Está en la página 1de 172

Chuong trnh boi dung kin thuc v cng ngh MEN

1



HOC VIEN BUU CHNH VIN THNG VIET NAM
HOC VIEN BUU CHNH VIN THNG
TRUNG TM CNG NGHJ THNG TIN










HUNG DN THUC HNH
CNG NGHE MEN













H Ni, thng 05 nm 2009


Chuong trnh boi dung kin thuc v cng ngh MEN

2

LI NI DAU
Cng voi xu huong pht trin cng ngh v mang vin thng trn th gioi, Tap don
dang trin khai manh me mang th h sau ca o mang li v o phan truy nhap. Tai cc
tinh, Tap don d c k hoach trin khai mang Metro dua trn cng ngh Ethernet d
dp ung yu cau v truyn tai bng rong. Cng ngh mang Metro l cng ngh moi v
c mot so van d van cn dang trong qu trnh chuan ho. Do vay doi ng kv su v
cn bo kv thuat vin thng can phai duoc boi dung, cap nhat kin thuc v cng ngh
moi ny, c nhu vay ho moi du kha nng v trnh do d van hnh, khai thc, quan l
v trin khai cc dich vu mot cch hiu qua.
Chuong trnh "Bi dung kin thc v cng ngh MEN" cua Tap don duoc xy
dung voi muc dch cung cap kin thuc v kv nng co ban lin quan toi mang Metro
Ethernet cho cc cn bo se truc tip trin khai, quan l v khai thc nhm dp ung yu
cau v vic trin khai v quan l mang Metro Ethernet trong thoi gian sp toi.
Joi diu kin co so ha tang hin tai, chi c thit bi mang Metro Ethernet cua Cisco, do
d ti liu ny se trnh by cc bi thuc hnh trn thit bi cua Cisco.
Cuon ti liu thuc hnh v mang MEN bao gom 7 bi:
Bi 1: Cau hnh mang co ban
Bi 2 : Cau hnh MPLS Core
Bi 3 : Cau hnh dich vu ERS
Bi 4 : Cau hnh dich vu EWS
Bi 5 : Cau hnh dich vu EMS
Bi 6 : Cau hnh dich vu ERMS
Bi 7 : Bao mat cho cc thit bi mang
Ti liu duoc hon thnh trong thoi gian ngn nn khng trnh khoi thiu st. Tc gia
rat mong nhan duoc kin dng gp kin cua qu doc gia v cc dong nghip.


TRUNG TM CNG NGHE THNG TIN

Chuong trnh boi dung kin thuc v cng ngh MEN

3
MJC LJC

LI NI DAU............................................................................................................ 2
MJC LJC .................................................................................................................. 3
DANH SCH HNH V............................................................................................ 6
DANH SCH BANG ................................................................................................. 7
BI 1: CU HNH MANG CO BAN .................................................................. 8
1.1. Muc dch ....................................................................................................... 8
1.2. Danh sch thit bi v cu hnh mang.............................................................. 8
1.2.1. Danh sch thit bi ........................................................................................... 8
1.2.2. Cu hnh mang ................................................................................................ 9
1.3. Yu cu bi thuc hnh ................................................................................... 9
1.4. Cc buoc thuc hnh ..................................................................................... 10
1.4.1. Phn vng HNI ............................................................................................. 10
1.4.2. Phn vng DNG ............................................................................................ 13
1.4.3. Phn vng HCM ........................................................................................... 16
BI 3: CU HNH MPLS CORE ..................................................................... 20
3.1. Muc dch ..................................................................................................... 20
3.2. Danh sch thit bi v cu hnh mang............................................................ 20
3.2.1. Danh sch thit bi ......................................................................................... 20
3.2.2. Cu hnh mang .............................................................................................. 21
3.3. Yu cu bi thuc hnh ................................................................................. 21
3.4. Cc buoc thuc hnh ..................................................................................... 22
3.4.1. Phn vng HNI ............................................................................................. 23
3.4.2. Phn vng DNG ............................................................................................ 34
3.4.3. Phn vng HCM ........................................................................................... 46
BI 4: CU HNH CHO DJCH VJ ERS ......................................................... 57
4.1. Muc dch ..................................................................................................... 57
4.2. Danh sch thit bi v cu hnh mang............................................................ 57
4.2.1. Danh sch thit bi: ........................................................................................ 57
4.2.2. Cu hnh mang: ............................................................................................. 58
4.3. Yu cu bi thuc hnh ................................................................................. 58
4.4. Cc buoc thuc hnh ..................................................................................... 60

Chuong trnh boi dung kin thuc v cng ngh MEN

4
4.4.1. Phn vng HNI ............................................................................................. 61
4.4.2. Cu hnh cho phn vng DNG ...................................................................... 68
4.4.3. . Cu hnh cho phn vng HCM .................................................................... 75
BI 5: CU HNH DJCH VJ EWS.................................................................. 82
5.1. Muc dch ..................................................................................................... 82
5.2. Danh sch thit bi v cu hnh mang............................................................ 82
5.2.1. Danh sch thit bi ......................................................................................... 82
5.2.2. Cu hnh mang .............................................................................................. 83
5.3. Yu cu bi thuc hnh ................................................................................. 83
5.4. Cc buoc thuc hnh ..................................................................................... 85
5.4.1. Phn vng HNI ............................................................................................. 86
5.4.2. Phn vng DNG ............................................................................................ 91
5.4.3. Phn vng HCM ........................................................................................... 97
BI 6: CU HNH DJCH VJ EMS ................................................................ 102
6.1. Muc dch ................................................................................................... 102
6.2. Danh sch thit bi v cu hnh mang.......................................................... 102
6.2.1. Danh sch thit bi ....................................................................................... 102
6.2.2. Cu hnh mang ............................................................................................ 103
6.3. Yu cu bi thuc hnh ............................................................................... 103
6.4. Cc buoc thuc hnh ................................................................................... 104
6.4.1. Phn vng HNI ........................................................................................... 105
6.4.2. Phn vng DNG .......................................................................................... 110
6.4.3. Phn vng HCM ......................................................................................... 114
BI 7: CU HNH DJCH VJ ERMS ............................................................. 119
7.1. Muc dch ................................................................................................... 119
7.2. Danh sch thit bi v cu hnh mang.......................................................... 119
7.2.1. Danh sch thit bi ....................................................................................... 119
7.2.2. Cu hnh mang ............................................................................................ 120
7.3. Yu cu bi thuc hnh ............................................................................... 120
7.4. Cc buoc thuc hnh ................................................................................... 122
7.4.1. Phn vng HNI ........................................................................................... 123
7.4.2. Phn vng DNG .......................................................................................... 128
7.4.3. Phn vng HCM ......................................................................................... 134
BI 8: BAO MAT CHO CC THIET BJ MANG ......................................... 140

Chuong trnh boi dung kin thuc v cng ngh MEN

5
8.1. Muc dch ................................................................................................... 140
8.2. Danh sch thit bi v cu hnh mang.......................................................... 140
8.2.1. Danh sch thit bi ....................................................................................... 140
8.2.2. Cu hnh mang ............................................................................................ 141
8.3. Yu cu bi thuc hnh ............................................................................... 141
8.4. Cc buoc thuc hin .................................................................................... 143
8.4.1. Bao mt chung cho cc thit bi .................................................................... 143
8.4.2. Bao mt cho 7604 ....................................................................................... 147
8.4.3. Bao mt cho 3750 ....................................................................................... 149
THUAT NG VIET TAT ..................................................................................... 154
PHJ LJC ............................................................................................................... 156
Phu luc A: Cc lnh lin quan toi cu hnh .......................................................... 156
Phu luc B: Tham khao cu hnh dich vu L3 VPN trn nn MPLS ........................ 159
1. ERS L3 ........................................................................................................... 159
2. EWS L3 .......................................................................................................... 167
3. EMS L3 .......................................................................................................... 168
4. ERMS L3 ....................................................................................................... 169

Chuong trnh boi dung kin thuc v cng ngh MEN

6
DANH SCH HNH V

Hnh 1.1: So d mang co ban ....................................................................................... 9
Hnh 2.1: So d mang MPLS Core............................................................................. 21
Hnh 3.1: So d mang cu hnh dich vu ERS ............................................................. 58
Hnh 4.1: So d mang cu hnh dich vu EWS ............................................................ 83
Hnh 5.1: So d mang cu hnh dich vu EMS........................................................... 103
Hnh 6.1: So d mang cu hnh dich vu ERMS ........................................................ 120
Hnh 7.1: So d mang cu hnh bao mt ................................................................... 141

Chuong trnh boi dung kin thuc v cng ngh MEN

7
DANH SCH BANG

Bang 1.1: Danh sch thit bi cu hnh mang co ban ..................................................... 8
Bang 1.2: Cc tham s cho cu hnh mang co ban...................................................... 10
Bang 2.1: Danh sch thit bi mang MPLS Core ......................................................... 20
Bang 2.2: Cc tham s cu hnh mang MPLS Core .................................................... 22
Bang 3.1: Danh sch thit bi mang cu hnh dich vu ERS .......................................... 57
Bang 3.2: Cc tham s cu hnh dich vu ERS ............................................................ 60
Bang 4.1: Danh sch thit bi mang cu hnh dich vu EWS ......................................... 82
Bang 4.2: Cc tham s cu hnh dich vu EWS ........................................................... 85
Bang 5.1: Danh sch thit bi mang cu hnh dich vu EMS ....................................... 102
Bang 5.2: Cc tham s cu hnh dich vu EMS.......................................................... 104
Bang 6.1: Danh sch thit bi mang cu hnh dich vu ERMS .................................... 119
Bang 6.2: Cc tham s cu hnh dich vu ERMS ....................................................... 122
Bang 7.1: Danh sch thit bi mang cu hnh bao mt ............................................... 140
Bang 7.2: Cc tham s cu hnh dich vu ERMS dng trong cu hnh bao mt .......... 143
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

8
BI 1: CU HNH MANG CO BAN

1.1. Mc dch
Bi thuc hnh cung cp kin thuc v cu hnh co ban cho thit bi mang cua
Cisco, kin thuc v VLAN, cc loai VLAN. Sau bi thuc hnh hoc vin c th nm
vung:
- Cc tham s co ban khi cu hnh truy nhp cng Router hoc Switch.
- Khi nim VLAN, p dung vic khoi tao VLAN v cu hnh VLAN o ch d
Trunk, Access.
- Kim tra cu hnh co ban v thuc hin kt ni cc my tnh trn cng VLAN thng
qua dia chi IP.
1.2. Danh sch thit b| v cu hnh mng
1.2.1. Danh sch thit b|

STT Vai tr
thit b|
Tn thit b| Loi thit b| Giao din su dng
1.
NPE
7600HNI Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 4/1, GE 4/2
2. 7600DNG GE 4/1, GE 4/2
3. 7600HCM GE 4/1, GE 4/2
4.
UPE
3750HNI Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1

Bang 1.1: Danh sch thit bi cau hnh mang co ban
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

9
1.2.2. Cu hnh mng

Hnh 1.1: So do mang co ban
1.3. Yu cu bi thc hnh
- Chun bi cc trang thit bi v kt ni mang nhu hnh 1.1
- Cu hnh thit lp mang co ban gm 3 site, mi site gm b chuyn mach 3750 v
b dinh tuyn 7604 cua Cisco voi cc tham s nhu bang 1.2
- Kim tra cu hnh v thu ping trn cc VLAN

Phn vng Thit b| Giao din
D|a chi IP
/VLAN
Subnet Mask/
Thng tin khc
HNI
7600HNI
DCN VLAN 100 10.0.0.1 255.255.255.0
GE 4/2 100 Access port
GE 4/1 100 Trunk
3750HNI
DCN VLAN 100 10.0.0.11 255.255.255.0
GE1/1/1 100 Trunk
FE 1/0/1 100 Access port
DNG
7600DNG
DCN VLAN 100 10.0.0.2 255.255.255.0
GE 4/2 100 Access port
GE 4/1 100 Trunk
3750DNG
DCN VLAN 100 10.0.0.12 255.255.255.0
GE1/1/1 100 Trunk
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

10
FE 1/0/1 100 Access port
HCM
7600HCM
DCN VLAN 100 10.0.0.3 255.255.255.0
GE 4/2 100 Access port
GE 4/1 100 Trunk
3750HCM
DCN VLAN 100 10.0.0.13 255.255.255.0
GE1/1/1 100 Trunk
FE 1/0/1 100 Access port
Bang 1.2: Cc tham so cho cau hnh mang co ban

1.4. Cc buc thc hnh
M ta tng qut:
- Dt tn cho cc thit bi.
- Cu hnh cc tham s cho cng console, telnet tt ca cc thit bi.
- Cu hnh mt khu v nguoi dng trn cc thit bi.
- Cu hnh VTP o ch d transparent cho cc thit bi.
- Tao cc L2 VLAN.
- Tao SVI.
- Khoi tao cc giao din 802.1q trunk giua 3750 v 7600.
- Khoi tao cc giao din 802.1q access trn cc cng truy nhp cua 3750.
- Ping giua cc giao din SVI cua 3750 v 7600.
M ta chi tit:
1.4.1. Phn vng HNI
Phn ny minh ha vi 7600HNI, hc vin thc hin tuong t vi 3750HNI.
Buc 1: Dt tn cho cc thit bi 7600HNI, 3750HNI
Router(config)#hostname 7600HNI

Buc 2: Tt cc Domain Name Lookup
7600HNI(config)#no ip domain lookup

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

11
Buc 3: Cu hnh cc tham s cng console
7600HNI(config)#line console 0
7600HNI(config-line)#logging synchronous
7600HNI(config-line)#exec-timeout 0 0
7600HNI(config-line)#password mane

Buc 4: Dt mt khu cho cc duong telnet.
7600HNI(config)#line vty 0 15
7600HNI(config-line)#password mane
7600HNI(config-line)#login

Buc 5: Cu hnh nguoi dng v mt khu voi lnh sau:
7600HNI(config)#username mane password mane
7600HNI(config)#enable secret mane

Buc 6: Kim tra trang thi VTP trn cc thit bi, cu hnh VTP o ch d
transparent:
7600HNI#show vtp status
7600HNI#config terminal
7600HNI(config)#vtp mode transparent
7600HNI(config)#end

Buc 7: Tao cc L2 VLAN cho quan l. Cc VLAN duoc m ta trong bang 1.2.
7600HNI(config)#vlan 100
7600HNI(config-vlan)#name DCN-VLAN
7600HNI(config-vlan)#exit

Buc 8: Tao SVI d quan l VLAN v gn IP theo m ta o bang 1.2.
Voi mi SVI duoc tao ra, cn gn dia chi IP cho SVI d.
7600HNI(config)#interface vlan ___
7600HNI(config-if)#ip address ___ ___
7600HNI(config-if)#no shutdown
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

12

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750HNI v
7600HNI cho php luu luong VLAN 100 di qua.
7600:
7600HNI#configure terminal
7600HNI(config)#interface gigabitEthernet 4/1
7600HNI(config-if)#switchport
7600HNI(config-if)#switchport trunk encapsulation dot1q
7600HNI(config-if)#switchport mode trunk
7600HNI(config-if)#switchport trunk allowed vlan 100
7600HNI(config-if)#no shutdown

3750:
3750HNI#configure terminal
3750HNI (config)#interface gigabitEthernet 1/1/1
3750HNI (config-if)#switchport
3750HNI (config-if)#switchport mode trunk
3750HNI (config-if)#switchport trunk allowed vlan 100
3750HNI (config-if)#no shutdown

Buc 10: Cu hnh access port cho cc giao din cua 7600HNI v 3750HNI:

7600:
7600HNI#configure terminal
7600HNI(config)#interface gigabitEthernet 4/2
7600HNI(config-if)#switchport
7600HNI(config-if)#switchport mode access
7600HNI(config-if)#switchport access vlan 100
7600HNI(config-if)#no shutdown

3750:
3750HNI#configure terminal
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

13
3750HNI(config)#interface fastEthernet 1/0/1
3750HNI (config-if)#switchport
3750HNI (config-if)#switchport mode access
3750HNI (config-if)#switchport access vlan 100
3750HNI (config-if)#no shutdown

Buc 11: Kim tra cu hnh

Show run
Show ip interface brief
Show vtp status
Show vlan
Show interface trunk
Kim tra rng ban c th thuc hin lnh PING thnh cng tu 7600HNI dn
3750HNI v nguoc lai thng qua dia chi IP cua VLAN.

1.4.2. Phn vng DNG
Phn ny minh ha vi 7600DNG, hc vin thc hin tuong t vi 3750DNG.
Buc 1: Dt tn cho cc thit bi 7600DNG, 3750DNG
Router(config)#hostname 7600DNG

Buc 2: Tt cc Domain Name Lookup
7600DNG(config)#no ip domain lookup

Buc 3: Cu hnh cc tham s cng console
7600DNG(config)#line console 0
7600DNG(config-line)#logging synchronous
7600DNG(config-line)#exec-timeout 0 0
7600DNG(config-line)#password mane

Buc 4: Dt mt khu cho cc duong telnet.
7600DNG(config)#line vty 0 15
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

14
7600DNG(config-line)#password mane
7600DNG(config-line)#login

Buc 5: Cu hnh nguoi dng v mt khu voi lnh sau:
7600DNG(config)#username mane password mane
7600DNG(config)#enable secret mane

Buc 6: Kim tra trang thi VTP trn cc thit bi, cu hnh VTP o ch d
transparent:
7600DNG#show vtp status
7600DNG#config terminal
7600DNG(config)#vtp mode transparent
7600DNG(config)#end

Buc 7: Tao cc L2 VLAN cho quan l. Cc VLAN duoc m ta trong bang 1.2.
7600DNG(config)#vlan 100
7600DNG(config-vlan)#name DCN-VLAN
7600DNG(config-vlan)#exit

Buc 8: Tao SVI d quan l VLAN v gn IP theo m ta o bang 1.2.
Voi mi SVI duoc tao ra, cn gn dia chi IP cho SVI d.
7600DNG(config)#interface vlan ___
7600DNG(config-if)#ip address ___ ___
7600DNG(config-if)#no shutdown

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750DNG v
7600DNG cho php luu luong VLAN 100 di qua

7600:
7600DNG#configure terminal
7600DNG(config)#interface gigabitEthernet 4/1
7600DNG(config-if)#switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

15
7600DNG(config-if)#switchport trunk encapsulation dot1q
7600DNG(config-if)#switchport mode trunk
7600DNG(config-if)#switchport trunk allowed vlan 100
7600DNG(config-if)#no shutdown

3750:
3750DNG#configure terminal
3750DNG (config)#interface gigabitEthernet 1/1/1
3750DNG (config-if)#switchport
3750DNG (config-if)#switchport mode trunk
3750DNG (config-if)#switchport trunk allowed vlan 100
3750DNG (config-if)#no shutdown

Buc 10:
Cu hnh access port cho cc giao din cua 3750DNG v 7600DNG:
7600:
7600DNG#configure terminal
7600DNG(config)#interface gigabitEthernet 4/2
7600DNG(config-if)#switchport
7600DNG(config-if)#switchport mode access
7600DNG(config-if)#switchport access vlan 100
7600DNG(config-if)#no shutdown

3750:
3750DNG#configure terminal
3750DNG(config)#interface fastEthernet 1/0/1
3750DNG (config-if)#switchport
3750DNG (config-if)#switchport mode access
3750DNG (config-if)#switchport access vlan 100
3750DNG (config-if)#no shutdown


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

16
Buc 11: Kim tra cu hnh
Show run
Show ip interface brief
Show vtp status
Show vlan
Show interface trunk
Kim tra rng ban c th thuc hin lnh PING thnh cng tu 7600DNG dn
3750DNG v nguoc lai thng qua dia chi IP cua VLAN.

1.4.3. Phn vng HCM
Phn ny minh ha vi 7600HCM, hc vin thc hin tuong t vi 3750HCM.
Buc 1: Dt tn cho cc thit bi 7600HCM, 3750HCM
Router(config)#hostname 7600HCM

Buc 2: Tt cc Domain Name Lookup
7600HCM(config)#no ip domain lookup

Buc 3: Cu hnh cc tham s cng console
7600HCM(config)#line console 0
7600HCM(config-line)#logging synchronous
7600HCM(config-line)#exec-timeout 0 0
7600HCM(config-line)#password mane

Buc 4: Dt mt khu cho cc duong telnet.
7600HCM(config)#line vty 0 15
7600HCM(config-line)#password mane
7600HCM(config-line)#login

Buc 5: Cu hnh nguoi dng v mt khu voi lnh sau:
7600HCM(config)#username mane password mane
7600HCM(config)#enable secret mane

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

17
Buc 6: Kim tra trang thi VTP trn cc thit bi, cu hnh VTP o ch d
transparent:
7600HCM#show vtp status
7600HCM#config terminal
7600HCM(config)#vtp mode transparent
7600HCM(config)#end

Buc 7: Tao cc L2 VLAN cho quan l. Cc VLAN duoc m ta trong bang 1.2.
7600HCM(config)#vlan 100
7600HCM(config-vlan)#name DCN-VLAN
7600HCM(config-vlan)#exit

Buc 8: Tao SVI d quan l VLAN v gn IP theo m ta o bang 1.2.
Voi mi SVI duoc tao ra, cn gn dia chi IP cho SVI d.
7600HCM(config)#interface vlan ___
7600HCM(config-if)#ip address ___ ___
7600HCM(config-if)#no shutdown

Buc 9: Khoi tao cc giao din 802.1q trunk giua cc thit bi 3750HCM v
7600HCM cho php luu luong VLAN 100 di qua

7600:
7600HCM#configure terminal
7600HCM(config)#interface gigabitEthernet 4/1
7600HCM(config-if)#switchport
7600HCM(config-if)#switchport trunk encapsulation dot1q
7600HCM(config-if)#switchport mode trunk
7600HCM(config-if)#switchport trunk allowed vlan 100
7600HCM(config-if)#no shutdown



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

18
3750:
3750HCM#configure terminal
3750HCM (config)#interface gigabitEthernet 1/1/1
3750HCM (config-if)#switchport
3750HCM (config-if)#switchport mode trunk
3750HCM (config-if)#switchport trunk allowed vlan 100
3750HCM (config-if)#no shutdown

Buc 10:
Cu hnh access port cho cc giao din cua 3750HCM v 7600HCM:

7600:
7600HCM#configure terminal
7600HCM(config)#interface gigabitEthernet 4/2
7600HCM(config-if)#switchport
7600HCM(config-if)#switchport mode access
7600HCM(config-if)#switchport access vlan 100
7600HCM(config-if)#no shutdown

3750:
3750HCM#configure terminal
3750HCM(config)#interface fastEthernet 1/0/1
3750HCM (config-if)#switchport
3750HCM (config-if)#switchport mode access
3750HCM (config-if)#switchport access vlan 100
3750HCM (config-if)#no shutdown

Buc 11: Kim tra cu hnh
Show run
Show ip interface brief
Show vtp status
Show vlan
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

19
Show interface trunk
Kim tra rng c th thuc hin lnh PING thnh cng tu 7600HCM dn 3750HCM
v nguoc lai thng qua dia chi IP cua VLAN.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

20
BI 2: CU HNH MPLS CORE

2.1. Mc dch
Bi thuc hnh cung cp cho hoc vin kin thuc co ban v hoat dng mang trn
nn tang cng ngh MPLS. Kt thc bi thuc hnh, hoc vin c th nm vung:
- Cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh MPLS.
- Cc tham s dc bit v MTU, LDP.
- Hoat dng gn nhn, hon di nhn v chuyn tip gi MPLS.
- Kim tra v khc phuc li cu hnh MPLS.
2.2. Danh sch thit b| v cu hnh mng
2.2.1. Danh sch thit b|

STT
Vai tr
thit b|
Tn thit b| Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M),
Version 12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1

Bang 2.1: Danh sch thit bi mang MPLS Core
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

21
2.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 2.1: So do mang MPLS Core

2.3. Yu cu bi thc hnh
- Chun bi trang thit bi v kt ni mang nhu hnh 2.1.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF.
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, mo rng min
MPLS xung toi thit bi 3750 voi cc tham s nhu bang 2.2.
- Kim tra cu hnh d thit lp.

Phn vng Thit b| Giao din D|a chi IP /VLAN
Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17
255.255.255.252
MTU =1546
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

22
DNG

7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21
255.255.255.252
MTU =1546
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25
255.255.255.252
MTU =1546
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252

Bang 2.2: Cc tham so cau hnh mang MPLS Core

2.4. Cc buc thc hnh
M ta tng qut:
- Thuc hin cu hnh mang co ban.
- Cu hnh mang IP su dung dia chi IP nhu trong bang thng s cu hnh, giao
thuc dinh tuyn OSPF voi Process-id =1, Passive interface l cng loopback
cua thit bi.
- Kim tra dinh tuyn xem d hoc dng duoc ht cc mang chua? Ping v
traceroute giua cc thit bi?
- Cu hnh MPLS:
a. Kch hoat chuc nng dinh tuyn trn cc thit bi 3750
b. Kch hoat chuc nng IP CEF cho cc thit bi min MPLS
c. Kch hoat giao thuc LDP v dt cng loopback lm Router-ID cho LDP
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

23
d. Cu hnh jumbo-mtu cho 7600 v system-mtu, jumbo-mtu cho 3750
e. Kch hoat chuc nng MPLS trn cc giao din trong min MPLS
f. Kim tra bang chuyn tip MPLS, qu trnh gn nhn, hon di nhn
M ta chi tit:
2.4.1. Phn vng HNI
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400HNI, 3750HNI,
7600HNI (tuong tu bi 1)
- Dt tn hostname cho cc thit bi
- Tt cc Domain Name Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi

Buc 2: Cu hnh mang IP voi giao thuc dinh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi theo cc thng s trong bang 2.2:
7600HNI(config)#int loopback 0
7600HNI(config-int)#ip address ___ ___
7600HNI(config-int)#no shutdown

3750HNI(config)#int loopback 0
3750HNI(config-int)#ip address ___ ___
3750HNI(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600HNI nhu bang 2.2
7600HNI(config)#interface gigabitEthernet ___
7600HNI(config-int)#ip address ___ ___
7600HNI(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600HNI nhu bang 2.2
7600HNI(config)#interface gigabitEthernet ___
7600HNI(config-int)#no switchport
7600HNI(config-int)#ip address ___ ___
7600HNI(config-int)#no shutdown
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

24
- Dt dia chi IP cho cc giao din Gi 1/1/1 cua 3750HNI nhu bang 2.2
3750HNI(config)#interface gigabitEthernet ___
3750HNI(config-if)#no switchport
3750HNI(config-if)#ip address ___ ___
3750HNI(config-if)#no shutdown

- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0)
7600:
7600HNI(config)#router ospf 1
7600HNI(config- router)#passive-interface Loopback 0
7600HNI(config- router)#network Dja ch mng Wildcard mask area 0
7600HNI(config- router)#network 1.1.1.1 0.0.0.0 area 0
7600HNI(config- router)#network 10.1.1.5 0.0.0.3 area 0
7600HNI(config- router)#network 10.1.1.9 0.0.0.3 area 0
7600HNI(config- router)#network 10.1.1.17 0.0.0.3 area 0
7600HNI(config- router)#log-adjacency-changes

3750:
- Kch hoat chuc nng dinh tuyn:
3750HNI (config)#ip routing:
- Cu hnh dinh tuyn:
3750HNI(config)#router ospf 1
3750HNI(config-router)#passive-interface Loopback0
3750HNI(config-router)# network Dja ch mng Wildcard mask area 0
3750HNI(config-router)#network 4.4.4.4 0.0.0.0 area 0
3750HNI(config-router)#network 10.1.1.18 0.0.0.3 area 0
3750HNI(config-router)#log-adjacency-changes



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

25
Kim tra bang djnh tuyn:
Show ip route


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

26

Kim tra thng s cu hnh OSPF:
show ip ospf database
show ip ospf interface
show ip ospf neighbor
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

27


- Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc
thit bi 3750 v 7600 khc.

Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS:
7600HNI (config)#ip cef distributed
3750HNI (config)#ip cef distributed

- Kch hoat giao thuc phn phi nhn LDP v dt Loopback0 lm router-id:
7600HNI(config)#mpls label protocol ldp
7600HNI(config)#mpls ldp router-id loopback 0

3750HNI(config)#mpls label protocol ldp
3750HNI(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600HNI:
7600HNI(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600HNI:
7600HNI(config)#interface ___
7600HNI(config-if)#mpls ip
7600HNI(config-if)#exit
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

28
- Dt gi tri mtu =1546 cho 3750HNI:
3750HNI(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI:
3750HNI(config)#interface gigabitEthernet 1/1/1
3750HNI(config-if)#mpls ip
3750HNI(config-if)#exit

- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
7600HNI(config)#interface gigabitEthernet 4/1
7600HNI(config-if)#mtu 1546

Buc 4: Kim tra cc thng s
- Show ip interface brief:
Kim tra cc giao din duoc dt dia chi IP dng v o trang thi UP
- Kim tra chuc nng CEF:

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

29


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

30






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

31
- Kim tra cc giao din d kch hoat MPLS chua? Bang chuyn mach nhn d
dy du chua? Truyn nhn LDP chua? Thng s LDP neighbor?:
Trn 7600:


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

32











Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

33
Trn 3750:

- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

34
2.4.2. Phn vng DNG
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400DNG, 3750DNG,
7600DNG (tuong tu bi 1)
- Dt tn hostname cho cc thit bi
- Tt cc Domain Name Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi

Buc 2: Cu hnh mang IP voi giao thuc dinh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi theo cc thng s trong bang 2.2:
7600DNG(config)#int loopback 0
7600DNG(config-int)#ip address ___ ___
7600DNG(config-int)#no shutdown

3750DNG(config)#int loopback 0
3750DNG(config-int)#ip address ___ ___
3750DNG(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600DNG nhu bang 2.2
7600DNG(config)#interface gigabitEthernet ___
7600DNG(config-int)#ip address ___ ___
7600DNG(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600DNG nhu bang 2.2
7600DNG(config)#interface gigabitEthernet ___
7600DNG(config-int)#no switchport
7600DNG(config-int)#ip address ___ ___
7600DNG(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 1/1/1 cua 3750DNG nhu bang 2.2
3750DNG(config)#interface gigabitEthernet ___
3750DNG(config-if)#no switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

35
3750DNG(config-if)#ip address ___ ___
3750DNG(config-if)#no shutdown

- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0)
7600:
7600DNG(config)#router ospf 1
7600DNG(config-router)#passive-interface Loopback0
7600DNG(config-router)#network Dja ch mng Wildcard mask area 0
7600DNG(config-router)#network 2.2.2.2 0.0.0.0 area 0
7600DNG(config-router)#network 10.1.1.6 0.0.0.3 area 0
7600DNG(config-router)#network 10.1.1.13 0.0.0.3 area 0
7600DNG(config-router)#network 10.1.1.21 0.0.0.3 area 0
7600DNG(config-router)#log-adjacency-changes

3750:
- Kch hoat chuc nng dinh tuyn:
3750DNG (config)#ip routing
- Cu hnh dinh tuyn:
3750DNG(config)#router ospf 1
3750DNG(config-router)#passive-interface Loopback0
3750DNG(config-router)#network Dja ch mng Wildcard mask area 0
3750DNG(config-router)#network 5.5.5.5 0.0.0.0 area 0
3750DNG(config-router)#network 10.1.1.22 0.0.0.3 area 0
3750DNG(config-router)#log-adjacency-changes






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

36
Kim tra bang djnh tuyn:



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

37


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

38


Kim tra thng s cu hnh OSPF:
show ip ospf database
show ip ospf interface
show ip ospf neighbor
Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc thit
bi 3750 v 7600 khc

Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS:

7600DNG (config)#ip cef distributed
3750DNG (config)#ip cef distributed

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

39
- Kch hoat giao thuc phn phi nhn LDP v dt Loopback0 lm router-id:
7600DNG(config)#mpls label protocol ldp
7600DNG(config)#mpls ldp router-id loopback 0

3750DNG(config)#mpls label protocol ldp
3750DNG(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600DNG:
7600DNG(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600DNG:
7600DNG(config)#interface ___
7600DNG(config-if)#mpls ip
7600DNG(config-if)#exit

- Dt gi tri mtu =1546 cho 3750DNG:
3750DNG(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG:
3750DNG(config)#interface gigabitEthernet 1/1/1
3750DNG(config-if)#mpls ip
3750DNG(config-if)#exit

- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
7600DNG(config)#interface gigabitEthernet 4/1
7600DNG(config-if)#mtu 1546





Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

40
Buc 4: Kim tra cc thng s
- Show ip interface brief:
Kim tra cc giao din duoc dt dia chi IP dng v o trang thi UP
- Kim tra chuc nng CEF:

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

41

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

42






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

43
- Kim tra cc giao din d kch hoat MPLS chua? Bang chuyn mach nhn d
dy du chua? Truyn nhn LDP chua? Thng s LDP neighbor?:
Trn 7600:

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

44




Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

45
Trn 3750:


- C th dng cc lnh sau d kim tra li:
7600DNG#debug mpls ldp messages sent
7600DNG#debug mpls ldp messages received
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

46
2.4.3. Phn vng HCM
Buc 1: Thuc hin cu hnh mng co ban cho cc thit bi 3400HCM,
3750HCM, 7600HCM (tuong tu bi 1)
- Dt tn hostname cho cc thit bi
- Tt cc Domain Name Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi

Buc 2: Cu hnh mang IP voi giao thuc dinh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi theo thng s trong bang 2.2:
7600HCM(config)#int loopback 0
7600HCM(config-int)#ip address ___ ___
7600HCM(config-int)#no shutdown

3750HCM(config)#int loopback 0
3750HCM(config-int)#ip address ___ ___
3750HCM(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 3/0/1, Gi 3/0/0 cua 7600HCM nhu bang 2.2
7600HCM(config)#interface gigabitEthernet ___
7600HCM(config-int)#ip address ___ ___
7600HCM(config-int)#no shutdown

- Dt dia chi IP cho cc giao din Gi 4/1 cua 7600HCM nhu bang 2.2
7600HCM(config)#interface gigabitEthernet ___
7600HCM(config)#no switchport
7600HCM(config-int)#ip address ___ ___
7600HCM(config-int)#no shutdown

- Dt dia chi IP cho giao din Gi 1/1/1 cua 3750HCM nhu bang 2.2
3750HCM(config)#interface fastEthernet ___
3750HCM(config-if)#no switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

47
3750HCM(config-if)#ip address ___ ___
3750HCM(config-if)#no shutdown

- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0)
7600:
7600HCM(config)#router ospf 1
7600HCM(config- router)#passive-interface Loopback0
7600HCM(config- router)#network Dja ch mng Wildcard mask area 0
7600HCM(config- router)#network 3.3.3.3 0.0.0.0 area 0
7600HCM(config- router)#network 10.1.1.10 0.0.0.3 area 0
7600HCM(config- router)#network 10.1.1.14 0.0.0.3 area 0
7600HCM(config- router)#network 10.1.1.25 0.0.0.3 area 0
7600HCM(config- router)#log-adjacency-changes

3750:
- Kch hoat chuc nng dinh tuyn:
3750HCM (config)#ip routing
- Cu hnh dinh tuyn:
3750HCM(config)#router ospf 1
3750HCM(config-router)#passive-interface Loopback0
3750HCM(config-router)# network Dja ch mng Wildcard mask area 0
3750HCM(config-router)#network 6.6.6.6 0.0.0.0 area 0
3750HCM(config-router)#network 10.1.1.26 0.0.0.3 area 0
3750HCM(config-router)#log-adjacency-changes






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

48
Kim tra bang djnh tuyn:


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

49


Kim tra thng s cu hnh OSPF:
show ip ospf database
show ip ospf interface
Kim tra kt noi trn ton mang bng lnh Ping v Traceroute toi tat ca cc thit
bi 3750 v 7600 khc.



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

50
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS:
7600HCM (config)#ip cef distributed
3750HCM (config)#ip cef distributed

- Kch hoat giao thuc phn phi nhn LDP v dt Loopback0 lm router-id:
7600HCM(config)#mpls label protocol ldp
7600HCM(config)#mpls ldp router-id loopback 0

3750HCM(config)#mpls label protocol ldp
3750HCM(config)#mpls ldp router-id loopback 0

- Dt gi tri jumbo-mtu =9100 cho 7600HCM:
7600HCM(config)#system jumbomtu 9100

- Kch hoat chuc nng MPLS trn Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua 7600HCM:
7600HCM(config)#interface ___
7600HCM(config-if)#mpls ip
7600HCM(config-if)#exit

- Dt gi tri mtu =1546 cho 3750HCM:
3750HCM(config)#system mtu 1546

- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM:
3750HCM(config)#interface ___
3750HCM(config-if)#mpls ip
3750HCM(config-if)#exit

- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu = 1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbomtu.
7600HCM(config)#interface gigabitEthernet 4/1
7600HCM(config-if)#mtu 1546
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

51
Buc 4: Kim tra cc thng s
- Show ip interface brief:
Kim tra cc giao din duoc dt dia chi IP dng v o trang thi UP

- Kim tra chuc nng CEF:

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

52


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

53






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

54
- Kim tra cc giao din d kch hoat MPLS chua? Bang chuyn mach nhn d
dy du chua? Truyn nhn LDP chua? Thng s LDP neighbor?:
Trn 7600:



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

55











Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

56
Trn 3750:


- C th dng cc lnh sau d kim tra li:
7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

57
BI 3: CU HNH CHO DJCH VJ ERS
3.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Relay Service cung cp cho hoc vin
cc kin thuc lin quan dn dich vu E-LINE dua trn cng ngh EoMPLS v k nng
cu hnh cho dich vu ERS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi thuc
hnh, hoc vin c kha nng:
- Nm vung cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh
MPLS.
- Cu hnh cho dich vu ERS dua trn cng ngh EoMPLS.
- Kim tra v khc phuc li cu hnh ERS.
3.2. Danh sch thit b| v cu hnh mng
3.2.1. Danh sch thit b|:
STT
Vai tr
thit b|
Tn thit b| Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI Switch 3750 Cisco
(IOS: C3750ME
Software (C3750ME-
I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
3400HNI Switch 3400 Cisco
(IOS: ME340x
Software (ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 3.1: Danh sch thit bi mang cau hnh dich vu ERS
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

58
3.2.2. Cu hnh mng:
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 3.1: So do mang cau hnh dich vu ERS

3.3. Yu cu bi thc hnh
- Chun bi trang thit bi v kt ni mang nhu hnh 3.1.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF.
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, mo rng min
MPLS xung toi thit bi 3750.
- Cu hnh dich vu ERS trn thit bi 3750 voi 3 E-LINE tuong ung 3 gi tri VC-
ID khc nhau cho php kt ni cc cp sites: E-LINE giua HNI v DNG (VC-
ID 130); E-LINE giua HNI v HCM (VC-ID 131); E-LINE giua DNG v HCM
(VC-ID 132). Cu hnh cho thit bi khch hng tai cc sites truy nhp vo cc
VLAN tuong ung: HNI (130, 131); DNG (130,132); HCM (131,132). Cc tham
s duoc m ta chi tit trong bang 3.2.
- Kim tra cu hnh v thu dich vu giua cc cp Sites.






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

59
Phn
vng
Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17 255.255.255.252
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
FE 1/0/1 Add VLAN 130, 131 Trunk (UNI)
VLAN 130 VCID 130 SVI to DNG
VLAN 131 VCID 131 SVI to HCM
3400HNI
FE 0/1 VLAN 130, 131 Trunk
VLAN 130 192.168.30.1 255.255.255.0
VLAN 131 192.168.31.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21 255.255.255.252
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
FE 1/0/1 Add VLAN 130, 132 Trunk(UNI)
VLAN 130 VCID 130 SVI to HNI
VLAN 132 VCID 132 SVI to HCM
3400DNG
FE 0/1 VLAN 130, 132 Trunk
VLAN 130 192.168.30.2 255.255.255.0
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

60
VLAN 132 192.168.32.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25 255.255.255.252
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252
FE 1/0/1 Add VLAN 131,132 Trunk(UNI)
VLAN 131 VCID 131 SVI to HNI
VLAN 132 VCID 132 SVI to DNG
3400HCM
FE 0/1 VLAN 131, 132 Trunk
VLAN 131 192.168.31.2 255.255.255.0
VLAN 132 192.168.32.2 255.255.255.0
Bang 3.2: Cc tham so cau hnh dich vu ERS

3.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi.
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF cho cc thit bi 7600 v
3750.
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP v mo rng min
MPLS xung toi thit bi 3750.
- Cu hnh dich vu ERS:
a. Trn thit bi 3750:
Tao cc L2 VLAN (VLAN 130, VLAN 131)
Cu hnh 802.1q trunk cho giao din kt ni toi 3400
Cu hnh SVI
Tao danh sch truy nhp EoMPLS trn cc SVI
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

61
Cu hnh EoMPLS thuc hin xconnect trn SVI voi gi tri VC-ID l 130 v
131, dia chi peer l dia chi cua 3750-DNG v 3750-HCM
b. Trn thit bi 3400:
Tao L2 VLAN (130, 131)
Cu hnh 802.1q Trunk cho giao din kt ni toi 3750
Cu hnh L3 VLAN
c. Kim tra bng cch Ping thnh cng tu dia chi IP cua interface VLAN trn
cc thit bi 3400
Kim tra trang thi cc EoMPLS Tunnel:
Ping tu cc interface VLAN trn 3400:
Kim tra bang MAC

M ta chi tit:
3.4.1. Phn vng HNI
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 3.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 theo cc
thng s trong bang 3.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HNI
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

62
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HNI
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HNI
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI
- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v ERS
Phan ny chi thuc hin trn thit bi 3750HNI v 3400HNI
Cu hnh cho UPE-3750HNI:
- Tao cc L2 VLAN ( VLAN 130, VLAN 131) trn thit bi 3750HNI kt ni toi
3400HNI cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750HNI(config)#vlan 130
3750HNI(config-vlan)#name ERS-130
3750HNI(config-vlan)#exit
3750HNI(config)#vlan 131
3750HNI(config-vlan)#name ERS-131
3750HNI(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1 kt ni toi CE o ch d trunking cho php luu
luong trn VLAN 130, 131 di qua:
3750HNI(config)#interface FastEthernet 1/0/1
3750HNI(config-if)#description Trunk to 3400HNI
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

63
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport trunk encapsulation dot1q
3750HNI(config-if)#switchport mode trunk
3750HNI(config-if)#switchport trunk allowed vlan 130,131
3750HNI(config-if)#no shutdown
3750HNI(config-if)#exit

- Tao cc SVI trn VLAN 130, VLAN 131 tuong ung voi gi tri VC-ID =130,
VC-ID =131 v dia chi IP tuong ung 5.5.5.5, 6.6.6.6 lm dia chi peer toi phn
vng DNG, HCM:
3750HNI(config)#interface vlan ___
3750HNI(config-if)#no ip address
3750HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750HNI(config-if)#no shutdown

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
3750HNI (config)#access-list 11 permit 1.1.1.1
3750HNI (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400HNI:
- Tao cc L2VLAN (VLAN 130, 131) cho khch hng
3400HNI(config)#vlan 130
3400HNI(config-vlan)#name ERS-130
3400HNI(config-vlan)#exit
3400HNI(config)#vlan 131
3400HNI(config-vlan)#name ERS-131
3400HNI(config-vlan)#exit

- Cu hnh giao din Fa 0/1 kt ni toi 3750 o ch d trunking, cho php luu
luong cua VLAN 130, 131 di qua:
3400HNI(config)#interface ___
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

64
3400HNI(config-if)#switchport
3400HNI(config-if)#switchport mode trunk
3400HNI(config-if)#switchport trunk allowed vlan 130,131
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 130, 131 ln luot l
192.168.30.1/24 v 192.168.31.1/24
3400HNI(config)#int vlan ___
3400HNI(config-if)#ip add ___ ___
3400HNI(config-if)#no shutdown

- Cu hnh policy PING-PO
3400HNI(config)#access-list 100 permit ip any any
3400HNI(config)#class-map CLASS
3400HNI(config-cmap)#match access-group 100
3400HNI(config)#policy-map PING-PO
3400HNI(config-pmap)#class CLASS
3400HNI(config-pmap-c)#police cir 1000000

- Cu hnh dich vu PING-PO trn cng f 0/1
3400HNI(config)#interface fastEthernet 0/1
3400HNI(config-if)#service-policy input PING-PO

Kim tra cc thng so v VC v kt noi qua ERS:
- Kim tra cu hnh MPLS d dng chua?
- Kim tra xem EVC d dng chua? C o trang thi UP khng?
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

65

- Kim tra chi tit thng s cc EVC d cu hnh?

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

66

- Kim tra thng s duong Trunking, cc VLAN d cu hnh v thuc hin ping,
traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v 3400HCM bng
dia chi IP cua VLAN 130, 131 d chung to kt ni ERS tu phn vng HNI toi
DNG v HCM thnh cng.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

67


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

68


3.4.2. Cu hnh cho phn vng DNG
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 3.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 theo cc
thng s trong bang 3.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600DNG
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600DNG
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750DNG
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

69
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG
- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600DNG#debug mpls ldp messages sent
7600DNG#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v ERS
Phan ny chi thuc hin trn thit bi 3750DNG v 3400DNG
Cu hnh cho UPE-3750DNG:
- Tao cc L2 VLAN ( VLAN 130, VLAN 132) trn thit bi 3750DNG kt ni toi
3400DNG cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750DNG(config)#vlan 130
3750DNG(config-vlan)#name ERS-130
3750DNG(config-vlan)#exit
3750DNG(config)#vlan 132
3750DNG(config-vlan)#name ERS-132
3750DNG(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1 kt ni toi CE o ch d trunking cho php luu
luong trn VLAN 130, 132 di qua:
3750DNG(config)#interface FastEthernet 1/0/1
3750DNG(config-if)#description Trunk to 3400DNG
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport trunk encapsulation dot1q
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

70
3750DNG(config-if)#switchport mode trunk
3750DNG(config-if)#switchport trunk allowed vlan 130,132
3750DNG(config-if)#no shutdown
3750DNG(config-if)#exit

- Tao cc SVI trn VLAN 130, VLAN 132 tuong ung voi gi tri VC-ID =130,
VC-ID =132 v dia chi IP tuong ung 4.4.4.4, 6.6.6.6 lm dia chi peer toi phn
vng DNG, HCM:
3750DNG(config)#interface vlan ___
3750DNG(config-if)#no ip address
3750DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750DNG(config-if)#no shutdown

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
3750DNG (config)#access-list 11 permit 1.1.1.1
3750DNG (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400DNG:
- Tao cc L2VLAN (VLAN 130, 132) cho khch hng
3400DNG(config)#vlan 130
3400DNG(config-vlan)#name ERS-130
3400DNG(config-vlan)#exit
3400DNG(config)#vlan 132
3400DNG(config-vlan)#name ERS-132
3400DNG(config-vlan)#exit

- Cu hnh giao din Fa 0/1 kt ni toi 3750 o ch d trunking, cho php luu
luong cua VLAN 130, 132 di qua:
3400DNG(config)#interface fastEthernet 0/1
3400DNG(config-if)#no switchport
3400DNG(config-if)#switchport
3400DNG(config-if)#switchport mode trunk
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

71
3400DNG(config-if)#switchport trunk allowed vlan 130,132
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 130, 132 ln luot l
192.168.30.2/24 v 192.168.32.1/24
3400DNG(config)#int vlan ___
3400DNG(config-if)#ip add ___ ___
3400DNG(config-if)#no shutdown

- Cu hnh policy PING-PO
3400DNG(config)#access-list 100 permit ip any any
3400DNG(config)#class-map CLASS
3400DNG(config-cmap)#match access-group 100
3400DNG(config)#policy-map PING-PO
3400DNG(config-pmap)#class CLASS
3400DNG(config-pmap-c)#police cir 1000000

- Cu hnh dich vu PING-PO trn cng f 0/1
3400DNG(config)#interface fastEthernet 0/1
3400DNG(config-if)#service-policy input PING-PO

Kim tra cc thng so v VC v kt noi qua ERS:
- Kim tra xem EVC d dng chua? C o trang thi UP khng?
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

72


- Kim tra chi tit thng s cc EVC d cu hnh?

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

73


- Kim tra thng s duong Trunking, cc VLAN d cu hnh v thuc hin ping,
traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v 3400HCM bng
dia chi IP cua VLAN 130, 132 d chung to kt ni ERS tu phn vng DNG toi
HNI v HCM thnh cng.
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

74



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

75


3.4.3. . Cu hnh cho phn vng HCM
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 3.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
3.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HCM
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

76
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HCM
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HCM
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM
- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v ERS
Phan ny chi thuc hin trn thit bi 3750HCM v 3400HCM
Cu hnh cho UPE-3750HCM:
- Tao cc L2 VLAN ( VLAN 131, VLAN 132) trn thit bi 3750HCM kt ni toi
3400HCM cho 2 dich vu ERS. Bang 3.2 chi r cc VLAN v UNI duoc dng
cho dich vu ERS.
3750HCM(config)#vlan 131
3750HCM(config-vlan)#name ERS-131
3750HCM(config-vlan)#exit
3750HCM(config)#vlan 132
3750HCM(config-vlan)#name ERS-132
3750HCM(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1 kt ni toi CE o ch d trunking cho php luu
luong trn VLAN 131, 132 di qua:
3750HCM(config)#interface FastEthernet 1/0/1
3750HCM(config-if)#description Trunk to 3400HCM
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

77
3750HCM(config-if)#no switchport
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport trunk encapsulation dot1q
3750HCM(config-if)#switchport mode trunk
3750HCM(config-if)#switchport trunk allowed vlan 131,132
3750HCM(config-if)#no shutdown
3750HCM(config-if)#exit

- Tao cc SVI trn VLAN 131, VLAN 132 tuong ung voi gi tri VC-ID =131,
VC-ID =132 v dia chi IP tuong ung 4.4.4.4, 5.5.5.5 lm dia chi peer toi phn
vng HCM, HCM:
3750HCM(config)#interface vlan ___
3750HCM(config-if)#no ip address
3750HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750HCM(config-if)#no shutdown

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
3750HCM (config)#access-list 11 permit 1.1.1.1
3750HCM (config)#mpls ldp discovery targeted-hello accept from 11

Cu hnh cho CE-3400HCM:
- Tao cc L2VLAN (VLAN 131, 132) cho khch hng
3400HCM(config)#vlan 131
3400HCM(config-vlan)#name ERS-131
3400HCM(config-vlan)#exit
Thuc hin tuong tu voi VLAN 132

- Cu hnh giao din Fa 0/1 kt ni toi 3750 o ch d trunking, cho php luu
luong cua VLAN 131, 132 di qua:
3400HCM(config)#interface fastEthernet 0/1
3400HCM(config-if)#no switchport
3400HCM(config-if)#switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

78
3400HCM(config-if)#switchport mode trunk
3400HCM(config-if)#switchport trunk allowed vlan 131,132
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 131, 132 ln luot l
192.168.31.2/24 v 192.168.32.2/24
3400HCM(config)#int vlan ___
3400HCM(config-if)#ip add ___ ___
3400HCM(config-if)#no shutdown

- Cu hnh policy PING-PO
3400HCM(config)#access-list 100 permit ip any any
3400HCM(config)#class-map CLASS
3400HCM(config-cmap)#match access-group 100
3400HCM(config)#policy-map PING-PO
3400HCM(config-pmap)#class CLASS
3400HCM(config-pmap-c)#police cir 1000000

- Cu hnh dich vu PING-PO trn cng f 0/1
3400HCM(config)#interface fastEthernet 0/1
3400HCM(config-if)#service-policy input PING-PO

Kim tra cc thng so v VC v kt noi qua ERS:
- Kim tra xem EVC d dng chua? C o trang thi UP khng?
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

79


- Kim tra chi tit thng s cc EVC d cu hnh?

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

80


- Kim tra thng s duong Trunking, cc VLAN d cu hnh v thuc hin ping,
traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM v 3400DNG
bng dia chi IP cua VLAN 131, 132 d chung to kt ni ERS tu phn vng
HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

81



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

82
BI 4: CU HNH DJCH VJ EWS

4.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Wire Service cung cp cho hoc vin
cc kin thuc lin quan dn dich vu E-LINE dua trn cng ngh EoMPLS v k nng
cu hnh cho dich vu EWS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi
thuc hnh, hoc vin c kha nng:
- Nm vung cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh
MPLS.
- Cu hnh cho dich vu EWS dua trn cng ngh EoMPLS.
- Kim tra v khc phuc li cu hnh EWS.
4.2. Danh sch thit b| v cu hnh mng
4.2.1. Danh sch thit b|
STT
Vai tr
thit b|
Tn thit
b|
Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI Switch 3750 Cisco
(IOS: C3750ME
Software (C3750ME-I5-
M), Version
12.2(25)EY4)
GE 1/1/1; FE 1/0/1; FE 1/0/2
5. 3750DNG GE 1/1/1; FE 1/0/1; FE 1/0/2
6. 3750HCM GE 1/1/1, FE 1/0/1; FE 1/0/2
7.
CE
3400HNI Switch 3400 Cisco
(IOS: ME340x Software
(ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1; FE 0/2; FE 0/3; FE 0/4
8. 3400DNG FE 0/1; FE 0/2; FE 0/3; FE 0/4
9. 3400HCM FE 0/1; FE 0/2; FE 0/3; FE 0/4

Bang 4.1: Danh sch thit bi mang cau hnh dich vu EWS

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

83
4.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 4.1: So do mang cau hnh dich vu EWS

4.3. Yu cu bi thc hnh
- Chun bi trang thit bi v kt ni mang nhu hnh 4.1
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, mo rng min
MPLS xung toi thit bi 3750
- Cu hnh dich vu EWS trn thit bi 3750 voi 3 E-LINE tuong ung 3 gi tri VC-
ID khc nhau cho php kt ni cc cp sites: E-LINE giua HNI v DNG (VC-
ID 140); E-LINE giua HNI v HCM (VC-ID 141); E-LINE giua DNG v HCM
(VC-ID 142). Cu hnh cho thit bi khch hng tai cc sites truy nhp vo cc
C-VLAN: HNI (140, 141); DNG (140,142); HCM (141, 142). Cc tham s
duoc m ta chi tit trong bang 4.2
- Kim tra cu hnh v thu dich vu giua cc cp Sites




Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

84
Phn vng Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 10.1.1.17 255.255.255.252
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 10.1.1.18 255.255.255.252
FE1/0/1 Add VLAN 140 Tunnel port (UNI)
VLAN 140 VCID - 140 SVI to DNG
FE 1/0/2 Add VLAN 141 Tunnel port (UNI)
VLAN 141 VCID - 141 SVI to HCM
3400HNI
FE 0/1 VLAN 104 Trunk port
FE 0/3 VLAN 104 Access port
VLAN 104 192.168.40.1 255.255.255.0
FE 0/2 VLAN 114 Trunk port
FE 0/4 VLAN 114 Access port
VLAN 114 192.168.41.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 10.1.1.21 255.255.255.252
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 10.1.1.22 255.255.255.252
FE1/0/1 Add VLAN 140 Tunnel port (UNI)
VLAN 140 VCID - 140 SVI to HNI
FE 1/0/2 Add VLAN 142 Tunnel port (UNI)
VLAN 142 VCID - 142 SVI to HCM
3400DNG
FE 0/1 VLAN 104 Trunk port
FE 0/3 VLAN 104 Access port
VLAN 104 192.168.40.2 255.255.255.0
FE 0/2 VLAN 124 Trunk port
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

85
FE 0/4 VLAN 124 Access port
VLAN 124 192.168.42.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 10.1.1.25 255.255.255.252
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 10.1.1.26 255.255.255.252
FE1/0/1 Add VLAN 141 Tunnel port (UNI)
VLAN 141 VCID - 141 SVI to HNI
FE 1/0/2 Add VLAN 142 Tunnel port (UNI)
VLAN 142 VCID - 142 SVI to DNG
3400HCM
FE 0/1 VLAN 114 Trunk port
FE 0/3 VLAN 114 Access port
VLAN 114 192.168.41.2 255.255.255.0
FE 0/2 VLAN 124 Trunk port
FE 0/4 VLAN 124 Access port
VLAN 124 192.168.42.2 255.255.255.0
Bang 4.2: Cc tham so cau hnh dich vu EWS

4.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF cho cc thit bi 7600 v
3750
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP v mo rng min
MPLS xung toi thit bi 3750
- Cu hnh EWS:
a. Trn thit bi 3750
Tao cc L2 VLAN (VLAN 140, VLAN 141)
Cu hnh cho 2 giao din kt ni toi CE (FE 1/0/1 v Fa 1/0/2) o ch d
Dot1q-tunnel
Cu hnh L2TP cho cc giao din trn
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

86
Thuc hin tao SVI, cu hnh EoMPLS thuc hin xconnect trn SVI voi gi tri
VC-ID l 140 v 141, dia chi peer l dia chi cua 3750-DNG v 3750-HCM
b. Trn thit bi 3400
Tao L2 VLAN (140, 141)
Cu hnh 802.1q Trunk cho 2 giao din kt ni toi 3750
Cu hnh L3 VLAN
c. Kim tra
Kim tra trang thi cc EoMPLS Tunnel:
Ping tu cc interface VLAN trn 3400:
Kim tra tnh trong sut dich vu

M ta chi tit:
4.4.1. Phn vng HNI
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 4.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
4.2.
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HNI
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

87
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HNI
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HNI
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HNI
- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief:
- show ip cef summary
- show mpls interface
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v EWS
Phan ny chi thuc hin voi cc thit bi 3750HNI v 3400HNI.
Cu hnh trn 3750HNI:
- Tao cc L2 VLAN ( VLAN 140, VLAN 141) trn thit bi 3750HNI kt ni toi
3400HNI - CE cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc
dng cho dich vu EWS.
3750HNI(config)#vlan 140
3750HNI(config-vlan)#name EWS-140
3750HNI(config-vlan)#exit
3750HNI(config)#vlan 141
3750HNI(config-vlan)#name EWS-141
3750HNI(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE o ch d tunnel port cho
php luu luong khch hng di qua 3750 duoc gn tuong ung S-VLAN 140 v
141:
3750HNI(config)#interface FastEthernet ___
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

88
3750HNI(config-if)#description Tunnelling to 3400HNI
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport access vlan ___
3750HNI(config-if)#switchport mode dot1q-tunnel
3750HNI(config-if)#no shutdown
3750HNI(config-if)#exit

- Cu hnh L2TP cho cc giao din Fa 1/0/1 v Fa 1/0/2:
3750HNI(config)#interface FastEthernet ___
3750HNI(config-if)#duplex full
3750HNI(config-if)#speed 100
3750HNI(config-if)#no ip address
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HNI(config-if)#l2protocol-tunnel cdp
3750HNI(config-if)#l2protocol-tunnel stp
3750HNI(config-if)#l2protocol-tunnel vtp
3750HNI(config-if)#exit

- Tao cc SVI trn VLAN 140, VLAN 141 tuong ung voi gi tri VC-ID =140,
VC-ID =141 v dia chi IP tuong ung 5.5.5.5, 6.6.6.6 lm dia chi peer toi phn
vng DNG, HCM:
3750HNI(config)#interface vlan ___
3750HNI(config-if)#no ip address
3750HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750HNI(config-if)#no shutdown

Cu hnh trn CE-3400HNI:
- Tao L2VLAN: VLAN 104, VLAN 114 dng vai tr l C-VLAN cho khch
hng:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

89
3400HNI(config)#vlan 104
3400HNI(config-vlan)#name C-VLAN-104
3400HNI(config-vlan)#exit
3400HNI(config)#vlan 114
3400HNI(config-vlan)#name C-VLAN-114
3400HNI(config-vlan)#exit

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO:
Thuc hin tuong tu bi 3

- Cu hnh giao din Fa 0/1 v Fa 0/2 kt ni toi 3750 o ch d trunking cho
php luu luong khch hng tuong ung VLAN 104 v VLAN 114 di qua:
3400HNI(config)#interface ___
3400HNI(config-if)#no switchport
3400HNI(config-if)#switchport
3400HNI(config-if)#switchport mode trunk
3400HNI(config-if)#switchport trunk allowed vlan ___
3400HNI(config-if)#service-policy input PING-PO
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 104, 114 ln luot l
192.168.40.1/24 v 192.168.41.1/24
3400HNI(config)#int vlan ___
3400HNI(config-if)#ip add ___ ___
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

Kim tra cc thng so v VC v kt noi qua EWS:
- Kim tra trn 3750HNI xem cc VC d UP chua, VC-ID c dng khng?
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

90


- Kim tra thng s trn thit bi 3400HNI:

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

91

- Thuc hin ping, traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v
3400HCM bng dia chi IP cua VLAN 104 v 114 d chung to kt ni EWS tu
phn vng HNI toi DNG v HCM thnh cng.

4.4.2. Phn vng DNG
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 4.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi

Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
4.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

92
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600DNG
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600DNG
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750DNG
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750DNG
- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief:
- show ip cef summary
- show mpls interface
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600DNG#debug mpls ldp messages sent
7600DNG#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v EWS
Phan ny chi thuc hin voi cc thit bi 3750DNG v 3400DNG.
Cu hnh trn 3750DNG:
- Tao cc L2 VLAN ( VLAN 140, VLAN 142) trn thit bi 3750DNG kt ni toi
3400DNG cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc dng
cho dich vu EWS.
3750DNG(config)#vlan 140
3750DNG(config-vlan)#name EWS-140
3750DNG(config-vlan)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

93
3750DNG(config)#vlan 142
3750DNG(config-vlan)#name EWS-142
3750DNG(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE o ch d tunnel port cho
php luu luong khch hng di qua 3750 duoc gn tuong ung S-VLAN 140 v
142:
3750DNG(config)#interface FastEthernet ___
3750DNG(config-if)#description Tunnelling to 3400DNG
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport access vlan ___
3750DNG(config-if)#switchport mode dot1q-tunnel
3750DNG(config-if)#no shutdown
3750DNG(config-if)#exit

- Cu hnh L2TP cho cc giao din Fa 1/0/1 v Fa 1/0/2:
3750DNG(config)#interface FastEthernet ___
3750DNG(config-if)#duplex full
3750DNG(config-if)#speed 100
3750DNG(config-if)#no ip address
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750DNG(config-if)#l2protocol-tunnel cdp
3750DNG(config-if)#l2protocol-tunnel stp
3750DNG(config-if)#l2protocol-tunnel vtp
3750DNG(config-if)#exit

- Tao cc SVI trn VLAN 140, VLAN 142 tuong ung voi gi tri VC-ID =140,
VC-ID =142 v dia chi IP tuong ung 4.4.4.4, 6.6.6.6 lm dia chi peer toi phn
vng DNG, HCM:
3750DNG(config)#interface vlan ___
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

94
3750DNG(config-if)#no ip address
3750DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750DNG(config-if)#no shutdown

Cu hnh trn CE-3400DNG:
- Tao L2VLAN: VLAN 104, VLAN 124 dng vai tr l C-VLAN cho khch
hng:
3400DNG(config)#vlan 104
3400DNG(config-vlan)#name C-VLAN-104
3400DNG(config-vlan)#exit
3400DNG(config)#vlan 124
3400DNG(config-vlan)#name C-VLAN-124
3400DNG(config-vlan)#exit

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO:
Thuc hin tuong tu bi 3

- Cu hnh giao din Fa 0/1 v Fa 0/2 kt ni toi 3750 o ch d trunking cho
php luu luong khch hng tuong ung VLAN 104 v VLAN 124 di qua:
3400DNG(config)#interface ____
3400DNG(config-if)#no switchport
3400DNG(config-if)#switchport
3400DNG(config-if)#switchport mode trunk
3400DNG(config-if)#switchport trunk allowed vlan ___
3400DNG(config-if)#service-policy input PING-PO
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 104, 124 ln luot l
192.168.40.2/24 v 192.168.42.1/24
3400DNG(config)#int vlan ___
3400DNG(config-if)#ip add ___ ___
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

95
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

Kim tra cc thng so v VC v kt noi qua EWS:
- Kim tra trn 3750DNG xem cc VC d UP chua, VC-ID c dng khng?

- Kim tra thng s trn thit bi 3400DNG:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

96




- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v
3400HCM bng dia chi IP cua VLAN 104 v 124 d chung to kt ni EWS tu
phn vng DNG toi HNI v HCM thnh cng.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

97
4.4.3. Phn vng HCM
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 4.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
4.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng dinh tuyn cho switch 3750
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HCM
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HCM
- Dt gi tri mtu =1546 v jumbo-mtu =9100 cho 3750HCM
- Kch hoat chuc nng MPLS trn giao din Gi 1/1/1 cua 3750HCM
- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbo-mtu.

Buc 4: Kim tra cc thng s
- show ip interface brief:
- show ip cef summary
- show mpls interface
- show mpls forwarding-table
- show mpls ldp discovery
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

98
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Buc 5: Cu hnh d|ch v EWS
Phan ny chi thuc hin voi cc thit bi 3750HCM v 3400HCM.
Cu hnh trn 3750HCM:
- Tao cc L2 VLAN ( VLAN 141, VLAN 142) trn thit bi 3750HCM kt ni toi
3400HCM cho 2 dich vu EWS. Bang 4.2 chi r cc VLAN v UNI duoc dng
cho dich vu EWS.
3750HCM(config)#vlan 141
3750HCM(config-vlan)#name EWS-141
3750HCM(config-vlan)#exit
3750HCM(config)#vlan 142
3750HCM(config-vlan)#name EWS-142
3750HCM(config-vlan)#exit

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE o ch d tunnel port cho
php luu luong khch hng di qua 3750 duoc gn tuong ung S-VLAN 141 v
142:
3750HCM(config)#interface FastEthernet ___
3750HCM(config-if)#description Tunnelling to 3400HCM
3750HCM(config-if)#no switchport
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport access vlan ___
3750HCM(config-if)#switchport mode dot1q-tunnel
3750HCM(config-if)#no shutdown
3750HCM(config-if)#exit

- Cu hnh L2TP cho cc giao din Fa 1/0/1 v Fa 1/0/2:
3750HCM(config)#interface FastEthernet ___
3750HCM(config-if)#duplex full
3750HCM(config-if)#speed 100
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

99
3750HCM(config-if)#no ip address
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HCM(config-if)#l2protocol-tunnel cdp
3750HCM(config-if)#l2protocol-tunnel stp
3750HCM(config-if)#l2protocol-tunnel vtp

- Tao cc SVI trn VLAN 141, VLAN 142 tuong ung voi gi tri VC-ID =141,
VC-ID =142 v dia chi IP tuong ung 4.4.4.4, 5.5.5.5 lm dia chi peer toi phn
vng HCM, HCM:
3750HCM(config)#interface vlan ___
3750HCM(config-if)#no ip address
3750HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
3750HCM(config-if)#no shutdown

Cu hnh trn CE-3400HCM:
- Tao L2VLAN: VLAN 114, VLAN 124 dng vai tr l C-VLAN cho khch
hng:
3400HCM(config)#vlan 114
3400HCM(config-vlan)#name C-VLAN-114
3400HCM(config-vlan)#exit
3400HCM(config)#vlan 124
3400HCM(config-vlan)#name C-VLAN-124
3400HCM(config-vlan)#exit

- Cu hnh cho php ping tu 2 thit bi 3400 nho policy PING-PO
Thuc hin tuong tu bi 3

- Cu hnh giao din Fa 0/1 v Fa 0/2 kt ni toi 3750 o ch d trunking cho
php luu luong khch hng tuong ung VLAN 114 v VLAN 124 di qua:
3400HCM(config)#interface ___
3400HCM(config-if)#no switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

100
3400HCM(config-if)#switchport
3400HCM(config-if)#switchport mode trunk
3400HCM(config-if)#switchport trunk allowed vlan ___
3400HCM(config-if)#service-policy input PING-PO
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

- Cu hnh L3 VLAN thuc hin dt dia chi IP cho VLAN 114, 124 ln luot l
192.168.41.2/24 v 192.168.42.2/24
3400HCM(config)#int vlan ___
3400HCM(config-if)#ip add ___ ___
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

Kim tra cc thng so v VC v kt noi qua EWS:
- Kim tra trn 3750HCM xem cc VC d UP chua, VC-ID c dng khng?


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

101
- Kim tra thng s trn thit bi 3400HCM:

- Thuc hin ping, traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM
v 3400DNG bng dia chi IP cua VLAN 114 v 124 d chung to kt ni EWS tu
phn vng HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

102
BI 5: CU HNH DJCH VJ EMS
5.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Multipoint Service cung cp cho hoc
vin cc kin thuc lin quan dn dich vu E-LAN dua trn cng ngh EoMPLS v k
nng cu hnh cho dich vu EMS dua trn cc thit bi Cisco h tro MPLS. Kt thc bi
thuc hnh, hoc vin c kha nng:
- Nm vung cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh
MPLS
- Cu hnh cho dich vu EMS dua trn cng ngh EoMPLS
- Kim tra v khc phuc li cu hnh EMS
5.2. Danh sch thit b| v cu hnh mng
5.2.1. Danh sch thit b|
STT
Vai tr
thit b|
Tn thit
b|
Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M),
Version 12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
3400HNI Switch 3400 Cisco (IOS:
ME340x Software
(ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 5.1: Danh sch thit bi mang cau hnh dich vu EMS




Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

103
5.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 5.1: So do mang cau hnh dich vu EMS

5.3. Yu cu bi thc hnh
- Chun bi trang thit bi v kt ni mang nhu hnh 5.1
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, min MPLS chi
gioi han dn b dinh tuyn 7604.
- Cu hnh dich vu EMS trn thit bi 7604 voi 1 E-LAN c gi tri VC-ID 150 cho
php kt ni 3 sites. Cu hnh cho thit bi khch hng tai cc sites cng truy
nhp vo C-VLAN 105. Cc tham s duoc m ta chi tit trong bang 5.2
- Kim tra cu hnh v thu dich vu giua cc cp Sites

Phn vng Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI 7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 Add VLAN 150 Trunk
VLAN 150 VPNID - 150 To DNG, HCM
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

104
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 150 Trunk
FE 1/0/1 Add VLAN 150 Tunnel Port (UNI)
3400HNI
FE 0/1 VLAN 105 Trunk port
VLAN 105 192.168.5.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 Add VLAN 150 Trunk
VLAN 150 VPNID - 150 To HNI, HCM
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 Add VLAN 150 Trunk
FE 1/0/1 Add VLAN 150 Tunnel Port (UNI)
3400DNG
FE 0/1 VLAN 105 Trunk port
VLAN 105 192.168.5.2 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 Add VLAN 150 Trunk
VLAN 150 VPNID - 150 To HNI, DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 Add VLAN 150 Trunk
FE 1/0/1 Add VLAN 150 Tunnel Port (UNI)
3400HCM
FE 0/1 VLAN 105 Trunk port
VLAN 105 192.168.5.3 255.255.255.0
Bang 5.2: Cc tham so cau hnh dich vu EMS

5.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF cho cc thit bi 7600 v
3750
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

105
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP
- Cu hnh EWS:
a. Trn thit bi 7600
Kt ni toi 3750HNI thng qua giao din GE 4/1 o ch d Trunking
Tao L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM
Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI bng cch
xconnect trn SVI
b. Trn thit bi 3750
Tao L2 VLAN (150)
Cu hnh cho giao din kt ni toi CE (FE 1/0/1) o ch d Dot1q-tunnel
Cu hnh L2TP cho cc giao din trn
Cu hnh cho giao din kt ni toi NPE o ch d 802.1q Trunk
c. Trn thit bi 3400
Tao L2 VLAN (105) khch hng
Cu hnh 802.1q Trunk cho giao din kt ni toi 3750
Cu hnh L3 VLAN
d. Kim tra
Kim tra trang thi cc EoMPLS Tunnel:
Ping tu cc interface VLAN trn 3400:
Kim tra tnh trong sut dich vu

M ta chi tit:
5.4.1. Phn vng HNI
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 5.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

106
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
5.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HNI
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HNI
- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Buc 5: Cu hnh cho EMS
Cu hnh trn 7600HNI:
- Tao VLAN 150:
7600HNI(config)#vlan 150
7600HNI(config-vlan)#name EMS-150
7600HNI(config-vlan)#exit

- Thuc hin kt ni toi 3750HNI thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong S-VLAN 150 di qua:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

107
7600HNI(config)#interface gigabitEthernet 4/1
7600HNI(config-if)#no switchport
7600HNI(config-if)#switchport
7600HNI(config-if)#switchport trunk encapsulation dot1q
7600HNI(config-if)#switchport mode trunk
7600HNI(config-if)#switchport trunk allowed vlan 150
7600HNI(config-if)#no shutdown
7600HNI(config-if)#exit

- Tao ra L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM:
7600HNI(config)#l2 vfi EMS_150 manual
7600HNI(config-vfi)#vpn id 150
7600HNI(config-vfi)#neighbor 2.2.2.2 encapsulation mpls
7600HNI(config-vfi)#neighbor 3.3.3.3 encapsulation mpls
7600HNI(config-vfi)#exit

- Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI:
7600HNI(config)#interface vlan 150
7600HNI(config-if)#no ip address
7600HNI(config-if)#xconnect vfi EMS_150
7600HNI(config-if)#no shutdown
7600HNI(config-if)#exit

Cu hnh trn 3750HNI:
- Tao VLAN 150 d thuc hin vic gn moi luu luong khch hng vo S-VLAN:
3750HNI(config)#vlan 150
3750HNI(config-vlan)#name EMS-150
3750HNI(config-vlan)#exit

- Khoi tao S-VLAN 150 cho vic mang luu luong khch hng v cu hnh cho
giao din Fa 1/0/1 kt ni toi 3400HNI o ch d tunnel port:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

108
3750HNI(config)#interface Fa 1/0/1
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport access vlan 150
3750HNI(config-if)#switchport mode dot1q-tunnel
3750HNI(config-if)#no shutdown

- Thuc hin lun vic cu hnh L2TP trn cng Fa 1/0/1:
3750HNI(config-if)#duplex full
3750HNI(config-if)#speed 100
3750HNI(config-if)#no ip address
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HNI(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HNI(config-if)#l2protocol-tunnel cdp
3750HNI(config-if)#l2protocol-tunnel stp
3750HNI(config-if)#l2protocol-tunnel vtp
3750HNI(config-if)#exit

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HNI o ch d Trunk, cho php
luu luong S-VLAN 150 di qua:
3750HNI(config)#interface Gi 1/1/1
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport mode trunk
3750HNI(config-if)#switchport trunk allowed vlan 150
3750HNI(config-if)#no shutdown

Cu hnh trn 3400HNI:
- Tao C-VLAN 105 trn thit bi khch hng:
3400HNI(config)#vlan 105
3400HNI(config-vlan)#name C-VLAN-EMS
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

109
3400HNI(config-vlan)#exit

- Tao L3 VLAN bng vic gn dia chi IP 192.168.5.1/24 cho giao din C-VLAN:
3400HNI(config)#interface vlan 105
3400HNI(config-if)#ip address ___ ___
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HNI o ch d Trunk, cho php
luu luong VLAN 105 di qua:
3400HNI(config)#interface Fa 0/1
3400HNI(config-if)#switchport
3400HNI(config-if)#switchport mode trunk
3400HNI(config-if)#switchport trunk allowed vlan 105
3400HNI(config-if)#service-policy input PING-PO
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

Kim tra cc thng so v VC v kt noi qua EMS:
- Kim tra xem VC d UP chua, VC-ID c dng khng?


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

110
- Thuc hin ping, traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v
3400HCM bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng HNI toi DNG v HCM thnh cng thng qua VFI EMS_150.

5.4.2. Phn vng DNG
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 5.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
5.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600DNG
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600DNG
- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

111
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600DNG#debug mpls ldp messages sent
7600DNG#debug mpls ldp messages received
Buc 5: Cu hnh cho EMS
Cu hnh trn 7600DNG:
- Tao VLAN 150:
7600DNG(config)#vlan 150
7600DNG(config-vlan)#name EMS-150
7600DNG(config-vlan)#exit

- Thuc hin kt ni toi 3750DNG thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong S-VLAN 150 di qua:
7600DNG(config)#interface gigabitEthernet 4/1
7600DNG(config-if)#no switchport
7600DNG(config-if)#switchport
7600DNG(config-if)#switchport trunk encapsulation dot1q
7600DNG(config-if)#switchport mode trunk
7600DNG(config-if)#switchport trunk allowed vlan 150
7600DNG(config-if)#no shutdown
7600DNG(config-if)#exit

- Tao ra L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600HNI, 7600HCM:
7600DNG(config)#l2 vfi EMS_150 manual
7600DNG(config-vfi)#vpn id 150
7600DNG(config-vfi)#neighbor 1.1.1.1 encapsulation mpls
7600DNG(config-vfi)#neighbor 3.3.3.3 encapsulation mpls
7600DNG(config-vfi)#exit

- Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI:
7600DNG(config)#interface vlan 150
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

112
7600DNG(config-if)#no ip address
7600DNG(config-if)#xconnect vfi EMS_150
7600DNG(config-if)#no shutdown
7600DNG(config-if)#exit

Cu hnh trn 3750DNG:
- Tao VLAN 150 d thuc hin vic gn moi luu luong khch hng vo S-VLAN:
3750DNG(config)#vlan 150
3750DNG(config-vlan)#name EMS-150
3750DNG(config-vlan)#exit

- Khoi tao S-VLAN 150 cho vic mang luu luong khch hng v cu hnh cho
giao din Fa 1/0/1 kt ni toi 3400DNG o ch d tunnel port:
3750DNG(config)#interface Fa 1/0/1
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport access vlan 150
3750DNG(config-if)#switchport mode dot1q-tunnel
3750DNG(config-if)#no shutdown

- Thuc hin lun vic cu hnh L2TP cho cng Fa 1/0/1:
3750DNG(config-if)#duplex full
3750DNG(config-if)#speed 100
3750DNG(config-if)#no ip address
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750DNG(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750DNG(config-if)#l2protocol-tunnel cdp
3750DNG(config-if)#l2protocol-tunnel stp
3750DNG(config-if)#l2protocol-tunnel vtp
3750DNG(config-if)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

113
- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600DNG o ch d Trunk, cho
php luu luong S-VLAN 150 di qua:
3750DNG(config)#interface Gi 1/1/1
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport mode trunk
3750DNG(config-if)#switchport trunk allowed vlan 150
3750DNG(config-if)#no shutdown
3750DNG(config-if)#exit

Cu hnh trn 3400DNG:
- Tao C-VLAN 105 trn thit bi khch hng:
3400DNG(config)#vlan 105
3400DNG(config-vlan)#name C-VLAN-EMS
3400DNG(config-vlan)#exit

- Tao L3 VLAN bng vic gn dia chi IP 192.168.5.2/24 cho giao din C-VLAN:
3400DNG(config)#interface vlan 105
3400DNG(config-if)#ip address ___ ___
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

- Cu hnh cho giao din Fa 0/1 kt ni dn 3750DNG o ch d Trunk, cho php
luu luong VLAN 105 di qua:
3400DNG(config)#interface Fa 0/1
3400DNG(config-if)#switchport
3400DNG(config-if)#switchport mode trunk
3400DNG(config-if)#switchport trunk allowed vlan 105
3400DNG(config-if)#service-policy input PING-PO
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

114
Kim tra cc thng so v VC v kt noi qua EMS:
- Kim tra xem VC d UP chua, VC-ID c dng khng?

- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG v
3400HCM bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng DNG toi HNI v HCM thnh cng thng qua VFI EMS_150.

5.4.3. Phn vng HCM
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 5.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu hnh
v. Dng cc dia chi IP trong huong dn.
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

115
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HCM
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HCM
- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Buc 5: Cu hnh cho EMS
Cu hnh trn 7600HCM:
- Thuc hin kt ni toi 3750HCM thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong S-VLAN 150 di qua:
7600HCM(config)#interface giagaEthernet 4/1
7600HCM(config-if)#no switchport
7600HCM(config-if)#switchport
7600HCM(config-if)#switchport trunk encapsulation dot1q
7600HCM(config-if)#switchport mode trunk
7600HCM(config-if)#switchport trunk allowed vlan 150
7600HCM(config-if)#no shutdown
7600HCM(config-if)#exit
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

116
- Tao ra L2 VFI c tn l EMS_150, VPN ID l 150 v dia chi neighbor l IP
loopback cua 7600HNI, 7600DNG:
7600HCM(config)#l2 vfi EMS_150 manual
7600HCM(config-vfi)#vpn id 150
7600HCM(config-vfi)#neighbor 1.1.1.1 encapsulation mpls
7600HCM(config-vfi)#neighbor 2.2.2.2 encapsulation mpls
7600HCM(config-vfi)#exit

- Tao SVI trn VLAN 150. Gn L2 VFI tao ra o trn vo SVI:
7600HCM(config)#interface vlan 150
7600HCM(config-if)#no ip address
7600HCM(config-if)#xconnect vfi EMS_150
7600HCM(config-if)#no shutdown
7600HCM(config-if)#exit

Cu hnh trn 3750HCM:
- Tao VLAN 150 d thuc hin vic gn moi luu luong khch hng vo S-VLAN:
3750HCM(config)#vlan 150
3750HCM(config-vlan)#name EMS-150
3750HCM(config-vlan)#exit

- Khoi tao S-VLAN 150 cho vic mang luu luong khch hng v cu hnh cho
giao din Fa 1/0/1 kt ni toi 3400HCM o ch d tunnel port:
3750HCM(config)#interface Fa 1/0/1
3750HCM(config-if)#no switchport
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport access vlan 150
3750HCM(config-if)#switchport mode dot1q-tunnel
3750HCM(config-if)#no shutdown

- Thuc hin lun vic cu hnh L2TP cho cng Fa 1/0/1:
3750HCM(config-if)#duplex full
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

117
3750HCM(config-if)#speed 100
3750HCM(config-if)#no ip address
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold cdp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold vtp 300
3750HCM(config-if)#l2protocol-tunnel shutdown-threshold stp 300
3750HCM(config-if)#l2protocol-tunnel cdp
3750HCM(config-if)#l2protocol-tunnel stp
3750HCM(config-if)#l2protocol-tunnel vtp
3750HCM(config-if)#exit

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HCM o ch d Trunk, cho
php luu luong S-VLAN 150 di qua:
3750HCM(config)#interface Gi 1/1/1
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport mode trunk
3750HCM(config-if)#switchport trunk allowed vlan 150
3750HCM(config-if)#no shutdown
3750HCM(config-if)#exit

Cu hnh trn 3400HCM:
- Tao C-VLAN 105 trn thit bi khch hng:
3400HCM(config)#vlan 105
3400HCM(config-vlan)#name C-VLAN-EMS
3400HCM(config-vlan)#exit

- Tao L3 VLAN bng vic gn dia chi IP 192.168.5.3/24 cho giao din C-VLAN:
3400HCM(config)#interface vlan 105
3400HCM(config-if)#ip address ___ ___
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

118
- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HCM o ch d Trunk, cho php
luu luong VLAN 105 di qua:
3400HCM(config)#interface Fa 0/1
3400HCM(config-if)#switchport
3400HCM(config-if)#switchport mode trunk
3400HCM(config-if)#switchport trunk allowed vlan 105
3400HCM(config-if)#service-policy input PING-PO
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

Kim tra cc thng so v VC v kt noi qua EMS:
- Kim tra xem VC d UP chua, VC-ID c dng khng?


- Thuc hin ping, traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM
v 3400DNG bng dia chi IP cua VLAN 105 d chung to kt ni EMS tu phn
vng HCM toi HNI v DNG thnh cng thng qua VFI EMS_150.
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

119
BI 6: CU HNH DJCH VJ ERMS
6.1. Mc dch
Bi thuc hnh cu hnh dich vu Ethernet Relay Multipoint Service cung cp cho
hoc vin cc kin thuc lin quan dn dich vu E-LAN dua trn cng ngh EoMPLS v
k nng cu hnh cho dich vu ERMS dua trn cc thit bi Cisco h tro MPLS. Kt thc
bi thuc hnh, hoc vin c kha nng:
- Nm vung cc thng s v dinh tuyn IP v cu hnh co ban cho cng ngh
MPLS
- Cu hnh cho dich vu ERMS dua trn cng ngh EoMPLS
- Kim tra v khc phuc li cu hnh ERMS
6.2. Danh sch thit b| v cu hnh mng
6.2.1. Danh sch thit b|
STT
Vai tr
thit b|
Tn thit
b|
Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI
Switch 3750 Cisco (IOS:
C3750ME Software
(C3750ME-I5-M),
Version 12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
3400HNI Switch 3400 Cisco (IOS:
ME340x Software
(ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 6.1: Danh sch thit bi mang cau hnh dich vu ERMS
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

120
6.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 6.1: So do mang cau hnh dich vu ERMS

6.3. Yu cu bi thc hnh
- Chun bi trang thit bi v kt ni mang nhu hnh 6.1
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF
- Cu hnh mang MPLS su dung giao thuc phn phi nhn LDP, min MPLS chi
mo rng toi thit bi 7604
- Cu hnh dich vu ERMS trn thit bi 7604 voi 1 E-LAN v 3 E-LINE tuong
ung 4 gi tri VC-ID khc nhau cho php kt ni cc cp sites: E-LAN kt ni ca
3 sites voi nhau voi VC-ID 160 tao thnh kt ni da dim; E-LINE giua HNI v
DNG (VC-ID 161); E-LINE giua HNI v HCM (VC-ID 162); E-LINE giua
DNG v HCM (VC-ID 163). Cu hnh cho thit bi khch hng tai cc sites truy
nhp vo cc C-VLAN: HNI (160,161,162); DNG (160,161,163); HCM
(160,162,163). Cc tham s duoc m ta chi tit trong bang 6.2
- Kim tra cu hnh v thu dich vu giua cc cp Sites






Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

121
Phn
vng
Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI
7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 Add VLAN 160, 161, 162 Trunk
VLAN 160 VFI-ID 160 To DNG, HCM
VLAN 161 VC-ID 161 To DNG
VLAN 162 VC-ID 162 To HCM
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 162 Trunk
FE 1/0/1 Add VLAN 160, 161, 162 Trunk
3400HNI
FE 0/1 VLAN 160, 161, 162 Trunk port
VLAN 160 192.168.60.1 255.255.255.0
VLAN 161 192.167.61.1 255.255.255.0
VLAN 162 192.167.62.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 Add VLAN 160, 161, 163 Trunk
VLAN 160 VFI-ID 160 To HNI, HCM
VLAN 161 VC-ID 161 To HNI
VLAN 163 VC-ID 163 To HCM
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 163 Trunk
FE 1/0/1 Add VLAN 160, 161, 163 Trunk
3400DNG
FE 0/1 VLAN 160, 161, 163 Trunk port
VLAN 160 192.168.60.2 255.255.255.0
VLAN 161 192.167.61.2 255.255.255.0
VLAN 163 192.167.63.1 255.255.255.0
HCM 7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

122
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 Add VLAN 160, 162, 163 Trunk
VLAN 160 VFI-ID 160 To HNI, DNG
VLAN 162 VC-ID 162 To HNI
VLAN 163 VC-ID 163 To DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 Add VLAN 160, 162, 163 Trunk
FE 1/0/1 Add VLAN 160, 162, 163 Trunk
3400HCM
FE 0/1 VLAN 160, 162, 163 Trunk port
VLAN 160 192.168.60.3 255.255.255.0
VLAN 162 192.167.62.2 255.255.255.0
VLAN 163 192.167.63.2 255.255.255.0
Bang 6.2: Cc tham so cau hnh dich vu ERMS

6.4. Cc buc thc hnh
M ta tng qut:
- Cu hnh mang co ban cho tt ca cc thit bi
- Cu hnh mang IP su dung giao thuc dinh tuyn OSPF cho cc thit bi 7600 v
3750
- Cu hnh MPLS su dung giao thuc phn phi nhn LDP
- Cu hnh EWS:
a. Trn thit bi 7600
Tao cc L2 VLAN (VLAN 160, 161, 162)
Kt ni toi 3750HNI thng qua giao din GE 4/1 o ch d Trunking
Tao L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
loopback cua 7600DNG, 7600HCM
Tao SVI trn VLAN 160. Gn L2 VFI tao ra o trn vo SVI bng cch
xconnect trn SVI
Tao cc SVI trn VLAN 161, VLAN 162 tuong ung voi gi tri VC-ID =
161, VC-ID =162 v dia chi IP 2.2.2.2, 3.3.3.3 lm dia chi peer toi phn
vng DNG, HCM
b. Trn thit bi 3750
Tao cc L2 VLAN (160, 161,162)
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

123
Cu hnh cho giao din kt ni toi CE (FE 1/0/1) o ch d 802.1q Trunk
Cu hnh cho giao din kt ni toi NPE o ch d 802.1q Trunk
c. Trn thit bi 3400
Tao L2 VLAN 160, 161, 162
Cu hnh 802.1q Trunk cho giao din kt ni toi 3750
Cu hnh L3 VLAN
d. Kim tra
Kim tra bang chuyn tip nhn MPLS
Kim tra trang thi cc EoMPLS Tunnel
Ping tu cc interface VLAN trn 3400

M ta chi tit:
6.4.1. Phn vng HNI
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 6.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
6.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HNI
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

124
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HNI
- Ring voi giao din Gi 4/1 cua 7600HNI kt ni dn 3750HNI th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HNI khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Buc 5: Cu hnh cho ERMS
Cu hnh trn 7600HNI:
- Thuc hin kt ni toi 3750HNI thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong VLAN 160, 161, 162 di qua:
7600HNI(config)#interface gigabitEthernet 4/1
7600HNI(config-if)#no switchport
7600HNI(config-if)#switchport
7600HNI(config-if)#switchport trunk encapsulation dot1q
7600HNI(config-if)#switchport mode trunk
7600HNI(config-if)#switchport trunk allowed vlan 160,161,162
7600HNI(config-if)#no shutdown
7600HNI(config-if)#exit

- Tao cc L2 VLAN 160, 161, 162:
7600HNI(config)#vlan 160
7600HNI(config-vlan)#name ERMS-160
7600HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 162
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

125
- Tao ra L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
cua 7600DNG, 7600HCM:
7600HNI(config)#l2 vfi ERMS_160 manual
7600HNI(config)#vpn id 160
7600HNI(config)#neighbor 2.2.2.2 encapsulation mpls
7600HNI(config)#neighbor 3.3.3.3 encapsulation mpls

- Tao SVI trn VLAN 160. Gn L2 VFI d tao o trn vo SVI:
7600HNI(config)#interface vlan 160
7600HNI(config-if)#no ip address
7600HNI(config-if)#xconnect vfi ERMS_160
7600HNI(config-if)#no shutdown
7600HNI(config-if)#exit

- Tao cc SVI trn VLAN 161, VLAN 162 tuong ung voi gi tri VC-ID =161,
VC-ID =162 v dia chi IP 2.2.2.2, 3.3.3.3 lm dia chi peer toi phn vng DNG,
HCM:
7600HNI(config)#interface vlan ___
7600HNI(config-if)#no ip address
7600HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
7600HNI(config-if)#no shutdown
7600HNI(config-if)#exit

Cu hnh trn 3750HNI:
- Tao VLAN 160, 161, 162 d thuc hin vic gn moi luu luong khch hng vo
cc VLAN:
3750HNI(config)#vlan 160
3750HNI(config-vlan)#name ERMS-160
3750HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 162

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400HNI o ch d Trunk, cho php
luu luong cc VLAN 160, 161, 162 di qua:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

126
3750HNI(config)#interface Fa 1/0/1
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport trunk encapsulation dot1q
3750HNI(config-if)#switchport mode trunk
3750HNI(config-if)#switchport trunk allowed vlan 160,161,162
3750HNI(config-if)#no shutdown
3750HNI(config-if)#exit

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HNI o ch d Trunk, cho php
luu luong cc VLAN 160, 161, 162 di qua:
3750HNI(config)#interface Gi 1/1/1
3750HNI(config-if)#no switchport
3750HNI(config-if)#switchport
3750HNI(config-if)#switchport mode trunk
3750HNI(config-if)#switchport trunk allowed vlan 160,161,162
3750HNI(config-if)#no shutdown
3750HNI(config-if)#exit

Cu hnh trn 3400HNI:
- Tao C-VLAN 160, 161, 162 trn thit bi khch hng:
3400HNI(config)#vlan 160
3400HNI(config-vlan)#name ERMS-160
3400HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 162

- Tao L3 VLAN bng vic gn dia chi IP 192.168.60.1/24, 192.167.61.1/24,
192.167.62.1/24 cho giao din C-VLAN 160, 161, 162:
3400HNI(config)#interface vlan ___
3400HNI(config-if)#ip address ___ ___
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

127
- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HNI o ch d Trunk, cho php
luu luong VLAN 160, 161, 162 di qua:
3400HNI(config)#interface Fa 0/1
3400HNI(config-if)#no switchport
3400HNI(config-if)#switchport
3400HNI(config-if)#switchport mode trunk
3400HNI(config-if)#switchport trunk allowed vlan 160,161,162
3400HNI(config-if)#service-policy input PING-PO
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit
- Cu hnh cho giao din Fa 0/2, Fa 0/3, Fa 0/4 o ch d Access, thuc VLAN
160, 161, 163 v gn dia chi IP cho PC kt ni vo giao din ny:
3400HNI(config)#interface ___
3400HNI(config-if)#no switchport
3400HNI(config-if)#switchport
3400HNI(config-if)#switchport mode access
3400HNI(config-if)#switchport access vlan ____
3400HNI(config-if)#no shutdown
3400HNI(config-if)#exit

Kim tra cc thng so v VC v kt noi qua ERMS:
- Kim tra cu hnh MPLS d dng chua?

- Kim tra xem VC d UP chua, VC-ID c dng khng?
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

128

- Kim tra vic cc router d hoc duoc dia chi MAC cua nhau thng qua dich vu
ERMS chua?
7600-HNI#show mac-address-table vlan 160
- Kim tra cc giao din trunking v thng s cc VLAN cua 3750:

- Kim tra cc giao din trunking v thng s cc VLAN cua 3400:
3400-HNI#show int trunk
3400-HNI#show vlan bri
3400-HNI#show ip int bri
- Thuc hin ping, traceroute giua 2 thit bi 3400HNI v 3400DNG, 3400HNI v
3400HCM bng dia chi IP cua VLAN 160, 161, 162 d chung to kt ni ERMS
tu phn vng HNI toi DNG v HCM thnh cng.

6.4.2. Phn vng DNG
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 6.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

129
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
6.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600DNG
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600DNG
- Ring voi giao din Gi 4/1 cua 7600DNG kt ni dn 3750DNG th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750DNG khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HNI#debug mpls ldp messages sent
7600HNI#debug mpls ldp messages received
Buc 5: Cu hnh cho ERMS
Cu hnh trn 7600DNG:
- Thuc hin kt ni toi 3750DNG thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong VLAN 160, 161, 163 di qua:
7600DNG(config)#interface gigabitEthernet 4/1
7600DNG(config-if)#no switchport
7600DNG(config-if)#switchport
7600DNG(config-if)#switchport trunk encapsulation dot1q
7600DNG(config-if)#switchport mode trunk
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

130
7600DNG(config-if)#switchport trunk allowed vlan 160,161,163
7600DNG(config-if)#no shutdown
7600DNG(config-if)#exit

- Tao cc L2 VLAN 160, 161, 163:
7600DNG(config)#vlan 160
7600DNG(config-vlan)#name ERMS-160
7600DNG(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 163

- Tao ra L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
cua 7600DNG, 7600HCM:
7600DNG(config)#l2 vfi ERMS_160 manual
7600DNG(config)#vpn id 160
7600DNG(config)#neighbor 1.1.1.1 encapsulation mpls
7600DNG(config)#neighbor 3.3.3.3 encapsulation mpls

- Tao SVI trn VLAN 160. Gn L2 VFI d tao o trn vo SVI:
7600DNG(config)#interface vlan 160
7600DNG(config-if)#no ip address
7600DNG(config-if)#xconnect vfi ERMS_160
7600DNG(config-if)#no shutdown
7600DNG(config-if)#exit

- Tao cc SVI trn VLAN 161, VLAN 163 tuong ung voi gi tri VC-ID =161,
VC-ID =163 v dia chi IP 1.1.1.1, 3.3.3.3 lm dia chi peer toi phn vng DNG,
HCM:
7600DNG(config)#interface vlan ___
7600DNG(config-if)#no ip address
7600DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
7600DNG(config-if)#no shutdown

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

131
Cu hnh trn 3750DNG:
- Tao VLAN 160, 161, 163 d thuc hin vic gn moi luu luong khch hng vo
cc VLAN:
3750DNG(config)#vlan 160
3750DNG(config-vlan)#name ERMS-160
3750DNG(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 163

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400DNG o ch d Trunk, cho
php luu luong cc VLAN 160, 161, 163 di qua:
3750DNG(config)#interface Fa 1/0/1
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport trunk encapsulation dot1q
3750DNG(config-if)#switchport mode trunk
3750DNG(config-if)#switchport trunk allowed vlan 160,161,163
3750DNG(config-if)#no shutdown
3750DNG(config-if)#exit

- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600DNG o ch d Trunk, cho
php luu luong cc VLAN 160, 161, 163 di qua:
3750DNG(config)#interface Gi 1/1/1
3750DNG(config-if)#no switchport
3750DNG(config-if)#switchport
3750DNG(config-if)#switchport mode trunk
3750DNG(config-if)#switchport trunk allowed vlan 160,161,163
3750DNG(config-if)#no shutdown
3750DNG(config-if)#exit

Cu hnh trn 3400DNG:
- Tao C-VLAN 160, 161, 163 trn thit bi khch hng:
3400DNG(config)#vlan 160
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

132
3400DNG(config-vlan)#name ERMS-160
3400DNG(config-vlan)#exit
Thuc hin tuong tu voi VLAN 161 v 163

- Tao L3 VLAN bng vic gn dia chi IP 192.168.60.2/24, 192.167.61.2/24,
192.167.63.1/24 cho giao din C-VLAN 160, 161, 163:
3400DNG(config)#interface vlan ___
3400DNG(config-if)#ip address ___ ___
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

- Cu hnh cho giao din Fa 0/1 kt ni dn 3750DNG o ch d Trunk, cho php
luu luong VLAN 160, 161, 163 di qua:
3400DNG(config)#interface Fa 0/1
3400DNG(config-if)#no switchport
3400DNG(config-if)#switchport
3400DNG(config-if)#switchport mode trunk
3400DNG(config-if)#switchport trunk allowed vlan 160,161,163
3400DNG(config-if)#service-policy input PING-PO
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

- Cu hnh cho giao din Fa 0/2, Fa 0/3, Fa 0/4 o ch d Access, thuc VLAN
160, 161, 163 v gn dia chi IP cho PC kt ni vo giao din ny:
3400DNG(config)#interface Fa ___
3400DNG(config-if)#no switchport
3400DNG(config-if)#switchport
3400DNG(config-if)#switchport mode access
3400DNG(config-if)#switchport access vlan ___
3400DNG(config-if)#no shutdown
3400DNG(config-if)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

133
Kim tra cc thng so v VC v kt noi qua ERMS:
- Kim tra cu hnh MPLS d dng chua?


- Kim tra xem VC d UP chua, VC-ID c dng khng?

- Kim tra vic cc router d hoc duoc dia chi MAC cua nhau thng qua dich vu
ERMS chua?
7600-DNG#sh mac-address-table vlan 160
- Kim tra cc giao din trunking v thng s cc VLAN cua 3750:

- Kim tra cc giao din trunking v thng s cc VLAN cua 3400:
3400-DNG#show int trunk
3400-DNG#show vlan bri
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

134
3400-DNG#show ip int bri
- Thuc hin ping, traceroute giua 2 thit bi 3400DNG v 3400HNI, 3400DNG
v 3400HCM bng dia chi IP cua VLAN 160, 161, 163 d chung to kt ni
ERMS tu phn vng DNG toi HNI v HCM thnh cng.

6.4.3. Phn vng HCM
Buc 1: Chun b| cc thit b| thc hnh v kt ni nhu hnh 6.1
Cu hnh mang co ban cho tt ca cc thit bi nhu bi thuc hnh 1 gm:
- Dt tn hostname
- Tt cc IP Domain Lookup
- Dt cc tham s cho cng console v vty
- Dt username, password d truy nhp thit bi
Buc 2: Cu hnh mng IP su dng giao thc d|nh tuyn OSPF
- Dt dia chi IP Loopback cho cc thit bi
- Dt dia chi IP cho cc cng kt ni giua cc 7600, giua 3750 v 7600 nhu bang
6.2
- Cu hnh OSPF trn mi thit bi. Tt ca cc thit bi thuc cng mt vng
(area0) voi cng Process ID 1
- Kim tra dinh tuyn
- Thuc hin lnh Ping v Traceroute toi tt ca cc thit bi 3750 v 7600 khc
Buc 3: Cu hnh MPLS
- Kch hoat chuc nng IP CEF cho tt ca cc thit bi trong min MPLS
- Kch hoat giao thuc phn phi nhn LDP v dt cng Loopback0 lm router-id
- Dt gi tri jumbo-mtu =9100 cho 7600HCM
- Kch hoat chuc nng MPLS trn cc giao din Gi 3/0/1, Gi 3/0/0, Gi 4/1 cua
7600HCM
- Ring voi giao din Gi 4/1 cua 7600HCM kt ni dn 3750HCM th dt gi tri
mtu =1546 v giao din Gi 1/1/1 cua 3750HCM khng h tro jumbo-mtu.
Buc 4: Kim tra cc thng s
- show ip interface brief
- show ip cef summary
- show mpls interface:
- show mpls forwarding-table
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

135
- show mpls ldp discovery
- show mpls ldp neighbors
- C th dng cc lnh sau d kim tra li:
7600HCM#debug mpls ldp messages sent
7600HCM#debug mpls ldp messages received
Buc 5: Cu hnh cho ERMS
Cu hnh trn 7600HCM:
- Thuc hin kt ni toi 3750HCM thng qua giao din Gi 4/1 o ch d Trunking
cho php mang luu luong VLAN 160, 162, 163 di qua:
7600HCM(config)#interface gigabitEthernet 4/1
7600HCM(config-if)#no switchport
7600HCM(config-if)#switchport
7600HCM(config-if)#switchport trunk encapsulation dot1q
7600HCM(config-if)#switchport mode trunk
7600HCM(config-if)#switchport trunk allowed vlan 160,162,163
7600HCM(config-if)#no shutdown
7600HCM(config-if)#exit

- Tao cc L2 VLAN 160, 162, 163:
7600HCM(config)#vlan 160
7600HCM(config-vlan)#name ERMS-160
7600HCM(config-vlan)#exit
Thuc hin tuong tu voi VLAN 162 v 163

- Tao ra L2 VFI c tn l ERMS_160, VPN ID l 160 v dia chi neighbor l IP
cua 7600HCM, 7600HCM:
7600HCM(config)#l2 vfi ERMS_160 manual
7600HCM(config)#vpn id 160
7600HCM(config)#neighbor 1.1.1.1 encapsulation mpls
7600HCM(config)#neighbor 2.2.2.2 encapsulation mpls

- Tao SVI trn VLAN 160. Gn L2 VFI d tao o trn vo SVI:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

136
7600HCM(config)#interface vlan 160
7600HCM(config-if)#no ip address
7600HCM(config-if)#xconnect vfi ERMS_160
7600HCM(config-if)#no shutdown
7600HCM(config-if)#exit

- Tao cc SVI trn VLAN 162, VLAN 163 tuong ung voi gi tri VC-ID =162,
VC-ID =163 v dia chi IP 1.1.1.1, 2.2.2.2 lm dia chi peer toi phn vng HNI,
DNG:
7600HCM(config)#interface vlan ___
7600HCM(config-if)#no ip address
7600HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
7600HCM(config-if)#no shutdown
7600HCM(config-if)#exit

Cu hnh trn 3750HCM:
- Tao VLAN 160, 162, 163 d thuc hin vic gn moi luu luong khch hng vo
cc VLAN:
3750HCM(config)#vlan 160
3750HCM(config-vlan)#name ERMS-160
3750HCM(config-vlan)#exit
Thuc hin tuong tu voi VLAN 162 v 163

- Khoi tao kt ni trn giao din Fa 1/0/1 dn 3400HCM o ch d Trunk, cho
php luu luong cc VLAN 160, 162, 163 di qua:
3750HCM(config)#interface Fa 1/0/1
3750HCM(config-if)#no switchport
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport trunk encapsulation dot1q
3750HCM(config-if)#switchport mode trunk
3750HCM(config-if)#switchport trunk allowed vlan 160,162,163
3750HCM(config-if)#no shutdown
3750HCM(config-if)#exit
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

137
- Khoi tao kt ni trn giao din Gi 1/1/1 dn 7600HCM o ch d Trunk, cho
php luu luong cc VLAN 160, 162, 163 di qua:
3750HCM(config)#interface Gi 1/1/1
3750HCM(config-if)#no switchport
3750HCM(config-if)#switchport
3750HCM(config-if)#switchport mode trunk
3750HCM(config-if)#switchport trunk allowed vlan 160,162,163
3750HCM(config-if)#no shutdown
3750HCM(config-if)#exit

Cu hnh trn 3400HCM:
- Tao C-VLAN 160, 162, 163 trn thit bi khch hng:
3400HCM(config)#vlan 160
3400HCM(config-vlan)#name ERMS-160
3400HCM(config-vlan)#exit
Thuc hin tuong tu voi VLAN 162 v 163

- Tao L3 VLAN bng vic gn dia chi IP 192.168.60.3/24, 192.167.62.2/24,
192.167.63.2/24 cho giao din C-VLAN 160, 162, 163:
3400HCM(config)#interface vlan ___
3400HCM(config-if)#ip address ___ ___
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

- Cu hnh cho giao din Fa 0/1 kt ni dn 3750HCM o ch d Trunk, cho php
luu luong VLAN 160, 162, 163 di qua:
3400HCM(config)#interface Fa 0/1
3400HCM(config-if)#no switchport
3400HCM(config-if)#switchport
3400HCM(config-if)#switchport mode trunk
3400HCM(config-if)#switchport trunk allowed vlan 160,162,163
3400HCM(config-if)#service-policy input PING-PO
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

138
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

- Cu hnh cho giao din Fa 0/2, Fa 0/3, Fa 0/4 o ch d Access, thuc VLAN
160, 162, 163 v gn dia chi IP cho PC kt ni vo giao din ny:
3400HCM(config)#interface Fa ___
3400HCM(config-if)#no switchport
3400HCM(config-if)#switchport
3400HCM(config-if)#switchport mode access
3400HCM(config-if)#switchport access vlan ___
3400HCM(config-if)#no shutdown
3400HCM(config-if)#exit

Kim tra cc thng so v VC v kt noi qua ERMS:
- Kim tra cu hnh MPLS d dng chua?

- Kim tra xem VC d UP chua, VC-ID c dng khng?

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

139
- Kim tra vic cc router d hoc duoc dia chi MAC cua nhau thng qua dich vu
ERMS chua?
7600-HCM#show mac-address-table vlan 160
- Kim tra cc giao din trunking v thng s cc VLAN cua 3750:

- Kim tra cc giao din trunking v thng s cc VLAN cua 3400:
3400-HCM#show int trunk
3400-HCM#show vlan bri
3400-HCM#show ip int bri

- Thuc hin ping, traceroute giua 2 thit bi 3400HCM v 3400HNI, 3400HCM
v 3400DNG bng dia chi IP cua VLAN 160, 162, 163 d chung to kt ni
ERMS tu phn vng HCM toi HNI v DNG thnh cng.

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

140
BI 7: BAO MAT CHO CC THIET BJ MANG

7.1. Mc dch
Bi thuc hnh cung cp cho hoc vin cc kin thuc lin quan dn cc cch thuc
dam bao an ninh cho h thng mang MANE v mt s cu hnh co ban d dam bao an
ton bao mt. Kt thc bi thuc hnh, hoc vin c th nm vung:
- Mt s cch thuc tn cng thit bi mang
- Cu hnh bao mt co ban cho thit bi NPE, UPE sau khi thuc hin dich vu E-
LAN v E-LINE: VTP, bao mt cng, mt khu, VLAN, CDP, loc dia chi
MAC,
- Cch kim tra v tm li cho cu hnh bao mt
7.2. Danh sch thit b| v cu hnh mng
7.2.1. Danh sch thit b|
STT
Vai tr
thit b|
Tn thit
b|
Loi thit b| Giao din su dng
1.
NPE
7600HNI
Router 7604 Cisco
(IOS: s72033-
advipservicesk9_wan-
mz.122-33.SRA2.bin)
GE 3/0/1, GE 3/0/0; GE 4/1
2. 7600DNG GE 3/0/1, GE 3/0/0; GE 4/1
3. 7600HCM GE 3/0/1, GE 3/0/0; GE 4/1
4.
UPE
3750HNI Switch 3750 Cisco
(IOS: C3750ME
Software (C3750ME-
I5-M), Version
12.2(25)EY4)
GE 1/1/1, FE 1/0/1
5. 3750DNG GE 1/1/1, FE 1/0/1
6. 3750HCM GE 1/1/1, FE 1/0/1
7.
CE
3400HNI Switch 3400 Cisco
(IOS: ME340x
Software (ME340x-
METROBASE-M),
Version 12.2(25)EX1)
FE 0/1
8. 3400DNG FE 0/1
9. 3400HCM FE 0/1

Bang 7.1: Danh sch thit bi mang cau hnh bao mat
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

141
7.2.2. Cu hnh mng
G
i

3
/
0
/
1
G
i

3
/
0
/
0
G
i

3
/
0
/
1
G
i

3
/
0
/
0

Hnh 7.1: So do mang cau hnh bao mat
7.3. Yu cu bi thc hnh
- Tin hnh cu hnh bao mt sau khi d cu hnh chun xc cho dich vu ERMS
voi cc tham s cu hnh dich vu nhu bang 7.2
- Kim tra trang thi VTP trn cc thit bi v dam bao rng VTP o ch d
transparent
- Cu hnh bao mt password trong cc truong hop: console, telnet, ssh, pass cho
nguoi dng
- Tt CDP trn cc giao din UNI cua dich vu ERMS
- Loc reserved VLANs bng cch tao ra cc danh sch truy nhp mo rng dia chi
MAC

Phn
vng
Thit b| Giao din D|a chi IP /VLAN Subnet Mask/
Thng tin khc
HNI 7600HNI
Loopback 1.1.1.1 255.255.255.255
GE 3/0/1 10.1.1.5 255.255.255.252
GE 3/0/0 10.1.1.9 255.255.255.252
GE 4/1 Add VLAN 160, 161, 162 Trunk
VLAN 160 VFI-ID 160 To DNG, HCM
VLAN 161 VC-ID 161 To DNG
VLAN 162 VC-ID 162 To HCM
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

142
3750HNI
Loopback 4.4.4.4 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 162 Trunk
FE 1/0/1 Add VLAN 160, 161, 162 Trunk
3400HNI
FE 0/1 VLAN 160, 161, 162 Trunk port
VLAN 160 192.168.60.1 255.255.255.0
VLAN 161 192.168.61.1 255.255.255.0
VLAN 162 192.168.62.1 255.255.255.0
DNG
7600DNG
Loopback 2.2.2.2 255.255.255.255
GE 3/0/1 10.1.1.6 255.255.255.252
GE 3/0/0 10.1.1.13 255.255.255.252
GE 4/1 Add VLAN 160, 161, 163 Trunk
VLAN 160 VFI-ID 160 To HNI, HCM
VLAN 161 VC-ID 161 To HNI
VLAN 163 VC-ID 163 To HCM
3750DNG
Loopback 5.5.5.5 255.255.255.255
GE 1/1/1 Add VLAN 160, 161, 163 Trunk
FE 1/0/1 Add VLAN 160, 161, 163 Trunk
3400DNG
FE 0/1 VLAN 160, 161, 163 Trunk port
VLAN 160 192.168.60.2 255.255.255.0
VLAN 161 192.168.61.2 255.255.255.0
VLAN 163 192.168.63.1 255.255.255.0
HCM
7600HCM
Loopback 3.3.3.3 255.255.255.255
GE 3/0/1 10.1.1.10 255.255.255.252
GE 3/0/0 10.1.1.14 255.255.255.252
GE 4/1 Add VLAN 160, 162, 163 Trunk
VLAN 160 VFI-ID 160 To HNI, DNG
VLAN 162 VC-ID 162 To HNI
VLAN 163 VC-ID 163 To DNG
3750HCM
Loopback 6.6.6.6 255.255.255.255
GE 1/1/1 Add VLAN 160, 162, 163 Trunk
FE 1/0/1 Add VLAN 160, 162, 163 Trunk
3400HCM FE 0/1 VLAN 160, 162, 163 Trunk port
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

143
VLAN 160 192.168.60.3 255.255.255.0
VLAN 162 192.168.62.2 255.255.255.0
VLAN 163 192.168.63.2 255.255.255.0
Bang 7.2: Cc tham so cau hnh dich vu ERMS dng trong cau hnh bao mat

7.4. Cc buc thc hin
7.4.1. Bao mt chung cho cc thit b|
Cu hnh cho phn vng HNI:

- Kim tra trang thi VTP Disabled trn 7600 v 3750:
Show vtp status

- Nu ch d hoat dng hin tai khng phai l transparent th dng lnh duoi dy
d chuyn trang thi:
7600HNI(config)#vtp mode transparent
7600HNI(config)#exit

- Passwords: C 2 muc truy nhp thit bi l User v Privilege.
7600-HNI(config)#service password-encryption

- Cu hnh mt khu trn tt ca cc line:
7600HNI(config)#line vty 0 15
7600HNI(config -line)#password LINE_PASSWORD

- Disable cc vty khng cn thit
7600HNI(config)#no line vty 5
Kim tra: Show run

- Cu hnh cho cng console:
Khng su dung cc account mc dinh v pass mc dinh. Thit lap user v level
cho truy cap bng console nhu sau:
7600-HNI(config)#username MANE privilege 15
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

144
7600-HNI(config)#line console 0
7600-HNI(config-line)#privilege level 15
Kim tra: Show privilege

- Thit lp timeout:
7600-HNI(config-line)#exec-timeout 5 0

- Thit lp banner-motd:
7600-HNI(config)#banner motd Don't access to HNI

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo
rng.
O dy thuc hin tao ACL 101 cho php cc Router 7600-DNG v 7600-HCM
duoc php Telnet vo 7600-HNI.
7600-HNI(config)#access-list 101 remark PERMIT_TELNET_TO_HNI
7600-HNI(config)#access-list 101 permit tcp host 10.1.1.10 any eq 23 log
7600-HNI(config)#access-list 101 permit tcp host 10.1.1.6 any eq 23 log
7600-HNI(config)#line vty 0 14
7600-HNI(config-line)#access-class 101 in

Cu hnh cho phn vng DNG:
- Kim tra trang thi VTP Disabled trn 7600 v 3750:
Show vtp status

- Nu ch d hoat dng hin tai khng phai l transparent th dng lnh duoi dy
d chuyn trang thi:
7600DNG(config)#vtp mode transparent
7600DNG(config)#exit

- Passwords: C 2 muc truy nhp thit bi l User v Privilege.
7600-DNG(config)#service password-encryption

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

145
- Cu hnh mt khu trn tt ca cc line:
7600DNG(config)#line vty 0 15
7600DNG(config -line)#password LINE_PASSWORD

- Disable cc vty khng cn thit
7600DNG(config)#no line vty 5
Kim tra: Show run

- Cu hnh cho cng console:
Khng su dung cc account mc dinh v pass mc dinh. Thit lap user v level
cho truy cap bng console nhu sau:
7600-DNG(config)#username MANE privilege 15
7600-DNG(config)#line console 0
7600-DNG(config-line)#privilege level 15
Kim tra: Show privilege

- Thit lp timeout:
7600-DNG(config-line)#exec-timeout 5 0

- Thit lp banner-motd:
7600-DNG(config)#banner motd Don't access to DNG

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo rng
O dy thuc hin tao ACL 102 cho php cc Router 7600-HNI v 7600-HCM
duoc php Telnet vo 7600-DNG.
7600-DNG(config)#access-list 102 remark PERMIT_TELNET_TO_DNG
7600-DNG(config)#access-list 102 permit tcp host 10.1.1.14 any eq 23 log
7600-DNG(config)#access-list 102 permit tcp host 10.1.1.5 any eq 23 log
7600-DNG(config)#line vty 0 14
7600-DNG(config-line)#access-class 102 in

Cu hnh cho phn vng HCM:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

146
- Kim tra trang thi VTP Disabled trn 7600 v 3750:
Show vtp status

- Nu ch d hoat dng hin tai khng phai l transparent th dng lnh duoi dy
d chuyn trang thi:
7600HCM(config)#vtp mode transparent
7600HCM(config)#exit

- Passwords: C 2 muc truy nhp thit bi l User v Privilege.
7600-HCM(config)#service password-encryption

- Cu hnh mt khu trn tt ca cc line:
7600HCM(config)#line vty 0 15
7600HCM(config -line)#password LINE_PASSWORD

- Disable cc vty khng cn thit
7600HCM(config)#no line vty 5
Kim tra: Show run

- Cu hnh cho cng console:
Khng su dung cc account mc dinh v pass mc dinh. Thit lp user v level
cho truy cp bng console nhu sau:
7600-HCM(config)#username MANE privilege 15
7600-HCM(config)#line console 0
7600-HCM(config-line)#privilege level 15
Kim tra: Show privilege

- Thit lp timeout:
7600-HCM(config-line)#exec-timeout 5 0

- Thit lp banner-motd:
7600-HCM(config)#banner motd Don't access to HCM
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

147

- Gioi han cc truy nhp cua Telnet hoc SSH dng danh sch truy nhp mo rng
O dy thuc hin tao ACL 103 cho php cc Router 7600-DNG v 7600-HNI duoc
php Telnet vo 7600-HCM.
7600-HCM(config)#access-list 103 remark PERMIT_TELNET_TO_HCM
7600-HCM(config)#access-list 103 permit tcp host 10.1.1.9 any eq 23 log
7600-HCM(config)#access-list 103 permit tcp host 10.1.1.13 any eq 23 log
7600-HCM(config)#line vty 0 14
7600-HCM(config-line)#access-class 103 in

7.4.2. Bao mt cho 7604
Cu hnh cho phn vng HNI:
- Cu hnh bao v root cho duong downlink kt ni toi 3750HNI (gn trn port
khng phai root port )
7600-HNI(config)#interface gigabitEthernet 4/1
7600-HNI(config-if)#spanning-tree guard root
06:13:33: %SPANTREE-SP-2-ROOTGUARD_CONFIG_CHANGE: Root guard
enabled on port GigabitEthernet3/1.

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750HNI voi:
Ti da 5 dia chi MAC an ton trn cc VLAN 160,161,162; Vuot qu gi tri 5 dia
chi duoc php cho qua ny, cc gi tin c dia chi MAC ngun khng xc dinh s
bi bo qua:
7600-HNI(config)#interface gigabitEthernet 4/1
7600-HNI(config-if)#switchport
7600-HNI(config-if)#switchport port-security maximum 5 vlan 160-162
7600-HNI(config-if)#switchport port-security violation restrict

- Kim tra cu hnh bng lnh:
show port-security
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

148
Cu hnh cho phn vng DNG:
- Cu hnh bao v root cho duong downlink kt ni toi 3750DNG (gn trn port
khng phai root port)
7600-DNG(config)#interface gigabitEthernet 4/1
7600-DNG(config-if)#spanning-tree guard root
06:13:33: %SPANTREE-SP-2-ROOTGUARD_CONFIG_CHANGE: Root guard
enabled on port GigabitEthernet4/1.

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750DNG voi:
Ti da 5 dia chi MAC an ton trn cc VLAN 160,161,163; Vuot qu gi tri 5 dia
chi duoc php cho qua ny, cc gi tin c dia chi MAC ngun khng xc dinh s
bi bo qua:
7600-DNG(config)#interface gigabitEthernet 4/1
7600-DNG(config-if)#switchport
7600-DNG(config-if)#switchport port-security maximum 5 vlan 160,161,163
7600-DNG(config-if)#switchport port-security violation restrict

- Kim tra cu hnh bng lnh:
show port-security
Cu hnh cho phn vng HCM:
- Cu hnh bao v root cho duong downlink kt ni toi 3750HCM (gn trn port
khng phai root port )
7600-HCM(config)#interface gigabitEthernet 4/1
7600-HCM(config-if)#spanning-tree guard root
06:13:33: %SPANTREE-SP-2-ROOTGUARD_CONFIG_CHANGE: Root guard
enabled on port GigabitEthernet4/1.

- Bao v cng:
Cu hnh cng o ch d bao mt cho giao din Gi 4/1 kt ni dn 3750HCM voi:
Ti da 5 dia chi MAC an ton trn cc VLAN 160,162,163; Vuot qu gi tri 5 dia
chi duoc php cho qua ny, cc gi tin c dia chi MAC ngun khng xc dinh s
bi bo qua:
7600-HCM(config)#interface gigabitEthernet 4/1
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

149
7600-HCM(config-if)#switchport
7600-HCM(config-if)#switchport port-security maximum 5 vlan 160,162,163
7600-HCM(config-if)#switchport port-security violation restrict

- Kim tra cu hnh bng lnh:
show port-security

7.4.3. Bao mt cho 3750
Cu hnh cho phn vng HNI:
- Ban du cu hnh cho php CDP chay trn 3750
3750-HNI(config)#cdp run
3750-HNI(config)#interface gigabitEthernet 1/1/1
3750-HNI(config-if)#cdp enable

- Loc cc VLANs dnh ring bng vic tao ra danh sch truy nhp mo rng
MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600HNI:
3750-HNI(config)#mac access-list extended PERMIT_VLAN_1
3750-HNI(config-ext-macl)#permit any any
3750-HNI(config-ext-macl)#exit

- Gn ACL ny vo giao din Gi 1/1/1:
3750-HNI(config)#interface gigabitEthernet 1/1/1
3750-HNI(config-if)#mac access-group PERMIT_VLAN_1 in
3750-HNI(config-if)#exit

- Tao cc nh xa VLAN v loc VLAN 1 khch hng v cc VLAN dnh ring
cho ERMS 160, 161, 162:
3750-HNI(config)#vlan access-map DROP_VLAN_1_CE
3750-HNI(config-access-map)#action drop
3750-HNI(config-access-map)#exit
3750-HNI(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-HNI(config-access-map)#action drop
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

150
3750-HNI(config-access-map)#exit
3750-HNI(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
3750-HNI(config)#vlan filter DROP_RESERVED_VLAN__CE vlan-list 160-162

- Kim tra xem c thy 3400 tu 3750 v nguoc lai?

- Khoi tao b loc BPDU v tt CDP:
3750-HNI(config)#interface gigabitEthernet 1/1/1
3750-HNI(config-if)#no cdp enable
3750-HNI(config-if)#spanning-tree bpdufilter enable
3750-HNI(config-if)#exit
Kim tra: show cdp neighbors
Cu hnh cho phn vng DNG:
- Ban du cu hnh cho php CDP chay trn 3750
3750-DNG(config)#cdp run
3750-DNG(config)#interface gigabitEthernet 1/1/1
3750-DNG(config-if)#cdp enable

- Loc cc VLANs dnh ring bng vic tao ra danh sch truy nhp mo rng
MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600DNG:
3750-DNG(config)#mac access-list extended PERMIT_VLAN_1
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

151
3750-DNG(config-ext-macl)#permit any any
3750-DNG(config-ext-macl)#exit

- Gn ACL ny vo giao din Gi 1/1/1:
3750-DNG(config)#interface gigabitEthernet 1/1/1
3750-DNG(config-if)#mac access-group PERMIT_VLAN_1 in
3750-DNG(config-if)#exit

- Tao cc nh xa VLAN v loc VLAN 1 khch hng v cc VLAN dnh ring
cho ERMS 160, 161, 163:
3750-DNG(config)#vlan access-map DROP_VLAN_1_CE
3750-DNG(config-access-map)#action drop
3750-DNG(config-access-map)#exit
3750-DNG(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-DNG(config-access-map)#action drop
3750-DNG(config-access-map)#exit
3750-DNG(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
3750-DNG(config)#vlan filter DROP_RESERVED_VLAN_CE vlan-list
160,161,163

- Kim tra xem c thy 3400 tu 3750 v nguoc lai?

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

152
- Khoi tao b loc BPDU v tt CDP:
3750-DNG(config)#interface gigabitEthernet 1/1/1
3750-DNG(config-if)#no cdp enable
3750-DNG(config-if)#spanning-tree bpdufilter enable
3750-DNG(config-if)#exit
Kim tra: show cdp neighbors
Cu hnh cho phn vng HCM:
- Ban du cu hnh cho php CDP chay trn 3750
3750-HCM(config)#cdp run
3750-HCM(config)#interface gigabitEthernet 1/1/1
3750-HCM(config-if)#cdp enable

- Loc cc VLANs dnh ring bng vic tao ra danh sch truy nhp mo rng
MAC cho php VLAN 1 trn duong uplinks Gi 1/1/1 toi 7600HCM:
3750-HCM(config)#mac access-list extended PERMIT_VLAN_1
3750-HCM(config-ext-macl)#permit any any
3750-HCM(config-ext-macl)#exit

- Gn ACL ny vo giao din Gi 1/1/1:
3750-HCM(config)#interface gigabitEthernet 1/1/1
3750-HCM(config-if)#mac access-group PERMIT_VLAN_1 in
3750-HCM(config-if)#exit

- Tao cc nh xa VLAN v loc VLAN 1 khch hng v cc VLAN dnh ring
cho ERMS 160, 162, 163:
3750-HCM(config)#vlan access-map DROP_VLAN_1_CE
3750-HCM(config-access-map)#action drop
3750-HCM(config-access-map)#exit
3750-HCM(config)#vlan access-map DROP_RESERVED_VLAN_CE
3750-HCM(config-access-map)#action drop
3750-HCM(config-access-map)#exit
3750-HCM(config)#vlan filter DROP_VLAN_1_CE vlan-list 1
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

153
3750-HCM(config)#vlan filter DROP_RESERVED_VLAN__CE vlan-list
160,162,163
- Kim tra xem c thy 3400 tu 3750 v nguoc lai?

- Khoi tao b loc BPDU v tt CDP:
3750-HCM(config)#interface gigabitEthernet 1/1/1
3750-HCM(config-if)#no cdp enable
3750-HCM(config-if)#spanning-tree bpdufilter enable
3750-HCM(config-if)#exit
- Kim tra: show cdp neighbors


Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

154
THUAT NG VIET TAT
T vit tt Vit dng dy du
ACL Access list
BPDU Bridge Protocol Data Unit
CDP Cisco Discovery Protocol
CE Customer Edge device
CEF Cisco Express Forwarding
C-VLAN Custormer VLAN
E-LINE Ethernet LINE
E-LAN Ethernet LAN
EMS Ethernet Multipoint Service
EoMPLS Ethernet over MPLS
ERS Ethernet Relay Service
ERMS Ethernet Relay Multipoint Service
EVC Ethernet Virtual Circuit
EWS Ethernet Wire Service
FE Fast Ethernet
GE Gigibit Ethernet
L2TP Layer 2 Tunneling Protocol
L2 VLAN Layer 2 VLAN
L2 VPN Layer 2 VPN
L3 VLAN Layer 3 VLAN
L3 VPN Layer 3 VPN
LDP Label Distribution Protocol
MAC Media Access Control
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

155
MEN Metro Area Network Ethernet
MPLS Multi Protocol Label Switching
MTU Maximum Transmission Unit
MST Multiple Spanning Tree
NPE Network Provider Edge device
PING Packet Internet Groper
OSPF Open Shortest Path First
POP Point of Presence
PVST Per VLAN Spanning Tree
SVI Switched Virtual Interface
S-VLAN Service Provider VLAN
UNI User Network Interface
UPE UNI Provider Edge device
VC Virtual Circuit
VC-ID Virtual Circuit Identifier
VFI Virtual Forwarding Instance
VLAN Virtual Local Area Network
VPLS Virtual Private Line Service
VPN Virtual Private Network
VTP VLAN Trunking Protocol
VTY Virtual Type Terminal
VPN-ID Virtual Private Network Identifier

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

156
PHJ LJC
Ph lc A: Cc lnh lin quan ti cu hnh

Lnh Giai thch
Access-list <access-list number>
<permit | deny><protocol>
<source><source-wildcard>
<destination><destination-
wildcard><>
Dinh nghia danh sch truy nhp mo rng

Interface vlan <vlan ID> Tao ra mt VLAN lop 3 (cn goi l SVI)
L2 vfi <VFI name>manual Tao L2 VFI cho dich vu da dim-da dim
L2protocol-tunnel <protocol>
Dinh nghia giao thuc duoc dt vo duong hm
trn giao din kt ni o ch d Dot1q-tunnel
Mac access-list extended
<name>
Tao ra mt danh sch truy nhp MAC mo rng
Mpls ip
Khoi tao vic chuyn tip MPLS cho cc gi
tin IPv4 theo cc duong dinh tuyn (cho giao
din hoc ton h thng)
Mpls label protocol ldp
Chi ra LDP l giao thuc phn phi nhn mc
dinh cho thit bi
Mpls ldp router-id <interface>
Chi ra giao din duoc xc dinh lm Router-ID
cho LDP
Neighbor <IP address><VPN-
ID>encapsulation mpls
Tao kt ni da dim-da dim cho dich vu
EoMPLS toi cc du cui c cng VPN-ID
Policy-map <policy-map name> Tao ra nh xa chnh sch voi chnh sch d c
Service-policy input <policy-
map name>
Gn nh xa chnh sch vo giao din
Show cdp neighbor
Hin thi thng tin v cc thit bi lin k nho
giao thuc CDP
Show interface trunk Hin thi cc duong trunk duoc cu hnh
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

157
Show interface vlan <vlan ID>
Hin thi thng tin giao din trn VLAN lop 3
(SVI)
Show ip interface brief
Hin thi thng tin v ton b cc giao din m
thit bi c
Show ip route Hin thi bang dinh tuyn
Show mpls forwarding-table
Hin thi thng tin v bang chuyn tip chuyn
mach nhn
Show mpls interface
Hin thi thng tin trang thi cc giao din duoc
cu hnh chuyn mach nhn
Show vlan
Hin thi thng tin v cc VLAN lop 2 duoc cu
hnh trn thit bi
Switchport
Dinh nghia mt cng nhu l cng chuyn mach
lop 2
Switchport access vlan <vlan
ID>
Gn cng truy nhp vo VLAN
Switchport mode dot1q-tunnel
Khoi tao vic dnh du Q-in-Q trn cng truy
nhp
Switchport mode trunk
Dinh nghia cng chuyn mach lop 2 nhu cng
trunk
Switchport trunk allowed vlan
<vlan>
Dinh nghia cc VLAN duoc php di qua trn
cng trunk
Switchport trunk allowed vlan
add <vlan>
Thm cc VLAN vo danh sch cc VLAN
trn duong trunk
System jumbomtu <size>
Dt kch thuoc MTU ln gi tri rt lon (h tro
cho MPLS) cho cc gi tin v khung trn 7600
System mtu <size>
Dt kch thuoc MTU cho cc gi tin v khung
trn b chuyn mach
System mtu jumbo <size>
Dt kch thuoc MTU ln gi tri rt lon (h tro
cho MPLS) cho cc gi tin v khung trn b
chuyn mach
Vpn id <VPN-ID>
Dt gi tri VPN-ID dng chung cho dich vu da
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

158
dim da dim
Xconnect <IP address ><VC-
ID>encapsulation mpls
Tao kt ni dim - dim cho dich vu EoMPLS
Xconnect <VFI ><VFI name> Gn VFI d tao ra vo SVI

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

159
Ph lc B: Tham khao cu hnh d|ch v L3 VPN trn nn MPLS
1. ERS L3
Phn vng HNI:
Cu hnh cho UPE-HNI l Router
- Tao cc L2 VLAN ( VLAN 130, VLAN 131) trn thit bi UPE-HNI kt ni toi
3400HNI cho 2 dich vu ERS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu ERS
UPE-HNI(config)#vlan 130
UPE-HNI(config-vlan)#name ERS-130
UPE-HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 131

- Cu hnh giao din Fa 1/0/1 kt ni toi CPE:
UPE-HNI(config)#interface FastEthernet 1/0/1
UPE-HNI(config-if)#description Trunk to 3400HNI
UPE-HNI(config-if)#no switchport
UPE-HNI(config-if)#no ip address
UPE-HNI(config-if)#mtu 1546
UPE-HNI(config-if)#no shutdown
UPE-HNI(config-if)#exit

- Tao cc SVI trn cc giao din subinterfaces cu hnh cho php luu luong
khch hng thuc cc EVC tuong ung voi gi tri VC-ID =130, VC-ID =131 v
dia chi IP tuong ung 5.5.5.5, 6.6.6.6 lm dia chi peer toi phn vng DNG,
HCM:
UPE-HNI(config)#interface Fa 1/0/1.130
UPE-HNI(config-if)#no ip address
UPE-HNI(config-if)#encapsulation dot1Q VC-ID
UPE-HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-HNI(config-if)#no shutdown

UPE-HNI(config)#interface Fa 1/0/1.131
UPE-HNI(config-if)#no ip address
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

160
UPE-HNI(config-if)#encapsulation dot1Q VC-ID
UPE-HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-HNI(config-if)#no shutdown

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
UPE-HNI (config)#access-list 11 permit 1.1.1.1
UPE-HNI (config)#mpls ldp discovery tageted-hello accept from 11

Cu hnh cho trung hp CPE-HNI l Switch
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-HNI
switchport
switchport mode trunk
switchport trunk encapsulation dot1Q
no ip address
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
switchport
switchport mode access
switchport access vlan 130
no ip address
no shut

Cu hnh cho CPE-HNI l Router
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-HNI
no switchport
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

161
no ip address
no shut

- Cu hnh giao din kt ni toi CPE-DNG:
interface Fa 0/1.130
description Connect To Router CPE-DNG
ip address 192.168.130.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi CPE-HCM:
interface Fa 0/1.131
description Connect To Router CPE-HCM
ip address 192.168.131.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
ip address 192.168.11.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.12.0 255.255.255.0 192.186.130.2
Ip route 192.168.13.0 255.255.255.0 192.186.132.2

Phn vng DNG:
Cu hnh cho UPE-DNG l Router
- Tao cc L2 VLAN ( VLAN 130, VLAN 132) trn thit bi UPE-DNG kt ni
toi 3400DNG cho 2 dich vu ERS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu ERS
UPE-DNG(config)#vlan 130
UPE-DNG(config-vlan)#name ERS-130
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

162
UPE-DNG(config-vlan)#exit
Thuc hin tuong tu voi VLAN 132

- Cu hnh giao din Fa 1/0/1 kt ni toi CPE:
UPE-DNG(config)#interface FastEthernet 1/0/1
UPE-DNG(config-if)#description Trunk to CPE
UPE-DNG(config-if)#no switchport
UPE-DNG(config-if)#no ip address
UPE-DNG(config-if)#mtu 1546
UPE-DNG(config-if)#no shutdown
UPE-DNG(config-if)#exit

- Tao cc SVI trn cc giao din subinterfaces cu hnh cho php luu luong
khch hng thuc cc EVC tuong ung voi gi tri VC-ID =130, VC-ID =132
v dia chi IP tuong ung 4.4.4.4, 6.6.6.6 lm dia chi peer toi phn vng HNI,
HCM:
UPE-DNG(config)#interface Fa 1/0/1.130
UPE-DNG(config-if)#no ip address
UPE-DNG(config-if)#encapsulation dot1Q VC-ID
UPE-DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-DNG(config-if)#no shutdown

UPE-DNG(config)#interface Fa 1/0/1.132
UPE-DNG(config-if)#no ip address
UPE-DNG(config-if)#encapsulation dot1Q VC-ID
UPE-DNG(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-DNG(config-if)#no shutdown

- Tao cc danh sch truy nhp EoMPLS trn cc SVI
UPE-DNG (config)#access-list 11 permit 1.1.1.1
UPE-DNG (config)#mpls ldp discovery tageted-hello accept from 11

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

163
Cu hnh cho trung hp CPE-DNG l Switch
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-DNG
switchport
switchport mode trunk
switchport trunk encapsulation dot1Q
no ip address
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
switchport
switchport mode access
switchport access vlan 130
no ip address
no shut

Cu hnh cho CPE-DNG l Router
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-DNG
no switchport
no ip address
no shut

- Cu hnh giao din kt ni toi CPE-DNG:
interface Fa 0/1.130
description Connect To Router CPE-DNG
ip address 192.168.130.2 255.255.255.0
no shut
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

164
- Cu hnh giao din kt ni toi CPE-HCM:
interface Fa 0/1.132
description Connect To Router CPE-HCM
ip address 192.168.132.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
ip address 192.168.12.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.11.0 255.255.255.0 192.186.130.1
Ip route 192.168.13.0 255.255.255.0 192.186.132.2

Phn vng HCM:
Cu hnh cho UPE-HCM l Router
- Tao cc L2 VLAN ( VLAN 131, VLAN 132) trn thit bi UPE-HCM kt ni
toi 3400HCM cho 2 dich vu ERS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu ERS
UPE-HCM(config)#vlan 131
UPE-HCM(config-vlan)#name ERS-131
UPE-HCM(config-vlan)#exit
Thuc hin tuong tu voi VLAN 132

- Cu hnh giao din Fa 1/0/1 kt ni toi CPE:
UPE-HCM(config)#interface FastEthernet 1/0/1
UPE-HCM(config-if)#description Trunk to CPE
UPE-HCM(config-if)#no switchport
UPE-HCM(config-if)#no ip address
UPE-HCM(config-if)#mtu 1546
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

165
UPE-HCM(config-if)#no shutdown
UPE-HCM(config-if)#exit

- Tao cc SVI trn cc giao din subinterfaces cu hnh cho php luu luong
khch hng thuc cc EVC tuong ung voi gi tri VC-ID =131, VC-ID =132
v dia chi IP tuong ung 4.4.4.4, 5.5.5.5 lm dia chi peer toi phn vng HNI,
HCM:
UPE-HCM(config)#interface Fa 1/0/1.131
UPE-HCM(config-if)#no ip address
UPE-HCM(config-if)#encapsulation dot1Q VC-ID
UPE-HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-HCM(config-if)#no shutdown

UPE-HCM(config)#interface Fa 1/0/1.132
UPE-HCM(config-if)#no ip address
UPE-HCM(config-if)#encapsulation dot1Q VC-ID
UPE-HCM(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-HCM(config-if)#no shutdown


- Tao cc danh sch truy nhp EoMPLS trn cc SVI
UPE-HCM (config)#access-list 11 permit 1.1.1.1
UPE-HCM (config)#mpls ldp discovery tageted-hello accept from 11

Cu hnh cho trung hp CPE-HCM l Switch
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-HCM
switchport
switchport mode trunk
switchport trunk encapsulation dot1Q
no ip address
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

166
no shut

- Cu hnh giao din kt ni toi LAN:
interface Fa 0/2
description Connect To LAN
switchport
switchport mode access
switchport access vlan 131
no ip address
no shut

Cu hnh cho CPE-HCM l Router
- Cu hnh giao din kt ni toi UPE:
interface Fa 0/1
description Connect To UPE-HCM
no switchport
no ip address
no shut

- Cu hnh giao din kt ni toi CPE-HCM:
interface Fa 0/1.131
description Connect To Router CPE-HCM
ip address 192.168.131.2 255.255.255.0
no shut

- Cu hnh giao din kt ni toi CPE-HCM:
interface Fa 0/1.132
description Connect To Router CPE-HCM
ip address 192.168.132.2 255.255.255.0
no shut

- Cu hnh giao din kt ni toi LAN:
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

167
interface Fa 0/2
description Connect To LAN
ip address 192.168.13.1 255.255.255.0
no shut

- Cu hnh dinh tuyn:
Ip route 192.168.11.0 255.255.255.0 192.186.131.1
Ip route 192.168.12.0 255.255.255.0 192.186.132.1

2. EWS L3

Cu hnh trn UPE-HNI:

- Tao cc L2 VLAN ( VLAN 140, VLAN 141) trn thit bi UPE-HNI kt ni toi
3400HNI - CE cho 2 dich vu EWS.
Bang thng s cu hnh chi r cc VLAN v UNI duoc dng cho dich vu EWS
UPE-HNI(config)#vlan 140
UPE-HNI(config-vlan)#name EWS-140
UPE-HNI(config-vlan)#exit
Thuc hin tuong tu voi VLAN 141.

- Cu hnh giao din Fa 1/0/1v Fa 1/0/2 kt ni toi CE cho php luu luong
khch hng thuc EVC 140 v 141 voi dia chi IP tuong ung 5.5.5.5, 6.6.6.6
lm dia chi peer toi phn vng HNI, HNI:
UPE-HNI(config)#interface FastEthernet ___
UPE-HNI(config-if)#description Tunnelling to 3400HNI
UPE-HNI(config-if)#no switchport
UPE-HNI(config-if)#xconnect ia chi IP VC-ID encapsulation mpls
UPE-HNI(config-if)#no shutdown
UPE-HNI(config-if)#exit

Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

168
3. EMS L3
Min MPLS mo rng toi thit bi UPE.

Cu hnh cho NPE
- Cu hnh VFI, tao EoMPLS dn cc NPE khc v dn UPE

l2 vfi EMS_150 manual
vpn id 150
neighbor 2.2.2.2 encapsulation mpls
neighbor 3.3.3.3 encapsulation mpls
neighbor 4.4.4.4 encapsulation mpls no-split-horizon

- Tao VLAN trn NPE:

vlan 150
name VLAN-EMS-150
exit

- Gn VFI tao ra o trn vo SVI:

interface vlan 150
xconnect vfi EMS_150
no shutdown

Cu hnh cho thit bi UPE
- Cu hnh giao din kt ni toi CPE xconnect toi NPE

interface Fa 1/0/1
description EMS Port Based
no switchport
no ip address
xconnect 1.1.1.1 150 encapsulation mpls
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

169
Cu hnh cho CPE
- Cu hnh giao din kt ni toi UPE:
interface f0/1
description Connect To ISP
ip address 172.16.0.1 255.255.255.0
no shut

- Cu hnh giao din kt ni toi mang LAN:
interface Fa 0/2
description Connect To LAN
ip address 192.168.11.1 255.255.255.0
no shut

- Cu hnh dinh tuyn dn LAN tai cc sites:
Ip route 192.168.11.0 255.255.255.0 192.168.
Ip route 192.168.12.0 255.255.255.0 192.186.132.1

4. ERMS L3
Min MPLS mo rng toi thit bi UPE.

Cu hnh cho NPE
- Cu hnh VFI, tao EoMPLS dn cc NPE khc v dn UPE

l2 vfi EMS_160 manual
vpn id 160
neighbor 2.2.2.2 encapsulation mpls
neighbor 3.3.3.3 encapsulation mpls
neighbor 4.4.4.4 encapsulation mpls no-split-horizon

- Tao VLAN trn NPE:
vlan 160
name VLAN-EMS-160
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

170
exit

- Gn VFI tao ra o trn vo SVI:

interface vlan 160
xconnect vfi EMS_160
no shutdown

Cu hnh cho thit bi UPE
- Cu hnh giao din kt ni toi CPE xconnect toi NPE de tao ket noi Multipoint
va xconnect toi cac UPE con lai de tao 2 ket noi Point-to-point:

interface Fa 1/0/1
description EMS Port Based
no switchport
no ip address

interface Fa 1/0/1.160
xconnect 172.16.160.1 160 encapsulation mpls

interface Fa 1/0/1.161
xconnect 172.16.161.2 161 encapsulation mpls

interface Fa 1/0/1.162
xconnect 172.16.162.2 162 encapsulation mpls

Cu hnh cho CPE
- Cau hinh giao dien uplink ket noi toi UPE
interface f0/1
description Connect To ISP
no ip address
no shut
Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

171
interface f0/1.160
ip address 172.16.0.1 255.255.255.252

interface f0/1.161
ip address 172.16.161.1 255.255.255.0

interface f0/1.162
ip address 172.16.162.1 255.255.255.0

- <Cu hnh dinh tuyn dn LAN tai cc Site>



Thc hnh cng ngh MEN


Chuong trnh boi dung kin thuc v cng ngh MEN

172
Ti liu tham khao

[1] http://www.metroethernetforum.org
[2] http://www.cisco.com
[3]Advanced Services Metro Ethernet: Switching Deployment Boot Camp Vol 1,2,3
Version 5.0; Cisco Press, 2007