configuration guide - ip services(v600r003c00_02)

8/10/2019 Configuration Guide - IP Services(V600R003C00_02)

1/308

HUAWEI NetEngine80E/40E Router

V600R003C00

Configuration Guide - IP Services

Issue 02

Date 2011-09-10

HUAWEI TECHNOLOGIES CO., LTD.


2/308

Copyright Huawei Technologies Co., Ltd. 2011. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written

consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and the

customer. All or part of the products, services and features described in this document may not be within the

purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees or representations

of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Issue 02 (2011-09-10) Huawei Proprietary and Confidential

Copyright Huawei Technologies Co., Ltd.

i
http://www.huawei.com/


3/308

About This Document

Purpose

This document describes multiple IP services supported by the NE80E/40E. It discusses basic

configurations of IP addresses, ARP, DNS, IP performance, ACL, IPv6, ACL6, IPv6 over IPv4

tunnels, and IPv4 over IPv6 tunnels.

NOTE

l This document takes interface numbers and link types of the NE40E-X8 as an example. In working

situations, the actual interface numbers and link types may be different from those used in this

document.

l In NE80E/40E series (except for the NE40E-X1/X2), line processing boards are called Line Processing

Units (LPUs) and switching fabric boards are called Switching Fabric Units (SFUs). The NE40E- X1/

X2 has no LPU and SFU, and packet switching and forwarding are centrally performed by the Network

Processing Unit (NPU).

Related Versions

The following table lists the product versions related to this document.

Product Name Version

HUAWEI NetEngine80E/40E

Router

V600R003C00

Intended Audience

This document is intended for:

l Commissioning Engineer

l Data Configuration Engineer

l Network Monitoring Engineer

l System Maintenance Engineer


Configuration Guide - IP Services About This Document



ii


4/308

Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol Description

Indicates a hazard with a high level of risk that, if

not avoided, will result in death or serious injury.

Indicates a hazard with a medium or low level of risk

which, if not avoided, could result in minor or

moderate injury.

Indicates a potentially hazardous situation that, if

not avoided, could cause device damage, data loss,

and performance degradation, or unexpected results.

Indicates a tip that may help you solve a problem or

save your time.

Provides additional information to emphasize or

supplement important points of the main text.

Command ConventionsThe command conventions that may be found in this document are defined as follows.

Convention Description

Boldface The keywords of a command line are in boldface.

Italic Command arguments are in italics.

[ ] Items (keywords or arguments) in brackets [ ] are optional.

{ x | y | ... } Optional items are grouped in braces and separated by

vertical bars. One item is selected.[ x | y | ... ] Optional items are grouped in brackets and separated by

vertical bars. One item is selected or no item is selected.

{ x | y | ... }* Optional items are grouped in braces and separated by

vertical bars. A minimum of one item or a maximum of all

items can be selected.

[ x | y | ... ]* Optional items are grouped in brackets and separated by

vertical bars. Several items or no item can be selected.

& The parameter before the & sign can be repeated 1 to n times.

# A line starting with the # sign is comments.





iii


5/308

Change HistoryUpdates between document issues are cumulative. Therefore, the latest document issue contains

all updates made in previous issues.

Changes in Issue 02 (2011-09-10)

The second commercial release has the following updates:

l IP Performance Configuration

The fib-miss-report enablecommand is provided in 4.2.3 Configuring ICMP

Attributesto allow the LPU to send FibMiss packets to its CPU.

lANCP Configuration The chapter of ANCP Configuration is deleted because ANCP is not supported.

Changes in Issue 01 (2011-06-30)

Initial field trial release.





iv
http://-/?-


6/308

Contents

About This Document.....................................................................................................................ii

1 IP Addresses Configuration........................................................................................................1

1.1 IP Addresses Overview......................................................................................................................................2

1.1.1 Introduction to IP Addresses.....................................................................................................................21.1.2 Featuresof IP Addresses Supported by the NE80E/40E...........................................................................2

1.2 Configuring IP Addresses for Interfaces............................................................................................................3

1.2.1 Establishing the Configuration Task.........................................................................................................3

1.2.2 Configuring a Primary IP Address for an Interface...................................................................................4

1.2.3 (Optional) Configuring a Secondary IP Address for an Interface.............................................................4

1.2.4 Checking the Configuration.......................................................................................................................5

1.3 Configuring IP Address Negotiation on Interfaces............................................................................................6

1.3.1 Establishing the Configuration Task.........................................................................................................6

1.3.2 Configuring a Server to Assign an IP Address for a Client Through Negotiation....................................7

1.3.3 Configuring a Client to Obtain an IP Address Through Negotiation........................................................8

1.3.4 Checking the Configuration.......................................................................................................................9

1.4 Configuring IP Address Unnumbered for Interfaces........................................................................................10

1.4.1 Establishing the Configuration Task.......................................................................................................10

1.4.2 Configuring the Primary IP Address of the Interface That Lends an IP Address...................................11

1.4.3 Configuring an Interface That Borrows an IP Address from Another Interface.....................................11

1.4.4 Checking the Configuration.....................................................................................................................12

1.5 Maintaining IP Addresses.................................................................................................................................13

1.5.1 Monitoring Network Operation Status of IP Addresses..........................................................................13

1.6 Configuration Examples...................................................................................................................................13

1.6.1 Examplefor Configuring Primary and Secondary IP Addresses............................................................13

1.6.2 Examplefor Obtaining an IP Address Through Negotiation..................................................................15

1.6.3 Example for Configuring IP Address Unnumbered................................................................................18

1.6.4 Example for Configuring IP Address Overlapping on the Same Device................................................20

1.6.5 Example for Configuring an IP Address with a 31-bit Mask..................................................................25

2 ARP Configuration......................................................................................................................28

2.1 Introduction to ARP..........................................................................................................................................30

2.1.1 Overview of ARP....................................................................................................................................30

2.1.2 Features of ARP Supported by the NE80E/40E......................................................................................30


Configuration Guide - IP Services Contents



v


7/308

2.2 Configuring Static ARP....................................................................................................................................33


2.2.2 Configuring Common Static ARP Entries...............................................................................................33

2.2.3 Configuring Static ARP Entries in a VLAN...........................................................................................34

2.2.4 Configuring Static ARP Entries in a VPN Instance................................................................................35


2.3 Optimizing Dynamic ARP................................................................................................................................37


2.3.2 Modify the aging parameters of dynamic ARP.......................................................................................37

2.3.3 Enabling ARP Suppression Function......................................................................................................38

2.3.4 Enabling Layer 2 Topology Detection Function.....................................................................................38

2.3.5 Enabling ARP Check...............................................................................................................................39


2.4 Configuring Routed Proxy ARP.......................................................................................................................41


2.4.2 Configure an IP Addresses for the Interface............................................................................................42

2.4.3 Enabling the Routed Proxy ARP Function..............................................................................................42


2.5 Configuring Proxy ARP Within a VLAN........................................................................................................44


2.5.2 Configure an IP Addresses for the Interface............................................................................................45

2.5.3 Configuring the VLAN Associated with the Sub-interface.....................................................................45

2.5.4 Enabling Proxy ARP Within a VLAN....................................................................................................462.5.5 Checking the Configuration.....................................................................................................................46

2.6 Configuring Proxy ARP Between VLANs.......................................................................................................48


2.6.2 Configuring an IP Addresses for the Interface........................................................................................48

2.6.3 Configuring the VLAN Associated with the Sub-interface.....................................................................49

2.6.4 Enabling Proxy ARP Between VLANs...................................................................................................50


2.7 Configuring ARP-Ping IP.................................................................................................................................51


2.7.2 Detecting the IP Address by Using the arp-ping ip Command...............................................................52

2.8 Configuring ARP-Ping MAC...........................................................................................................................53


2.8.2 Detecting the MAC Address by Using the arp-ping mac Command......................................................53

2.9 Configuring the Association Between ARP and Interface Status....................................................................54


2.9.2 Configuring the Association Between ARP and Interface Status...........................................................55

2.9.3 (Optional) Adjusting Parameters about the Association Between ARP and Interface Status.................56

2.10 Maintaining ARP............................................................................................................................................57

2.10.1 Clearing ARP Entries............................................................................................................................57





vi


8/308

2.10.2 Monitoring Network Operation Status of ARP.....................................................................................57

2.11 Configuration Examples.................................................................................................................................58

2.11.1 Example for Configuring Routed Proxy ARP.......................................................................................58

2.11.2 Example for Configuring Proxy ARP Within a VLAN........................................................................60

2.11.3 Example for Configuring Proxy ARP Between VLANs.......................................................................62

2.11.4 Example for Configuring the Association Between ARP and Interface Status.....................................64

2.11.5 Example for Configuring Layer 2 Topology Detection........................................................................69

3 DNS Configuration.....................................................................................................................72

3.1 DNS Overview.................................................................................................................................................73

3.1.1 Introduction to DNS................................................................................................................................73

3.1.2 DNS Supported by the NE80E/40E.........................................................................................................73

3.2 Configuring DNS..............................................................................................................................................73


3.2.2 Configuring Static DNS Entries..............................................................................................................74

3.2.3 Configuring Dynamic DNS.....................................................................................................................75


3.3 Maintaining DNS..............................................................................................................................................76

3.3.1 ClearingDNS Entries..............................................................................................................................76

3.3.2 Monitoring Network Operation Status of DNS.......................................................................................77

3.4 ConfigurationExamples...................................................................................................................................77

3.4.1 Examplefor Configuring DNS................................................................................................................77

4 IP Performance Configuration..................................................................................................81

4.1 IP Performance Overview................................................................................................................................82

4.1.1 Introduction to IP Performance...............................................................................................................82

4.1.2 IP Performance Supported by the NE80E/40E........................................................................................82

4.2 Improving IP Performance...............................................................................................................................83


4.2.2 Configuring the Maximum Transmission Unit of the Interface..............................................................84

4.2.3 Configuring ICMP Attributes..................................................................................................................85


4.3 Configuring TCP..............................................................................................................................................87

4.3.1 Establishing the Configuration Task.......................................................................................................874.3.2 Configuring TCP Timer...........................................................................................................................88

4.3.3 Specifying the Size of a TCP Sliding Window.......................................................................................89


4.4 Configuring Load Balancing for IP Packet Forwarding...................................................................................90


4.4.2 Configuring the Load Balancing Mode of IP Packet Forwarding...........................................................91

4.4.3 Configuring Interface Unequal-Cost Multiple Path During IP Packet Forwarding................................92

4.4.4 Configuring Global Unequal-Cost Multiple Path During IP Packet Forwarding...................................93


4.5 Maintaining IP Performance.............................................................................................................................94





vii


9/308

4.5.1 Clearing IP Performance Statistics..........................................................................................................94

4.5.2 Monitoring Network Operation Status of IP Performance......................................................................95

4.6 Configuration Examples...................................................................................................................................96

4.6.1 Example for Limiting Transmission of ICMP Host-Unreachable Packets.............................................96

4.6.2 Example for Configuring Interface Unequal-Cost Multiple Path During IP Packet Forwarding...........99

4.6.3 Examplefor Configuring Global Unequal-Cost Load Balancing for IP Packet Forwarding................104

5 ACL Configuration....................................................................................................................109

5.1 ACL Overview...............................................................................................................................................110

5.1.1 Introduction to ACL..............................................................................................................................110

5.1.2 ACLSupported by the NE80E/40E.......................................................................................................110

5.2 Configuring an Interface-based ACL.............................................................................................................110

5.2.1 Establishing the Configuration Task.....................................................................................................110

5.2.2 (Optional) Creating a Time Range........................................................................................................111

5.2.3 Creatingan Interface-based ACL..........................................................................................................111

5.2.4 (Optional) Configuring ACL Descriptions............................................................................................112

5.2.5 (Optional) Configuring ACL Step.........................................................................................................112

5.2.6 Checking the Configuration...................................................................................................................113

5.3 Configuring aBasic ACL...............................................................................................................................114



5.3.3 Creatinga Basic ACL............................................................................................................................115




5.4 Configuring an Advanced ACL......................................................................................................................117



5.4.3 Creatingan Advanced ACL..................................................................................................................118




5.5 Configuring an ACL Based on the Ethernet Frame Header...........................................................................1215.5.1 Establishing the Configuration Task.....................................................................................................121

5.5.2 Creatingan ACL Based on the Ethernet Frame Header........................................................................122




5.6 Configuring an UCL.......................................................................................................................................124



5.6.3 Creating an UCL....................................................................................................................................125






viii


10/308



5.7 Configuring a Named ACL............................................................................................................................128



5.7.3 Creating a Named ACL.........................................................................................................................129

5.7.4 (Optional) Configuring named ACL Descriptions................................................................................130

5.7.5 (Optional) Configuring named ACL Step.............................................................................................130


5.8 Configuring aMPLS-based ACL...................................................................................................................132


5.8.2 Creatinga MPLS-based ACL................................................................................................................132

5.8.3 Configuring Rules for a MPLS-based ACL..........................................................................................133


5.9 ConfigurationExamples.................................................................................................................................133

5.9.1 Examplefor Configuring a Traffic Policy Based on Complex Traffic Classification..........................134

5.9.2 Example for Configuring the Security Function of Access Devices.....................................................142

5.9.3 Example for Configuring an ACL Rule that Is Based on the VPN Instance.........................................145

6 Basic IPv6 Configuration......................................................................................................... 149

6.1 Basic IPv6 Overview......................................................................................................................................151

6.1.1 Introduction to IPv6...............................................................................................................................151

6.1.2 IPv6 Supported by the NE80E/40E.......................................................................................................151

6.2 Configuring an IPv6 Address for an Interface................................................................................................153


6.2.2 Enabling IPv6 Packet Forwarding Capability.......................................................................................154

6.2.3 Configuring an IPv6 Link-Local Address for an Interface....................................................................155

6.2.4 Configuring an IPv6 Global Unicast Address for an Interface..............................................................156

6.2.5 Configuring an IPv6 Anycast Address for an Interface.........................................................................156


6.3 Configuring an IPv6 Address Selection Policy Table....................................................................................158

6.4 Configuring IPv6 Neighbor Discovery...........................................................................................................160

6.4.1 Establishing the Configuration Task.....................................................................................................1606.4.2 Configuring Static Neighbors................................................................................................................161

6.4.3 Enabling RA Message Advertising.......................................................................................................162

6.4.4 Setting the Interval for Advertising RA Messages................................................................................162

6.4.5 Enabling Stateful Auto Configuration...................................................................................................163

6.4.6 Configuring the Address Prefixes to Be Advertised.............................................................................163

6.4.7 Configuring Other Information to Be Advertised.................................................................................164

6.4.8 Configuring the Default Router Priority and Route Information..........................................................165

6.4.9 (Optional) Configuring Routed Proxy ND............................................................................................166

6.4.10 Checking the Configuration.................................................................................................................167

6.5 Configuring IPv6 SEND.................................................................................................................................168





ix


11/308


6.5.2 Configuring a CGA IPv6 Address.........................................................................................................170

6.5.3 Configuring Strict IPv6 SEND..............................................................................................................171


6.6 Configuring PMTU.........................................................................................................................................173

6.6.1 Establishing the Configuration Task................................................................ .....................................173

6.6.2 CreatingStatic PMTU Entries...............................................................................................................173

6.6.3 Configuring PMTU Aging Time...........................................................................................................174


6.7 Configuring TCP6..........................................................................................................................................175


6.7.2 Configuring TCP6 Timers.....................................................................................................................176

6.7.3 Configuring the Size of the TCP6 Sliding Window..............................................................................176

6.7.4 Checking the Configuration...................................................................................................................1766.8 Maintaining IPv6............................................................................................................................................178

6.8.1 Resetting IPv6........................................................................................................................................178

6.8.2 Monitoring Network Operation Status of IPv6.....................................................................................179


6.9.1 Example for Configuring an IPv6 Address for an Interface..................................................................180

6.9.2 Example for Configuring IPv6 Neighbor Discovery.............................................................................183

6.9.3 Example for Configuring IPv6 Address Selection Policy Table...........................................................186

6.9.4 Examplefor Configuring IPv6 SEND...................................................................................................189

6.9.5 Example for Configuring Default Router Priority and Route Information...........................................193

7 IPv6 DNS Configuration..........................................................................................................196

7.1 IPv6 DNS Overview.......................................................................................................................................197

7.1.1 Introduction to IPv6 DNS......................................................................................................................197

7.1.2 IPv6 DNS Supported by the NE80E/40E..............................................................................................197

7.2 Configuring IPv6 DNS...................................................................................................................................197


7.2.2 Configuring a Static IPv6 DNS Entry...................................................................................................198

7.2.3 Configuring the Dynamic IPv6 DNS Services......................................................................................198


7.3 Maintaining IPv6 DNS...................................................................................................................................200

7.3.1 Clearing IPv6 DNS Entries....................................................................................................................200

7.3.2 Monitoring Network Operation Status of IPv6 DNS............................................................................201


7.4.1 Example for Configuring IPv6 DNS.....................................................................................................202

8 ACL6 Configuration..................................................................................................................206

8.1 ACL6 Overview.............................................................................................................................................207

8.1.1 Introduction to ACL6............................................................................................................................207

8.1.2 ACL6 Supported by the NE80E/40E.....................................................................................................207

8.2 Configuring an Interfaced-based ACL6.........................................................................................................207





x


12/308


8.2.2 (Optional) Configuring the Valid Time Range of ACL6......................................................................208

8.2.3 Creating an Interfaced-based ACL6......................................................................................................208


8.3 Configuring a Basic ACL6.............................................................................................................................209

8.3.1 Establishing the Configuration Task................................................................................ .....................210


8.3.3 Creatinga Basic ACL6..........................................................................................................................211


8.4 Configuring an Advanced ACL6....................................................................................................................212



8.4.3 Creatingan Advanced ACL6................................................................................................................213


8.5 Configuring a Named ACL6..........................................................................................................................215



8.5.3 Creatinga Named ACL6.......................................................................................................................216


8.6 Maintaining ACL6..........................................................................................................................................218

8.6.1 ClearingACL6 Statistics.......................................................................................................................218

8.6.2 Monitoring Network Operation Status of ACL6...................................................................................219

8.7 Configuration Examples.................................................................................................................................2198.7.1 Example for Configuring an ACL6 to Filter IPv6 Packets...................................................................219

9 IPv6 over IPv4Tunnel Configuration................................................................................... 224

9.1 IPv6 over IPv4 Tunnel Overview...................................................................................................................225

9.1.1 Introduction to IPv6 over IPv4..............................................................................................................225

9.1.2 IPv6over IPv4 Supported by the NE80E/40E......................................................................................225

9.2 Configuring IPv4/IPv6 Dual Stacks...............................................................................................................231


9.2.2 Enabling IPv6 Packet Forwarding.........................................................................................................232

9.2.3 Configuring IPv4 and IPv6 Addresses for the Interface........................................................................2339.3 Configuring an IPv6 over IPv4 Tunnel..........................................................................................................234


9.3.2 Configuring an IPv6 over IPv4 Manual Tunnel....................................................................................235

9.3.3 Configuring an IPV6 over IPv4 GRE Tunnel.......................................................................................236

9.3.4 Configuring an IPv6 over IPv4 Automatic Tunnel...............................................................................237

9.3.5 Configuring a 6to4 Tunnel....................................................................................................................238

9.3.6 Configuring an ISATAP Tunnel............................................................................................................240

9.3.7 Configuring Routes in the Tunnel.........................................................................................................241


9.4 Configuring 6PE.............................................................................................................................................242





xi


13/308


9.4.2 Configuring IPv4/IPv6 Dual Protocol Stacks........................................................................................243

9.4.3 Configuring MPLS................................................................................................................................244

9.4.4 Enabling 6PE Peer.................................................................................................................................245

9.5 Maintaining IPv6 over IPv4 Tunnels..............................................................................................................245

9.5.1 Monitoring the Running Status of IPv6 over IPv4 Tunnel....................................................................245


9.6.1 Example for Configuring an IPv6 over IPv4 Manual Tunnel...............................................................246

9.6.2 Example for Configuring an IPv6 over IPv4 GRE Tunnel...................................................................249

9.6.3 Example for Configuring an IPv6 over IPv4 Automatic Tunnel...........................................................254

9.6.4 Example for Configuring a 6to4 Tunnel................................................................................................257

9.6.5 Example for Configuring 6to4 Relay....................................................................................................261

9.6.6 Example for Configuring an ISATAP Tunnel.......................................................................................264

9.6.7 Example for Configuring 6PE...............................................................................................................267

10 IPv4 over IPv6 Tunnel Configuration.................................................................................274

10.1 IPv4 over IPv6 Tunnel Overview.................................................................................................................275

10.1.1 Introduction to IPv4 over IPv6............................................................................................................275

10.1.2 IPv4 over IPv6 Supported by the NE80E/40E....................................................................................275

10.2 Configuring an IPv4 over IPv6 Tunnel........................................................................................................276

10.2.1 Establishing the Configuration Task...................................................................................................276

10.2.2 Configuring a Tunnel Interface...........................................................................................................276

10.2.3 Configuring Routes in the Tunnel.......................................................................................................277

10.2.4 Configuring Other Items for an IPv4 over IPv6 Tunnel......................................................................278

10.2.5 Checking the Configuration.................................................................................................................279

10.3 Maintaining IPv4 over IPv6 Tunnels............................................................................................................280

10.3.1 Monitoring the Operation Status of IPv4 over IPv6 Tunnel...............................................................280

10.4 Configuration Examples...............................................................................................................................281

10.4.1 Example for Configuring an IPv4 over IPv6 Tunnel..........................................................................281

A Glossary......................................................................................................................................288

B Acronyms and Abbreviations.................................................................................................292





xii


14/308

1IP Addresses ConfigurationAbout This Chapter

By assigning IP addresses to network devices, you can enable data communications between

the network devices.

1.1 IP Addresses Overview

An IP addressis also called a logical address. The IP address of a network device on the Internet

is the unique identifier of the network device.

1.2 Configuring IP Addresses for Interfaces

Assigning anIP address to a device on a network enables the device to communicate with the

other deviceson the network.

1.3 Configuring IP Address Negotiation on Interfaces

If users access the network in the Point-to-Point Protocol (PPP) mode, the server can assign IP

addresses to the clients through the address negotiation function of PPP.

1.4 Configuring IP Address Unnumbered for Interfaces

IP address unnumbered refers to the situation that an interface that is not assigned an IP address

obtains an IPaddress by borrowing an IPaddress from another interface.

1.5 Maintaining IP Addresses

Maintaining an IP address involves monitoring the operation of this IP address.

1.6 Configuration ExamplesThis section includes the networking requirements, precautions for configuration, and

configuration roadmap.


Configuration Guide - IP Services 1 IP Addresses Configuration



1


15/308

1.1 IP Addresses Overview

An IP address is also called a logical address. The IP address of a network device on the Internet

is the unique identifier of the network device.

1.1.1 Introduction to IP Addresses

IP is the core of the TCP/IP protocol suite. The packets of the Transmission Control Protocol

(TCP), User Datagram Protocol (UDP), Internet Control Message Protocol (ICMP), and Internet

Group Membership Protocol (IGMP) are all transmitted in the format of IP datagrams. Devices

on different networks communicate with each other using their network layer addresses, namely

IP addresses.

To communicate with each other on Internet Protocol (IP) networks, each host must be assigned

an IP address.

An IP address is a 32-bit number that is composed of two parts, namely, the network ID and

host ID.

The network ID identifies a network and the host ID identifies a host on the network. If the

network IDs of hosts are the same, it indicates that the hosts are on the same network regardless

of their physical locations.

1.1.2 Features of IP Addresses Supported by the NE80E/40E

IP addresses can be obtained through static manual configuration, auto-negotiation, or

borrowing.

The NE80E/40E supports IP address configuration through the following methods:

l Manually configuring an IP address for an interface

l Obtaining an IP address through negotiation

l Borrowing an IP address from other interfaces

The NE80E/40E supports the space overlapping of network segment addresses to save the

address space.

l Different IP addresses in the overlapped network segments but not same can be configured

on different interfaces of the same device. For example, after an interface on a device isconfigured with the IP address 20.1.1.1/16, if another interface is configured with the IP

address 20.1.1.2/24, the system prompts a message. However, the configuration is still

successful; if another interface is configured with the IP address 20.1.1.2/16, the system

prompts an IP address conflict. The configuration fails.

l The primary IP address and the secondary IP address in the overlapped network segments

but not same can be configured on the same interface. For example, after the interface is

configured with a primary IP address 20.1.1.1/24, if the secondary IP address is 20.1.1.2/16

sub, the system prompts a message. However, the configuration is still successful.

l The primary IP address and the secondary IP address in the overlapped network segments

but not same can be configured on different interfaces of the same device. However, the

primary IP address and the secondary IP address cannot be the same. For example, after aninterface on a device is configured with the IP address 20.1.1.1/16, if another interface is





2


16/308

configured with the IP address 20.1.1.2/24 sub, the system prompts a message. However,

the configuration is still successful.

The NE80E/40E supports 31-bit IP address masks. Therefore, there are only two IP addresses

in a network segment, that is, the network address and broadcast address. The two IP addresses

can be used as host addresses.

You can assign the IP addresses with 31-bit masks to Point-to-Point (P2P), Point-to-Multipoint

(P2MP), NBMA Address Resolution Protocol (NBMA),broadcast, and loopback interfaces. For

non-P2P interfaces, if a 31-bit mask is configured, the system prompts acknowledgement

information to protect P2MP orbroadcast links. For example, if an Ethernet interface on a device

is assigned an IP address with a 31-bit mask, this device can access only the host in the directly

connected subnet. It cannot access all hosts in the subnet. In the backbone network of a broadcast

link, if a P2P link exists, you can configure the IP addresses with 31-bit masks.

1.2 Configuring IP Addresses for InterfacesAssigning an IP address to a device on a network enables the device to communicate with the

other devices on the network.

1.2.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and

configuration procedure for assigning an IP address to an interface.

Applicable Environment

To start IP services on an interface, configure the IP address for the interface. You can assign

several IP addresses to each interface. Among them, one is the primary IP address and the others

are secondary IP addresses.

Generally, you need to configure only a primary IP address for an interface. Secondary IP

addresses, however, are required in some cases. For instance, when a device connects to a

physical network through an interface, and computers on this network belong to two Class C

networks, you need to configure a primary IP address and a secondary IP address for this interface

to ensure that the device can communication with all computers on this network.

Pre-configuration TasksBefore configuring an IP addresses for an interface, complete the following tasks:

l Configuring the physical parameters for the interface and ensuring that the physical layer

status of the interface is Up

l Configuring the link layer parameters for the interface and ensuring that the status of the

link layer protocol on the interface is Up

Data Preparation

To configure IP addresses for an interface, you need the following data.





3


17/308

No. Data

1 Interface number

2 Primary IP address and subnet mask of the interface

3 (Optional) Secondary IP address and subnet mask of the interface

1.2.2 Configuring a Primary IP Address for an Interface

An interface can have only one primary IP address.

Procedure

Step 1 Run:system-view

The system view is displayed.

Step 2 Run:interfaceinterface-type interface-number

The interface view is displayed.

Step 3 Run:ip addressip-address{ mask| mask-length}

A primary IP address is configured.

An interface has only one primary IP address. If the interface already has a primary IP address,

the newly configured primary IP address replaces the original one.

----End

1.2.3 (Optional) Configuring a Secondary IP Address for anInterface

To enable an interface to communicate with several networks with different network IDs, you

need to assign a secondary IP address to this interface.

Procedure





Step 3 Run:ip addressip-address{ mask| mask-length} sub





4
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


18/308

A secondary IP address is configured.

A secondary IP address with a 31-bit mask can be configured for an interface.

You can configure a maximum of 255 secondary IP addresses on an interface.

----End

1.2.4 Checking the Configuration

You can view the configuration of the IP address for an interface.

Prerequisite

The configurations of the IP addresses for the interface are complete.

Procedure

l Run the display ip interface[ brief] [ interface-type [ interface-number] ] command tocheck the IP configuration on the interface.

l Run the display interface[ interface-type[ interface-number] ] command to check

interface information.

----End

Example

Run the display ip interfacecommand to check that the physical status and link protocol status

of the interface are Up.

display ip interface brief gigabitethernet 1/1/0*down: administratively down!down: FIB overload down(l): loopback

(s): spoofing

Interface IP Address/Mask Physical Protocol

GigabitEthernet1/1/0 172.16.13.2/24 up up

Run the display interfacecommand to check information about the IP address and subnet mask

of the interface.

display interface gigabitethernet 1/1/0GigabitEthernet1/1/0 current state : UPLine protocol current state : UP

Last line protocol up time : 2010-06-22, 19:33:19

Description : GigabitEthernet1/1/0 Interface

The Maximum Transmit Unit is 1500 bytesInternet Address is 172.16.13.2/24

Internet Address is 172.16.13.150/25 Sub

Internet Address is 172.16.13.200/28 Sub

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc08-2b73Media type is twisted pair, loopback not set, promiscuous mode not set

100Mbps-speed mode, full-duplex mode, link type is autonegotiation

Current system time: 2010-06-29 20:26:18 Last 300 seconds input rate 338 bits/sec, 0 packets/sec

Last 300 seconds output rate 514 bits/sec, 0 packets/sec

Input: 1065 packets, 1571513 bytes

0 broadcasts, 1065 multicasts 0 errors, 0 runts, 0 giants,

0 CRC, 0 collisions, 0 align errors,

0 other errors

Output:2866 packets, 2708571 bytes 0 broadcasts, 2866 multicasts





5
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


19/308

0 errors, 0 underruns, 0 collisions

0 packets had been deferred

1.3 Configuring IP Address Negotiation on Interfaces

If users access the network in the Point-to-Point Protocol (PPP) mode, the server can assign IP

addresses to the clients through the address negotiation function of PPP.

Context

NOTE

IP Address Negotiation on Interfaces cannot be configured on the X1 and X2 models of the NE80E/40E.



configuration procedure for configuring IP address negotiation for an interface.


When devices are connected through the PPP link, the client interface can obtains the IP address

from the server through PPP negotiation. This is usually applicable to the situation when the

client connects to the Internet Service Provider (ISP) to access the Internet through the PPP link

such as dial-up. In this case, the ISP device assigns an IP address to the client through PPP

negotiation.

Pre-configuration Tasks

Before configuring IP addresses for interfaces through PPP negotiation, complete the following

tasks:

l Configuring physical parameters of the interface and the link layer protocol PPP on the

server

l Configuring IP addresses for interfaces on the server and making the link layer protocol

Up

l Configuring physical parameters on the interface and the link layer protocol PPP on the

client

Data Preparation

To configure IP addresses for interfaces through PPP negotiation, you need the following data.

No. Data

1 Number of the interface connecting the server to the client

2 ID of the address pool on the server or IP address assigned to the client

3 Range of IP addresses when an address pool is used

4 Number of the interface connecting the client to the server





6


20/308

1.3.2 Configuring a Server to Assign an IP Address for a ClientThrough Negotiation

After being assigned an IP address pool or an IP address, the server can assign IP addresses to

the clients.

Procedure



NOTE

If there is only one client, the address pool is unnecessary. In this case, skip Steps 2, 3, and 4, and do not

use the keyword poolin Step 6. Instead, directly assign the specified IP address to the client.

Step 2 (Optional) Run:aaa

The AAA view is displayed.

Step 3 (Optional) Run:ip poolpool-numberstart-address[ end-address]

The local IP address pool is configured.

Step 4 (Optional) Run:quit

Quit the AAA view.



Obtaining an IP address through negotiation is applied to only the interface encapsulated with

PPP.

Step 6 Run:

remote address{ ip-address|pool[pool-number] }

An IP address is assigned to the client.

Step 7 Run:restart

The interface is restarted.

----End

Follow-up Procedure

During preceding configurations, the address pool can also be configured in the domain view.For details, see the HUAWEI NetEngine80E/40E Router Configuration Guide - Security.





7
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


21/308

l If the server authenticates the client, the address is selected from the address pool of the

domain that the client belongs to by default.

l If the server does not authenticate the client and needs to assign an IP address to the client,

the address is selected from the system address pool.

The IP address or the address pool assigned to the peer must differ from the IP address of the

local device.

1.3.3 Configuring a Client to Obtain an IP Address ThroughNegotiation

After interface IP address negotiation is enabled on a client, the client can obtain an IP address

from the server.

Procedure





Obtaining an IP address through negotiation is applied to only the interface encapsulated with

PPP.

Step 3 Run:ip address ppp-negotiate

The client is configured to obtain an IP address through negotiation.

----End

Follow-up Procedure

If an interface without an IP address supports PPP while the remote peer is configured with an

IP address, enable IP address negotiation on the local interface. This enables the local interface

to obtain an IP address that is generated through PPP negotiation and is assigned by the remote

peer.

When you configure to obtain an IP address through negotiation on the interface, note the

following:

l You can configure IP address negotiation on only the PPP-encapsulated interface. When

the status of the PPP protocol is Down, the IP address generated through negotiation is

deleted.

l After IP address negotiation is configured on the interface, the configuration of IP address

for this interface is not needed any more. You can obtain a new IP address through

negotiation, and the original IP address configured before the IP address negotiation is

deleted.

l

You cannot configure a secondary IP address for the interface configured with IP addressnegotiation.





8
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


22/308

l If you re-configure negotiation on this interface, the IP address generated through the

previous negotiation is deleted and a new IP address is obtained.

l If the address generated through negotiation is deleted, the interface is in the non-address

state.


You can view the configuration of interface IP address negotiation.

Prerequisite

The configurations of IP address negotiation on interfaces are complete.

Procedure

l Run the display ip interface[ brief] [ interface-type interface-number] command to check

the IP configuration on the interface.



----End

Example

Run the display ip interfacecommand to check that the physical status and link protocol status

of the interface are Up.

display ipinterface briefgigabitethernet 1/1/0*down: administratively down

!down: FIB overload down(l): loopback

(s): spoofing

Interface IP Address/Mask Physical Protocol

GigabitEthernet1/1/0 192.168.1.10/24 up up

Run the display interfacecommand to check information about the IP address and subnet mask

of the interface.

display interface pos 1/0/0Pos1/0/0 current state : UPLine protocol current state : UPLast line protocol up time : 2010-06-22 19:33:19Description : Pos1/0/0 Interface

Route Port,The Maximum Transmit Unit is 4470 bytes, Hold timer is 10(sec)

Internet Address is 192.168.1.10/24Link layer protocol is PPPLCP opened, IPCP opened

The Vendor PN is FTRJ1321P1BTL

Port BW: 2.5G, Transceiver max BW: 2.5G, Transceiver Mode: SingleMode

WaveLength: 1310nm, Transmission Distance: 5kmRx Power: -6.38dBm, normal range: [-23.97, 0.75]dBm

Tx Power: -5.72dBm, normal range: [-13.49, 1.00]dBm

Physical layer is Packet Over SDHScramble enabled, clock master, CRC-32, loopback: none

Flag J0 "NetEngine "


Flag C2 22(0x16)Last physical up time : 2010-06-21 14:56:32

Last physical down time : 2010-06-21 14:56:31

Current system time: 2010-06-29 20:26:18

SDH alarm: section layer: none





9


23/308

line layer: none

path layer: none

SDH error: section layer: B1 61575

line layer: B2 12002824 REI 16835916

path layer: B3 65535

Statistics last cleared:never Last 300 seconds input rate 16 bits/sec, 0 packets/sec



Input error: 0 shortpacket, 0 longpacket, 4 CRC, 0 lostpacket Output: 7270 packets, 344198 bytes

Output error: 0 lostpackets

Output error: 0 overrunpackets, 0 underrunpackets

1.4 Configuring IP Address Unnumbered for Interfaces

IP address unnumbered refers to the situation that an interface that is not assigned an IP address

obtains an IP address by borrowing an IP address from another interface.



configuration procedure for configuring IP address unnumbered.


To save IP address resources in some cases, configure the IP address unnumbered on the

interface. You can also perform this configuration for an interface that is occasionally used rather

than making the interface occupy an IP address constantly.

Restrictions on configuring IP address unnumbered on an interface are as follows:

l The interface of IP address borrower can not be an Ethernet interface.

l The interface of IP address lender cannot be IP address from other.

l Multiple interfaces can borrow the IP address from the interface of IP address lender.

l If the interface of IP address lender has multiple IP addresses, the IP address lender can

only be the primary IP address.

l If the interface of IP address borrower borrows an IP address from the interface with no IP

address, the IP address borrower gets the IP adderss 0.0.0.0.

l The IP address of the virtual loopback interface can be borrowed by other interfaces. Theloopback interface, however, cannot borrow the IP address from other interfaces.

Pre-configuration Tasks

Before configuring IP address unnumbered on an interface, complete the following tasks:

l Configuring physical attributes for the IP address borrower and lender

l Configuring link layer protocols for the IP address borrower and lender

Data Preparation

To configure IP address unnumbered on an interface, you need the following data.





10


24/308

No. Data

1 Number, IP address, and mask of the interface that lends the IP address to other

interfaces

2 Number of the interface that borrows an IP address from another interface

NOTE

The configuration here only describes how to configure an unnumbered interface to borrow an IP address.

Dynamic routing protocols cannot be enabled on an interface without an IP address. Therefore, you need

to manually configure a static route to the remote network segment to realize communication between

devices.

1.4.2 Configuring the Primary IP Address of the Interface That

Lends an IP AddressOnly the primary IP address of an interface can be borrowed.

Procedure



Step 2 Run:

interfaceinterface-type interface-number


Step 3 Run:ip addressip-address{ mask| mask-length}

The primary IP address of the interface is configured.

An interface can also obtain the primary IP address through PPP negotiation.

----End

1.4.3 Configuring an Interface That Borrows an IP Address fromAnother Interface

An Ethernet interface cannot borrow the IP address of another interface.

Procedure








11
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


25/308


Step 3 Run:ip address unnumberedinterfaceinterface-type interface-number

The interface is configured to borrow an IP address from the specified interface.

The ATM interface, tunnel interface, and the interface encapsulated with frame relay, PPP or

HDLC can borrow the IP address from an Ethernet interface or other interfaces.

----End


You can view the borrowed IP address of an interface.

Prerequisite

The configurations of IP address unnumbered are complete.

Procedure

l Run the display ip interface[ brief] [ interface-type[ interface-number] ] command to

check the IP configuration on the interface.



----End

Example

Run the display ip interfacecommand. If the physical status and link protocol status of the

interface are Up, it means that the configuration succeeds.

Run the display interfacecommand. If information about the IP address and mask of the

interface is displayed, it means that the configuration succeeds. For example:

display interface pos 6/0/0Pos6/0/0 current state : UP

Line protocol current state : UP

Last line protocol up time : 2010-06-2219:33:19

Description: Pos6/0/0 InterfaceRoute Port,The Maximum Transmit Unit is 4470, Hold timer is 10(sec)

Internet Address is unnumbered, using address of GigabitEthernet3/0/9(120.1.1.1/

24)

Link layer protocol is PPPLCP opened, IPCP opened

The Vendor PN is FTRJ1321P1BTL

Port BW: 2.5G, Transceiver max BW: 2.5G, Transceiver Mode: SingleMode

WaveLength: 1310nm, Transmission Distance: 5kmRx Power: -6.38dBm, normal range: [-23.97, 0.75]dBm

Tx Power: -5.72dBm, normal range: [-13.49, 1.00]dBm

Physical layer is Packet Over SDHScramble enabled, clock master, CRC-32, loopback: none



Flag C2 22(0x16)Last physical up time : 2010-06-21 14:56:32

Last physical down time : 2010-06-21 14:56:31

Current system time: 2010-06-29 20:26:18

SDH alarm: section layer: none





12


26/308

line layer: none

path layer: none

SDH error: section layer: B1 0

line layer: B2 0 REI 1370245

path layer: B3 0 REI 56395

Statistics last cleared:never Last 300 seconds input rate 24 bits/sec, 0 packets/sec



Input error: 2 shortpacket, 0 longpacket, 1 CRC, 0 lostpacket Output: 1421 packets, 23150 bytes

Output error: 0 lostpackets

Output error: 0 overrunpackets, 0 underrunpackets

1.5 Maintaining IP Addresses

Maintaining an IP address involves monitoring the operation of this IP address.

1.5.1 Monitoring Network Operation Status of IP Addresses

This section describes IP address monitoring through the display command.

Context

In routine maintenance, you can run the following commands in any view to check the operation

of IP addresses.

Procedurel Run the display ip interface[ brief] [ interface-type[ interface-number] ] command in

any view to check the IP address configuration on the interface.

l Run the display interface[ interface-type[ interface-number] ] command in any view to

check information about the interface.

----End

1.6 Configuration Examples

This section includes the networking requirements, precautions for configuration, andconfiguration roadmap.

Context

NOTE

This document takes interface numbers and link types of the NE40E-X8 as an example. In working

situations, the actual interface numbers and link types may be different from those used in this document.

1.6.1 Example for Configuring Primary and Secondary IP Addresses

This part describes how to configure a primary IP address and a secondary IP address for aninterface.





13
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


27/308

Networking Requirements

As shown in Figure 1-1, GE 1/0/1 of the device connects to a LAN in which computers belong

to one of the two network segments: 172.16.1.0/24 and 172.16.2.0/24. It is required that the

device can communicate with the two network segments. At the same time, the hosts of the two

network segments cannot communicate with each other.

Figure 1-1Configuring primary and secondary IP addresses for an interface

Router172.16.1.0/24

172.16.2.0/24

GE1/0/1

172.16.1.1/24

172.16.2.1/24 sub

Configuration Roadmap

The configuration roadmap is as follows:

1. Analyze the address of the network segment to which the interface connects.

2. Configure the primary IP address for the interface and then configure one or more secondary

IP addresses for the interface.

NOTE

The primary IP address and the secondary IP address in the overlapped network segments but not same

can be configured on the same interface. The secondary IP addresses of an interface cannot be in the same

network segment.

Data Preparation

To complete the configuration, you need the following data:

l Primary IP address and subnet mask of the interface

l Secondary IP address and subnet mask of the interface

Procedure

Step 1 Configure the device.

# Configure the primary and secondary IP addresses for GE 1/0/1 of the device.

system-view[HUAWEI]sysname Router

[Router]interface gigabitethernet 1/0/1[Router-GigabitEthernet1/0/1]ip address 172.16.1.1 255.255.255.0





14


28/308

[Router-GigabitEthernet1/0/1]ip address 172.16.2.1 255.255.255.0 sub[Router-GigabitEthernet1/0/1]undo shutdown[Router-GigabitEthernet1/0/1]quit

Step 2 Verify the configuration.

# Ping the host on the network segment 172.16.1.0 from the device. The ping succeeds.

[Router]ping 172.16.1.2 PING 172.16.1.2: 56 data bytes, press CTRL_C to break

Reply from 172.16.1.2: bytes=56 Sequence=1 ttl=128 time=25 ms

Reply from 172.16.1.2: bytes=56 Sequence=2 ttl=128 time=27 ms Reply from 172.16.1.2: bytes=56 Sequence=3 ttl=128

configuration guide - ip services(v600r003c00_02)

Documents