Está en la página 1de 93

Dich vu mang MAN-E (Metro Area Network Ethernet)

Trinh bay : Cao Vn May Vin Thng Ha Ni

Ha Ni 10 - 2008

Ni dung
Mt s khi nim Kiu dch v trong MAN E Cc yu cu khi trin khai dch v Cc dch v MetroNET trin khai trn MAN E

Mt s khi nim
MAN E : Metro Area Network Ethernet Mng th s dng cng ngh Ethernet ni ting. M rng kh nng mng ni th v vn ti mng din rng (Wide Area Network - WAN). L mt hng trin khai dch v NGN trn nn Ethernet.

Mt s khi nim
UNI : User Network Interface Giao tip ngi dng - mng. Hiu mt cch n gin y chnh l giao din Ethernet m khch hng dng kt ni vi nh cung cp dch v. EVC: Ethernet Virtual Connection Kt ni Ethernet o. L s kt hp ca hai hay nhiu UNI.

Chc nng ca EVC


Kt ni hai hay nhiu UNI. Cho php truyn frame Ethernet gia chng. Ngn chn d liu truyn t cc UNI khng cng mt EVC.

Ni dung
Mt s khi nim Kiu dch v trong MAN E Cc yu cu khi trin khai dch v Cc dch v MetroNET trin khai trn MAN E

Kiu dch v trong MAN E


Metro Ethernet Forum (MEF) nh ngha hai kiu dch v: E Line (Ethernet Line): Cung cp kt ni o im im (Point to Point) gia hai UNIs.

CE : Customer Equiment Thit b khch hng

Kiu dch v trong MAN E


E LAN (Ethernet LAN) : Cung cp kt ni o a im a im (Multipoint to Multipoint) gia hai hoc nhiu UNI.

Bng tham chiu dch v


Point to point Multipoint

MEF : E LINE

MEF : E LAN

Cisco : EWS, ERS

Cisco : EMS, ERMS

EWS : Ethernet Wire Service ERS : Ethernet Relay Service EMS : Ethernet Multipoint Service ERMS : Ethernet Relay Multipoint Service

So snh dch v
EWS, EMS: Lu lng t khch hng s c gn nhn thng qua gi tr VLAN ca nh cung cp dch v (thng qua cng ngh tunneling), v vy khng c s xung t vi VLAN khch hng. ERS, ERMS: Thng tin VLAN ca khch hng s c chuyn tip qua mng ca nh cung cp dch v. Nhn c gn da trn gi tr VLAN khch hng v vy phi c s tha thun trnh xung t v thng tin VLAN gia cc khch hng vi nhau v vi nh cung cp dch v.

Thuc tnh dch v Ethernet


Ghp dch v (Service multiplexing) : Mt UNI c th thuc v cc EVC khc nhau. Khi UNI ch thuc v mt EVC th gi l UNI khng ghp knh dch v (none service multiplexing).

Thuc tnh dch v Ethernet


Gp nhm (Bunding) : Nhiu hn mt VLAN khch hng (C-VLAN) c nh x vo EVC da trn cng ngh tunneling.
Tunneling S-VLAN
10/100 SFP VLAN X, Y, Z SFP

Access Switch
GE

Tunneling S-VLAN
10/100 SFP VLAN X, Y, Z SFP

Access Switch
GE

EoMPLS Tunnel

Thuc tnh dch v Ethernet


c tnh bng thng (Bandwidth profile) MEF (Metro Ethernet Forum) nh ngha 3 thuc tnh c bn ca bng thng: c tnh bng thng ti UNI (Tc cng vt l). c tnh bng thng theo EVC (tc p theo VLAN). c tnh bng thng theo lp dch v (cc d liu Voice, Video, Data. s c bng thng theo mc u tin khc nhau).

Thuc tnh dch v Ethernet


Thng s hiu nng kh dng (Availability) tr khung (Frame Delay) trt khung (Frame Jitter) T l tn tht khung (Frame Loss)

Ni dung
Mt s khi nim Kiu dch v trong MAN E Cc yu cu khi trin khai dch v Cc dch v MetroNET trin khai trn MAN E

Cu hnh MPLS
Mng MAN E hin ti ang s dng cng ngh Ethernet over MPLS. Do vy cc Router trong mng MAN E phi c cu hnh MPLS trao i nhn, phc v thit lp knh o EVC. interface GigabitEthernet1/0/0 mtu 1560 ip address 192.168.2.26 255.255.255.252 ip ospf network point-to-point negotiation auto mpls label protocol ldp mpls ip

Cu hnh nh tuyn OSPF


Mc ch ca vic s dng mt giao thc nh tuyn trong min MPLS: Trao i cc thng tin nh tuyn trn mng. nh tuyn cho cc gi tin thun IP. Gip cho tt c cc Router trong min MPLS u bit c s hin din ca nhau thng qua a ch qun l (mng hi t). Gip xy dng cc ng chuyn mch nhn LSP (Label Switched Paths) ti u.

Quy hoch ti nguyn VLAN


Ti nguyn VLAN l hu hn v phi c quy hoch hp l cho tng loi dch v.
1518 + 4 = 1522 bytes

c nh ngha trong chun 802.1q ca IEEE Khung Ethernet c chn thm 4bytes trong : 2-byte Tag Protocol Identifier (TPID) lun c nh ngha l 0x8100 (ch ra kiu ng gi 802.1q). 2-byte TAG Control Information (TCI) cha thng tin VLAN

Quy hoch ti nguyn VLAN


1518 + 4 = 1522 bytes Cu trc khung ca 802.1q

2bytes

User Priority 3 bits: to ra 8 trng hp u tin t 0 (thp nht) 7 (cao nht) to ra chun 802.1p. Chnh l Class of Service (CoS). CFI : 1bit Canonical Format Indicator = 0 vi Ethernet, =1 vi Token Ring VLAN ID 12bits : to ra 4096 VLAN theo l thuyt Tnh li trng CRC do 4 bytes c chn vo gia khung.

Double Tag VLAN (Q in Q)


c nh ngha trong chun 802.1ad ca IEEE.

Frame Ethernet c m rng thm 8 bytes thnh 1526 bytes so vi 1518 bytes ti a ban u.
1526 bytes

ng dng Q in Q trong mng


Gip cho cc ISP c th tng c s lng VLAN trong mng, qua phc v c nhiu khch hng hn (khong 16 triu cp gi tr theo l thuyt). Gip phn tch gia gi tr VLAN ca khch hng (CVLAN) v VLAN ca nh cung cp dch v (S-VLAN) thng qua k thut tunneling. Di VLAN ca nh cung cp dch v khng xung t vi VLAN khch hng.

Cc vt t cn thit
Chuyn i quang in (O-E Converter) Ch hot ng Single mode Bc sng 1310 nm hoc 1500 nm Chun kt ni SC (cho kt ni quang), RJ45 cho kt ni in Ngun in 220 xoay chiu. Chun SC

O-E Converter do khch hng t trang b theo khuyn ngh ca nh cung cp dch v.

Cc loi O-E khuyn ngh


Chun
STT Chng loi Dng sn phm Conecter Quang in Thng s k thut c bn S dng cp n mode, mc suy hao tng ng khong cch 30km, ngun 220V S dng cp n mode, mc suy hao tng ng khong cch 25km, ngun 220V S dng cp n mode, mc suy hao tng ng khong cch 25km, ngun 220V S dng cp n mode, mc suy hao tng ng khong cch 15km, ngun 220V Mc n nh Ghi ch

Trendnet

TFC-110s-30

SC

RJ45(FE)

n nh Th nghim trn dch v knh thu ring Ethernet (s dng L2 kt ni P-to-P) Chun

Netlink

HBT-1100S-25

SC

RJ45(FE)

n nh

Optone

OPT-1102S-25

SC

RJ45(FE)

n nh

Planet

ST802S-15

SC

RJ45(FE)

n nh

Cc vt t cn thit
Dy nhy quang (Patch cord) Ch hot ng : Single mode Bc sng 1310 nm hoc 1500 nm Chun kt ni : SC-SC (tng thch vi O-E converter v ODF)

ODF: T phn phi quang- do ISP cung cp

Cc loi thit b u cui khuyn ngh

Ni dung
Mt s khi nim Kiu dch v trong MAN E Cc yu cu khi trin khai dch v Cc dch v MetroNET trin khai trn MAN E

Mng MAN E thc t trin khai

VDC VTN VDC

VTN

Dch v MetroNET
Dch v truy nhp mng MetroNet l dch v cho php khch hng s dng c s h tng ca mng th bng rng kt ni mng khch hng cc a im khc nhau. Cc ng dng kt ni ni ht: Cung cp knh thu ring Ethernet im ti im ni ht. Cung cp knh thu ring Ethernet im ti a im ni ht. Cc ng dng kt ni mng lin tnh - quc t Cung cp kt ni Internet/VNN trc tip. Cung cp kt ni VPN/VNN lin tnh, quc t vi VDC. Cung cp kt ni MegaWAN ni ht, lin tnh, quc t tc cao.

Dch v MetroNet - Th nghim k thut


Thit b u cui bao gm : Router, Switch, PC Yu cu giao din GE/FE.
Hn ch tc c chiu Ingress i vo mng khi cu hnh cng MAN-E ni vi CPE Layer 2.

Hn ch c c hai chiu Ingress v Egress khi cu hnh cng MAN-E ni vi CPE Layer 3.

Dch v MetroNet - Th nghim k thut


Hn ch MAC learning. Thit lp QoS cho cc mc cam kt dch v khc nhau thng qua gi tr MPLS Exp bit (3bit exp).
SLA PHB Giao thc s dng trn MAN DSCP MPLS/ EXP (Agg, Core) 0 1 v 2 802.1p (Access) 0 2 v 1 IP-DSLAM/MSAN
IPDSLAM (802.1p)

Dch v HSI

SLA 0 SLA 1

BE AF

0 8 v 16 24 v 32 40 48

0 2 v 1 4 5 6

SLA 2 SLA 3 SLA 4

EF EF AF

3 v 4 5 6

4 5 6

IP-TV (BTV, VoD) VoiP Thng tin qun l

Dch v MetroNET cung cp trn MAN-E


Yu cu chung: CPE c giao din GE/FE quang single mode bc sng 1310 nm (LX/LH) hoc 1550nm (ZX). CPE c giao din in RJ45 Cat5 UTP: Trang b thm b chuyn i quang in.

Trong kh nng p ng ca mng cp quang VTHN.


Tc cam kt ti thiu CIR (Committed Information Rate). (ty chn vi tc ti a PIR Peak Information Rate )

Bng cc dch v MetroNet

Cc thu cng FE, GE (Mb/s) n v: 1.000 ng/ cng/ thng


Tc (Mb/s) FE Mc cc 337

GE

673

Vi cng FE : Tc 1-10 Mbps bc nhy l 1Mbps. 10100 Mbps bc nhy l 10 Mbps. Vi cng GE : Tc 100-200 Mbps bc nhy l 20Mbps.

Bng cc dch v MetroNet


Cc ng ln up link - Mc cc knh CIR - n v: 1.000 ng/ knh CIR/ thng (cam kt tc ti thiu).

Tc (Mb/s) 1 2 3 4 5 6 7 8 9

Mc cc 1,005 1,704 2,130 2,556 3,408 3,976 4,544 5,112 5,540

Bng cc dch v MetroNet


Tc cam kt ti thiu (CIR) (Mb/s) Tc ti a (PIR) (Mb/s) Mc cc (1000 ng)

1 2

2 4

1,342 2,271

3 4 5 6 7

6 8 10 12 14

2,927 3,582 4,664 5,408 6,152

Dch v MetroNET cung cp trn MAN-E


Cc dch v E LINE (Point to Point): 1. Dch v knh thu ring Ethernet im ti im: MetroNet P-P 2. Dch v knh thu ring Ethernet im ti a im: MetroNet P-MP 3. Dch v Internet trc tip vi VDC: MetroNet I 4. Dch v VPN/VNN lin tnh vi VDC: MetroNet VPN-LT 5. Dch v VPN/VNN quc t vi VDC : MetroNet VPN-QT 6. Dch v MegaWAN ni tnh tc cao: MetroNet WAN-NT 7. Dch v MegaWAN lin tnh tc cao: MetroNet WAN-LT 8. Dch v MegaWAN quc t tc cao: MetroNet WAN-QT Dch v E LAN (MultiPoint): 1. Dch v MetroNET MultiPoint 2. Mng ring o ni ht VPN Layer3 BGP/MPLS

Dich vu MetroNET P-P (Layer 2)

ng dung : Kt ni im im, m rng mang LAN, kt ni WAN cho khch hng.


Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Switch Layer 2 h tr 802.1q.

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Dch v MetroNET P-P (Layer 2)


Dch v im ti im: Nh cung cp dch v to ra mt kt ni im - im lp 2 gia 2 site ca khch hng. Khch hng c th kt ni ti mng ca nh cung cp dch v thng qua mt lin kt vt l duy nht v c th trunking nhiu VLAN qua mng ca nh cung cp dch v n mt site khc mt cch trong sut. All in one bundling: Tt c lu lng t cc vlan ca khch hng u c chuyn vo mt EVC ti UNI.

Dch v MetroNET P-P (Layer 2)


Dch v c coi l trong sut v n cho php chuyn tip cc gi tin iu khin lp 2 ca khch hng (STP, CDP, VTP) qua mng nh cung cp dch v. Thit b ca khch hng (CPE) l Switch layer 2: Di VLAN ca nh cung cp dch v khng xung t vi di VLAN ca khch hng, do n cho php v mt l thuyt h tr 4096 khch hng trn mt access domain v vi mi khch hng c th kt ni ln ti 4096 VLAN trn mt UNI.

Cu hinh dich vu MetroNET P-P (Layer 2)

D T H

N D U

Cu hnh ti Access Switch 7609 vlan 501 name EWS Exit (config)#policy-map SLA1_16M Class class-default police cir 16000000 bc 3000000 be 6000000 conform-action transmit exceed-action transmit violate-action drop

Cng thc tnh tc cir = tc cam kt (bps) (committed information rate)

bc = cir*1.5/8 (Bps) (conform burst)


be = bc*2 (excess burst)

Cu hinh dich vu MetroNET P-P (Layer 2)

D T H

N D U

Cu hnh cng ti Access DTH vlan 501 name EWS Exit int g2/23 description EWS_L2 switchport switchport access vlan 501 switchport mode dot1q-tunnel mtu 1526 no cdp enable l2protocol-tunnel cdp l2protocol-tunnel stp l2protocol-tunnel vtp

Cu hnh cng ti Access NDU vlan 501 name EWS Exit int g2/23 description EWS_L2 switchport switchport access vlan 501 switchport mode dot1q-tunnel mtu 1526 no cdp enable l2protocol-tunnel cdp l2protocol-tunnel stp l2protocol-tunnel vtp

Cu hinh dich vu MetroNET P-P (Layer 2)

DTH

loopback 1.1.1.1

loopback 1.1.1.2

NDU

To knh EoMPLS VC 501 ti Access DTH int vlan 501 no ip address xconnect 1.1.1.2 501 encapsulation mpls service-policy input SLA1_16M exit To knh EoMPLS VC 501 ti Access NDU int vlan 501 no ip address xconnect 1.1.1.1 501 encapsulation mpls service-policy input SLA1_16M exit

Cu hnh dch v MetroNET P-P (Layer 2)

D TH

loopback 1.1.1.1

loopback 1.1.1.2

N D U

Cu hnh ti Switch khch hng (cng kt ni vi MAN-E) SW(config) # int fastethernet 0/1 SW(config-if) # descrip connect to NDU SW(config-if) # Switchport SW(config-if) # Switchport mode trunk SW(config-if) # Switchport trunk encapsulation dot1q SW(config-if) # Switchport trunk allow vlan 1,2,3,4 Cu hnh tng t ti pha cn li.

Dich vu MetroNET P-P (Layer 3)

ng dung : Kt ni im im, m rng mang LAN, kt ni WAN cho khch hng.


Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Dch v MetroNET P-P (Layer 3)


u cui khch hng s dng l Router Tt c lu lng t pha khch hng s c nh cung cp dch v gn 2 nhn l VC ID v LSP Label. Nhn VC ID i din cho EoMPLS c trao i qua direct LDP, nhn LSP Label c cc thit b trong mng ISP trao i vi nhau thng qua giao thc LDP thng thng lc thit lp LSP. Gi tin i ln n min MPLS l untag (khng gn VLAN).

Cu hinh dich vu MetroNET P-P (Layer 3)


10.10.2.0/24 10.10.1.0/24

Khch hng Site 1

Router 172.16.1.1/30

EVC 502

Router 172.16.1.2/30

Khch hng Site 2

Untag Gi 2/23 Acc DTH EoMPLS Gi 2/24

Untag Acc TDH

Loopback 1.1.1.1

Loopback 1.1.1.3

Cu hnh cng ti Access DTH int g2/23 no ip address duplex full xconnect 1.1.1.3 502 encapsulation mpls service-policy input SLA1_16M service-policy output SLA1_16M end

Cu hnh cng ti Access TDH int g2/23 no ip address duplex full xconnect 1.1.1.1 502 encapsulation mpls service-policy input SLA1_16M service-policy output SLA1_16M end

Cu hnh ti Router khch hng


10.10.1.0/24 10.10.2.0/24

Khch hng Site 1

Router 1 172.16.1.1/30

EVC 502

Router 2 172.16.1.2/30

Khch hng Site 2

Untag Gi 2/23 Acc DTH EoMPLS Gi 2/24

Untag Acc TDH

Loopback 1.1.1.1

Loopback 1.1.1.3

R1(config)# ip route 10.10.2.0 255.255.255.0 172.16.1.2

R2(config)# ip route 10.10.1.0 255.255.255.0 172.16.1.1

Dich vu MetroNET P-MP

ng dung : Kt ni im a im, gia tru s va chi nhnh tai Ha Ni, m rng mang LAN, kt ni WAN cho khch hang.
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Cu hinh dich vu MetroNET P-MP


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

Kt ni t nh cung cp dch v n nhnh chnh c cu hnh trunking dot1q. Cc knh n chi nhnh s c to trn cc VLAN ring tng ng. y chnh l tnh cht ghp dch v (Service Multiplexing) trong MAN E.

Cu hinh dich vu MetroNET P-MP


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Cu hnh cng ti Access DTH interface GigaEthernet2/23.503 description connect to NDU encapsulation dot1Q 503 no snmp trap link-status xconnect 1.1.1.2 503 encapsulation mpls mtu 1526 no cdp enable end

Loopback 1.1.1.2

172.16.1.2/30

interface GigaEthernet2/23.504 description connect to TDH encapsulation dot1Q 504 no snmp trap link-status xconnect 1.1.1.3 504 encapsulation mpls mtu 1526 no cdp enable end

Cu hinh dich vu MetroNET P-MP


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

Cu hnh cng ti Access NDU

Cu hnh cng ti Access TDH

interface GigaEthernet2/24.503 interface GigaEthernet2/24.504 description connect to DTH description connect to DTH encapsulation dot1Q 503 encapsulation dot1Q 504 no snmp trap link-status no snmp trap link-status xconnect 1.1.1.1 503 encapsulation mpls xconnect 1.1.1.1 504 encapsulation mpls mtu 1526 mtu 1526 no cdp enable no cdp enable end end

MetroNET P-MP cu hinh tai u cui KH


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

Tai Router trung tm R1(config)# int f0/0.503 R1(config-if)# description to NDU R1(config-if)# encapsulation dotq 503 R1(config-if)# ip add 172.16.1.1 255.255.255.252 R1(config)# int f0/0.504 R1(config-if)# description to TDH R1(config-if)# encapsulation dotq 504 R1(config-if)# ip add 172.16.1.5 255.255.255.252

MetroNET P-MP cu hinh tai u cui KH


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

Tai Router NDU R2(config)# int f0/0.503 R2(config-if)# description to DTH R2(config-if)# encapsulation dotq 503 R2(config-if)# ip add 172.16.1.2 255.255.255.252

Tai Router TDH R3(config)# int f0/0.504 R3(config-if)# description to DTH R3(config-if)# encapsulation dotq 504 R3(config-if)# ip add 172.16.1.6 255.255.255.252

MetroNET P-MP cu hinh tai u cui KH


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

Cu hinh inh tuyn Tai Router nhnh chnh Ip route 10.10.2.0 255.255.255.0 172.16.1.2 Ip route 10.10.3.0 255.255.255.0 172.16.1.6 Tai Router NDU Ip route 10.10.1.0 255.255.255.0 172.16.1.1 Tai Router TDH Ip route 10.10.1.0 255.255.255.0 172.16.1.5

MetroNET P-MP cu hinh tai u cui KH


10.10.1.0/24
172.16.1.5/30 504 172.16.1.6/30

10.10.3.0/24

172.16.1.1/30

Loopback 1.1.1.1

Loopback 1.1.1.3

10.10.2.0/24

Loopback 1.1.1.2

172.16.1.2/30

access-list 101 permit ip 10.10.2.0 0.0.0.255 10.10.1.0 0.0.0.255 access-list 102 permit ip 10.10.3.0 0.0.0.255 10.10.1.0 0.0.0.255 R1(config)# int f0/0.503

R1(config-if)# ip access-group 101 in


R1(config-if)# int f0/0.504 R1(config-if)# ip access-group 102 in

Dich vu MetroNET I (Kt ni Internet trc tip n VDC)

ng dung : Doanh nghip cung cp ni dung, ng dung Web, Mail.. Truy cp Internet tc cao .
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Public IP

Cu hinh dich vu MetroNET I


PE VDC
222. 252.16.1/30

Internet

dot 1q
Gi 3/0/8
FE 3/14

222. 252.16.2/30 Router

Acc DTH Untag


Loopback 1.1.1.1

EVC 101

Loopback 1.1.1.4

DTH Core

Khch hng 123.12.3.1/29

MAN E MPLS Domain

Cu hnh cng ti Access DTH interface FastEthernet3/14 description CT Vang pho Wall mtu 1526 no ip address duplex full xconnect 1.1.1.4 101 encapsulation mpls service-policy input SLA1_1M end

Cu hnh interface vlan ti DTH Core interface GigabitEthernet3/0/8.101 description EoMPLS PW to dth-acc-76-01 encapsulation dot1Q 101 no snmp trap link-status xconnect 1.1.1.1 101 encapsulation mpls service-policy input SLA1_1M end

Cu hinh dich vu MetroNET I


PE VDC
222. 252.16.1/30

Internet

dot1q
Gi 3/0/8
FE 3/14

222. 252.16.2/30 Router

Acc DTH Untag


Loopback 1.1.1.1

EVC 101

Loopback 1.1.1.4

DTH Core

Khch hng 123.12.3.1/29

MAN E MPLS Domain

Cu hnh ti Router khch hng interface FastEthernet0/1 description To ISP ip address 222.252.16.2 255.255.255.252 end Ip route 0.0.0.0 0.0.0.0 222.252.16.1

Cu hnh interface vlan ti PE VDC interface vlan 101 description Internet for pho Wall Ip add 222.252.16.1 255.255.255.252 end Ip route 123.12.3.0 255.255.255.248 222.252.16.2

Dich vu MetroNET VPN LT

ng dung : Cung cp kt ni WAN lin tnh cho cc khch hang s dung VPN ca VDC.
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Cu hinh dich vu MetroNET VPN LT


PE VDC
172.16.1.9/30

dot1q 3/0 VDC FE3/ 7


172.16.1.10/30 Router
Gi3/0/8 DTH Loopback Core 1.1.1.4

Acc DTH Untag


Loopback 1.1.1.1

EVC 108

Khch hng 10.10.10.0/24

MAN E MPLS Domain

Cu hnh cng ti Access DTH interface FastEthernet3/7 mtu 1526 no ip address duplex full xconnect 1.1.1.4 108 encapsulation mpls service-policy input SLA1_15M service-policy output SLA1_15M end

Cu hnh interface vlan ti DTH Core interface Vlan108 mtu 1526 no ip address xconnect 1.1.1.1 108 encapsulation mpls service-policy input SLA1_15M end int giga 3/0/8 swichport trunk allow vlan add 108

Cu hinh dich vu MetroNET VPN LT


PE VDC
172.16.1.9/30

dot1q 3/0 VDC FE3/ 7


172.16.1.10/30 Router
Gi3/0/8 DTH Loopback Core 1.1.1.4

Acc DTH Untag


Loopback 1.1.1.1

EVC 108

Khch hng 10.10.10.0/24

MAN E MPLS Domain

Cu hnh PE VDC interface giga3/0.108 vlan id 108 ip address 172.16.1.9 255.255.255.252 service-policy input SLA1_15M service-policy output SLA1_15M End Ip route 10.10.10.0/24 172.16.1.10

Cu hnh ti Router khch hng Ip route 0.0.0.0 0.0.0.0 172.16.1.9

Dch v MetroNET VPN QT

ng dung : Cung cp kt ni WAN quc t cho cc khch hang s dung VPN ca VDC.
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Dch v MetroNET WAN-NT

ng dung : Cung cp dich vu MegaWAN ni tnh tc cao cho cc doanh nghip trn ia ban Ha Ni. Lam nhnh chnh kt ni n hi s. Kt ni vi dich vu MegaWAN ni tnh
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet Phng thc tnh cc : theo tc cam kt. Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Cu hinh dich vu MetroWAN NT


BRAS DTH
172 . 16.1.1/ 30

dot 1q

3/0

MegaWAN FE 3/10 Acc DTH Untag Khch hng 10. 10.1.0/ 24


Loopback 1.1.1.1 Giga 4/ 1 DTH Loopback Core 1.1.1.4

172 . 16.1.2/ 30 Router

EVC 801

MAN E MPLS Domain

Cu hnh cng ti Access DTH interface FastEthernet3/10 description CT XSKT mtu 1526 no ip address duplex full xconnect 1.1.1.4 801 encapsulation mpls service-policy input SLA1_50M end

Cu hnh interface vlan ti DTH Core interface Vlan801 description VPN_Cty_XoSoThuDo_Line1 no ip address xconnect 1.1.1.1 801 encapsulation mpls service-policy input SLA1_50M End Interface giga 4/1 switchport trunk allow vlan add 801

Cu hinh dich vu MetroWAN NT


BRAS DTH
172 . 16.1.1/ 30

dot 1q 3/0 MegaWAN FE 3/10 Acc DTH Untag Khch hng 10. 10.1.0/ 24
Loopback 1.1.1.1 Giga 4/ 1 DTH Loopback Core 1.1.1.4

172 . 16.1.2/ 30 Router

EVC 801

MAN E MPLS Domain

Ti BRAS Ti Router khch hng Interface gigabitEthernet 3/0.801 Ip route 0.0.0.0 0.0.0.0 172.16.1.1 vlan id 801 ip sa-validate ip address 172.16.1.1 255.255.255.252 end Ip route 10.10.1.0 255.255.255.0 172.16.1.2

Dch v MetroNET WAN-LT

ng dung : Cung cp dich vu MegaWAN lin tnh tc cao cho cc doanh nghip trn ia ban Ha Ni. Kt ni hi s hoc chi nhnh tai Ha Ni vi cc tnh thanh trong toan quc thng qua VTN. Kt ni vi dich vu MegaWAN lin tnh. Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet Phng thc tnh cc : theo tc cam kt. Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Cu hinh dich vu MetroNET WAN LT


PE VTN
172.16.1.5/30

dot1q

3/0

MegaWAN FE3/ 6
172.16.1.6/30 Router
Gi3/0/9 DTH Loopback Core 1.1.1.4

Acc DTH Untag


Loopback 1.1.1.1

EoMPLS

Khch hng 10.10.10.0/24

MAN E MPLS Domain

Cu hnh cng ti Access DTH interface FastEthernet3/6 description Ngan Hang BIDV_38 Hang Voi mtu 1526 no ip address duplex full xconnect 1.1.1.4 302 encapsulation mpls service-policy input SLA1_15M service-policy output SLA1_15M end

Cu hnh interface vlan ti DTH Core interface Vlan302 description Ngan Hang BIDV_38 Hang Voi mtu 1526 no ip address xconnect 1.1.1.1 302 encapsulation mpls service-policy input SLA1_15M end int giga 3/0/9 swichport trunk allow vlan add 302

Cu hinh dich vu MetroNET WAN LT


PE VTN
172.16.1.5/30

dot1q

3/0

MegaWAN FE3/ 6
172.16.1.6/30 Router
Gi3/0/9 DTH Loopback Core 1.1.1.4

Acc DTH Untag


Loopback 1.1.1.1

EoMPLS

Khch hng 10.10.10.0/24

MAN E MPLS Domain

Cu hnh ti PE VTN interface giga 3/0.302 Vlan id 302 description Ngan Hang BIDV_38 Hang Voi ip address 172.16.1.5 255.255.255.252 service-policy input SLA1_15M service-policy output SLA1_15M End Ip route 10.10.10.0/24 172.16.1.6

Cu hnh ti Router khch hng Ip route 0.0.0.0 0.0.0.0 172.16.1.5

Dch v MetroNET WAN-QT

ng dung : Cung cp dich vu MegaWAN quc t tc cao cho cc doanh nghip trn ia ban Ha Ni. Kt ni chi nhnh tai Ha Ni vi vn phng, chi nhnh tai cc quc gia trn th gii thng qua VTN. Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet Phng thc tnh cc : theo tc cam kt. Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Dch v MetroNET cung cp trn MAN-E


Cc dch v E Line (Point to Point): 1. Dch v knh thu ring Ethernet im ti im: MetroNet P-P 2. Dch v knh thu ring Ethernet im ti a im: MetroNet P-MP 3. Dch v Internet trc tip vi VDC: MetroNet I 4. Dch v VPN/VNN lin tnh vi VDC: MetroNet VPN-LT 5. Dch v VPN/VNN quc t vi VDC : MetroNet VPN-QT 6. Dch v MegaWAN ni tnh tc cao: MetroNet WAN-NT 7. Dch v MegaWAN lin tnh tc cao: MetroNet WAN-LT 8. Dch v MegaWAN quc t tc cao: MetroNet WAN-QT Dch v E LAN (MultiPoint): 1. Dch v MetroNET MultiPoint 2. Mng ring o ni ht VPN Layer3 BGP/MPLS

Dich vu MetroNET MP (Multi Point - Layer 2)


` C-VLAN 2 C-VLAN 3 ` SW3750 Gi1/0/1
802 .1Q

G2/23 VFI

DTH EoMPLS PW
Eo MP LS PW NDU VFI

TDH VFI
PL S PW

Tunneling S-VLAN 801

Tunneling S-VLAN 801


80 2.1 Q

G2/24

Eo M

SW3560

C-VLAN 2 `

Tunneling S-VLAN 801 ` C-VLAN 2 C-VLAN 3 ` SW3560


80 2.1 Q

Gi1/0/1 G2/24 C-VLAN 3

Gi1/0/1

ng dng : Kt ni a im full-mesh, m rng mng LAN cho khch hng. Giao din ti nh khch hng : GE/FE quang. Yu cu CPE: Switch layer 2 Phng thc tnh cc : theo tc cam kt. Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps a ch cung cp : Private IP

Dich vu MetroNET MP (Multi Point - Layer 2)


` C-VLAN 2 C-VLAN 3 ` SW3750 Gi1/0/1

802

.1Q

G2/23 VFI

DTH EoMPLS PW

TDH VFI

Tunneling S-VLAN 801

Tunneling S-VLAN 801

Eo

MP

LS

PW

NDU VFI

Eo M

PL S

PW

G2/24

80

2.1 Q

SW3560

C-VLAN 2 `

Tunneling S-VLAN 801 ` C-VLAN 2 C-VLAN 3 ` SW3560

Gi1/0/1 G2/24 C-VLAN 3

80

2.1 Q

Gi1/0/1

Tt c cc VLAN t Switch khch hng s c ng gi thm mt S-VLAN ca nh cung cp dch v theo cng ngh tunneling.

Da trn S-VLAN, mng MAN E s gn nhn duy nht vo lu lng chuyn ti cc Access ni cc nhnh cn li.

Dich vu MetroNET MP (Multi Point - Layer 2)


` C-VLAN 2 C-VLAN 3 ` SW3750 Gi1/0/1

802

.1Q

G2/23 VFI

DTH EoMPLS PW

TDH VFI

Tunneling S-VLAN 801

Tunneling S-VLAN 801

Eo

MP

LS

PW

NDU VFI

Eo M

PL S

PW

G2/24

80

2.1 Q

SW3560

C-VLAN 2 `

Tunneling S-VLAN 801 ` C-VLAN 2 C-VLAN 3 ` SW3560

Gi1/0/1 G2/24 C-VLAN 3

80

2.1 Q

Gi1/0/1

Cu hnh ti cng Access ni vi Switch khch hng Vlan 801 Name EMS_L2 interface G 2/23 mtu 1526 switchport switchport access vlan 801 switchport mode dot1q-tunnel Tng t vi cc Access cn li

Dich vu MetroNET MP (Multi Point - Layer 2)

1.1.1.1

1.1.1.3

1.1.1.2

To ra Vfi full-mesh ni cc Access Router c cng ni vi Switch khch hng. l2 vfi EMS_801 manual vpn id 801 neighbor 1.1.1.2 encapsulation mpls neighbor 1.1.1.3 encapsulation mpls

Dich vu MetroNET MP (Multi Point - Layer 2)

1.1.1.1

1.1.1.3

1.1.1.2

Kt ni S VLAN vi VFI EMS_801 Int vlan 801

xconnect vfi EMS_801

Dich vu MetroNET MP (Multi Point - Layer 2)

1.1.1.1

1.1.1.3

1.1.1.2

Cu hnh ti Switch khch hng Int f0/1 Description to ISP Switchport mode trunk Switport trunk encapsulation dot1q Switchport trunk allow vlan 2,3

Dich vu MetroNET MP (Multi Point - Layer 3)

ng dung : Kt ni a im full-mesh, m rng mang LAN, kt ni WAN cho khch hang.


Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Dich vu MetroNET MP (Multi Point - Layer 3)

Lu lng t Router khch hng s c ng gi thm gi tr nhn duy nht truyn trn mng MAN E. To knh EVC im- im t Access Router ln Core Router. Trn cc Core Router to Vfi (Virtual forwarding instance) full mesh qung b gi tr VC ID gn cho khch hng.

Dich vu MetroNET MP (Multi Point - Layer 3)

Cu hinh VFI tai Core DTH l2 vfi EMS_802 manual vpn id 802 neighbor 1.1.1.8 encapsulation mpls neighbor 1.1.1.9 encapsulation mpls Tng t vi cc Core Router cn lai

Dich vu MetroNET MP (Multi Point - Layer 3)

Cu hinh tai cc Access DTH kt ni CPE khch hang Int fastethernet 3/6 name EMS_802 xconnect 1.1.1.7 802 encapsulation mpls no ip address no cdp enable Tng t vi cc Access cn lai

Dich vu MetroNET MP (Multi Point - Layer 3)

Cu hnh trn Router khch hng: R1(config)# int f0/0 R1(config-if)# ip address 172.16.1.1 255.255.255.240 R1(config)# ip route 10.10.2.0 255.255.255.0 172.16.1.2 R1(config)# ip route 10.10.3.0 255.255.255.0 172.16.1.3 Tng t vi cc Router cn li.

Mng ring o ni ht VPN Layer3 BGP/MPLS

ng dung : Trin khai VPN Layer 3 trn nn mang MAN E, ng dung cng ngh BGP/MPLS.
Giao din tai nha khch hang : GE/FE quang. Yu cu CPE: Router vi cng Ethernet

Phng thc tnh cc : theo tc cam kt.


Tc cng (Uplink & Downlink): n x 1Mbps, n x10Mbps ia ch cung cp : Private IP

Mng ring o ni ht VPN Layer3 BGP/MPLS

Tai cc Access Router cu hinh cc knh EoMPLS im im ni vi Core Router.


Tt c lu lng t pha khch hang s c Access Router gn gi tri VC ID va forward n Core Router. Trn Core Router cu hinh cc Vrf (Virtual Routing - Forwarding) tch bit cc route ca khch hang, nhn qung b t Router khch hang va cc nhnh cn lai ca VPN. Cc route s c phn phi bi BGP trn nn MPLS.

Cu hnh VPN Layer3 BGP/MPLS


CO-TDH VFI L3 port G2/24 ACC-TDH Custommer Site 2 10.10.20.0/24 Fa0/0 192.168.20.20/24 untagged MPLS-L3VPN ACC-DTH VFI CO-DTH Layer 3 Port G2/23

192.168.10.10/24 Fa0/0

Custommer Site 1 10.10.10.0/24

untagged

Router khch hang trao i route vi Vrf thuc Core Router bng static route hoc mt trong nhng giao thc inh tuyn v du RIPv2, EIGRP, OSPF, BGP interface f 0/0 Description Connect To ISP ip address 192.168.10.10 255.255.255.0 no shut interface fa0/1 description Connect To LAN Site 1 ip address 10.10.10.1 255.255.255.0 no shut ip route 0.0.0.0 0.0.0.0 192.168.10.1

Cu hnh VPN Layer3 BGP/MPLS


CO-TDH VFI L3 port G2/24 ACC-TDH Custommer Site 2 10.10.20.0/24 Fa0/0 192.168.20.20/24 untagged MPLS-L3VPN ACC-DTH VFI CO-DTH Layer 3 Port G2/23

192.168.10.10/24 Fa0/0

Custommer Site 1 10.10.10.0/24

untagged

Tao ra cc knh EoMPLS gia Access Router va Core Router. Cu hinh tai Access Router, giao din ni vi Router khch hng. interface GigabitEthernet2/23 Description EoMPLS PW To DTH-co-76-01 mtu 1526 no switchport no ip address xconnect 1.1.1.1 804 encapsulation mpls end

Cu hnh VPN Layer3 BGP/MPLS


CO-TDH VFI L3 port G2/24 ACC-TDH Custommer Site 2 10.10.20.0/24 Fa0/0 192.168.20.20/24 untagged MPLS-L3VPN ACC-DTH VFI CO-DTH Layer 3 Port G2/23

192.168.10.10/24 Fa0/0

Custommer Site 1 10.10.10.0/24

untagged

Tai Core Router tao ra VFI full mesh ni vi tt c cc Core Router cn lai. Cu hinh VFI l2 vfi VPN_L3 manual vpn id 804 neighbor 1.1.1.3 encapsulation mpls no-split-horizon Tao ra Vrf vi cc thuc tnh Route-target Cu hinh Vrf Ip vrf VPN_L3 Rd 65512:1001 Route-target both 65512:1001

Cu hnh VPN Layer3 BGP/MPLS


CO-TDH VFI L3 port G2/24 ACC-TDH Custommer Site 2 10.10.20.0/24 Fa0/0 192.168.20.20/24 untagged MPLS-L3VPN ACC-DTH VFI CO-DTH Layer 3 Port G2/23

192.168.10.10/24 Fa0/0

Custommer Site 1 10.10.10.0/24

untagged

Trn Core Router cu hinh interface vlan lam gateway cho lu lng t Router khch hang va kt ni ti VFI. interface Vlan804 mtu 1526 ip vrf forwarding VPN_L3 ip address 192.168.10.1 255.255.255.0 xconnect vfi VPN_Test end

Cu hnh VPN Layer3 BGP/MPLS


CO-TDH VFI L3 port G2/24 ACC-TDH Custommer Site 2 10.10.20.0/24 Fa0/0 192.168.20.20/24 untagged MPLS-L3VPN ACC-DTH VFI CO-DTH Layer 3 Port G2/23

192.168.10.10/24 Fa0/0

Custommer Site 1 10.10.10.0/24

untagged

Trn Core Router thc hin cu hinh BGP qung b cc Route thuc VPN cho cc site u xa. Router bgp 65512

Neighbor 1.1.1.3 remote-as 65512


Neighbor 1.1.1.3 update-source loopback 0 Address-family vpnv4 Neighbor 1.1.1.3 active Neigbor 1.1.1.3 send-community extended Address-family ipv4 vrf VPN_L3 Redistribute connected

Redistribute static

Mt s gii php khuyn nghi va thc t trin khai


Ngn hng VCB: Nhu cu : Site trung tm kt ni vi 05 chi nhnh trn ia ban Ha Ni va kt ni lin tnh vi cc chi nhnh tai Tp HCM, a Nng.. Khuyn nghi s dung dich vu: s dung MetroNET P-MP (im n a im) kt ni hi s va 05 chi nhnh trn ia ban Ha Ni . S dung MetroNET WAN Lin tnh kt ni hi s Ha Ni vi cc chi nhnh tai Tp HCM, a Nng thng qua mang ca VTN

Mt s gii php khuyn nghi va thc t trin khai

Ngn hng BIDV:

Nhu cu : Site trung tm kt ni vi 03 chi nhnh trn ia ban Ha Ni. Nhnh trung tm tc 6Mbps, cc nhnh cn lai tc 2Mbps.
Khuyn nghi s dung dich vu: s dung MetroNET P-MP (im n a im) kt ni hi s va 03 chi nhnh trn ia ban Ha Ni.

Mt s gii php khuyn nghi va thc t trin khai


OMC Cng ty T 1: Nhu cu : Kt ni mang LAN OMC tai 75 inh Tin Hoang va cc tng ai Host thuc Cty T 1. Tc nhnh tai 75 inh Tin Hoang la 96Mbps, tai cc tng ai Host la 16Mbps. Tai 75 TH trang bi Catalyst SW3560 port kt ni Layer3 tai cc Host s dung PC. Khuyn nghi s dung dich vu: s dung MetroNET MP (a im- Layer 3)

Ph lc
Dch v HSI (High Speed Internet)

Cu hnh cng ti Access ni vi DSLAM interface GigabitEthernet2/24 no shut description Connect To DSLAM_QuangAn switchport switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 62,3991 mtu 1526

Cu hnh knh EoMPLS ni ti core interface Vlan62 description EoMPLS PW To DTH-co76-01 for DSLAM_QuangAn no ip address xconnect 172.31.0.1 62 encapsulation mpls no shut

Ph lc
Dch v HSI (High Speed Internet)

Cu hnh knh EoMPLS ti Core interface Vlan62 description EoMPLS for DSLAM_QuangAn no ip address xconnect 172.31.1.1 62 encapsulation mpls no shut

Cu hnh cng ni vi BRAS interface GigabitEthernet4/1 description To dth-bras-erx14-01 switchport switchport trunk encapsulation dot1q switchport mode trunk mtu 1526 switchport trunk allowed vlan add 62

Tho lun