Configuration Guide - IP Services

365 Pages·2014·3.83 MB·English

HUAWEI NetEngine80E/40E Router
V600R008C10
Configuration Guide - IP Services
Issue 02
Date 2014-09-30
HUAWEI TECHNOLOGIES CO., LTD.
Copyright © Huawei Technologies Co., Ltd. 2014. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior written
consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the
customer. All or part of the products, services and features described in this document may not be within the
purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,
and recommendations in this document are provided "AS IS" without warranties, guarantees or representations
of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: http://www.huawei.com
Email: [email protected]
Issue 02 (2014-09-30) Huawei Proprietary and Confidential i
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services About This Document
About This Document
Purpose
This document describes multiple IP services supported by the NE80E/40E. It discusses basic
configurations of IP addresses, ARP, DNS, IP performance, ACL, IPv6, ACL6, IPv6 over IPv4
tunnels, and IPv4 over IPv6 tunnels.
NOTICE
Note the following precautions:
l The encryption algorithms DES/3DES/SKIPJACK/RC2/RSA (RSA-1024 or lower)/MD2/
MD4/MD5 (in digital signature scenarios and password encryption)/SHA1 (in digital
signature scenarios) have a low security, which may bring security risks. If protocols allowed,
using more secure encryption algorithms, such as AES/RSA (RSA-2048 or higher)/SHA2/
HMAC-SHA2, is recommended.
l If the plain parameter is specified, the password will be saved in plaintext in the configuration
file, which has a high security risk. Therefore, specifying the cipher parameter is
recommended. To further improve device security, periodically change the password.
l Do not set both the start and end characters of a password to "%$%$." This causes the
password to be displayed directly in the configuration file.
Related Versions
The following table lists the product versions related to this document.
Product Name Version
HUAWEI NetEngine80E/40E V600R008C10
Router

Intended Audience
This document is intended for:
Issue 02 (2014-09-30) Huawei Proprietary and Confidential ii
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services About This Document
l Commissioning Engineer
l Data Configuration Engineer
l Network Monitoring Engineer
l System Maintenance Engineer
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol Description
Indicates an imminently hazardous situation which, if not
avoided, will result in death or serious injury.
Indicates a potentially hazardous situation which, if not
avoided, could result in death or serious injury.
Indicates a potentially hazardous situation which, if not
avoided, may result in minor or moderate injury.
Indicates a potentially hazardous situation which, if not
avoided, could result in equipment damage, data loss,
performance deterioration, or unanticipated results.
NOTICE is used to address practices not related to personal
injury.
Calls attention to important information, best practices and
tips.
NOTE is used to address information not related to personal
injury, equipment damage, and environment deterioration.

Command Conventions
The command conventions that may be found in this document are defined as follows.
Convention Description
Boldface The keywords of a command line are in boldface.
Italic Command arguments are in italics.
[ ] Items (keywords or arguments) in brackets [ ] are optional.
{ x | y | ... } Optional items are grouped in braces and separated by
vertical bars. One item is selected.
Issue 02 (2014-09-30) Huawei Proprietary and Confidential iii
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services About This Document
Convention Description
[ x | y | ... ] Optional items are grouped in brackets and separated by
vertical bars. One item is selected or no item is selected.
{ x | y | ... }* Optional items are grouped in braces and separated by
vertical bars. A minimum of one item or a maximum of all
items can be selected.
[ x | y | ... ]* Optional items are grouped in brackets and separated by
vertical bars. Several items or no item can be selected.
&<1-n> The parameter before the & sign can be repeated 1 to n times.
# A line starting with the # sign is comments.

Change History
Changes between document issues are cumulative. The latest document issue contains all the
changes made in earlier issues.
Changes in Issue 02 (2014-09-30)
This issue is the second official release.
Changes in Issue 01 (2014-06-30)
This issue is the first official release.
Issue 02 (2014-09-30) Huawei Proprietary and Confidential iv
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services Contents
Contents
About This Document.....................................................................................................................ii
1 IP Addresses Configuration........................................................................................................1
1.1 IP Addresses Overview..................................................................................................................................................2
1.1.1 Introduction.................................................................................................................................................................2
1.1.2 Features of IP Addresses Supported by the NE80E/40E.............................................................................................2
1.2 Configuring IP Addresses for Interfaces........................................................................................................................3
1.2.1 Before You Start..........................................................................................................................................................3
1.2.2 Configuring a Primary IP Address for an Interface.....................................................................................................4
1.2.3 (Optional) Configuring a Secondary IP Address for an Interface...............................................................................4
1.2.4 Checking the Configurations.......................................................................................................................................5
1.3 Configuring IP Address Negotiation on Interfaces........................................................................................................6
1.3.1 Before You Start..........................................................................................................................................................6
1.3.2 Configuring a Server to Assign an IP Address for a Client Through Negotiation......................................................7
1.3.3 Configuring a Client to Obtain an IP Address Through Negotiation..........................................................................8
1.3.4 Checking the Configurations.......................................................................................................................................9
1.4 Configuring IP Address Unnumbered for Interfaces....................................................................................................10
1.4.1 Before You Start........................................................................................................................................................10
1.4.2 Configuring the Primary IP Address of the Interface That Lends an IP Address.....................................................11
1.4.3 Configuring an Interface That Borrows an IP Address from Another Interface.......................................................11
1.4.4 Checking the Configurations.....................................................................................................................................12
1.5 Maintaining IP Addresses.............................................................................................................................................13
1.5.1 Monitoring Network Operating Status of IP Addresses............................................................................................13
1.6 Configuration Examples...............................................................................................................................................13
1.6.1 Example for Configuring Primary and Secondary IP Addresses..............................................................................14
1.6.2 Example for Obtaining an IP Address Through Negotiation....................................................................................16
1.6.3 Example for Configuring IP Address Unnumbered..................................................................................................18
1.6.4 Example for Configuring IP Address Overlapping on the Same Device..................................................................21
1.6.5 Example for Configuring an IP Address with a 31-bit Mask....................................................................................25
2 ARP Configuration......................................................................................................................28
2.1 Introduction..................................................................................................................................................................30
2.1.1 Overview of ARP......................................................................................................................................................30
2.1.2 ARP Features Supported by the NE80E/40E............................................................................................................30
Issue 02 (2014-09-30) Huawei Proprietary and Confidential v
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services Contents
2.2 Configuring Static ARP................................................................................................................................................33
2.2.1 Before You Start........................................................................................................................................................33
2.2.2 Configuring Common Static ARP Entries.................................................................................................................33
2.2.3 Configuring Static ARP Entries in a VLAN.............................................................................................................34
2.2.4 Configuring Static ARP Entries in a VPN Instance..................................................................................................35
2.2.5 Checking the Configurations.....................................................................................................................................35
2.3 Optimizing Dynamic ARP............................................................................................................................................37
2.3.1 Before You Start........................................................................................................................................................37
2.3.2 Modify the aging parameters of dynamic ARP.........................................................................................................37
2.3.3 Enabling ARP Suppression Function........................................................................................................................38
2.3.4 Enabling Layer 2 Topology Detection Function.......................................................................................................38
2.3.5 Enabling ARP Check.................................................................................................................................................39
2.3.6 Checking the Configurations.....................................................................................................................................40
2.4 Configuring Routed Proxy ARP...................................................................................................................................41
2.4.1 Before You Start........................................................................................................................................................41
2.4.2 Configure an IP Addresses for the Interface..............................................................................................................42
2.4.3 Enabling the Routed Proxy ARP Function................................................................................................................42
2.4.4 Checking the Configurations.....................................................................................................................................43
2.5 Configuring Proxy ARP Within a VLAN....................................................................................................................44
2.5.1 Before You Start........................................................................................................................................................44
2.5.2 Configure an IP Addresses for the Interface..............................................................................................................45
2.5.3 Configuring the VLAN Associated with the Sub-interface.......................................................................................45
2.5.4 Enabling Proxy ARP Within a VLAN......................................................................................................................46
2.5.5 Checking the Configurations.....................................................................................................................................47
2.6 Configuring Proxy ARP Between VLANs...................................................................................................................48
2.6.1 Before You Start........................................................................................................................................................48
2.6.2 Configuring an IP Addresses for the Interface..........................................................................................................49
2.6.3 Configuring the VLAN Associated with the Sub-interface.......................................................................................49
2.6.4 Enabling Proxy ARP Between VLANs.....................................................................................................................50
2.6.5 Checking the Configurations.....................................................................................................................................51
2.7 Configuring ARP-Ping IP.............................................................................................................................................52
2.7.1 Before You Start........................................................................................................................................................52
2.7.2 Detecting the IP Address by Using the arp-ping ip Command.................................................................................53
2.8 Configuring Unicast ARP Probe..................................................................................................................................53
2.9 Configuring ARP-Ping MAC.......................................................................................................................................55
2.9.1 Before You Start........................................................................................................................................................55
2.9.2 Detecting the MAC Address by Using the arp-ping mac Command........................................................................55
2.10 Configuring the Association Between ARP and Interface Status..............................................................................56
2.10.1 Before You Start......................................................................................................................................................56
2.10.2 Enabling the Association Between ARP and Interface Status.................................................................................57
2.10.3 (Optional) Adjusting Parameters about the Association Between ARP and Interface Status.................................58
Issue 02 (2014-09-30) Huawei Proprietary and Confidential vi
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services Contents
2.11 Maintaining ARP........................................................................................................................................................59
2.11.1 Clearing ARP Entries..............................................................................................................................................59
2.11.2 Monitoring Network Operating Status of ARP.......................................................................................................59
2.12 Configuration Examples.............................................................................................................................................60
2.12.1 Example for Configuring Routed Proxy ARP.........................................................................................................60
2.12.2 Example for Configuring Proxy ARP Within a VLAN..........................................................................................63
2.12.3 Example for Configuring Proxy ARP Between VLANs.........................................................................................65
2.12.4 Example for Configuring the Association Between ARP and Interface Status.......................................................67
2.12.5 Example for Configuring Layer 2 Topology Detection..........................................................................................72
3 DNS Configuration.....................................................................................................................75
3.1 DNS Overview.............................................................................................................................................................76
3.1.1 Introduction...............................................................................................................................................................76
3.1.2 DNS Supported by the NE80E/40E...........................................................................................................................76
3.2 Configuring DNS..........................................................................................................................................................76
3.2.1 Before You Start........................................................................................................................................................76
3.2.2 Configuring Static DNS Entries................................................................................................................................77
3.2.3 Configuring Dynamic DNS.......................................................................................................................................78
3.2.4 Checking the Configurations.....................................................................................................................................78
3.3 Maintaining DNS..........................................................................................................................................................79
3.3.1 Clearing DNS Entries................................................................................................................................................79
3.3.2 Monitoring Network Operating Status of DNS.........................................................................................................80
3.4 Configuration Examples...............................................................................................................................................80
3.4.1 Example for Configuring DNS..................................................................................................................................80
4 COPS Configuration...................................................................................................................84
4.1 COPS Overview...........................................................................................................................................................85
4.1.1 Introduction...............................................................................................................................................................85
4.1.2 COPS Features Supported by the NE80E/40E..........................................................................................................86
4.2 Configuring the COPS Server Group...........................................................................................................................87
4.2.1 Before You Start........................................................................................................................................................87
4.2.2 Setting Global COPS Parameters..............................................................................................................................88
4.2.3 Creating a COPS Server Group.................................................................................................................................89
4.2.4 Configuring the COPS Server...................................................................................................................................89
4.2.5 Setting the PEP ID for the COPS Server...................................................................................................................90
4.2.6 (Optional) Setting the Flow Keeping Time of the COPS Server..............................................................................91
4.2.7 (Optional) Setting the Shared Key of the COPS Server............................................................................................91
4.2.8 Activating the COPS Server Group...........................................................................................................................92
4.2.9 Checking the Configurations.....................................................................................................................................93
4.3 Configuration Examples...............................................................................................................................................93
4.3.1 Example for Configuring COPS Interfaces to Report Online and Offline Messages...............................................93
5 ANCP Configuration..................................................................................................................97
Issue 02 (2014-09-30) Huawei Proprietary and Confidential vii
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services Contents
5.1 ANCP Overview...........................................................................................................................................................98
5.1.1 Introduction...............................................................................................................................................................98
5.1.2 Usage Scenario..........................................................................................................................................................99
5.2 Configuring the ANCP Server....................................................................................................................................101
5.2.1 Before You Start......................................................................................................................................................101
5.2.2 Enabling ANCP.......................................................................................................................................................102
5.2.3 Configuring the Source Interface of an ANCP Connection....................................................................................102
5.2.4 (Optional) Configuring Parameters of ANCP Sessions..........................................................................................103
5.2.5 Configuring ANCP Neighbor Profiles....................................................................................................................104
5.2.6 (Optional) Configuring Bandwidth Adjustment Factors.........................................................................................105
5.2.7 (Optional) Configuring ANCP Message Damping.................................................................................................106
5.2.8 (Optional) Configuring ANCP OAM Detection.....................................................................................................107
5.2.9 (Optional) Adjusting the Downstream Bandwidths of Users Automatically..........................................................107
5.2.10 Checking the Configurations.................................................................................................................................108
5.3 Configuring the ANCP Proxy.....................................................................................................................................110
5.3.1 Before You Start......................................................................................................................................................110
5.3.2 Enabling ANCP.......................................................................................................................................................111
5.3.3 Configuring the Source Interface of an ANCP Connection....................................................................................111
5.3.4 (Optional) Configuring Parameters of ANCP Sessions..........................................................................................112
5.3.5 Configuring the ANCP Neighbor Profile................................................................................................................112
5.3.6 (Optional) Configuring Bandwidth Adjustment Factors.........................................................................................114
5.3.7 (Optional) Enabling the Function of Configuring ANCP Access Lines.................................................................115
5.3.8 (Optional) Configuring ANCP Message Damping.................................................................................................116
5.3.9 (Optional) Configuring ANCP OAM Detection.....................................................................................................116
5.3.10 Checking the Configurations.................................................................................................................................117
5.4 Configuring the Association Between ANCP and HQoS in the ANCP Proxy Scenario...........................................119
5.4.1 Before You Start......................................................................................................................................................119
5.4.2 Configuring the Mode of the Association Between ANCP and HQoS...................................................................120
5.4.3 Configuring the QoS Profile and Scheduling Parameters.......................................................................................121
5.4.4 Configuring the BRAS to Deliver the QoS Policy Name.......................................................................................122
5.4.5 Applying the QoS Profile to the Interface...............................................................................................................122
5.4.6 Enabling ANCP on the Interface and Associating the Interface with the ANCP Neighbor Profile........................123
5.4.7 Checking the Configurations...................................................................................................................................123
5.5 Maintaining ANCP.....................................................................................................................................................125
5.5.1 Clearing ANCP Running Information.....................................................................................................................125
5.6 Configuration Examples.............................................................................................................................................126
5.6.1 Example for Configuring the ANCP Server............................................................................................................126
5.6.2 Configuring router as the ANCP Proxy and Configuring ANCP-HQoS Association............................................129
6 IP Performance Configuration................................................................................................135
6.1 IP Performance Overview..........................................................................................................................................136
6.1.1 Introduction.............................................................................................................................................................136
Issue 02 (2014-09-30) Huawei Proprietary and Confidential viii
Copyright © Huawei Technologies Co., Ltd.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services Contents
6.1.2 IP Performance Supported by the NE80E/40E........................................................................................................136
6.2 Improving IP Performance.........................................................................................................................................137
6.2.1 Before You Start......................................................................................................................................................137
6.2.2 Configuring the Maximum Transmission Unit of the Interface..............................................................................138
6.2.3 Configuring the Control of IP Packets with Source-Route Options........................................................................139
6.2.4 Configuring the Time When FIB Entries Are Regularly Refreshed.......................................................................139
6.2.5 Configuring DF Clearance.......................................................................................................................................140
6.2.6 Configuring ICMP Attributes..................................................................................................................................141
6.2.7 Management and Service Plane Isolation................................................................................................................142
6.2.8 (Optional) Enabling the Hardware-based Packet Copying Function......................................................................142
6.2.9 Checking the Configurations...................................................................................................................................143
6.3 Configuring TCP........................................................................................................................................................145
6.3.1 Before You Start......................................................................................................................................................145
6.3.2 Configuring TCP Timer...........................................................................................................................................145
6.3.3 Setting the MSS Value for a TCP Connection........................................................................................................146
6.3.4 Specifying the Size of a TCP Sliding Window.......................................................................................................147
6.3.5 Checking the Configurations...................................................................................................................................147
6.4 Configuring Load Balancing for IP Packet Forwarding.............................................................................................148
6.4.1 Before You Start......................................................................................................................................................148
6.4.2 Configuring the Load Balancing Mode of IP Packet Forwarding...........................................................................149
6.4.3 Configuring Interface Unequal-Cost Multiple Path During IP Packet Forwarding................................................150
6.4.4 Configuring Global Unequal-Cost Multiple Path During IP Packet Forwarding...................................................151
6.4.5 Checking the Configurations...................................................................................................................................152
6.5 Maintaining IP Performance.......................................................................................................................................152
6.5.1 Clearing IP Performance Statistics..........................................................................................................................153
6.5.2 Monitoring Network Operating Status of IP Performance......................................................................................153
6.6 Configuration Examples.............................................................................................................................................154
6.6.1 Example for Limiting Transmission of ICMP Host-Unreachable Packets.............................................................155
6.6.2 Example for Configuring Interface UCMP for IP Packet Forwarding....................................................................157
6.6.3 Example for Configuring Global Unequal-Cost Load Balancing for IP Packet Forwarding..................................165
7 IP Unicast Policy-Based Routing Configuration.................................................................170
8 ACL Configuration....................................................................................................................171
8.1 Introduction................................................................................................................................................................172
8.1.1 ACL Overview........................................................................................................................................................172
8.1.2 ACL Features Supported by the NE80E/40E..........................................................................................................172
8.2 Configuring an Interface-based ACL.........................................................................................................................176
8.2.1 Before You Start......................................................................................................................................................176
8.2.2 (Optional) Creating a Time Range in Which an ACL Rule Takes Effect...............................................................177
8.2.3 Creating an Interface-based ACL............................................................................................................................177
8.2.4 Configuring an Interface-based ACL Rule..............................................................................................................178
8.2.5 Checking the Configurations...................................................................................................................................179
Issue 02 (2014-09-30) Huawei Proprietary and Confidential ix
Copyright © Huawei Technologies Co., Ltd.