the user name is generated according to the Option 82 field and the user name contains non-

ASCII characters, the non-ASCII characters are displayed as "..." for

example, ...session1@domain1.

Step 3 Run:dhcp user-password{ ciphercipher-password| simplesimple-password}

The password of DHCP user is set.

By default, the DHCP password is set to vlan in plain text mode.

----End





2-9


40/211


Procedure

lRun the display ip pool [ { nameip-pool-name | interfaceinterface-name } [ low-ip-addresshigh-ip-address | all | used | conflict ] ] command to view the configuration of the

IP address pool.

l Run the display ip poolvpn-instancevpn-instance-name to view the configuration of the

IP address pool in the specified VPN instance.

----End

2.4 Configuring the DHCP Server

The S9300 can function as the DHCP server to assign IP addresses to users.


2.4.2 Enabling DHCP

2.4.3 Configuring the DHCP Server Based on the Global Address Pool

2.4.4 Configuring the DHCP Server Based on the Address Pool of a VLANIF Interface

2.4.5 (Optional) Preventing Repetitive Allocation of an IP Address




When the S9300 functions as a DHCP server, you can set the mode of processing the DHCP

packets whose destination addresses are the IP address of the local S9300. The S9300 can assign

IP addresses through the global address pool or the interface address pool.

The client and the S9300 need to be located on the same subnet and each interface can be

configured with only one processing mode.

NOTE

This section describes only the configuration of local address allocation on the S9300. For the configuration

of the address pool, see 2.3 Creating a IP address pool.


Before configuring the DHCP server, complete the following tasks:

l Creating the VLANIF interface

l (Optional) Configuring the DNS server

l (Optional) Configuring the NetBIOS server

l

Configuring the routes to the DNS server and the NetBIOS server (If the servers are notconfigured, you do not need to configure the route)




2-10 Huawei Proprietary and C

Date post:	14-Apr-2018
Category:	Documents
Upload:	denis-derg
View:	230 times
Download:	0 times

Configuration Guide - IP Service(V100R002C00_05)

Documents