Divecenter - Lurin

VERIFICACION DE LA CONFIGURACION
SHOW RUNNING:
[rDivecenter_Centro_Dist_Lurin-Vlanif50]display current-configuration
[V200R007C00SPCb00]
#
sysname rDivecenter_Centro_Dist_Lurin
command-privilege level 1 view cli_8f display current-configuration
#
clock timezone GMT minus 05:00:00
#
vlan batch 10 20 30 40 50 80 100
#
lldp enable
#
dhcp enable
#
ip vpn-instance 100
description VPN VIDEO
ipv4-family
route-distinguisher 64516:100
#
hwtacacs-server template Claro_aaa
hwtacacs-server authentication 172.19.216.47 weight 80
hwtacacs-server authorization 172.19.216.47 weight 80
hwtacacs-server accounting 172.19.216.47 weight 80
hwtacacs-server source-ip 10.234.194.4
hwtacacs-server shared-key cipher %^
%#S9pgEJ(e>N34tC;Idy,7"ye)&qy6D>PSUq)wc(<+%^%#
undo hwtacacs-server user-name domain-included
#
pki realm default
enrollment self-signed
#
ssl policy default_policy type server
pki-realm default
#
acl number 3001
acl number 3002
rule 0 permit ip destination 10.1.0.0 0.0.255.255
rule 1 permit ip destination 192.100.100.5 0
acl number 3003
rule 0 permit ip source 192.168.72.128 0.0.0.63
acl name VIDEO 3005
rule 0 permit ip source 192.168.181.160 0.0.0.31
#
traffic classifier cs1 operator or
if-match dscp cs1
if-match dscp cs5
traffic classifier P3_VRF100 operator or
if-match dscp cs5
if-match acl VIDEO
traffic classifier P3 operator or
if-match dscp cs5
if-match acl 3003
if-match acl 3001
if-match dscp cs1
if-match dscp cs2
traffic classifier cs5_VRF100 operator or
if-match dscp cs5
if-match dscp cs2
if-match acl 3002
#
traffic behavior cs1
queue af bandwidth 4096
statistic enable
car cir 2048 pir 2048 cbs 384000 pbs 768000 mode color-blind green pass
yellow discard red discard
queue ef bandwidth 2048 cbs 51200
statistic enable
traffic behavior P3_VRF100
remark dscp cs5
statistic enable
traffic behavior P3
remark dscp cs5
statistic enable
traffic behavior P1
remark dscp cs1
statistic enable
queue af bandwidth 4096
car cir 4096 pir 4096 cbs 768000 pbs 1536000 mode color-blind green
pass yellow pass remark-dscp cs1 red pass remark-dscp cs1
statistic enable
traffic behavior Shape2048_VRF100
gts cir 2048 cbs 51200 queue-length 100
traffic-policy wan_VRF100
statistic enable
traffic behavior default
remark dscp cs1
traffic behavior default_VRF100
remark dscp cs5
statistic enable
traffic behavior Shape10240
gts cir 10240 cbs 256000 queue-length 100
traffic-policy wan
statistic enable
traffic behavior cs5_VRF100
car cir 2048 pir 2048 cbs 384000 pbs 768000 mode color-blind green pass
yellow pass red discard
queue ef bandwidth 2048 cbs 51200
statistic enable
traffic behavior P2
remark dscp cs2
statistic enable
#
traffic policy wan_VRF100
classifier cs5 behavior cs5
traffic policy SetDscpLan
classifier P1 behavior P1
classifier default-class behavior default
traffic policy SetDscpLan_VRF100
classifier P3_VRF100 behavior P3_VRF100
classifier default-class behavior default_VRF100
traffic policy Shape2048_VRF100
classifier default-class behavior Shape2048_VRF100
traffic policy wan
traffic policy Shape10240
classifier default-class behavior Shape10240
#
aaa
authentication-scheme default
authentication-scheme radius
authentication-mode radius
authentication-scheme hwtacacs
authentication-mode hwtacacs local
authorization-scheme default
authorization-scheme hwtacacs
authorization-mode hwtacacs local
accounting-scheme default
accounting-scheme hwtacacs
accounting-mode hwtacacs
accounting start-fail online
domain default
domain default_admin
hwtacacs-server Claro_aaa
domain default_domain
hwtacacs-server Claro_aaa
domain default_aaa
authentication-scheme radius
local-user admin password irreversible-cipher %^%#:
%/&I&pALY)>6LVvI.OAza/p;xa7wMQ.P8XYFjD0#t4M6h:~NKG.Q1H*d8OB%^
%#
local-user admin privilege level 15
local-user admin service-type terminal http
local-user huawei password irreversible-cipher %^%#k@D&#-
cG~83jJ0~lVYT2&U.|+TbT=Nbnq3;@[HRJjQ^S%_q_T&Id7{;/gGq.%^%#
local-user huawei privilege level 15
local-user huawei ftp-directory flash:
local-user huawei service-type telnet ssh
#
firewall zone Local
priority 16
#
interface Vlanif1
#
interface Vlanif10
description INTERFACE LAN DATOS DEVICENTER S.A.C
set flow-stat interval 10
ip address 192.168.72.3 255.255.255.128
vrrp vrid 10 virtual-ip 192.168.72.1
vrrp vrid 10 priority 250
vrrp vrid 10 preempt-mode timer delay 20
vrrp vrid 10 track interface GigabitEthernet0/0/4 reduced 80
vrrp vrid 10 track interface GigabitEthernet0/0/4.10 reduced 80
ip netstream inbound
ip netstream outbound
traffic-policy SetDscpLan inbound
#
interface Vlanif20
description VOZ
ip address 192.168.72.132 255.255.255.192
#
interface Vlanif30
description WIFI
ip address 192.168.72.195 255.255.255.192
#
interface Vlanif40
description WIFI_CDLURIN
ip address 192.168.94.3 255.255.255.0
#
interface Vlanif50
description ENLACE CONTINGENCIA
ip address 172.20.51.3 255.255.255.0
#
interface Vlanif80
description Enlace LAN CMARAS y MONITOREO 2 Mbps CID 7822044 ::
DIVECENTER S.A.C SEDE LURIN - RPV FULL MESH ACCESO 2Mbps
ip binding vpn-instance 100
ip address 192.168.181.161 255.255.255.224
traffic-policy SetDscpLan_VRF100 inbound
#
interface Vlanif100
description Administracion
ip address 192.168.93.14 255.255.255.0
#
interface GigabitEthernet0/0/0
port link-type access
port default vlan 80
#
#
port link-type access
port default vlan 10
#
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
description Enlace WAN Sede Centro De Distribucion
undo negotiation auto
#
interface GigabitEthernet0/0/4.10
description Enlace WAN CID:1564075 - RPV 10 Mbps Sede Central De
Distribucion
bandwidth 10250
dot1q termination vid 903
ip address 10.18.8.154 255.255.255.252
traffic-policy Shape10240 outbound
statistic enable inbound
statistic enable outbound
#
interface GigabitEthernet0/0/4.20
description Enlace WAN CAMARAS y MONITOREO 2 Mbps CID 7822044 ::
DIVECENTER S.A.C SEDE LURIN - RPV FULL MESH ACCESO 2Mbps
bandwidth 2049
dot1q termination vid 716
ip binding vpn-instance 100
ip address 10.18.56.66 255.255.255.252
traffic-policy Shape2048_VRF100 outbound
statistic enable inbound
statistic enable outbound
#
description VirtualPort
ip address dhcp-alloc
#
interface Cellular0/0/0
#
interface NULL0
#
interface LoopBack0
description LOOPBACK DE GESTION
ip address 10.234.194.4 255.255.255.255
#
interface LoopBack10
description LOOPBACK DE MRA
ip address 172.28.184.172 255.255.255.255
#
bgp 64516
router-id 10.234.194.4
peer 192.168.72.4 as-number 65200
peer 192.168.72.4 description Enlace router contingencia
peer 192.168.72.4 connect-interface Vlanif10
group LAN_iBGP internal
peer LAN_iBGP timer keepalive 10 hold 30
peer LAN_iBGP timer connect-retry 30
group WAN_CLIENTE external
peer WAN_CLIENTE as-number 12252
peer WAN_CLIENTE timer keepalive 10 hold 30
peer WAN_CLIENTE timer connect-retry 30
peer WAN_CLIENTE password simple #14%&/=
peer 10.18.8.153 as-number 12252
peer 10.18.8.153 group WAN_CLIENTE
peer 10.18.8.153 description Enlace WAN RPV
#
ipv4-family unicast
undo synchronization
network 10.234.194.4 255.255.255.255
network 192.168.72.0 255.255.255.128
network 192.168.72.128 255.255.255.192
network 192.168.72.192 255.255.255.192
network 192.168.93.0
network 192.168.93.0 255.255.255.128
network 192.168.94.0
peer 192.168.72.4 enable
peer LAN_iBGP enable
peer LAN_iBGP route-policy LOCAL_IN import
peer LAN_iBGP route-policy LOCAL_OUT export
peer LAN_iBGP next-hop-local
peer LAN_iBGP advertise-community
peer WAN_CLIENTE enable
peer WAN_CLIENTE route-policy RECIBIR_REDES import
peer WAN_CLIENTE route-policy ENVIAR_REDES export
peer WAN_CLIENTE advertise-community
peer 10.18.8.153 enable
peer 10.18.8.153 group WAN_CLIENTE
#
ipv4-family vpn-instance 100
network 192.168.181.160 255.255.255.224
peer 10.18.56.65 as-number 12252
peer 10.18.56.65 password simple D@33&&R
#
route-policy ENVIAR_REDES permit node 10
description Envio de Redes LAN RPVL
if-match ip-prefix Red_LAN
apply community 12252:1200
#
route-policy RECIBIR_REDES deny node 10
description Denegacion de Redes LAN Internas
if-match ip-prefix Red_LAN
#
route-policy RECIBIR_REDES permit node 20
description Permitir las demas Redes de Sedes Remotas
if-match ip-prefix Redes_All
#
route-policy LOCAL_IN permit node 10
if-match ip-prefix Permitir_Redes
apply local-preference 90
#
route-policy LOCAL_OUT permit node 10
if-match ip-prefix Red_LAN_to_ENTEL
#
snmp-agent local-engineid 800007DB03C4FF1FA09C4D
snmp-agent community read %^%#~&mWHd$!j9fbpqQemH9CYpdlVbO<w
%cO}i~tM1sX)1W&ASun$(J<)J'*bjy.zY+J@QYT(<JUJy:;piJ!%^%#
snmp-agent sys-info version v2c
snmp-agent target-host trap-hostname mraClaro address 172.28.129.35
udp-port 162 trap-paramsname mraClaro
snmp-agent target-host trap-paramsname 172.28.129.35 v2c
securityname %^%#$+I{(;u/$~9X-S!s~{[DKn5r8v<,aMyfhpRWDNsU%^%#
snmp-agent trap source LoopBack10
snmp-agent trap enable
snmp-agent
#
ssh client first-time enable
stelnet server enable
telnet server enable
#
http secure-server ssl-policy default_policy
http server enable
http secure-server enable
#
ip ip-prefix Red_LAN index 10 permit 10.234.194.4 32
ip ip-prefix Redes_All index 10 permit 0.0.0.0 0 less-equal 32
ip ip-prefix Permitir_Redes index 10 permit 0.0.0.0 0 less-equal 32
ip ip-prefix Red_LAN_to_ENTEL index 20 permit 192.168.72.0 25
#
ip route-static 172.28.129.32 255.255.255.224 10.18.8.153 preference 1
#
ip netstream timeout active 1
ip netstream timeout inactive 20
ip netstream export source 172.28.184.172
ip netstream export host 172.28.129.62 9996
ip netstream export version 9
#
fib regularly-refresh disable
#
user-interface con 0
authentication-mode password
set authentication password cipher %^%#30SVXxe-=Wcwq{M9FSeQ~s-g-
9ty,MoU<}=fSmQN*/iwYP8>r+fbJ|-@o%J8%^%#
user-interface vty 0 4
authentication-mode aaa
user privilege level 15
#
wlan ac
#
ops
#
autostart
#
return
[rDivecenter_Centro_Dist_Lurin-Vlanif50]
SHOW VERSION:
SHOW FLASH:
SHOW CDP:
SHOW INVENTORY
VERIFICACION DE CONECTIVIDAD:
SHOW IP ROUTE:
<rDivecenter_Centro_Dist_Lurin>
<rDivecenter_Centro_Dist_Lurin>dis
<rDivecenter_Centro_Dist_Lurin>display ip ro
<rDivecenter_Centro_Dist_Lurin>display ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
Destinations : 392 Routes : 392
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 EBGP 255 0 D 10.18.8.153 GigabitEthernet0/0/4.10

10.18.8.152/30 Direct 0 0 D 10.18.8.154 GigabitEthernet0/0/4.10
10.234.194.4/32 Direct 0 0 D 127.0.0.1 LoopBack0
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
172.20.51.0/24 Direct 0 0 D 172.20.51.3 Vlanif50
172.20.51.1/32 Direct 0 0 D 127.0.0.1 Vlanif50
172.20.51.3/32 Direct 0 0 D 127.0.0.1 Vlanif50
172.20.51.255/32 Direct 0 0 D 127.0.0.1 Vlanif50
172.28.129.32/27 Static 1 0 RD 10.18.8.153 GigabitEthernet0/0/4.10
172.28.184.172/32 Direct 0 0 D 127.0.0.1 LoopBack10
192.168.72.0/25 Direct 0 0 D 192.168.72.3 Vlanif10
192.168.72.1/32 Direct 0 0 D 127.0.0.1 Vlanif10
192.168.72.3/32 Direct 0 0 D 127.0.0.1 Vlanif10
192.168.72.127/32 Direct 0 0 D 127.0.0.1 Vlanif10
192.168.72.128/26 Direct 0 0 D 192.168.72.132 Vlanif20
192.168.72.129/32 Direct 0 0 D 127.0.0.1 Vlanif20
192.168.72.132/32 Direct 0 0 D 127.0.0.1 Vlanif20
192.168.72.191/32 Direct 0 0 D 127.0.0.1 Vlanif20
192.168.72.192/26 Direct 0 0 D 192.168.72.195 Vlanif30
192.168.72.193/32 Direct 0 0 D 127.0.0.1 Vlanif30
192.168.72.195/32 Direct 0 0 D 127.0.0.1 Vlanif30
192.168.72.255/32 Direct 0 0 D 127.0.0.1 Vlanif30
192.168.93.0/24 Direct 0 0 D 192.168.93.14 Vlanif100
192.168.93.1/32 Direct 0 0 D 127.0.0.1 Vlanif100
192.168.93.14/32 Direct 0 0 D 127.0.0.1 Vlanif100
192.168.93.255/32 Direct 0 0 D 127.0.0.1 Vlanif100
192.168.94.0/24 Direct 0 0 D 192.168.94.3 Vlanif40
192.168.94.1/32 Direct 0 0 D 127.0.0.1 Vlanif40
192.168.94.3/32 Direct 0 0 D 127.0.0.1 Vlanif40
192.168.94.255/32 Direct 0 0 D 127.0.0.1 Vlanif40
PING WAN:
[rDivecenter_Centro_Dist_Lurin]
[rDivecenter_Centro_Dist_Lurin]ping -c 30 -s 1500 -m 1 10.18.8.153
PING 10.18.8.153: 1500 data bytes, press CTRL_C to break
Reply from 10.18.8.153: bytes=1500 Sequence=1 ttl=255 time=4 ms
Request time out
--- 10.18.8.153 ping statistics ---

30 packet(s) transmitted
29 packet(s) received
3.33% packet loss
round-trip min/avg/max = 3/4/10 ms
PING LAN:
PING LAN TO LAN:

PRUEBAS DE SATURACION:
SHOW POLICY-MAP INTERFACE WAN (aplica solo para RPV)

COS1:
COS2:
SHOW POLICY-MAP INTERFACE WAN (aplica solo para RPV)
COS1:
COS2:
SHOW ACCESS-LIST: (aplica solo para RPV)
SHOW INTERFACE:
WAN:
LAN:
Interface: GigabitEthernet0/0/4.10
-------------------------------------------------------------------------------
Classifier: default-class
Behavior: Shape10240
Nest Policy: wan
-------------------------------------------------------------------------------
Classifier: cs1 operator or
Behavior: cs1
Item Sum(Packets/Bytes) Rate(pps/bps)
------------------------------------------------------------------------------
Matched 33,100/7,605,475 29/52,864
Passed 33,100/7,605,475 29/52,864
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Queue Matched 33,100/7,605,475 29/52,864
Enqueued 33,100/7,605,475 29/52,864
Discarded 0/0 0/0
CAR 0/0 0/0
Green packets 0/0 0/0
Yellow packets 0/0 0/0
Red packets 0/0 0/0
Behavior: cs2
------------------------------------------------------------------------------
Matched 23,888/5,275,301 25/40,808
Passed 23,888/5,275,301 25/40,808
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Queue Matched 23,888/5,275,301 25/40,808
Enqueued 23,888/5,275,301 25/40,808
Discarded 0/0 0/0
CAR 21,864/5,068,511 23/39,160
Green packets 21,864/5,068,511 23/39,160
Red packets 0/0 0/0
Behavior: cs5
------------------------------------------------------------------------------
Matched 413/34,692 1/256
Passed 413/34,692 1/256
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Queue Matched 413/34,692 1/256
Enqueued 413/34,692 1/256
Discarded 0/0 0/0
CAR 413/34,692 1/256
Green packets 413/34,692 1/256
Red packets 0/0 0/0
Behavior:Be
------------------------------------------------------------------------------
Queue Matched 2,018/395,404 1/3,192
Enqueued 2,018/395,404 1/3,192
Discarded 0/0 0/0
[rDivecenter_Centro_Dist_Lurin]display traffic policy statistics interface
Vlanif1 inbound verbose classifier-base
Error: The Policy is not applied in this view.
[rDivecenter_Centro_Dist_Lurin]display traffic policy statistics interface
Vlanif10 inbound verbose classifier-base
Interface: Vlanif10
Traffic policy inbound: SetDscpLan
Rule number: 26
Current status: OK!
Classifier: P1 operator or
Behavior: P1
------------------------------------------------------------------------------
Matched 22/2,075 0/0
Passed 22/2,075 0/0
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Queue Matched 0/0 0/0
Enqueued 0/0 0/0
Discarded 0/0 0/0
CAR 0/0 0/0
Red packets 0/0 0/0
Behavior: P2
------------------------------------------------------------------------------
Matched 240,394/42,305,732 27/45,608
Passed 240,394/42,305,732 27/45,608
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Enqueued 0/0 0/0
Discarded 0/0 0/0
CAR 0/0 0/0
Red packets 0/0 0/0
Behavior: P3
------------------------------------------------------------------------------
Matched 0/0 0/0
Passed 0/0 0/0
Dropped 0/0 0/0
Filter 0/0 0/0
CAR 0/0 0/0
Enqueued 0/0 0/0
Discarded 0/0 0/0
CAR 0/0 0/0
Red packets 0/0 0/0
Behavior:Be
------------------------------------------------------------------------------
Enqueued 0/0 0/0
Discarded 0/0 0/0

Divecenter - Lurin

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Divecenter - Lurin

Uploaded by

Copyright:

Available Formats

VERIFICACION DE LA CONFIGURACION

Destination/Mask Proto Pre Cost Flags NextHop Interface

0.0.0.0/0 EBGP 255 0 D 10.18.8.153 GigabitEthernet0/0/4.10

--- 10.18.8.153 ping statistics ---

PING LAN TO LAN:

SHOW POLICY-MAP INTERFACE WAN (aplica solo para RPV)

SHOW POLICY-MAP INTERFACE WAN (aplica solo para RPV)

SHOW ACCESS-LIST: (aplica solo para RPV)

You might also like