Configuring the Load Balancing Mode

Only the LS-S5324TP-SI-AC and LS-S5328C-EI-24S support the enhanced load balancing mod

Run:

system-view

The system view is displayed.

Run:

interface eth-trunk trunk-id

The Eth-Trunk interface view is displayed.

Run:

load-balance { dst-ip | dst-mac | src-ip | src-mac | src-dst-ip | src-dst-mac }

The load balancing mode of the Eth-Trunk is set.

NOTE:

The S5300SI and S5300LI use the parameter src-dst-ip in the HASH algorithm for load balance regardless of whether you configure this parameter.

Run:

system-view

The system view is displayed.

Run:

load-balance-profile profile-name

A load balancing profile is created and its view is displayed.

Run:

l2 field [ dmac | dport | l2-protocol | smac | sport | vlan ] *

The load balancing mode of Layer 2 packets is set.

Run:

ipv4 field [ dip | dport | l4-dport | l4-sport | protocol | sip | sport | vlan ] *

The load balancing mode of IPv4 packets is set.

Run:

ipv6 field [ dip | dport | l4-dport | l4-sport | protocol | sip | sport | vlan ] *

The load balancing mode of IPv6 packets is set.

Run:

ipv6 field [ dip | dport | l4-dport | l4-sport | protocol | sip | sport | vlan ] *

The load balancing mode of IPv6 packets is set.

Run:

quit

Return to the system view.

Run:

interface eth-trunk trunk-id

The Eth-Trunk interface view is displayed.

Run:

load-balance enhanced profile profile-name

The load balancing profile is applied.

 NOTE:

The preceding load balancing modes apply only to known unicast traffic. To configure the load balancing mode for unknown unicast traffic, run the unknown-unicast load-balance { dmac | smac | smacxordmac | enhanced }command in the system view. Only the S5300EI, S5310EI, and S5300HI support load balancing configuration for unknown unicast traffic.

Configure the subtending multicast service.

In the MSTP ring network, MA5600-1 is subtended with Huawei MA5600, and MA5600-3 is subtended with MA5600-4. According to the data plan, MA5600-4 provides the multicast service. In this manner, it is necessary to configure the multicast subtending on MA5600-1 first.

Add the upstream port.

The upstream port is already added in 11.c. It is unnecessary to configure it again.

Configure the IGMP proxy.

The IGMP proxy is already configured in 11.c. It is unnecessary to configure it again.

Configure the program library.

The program library is already configured in 11.c. It is unnecessary to configure it again.

Configure the multicast for the subtending port.

Specify a subtending port.

huawei(config-btv)#igmp cascade-port 0/7/1

huawei(config-btv)#igmp cascade-port 0/7/2

Modify the subtending port.

huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable

huawei(config-btv)#igmp cascade-port modify 0/7/2 static enable

Add programs to the static subtending port.

huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1 sourceip 192

.168.1.2

huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2 sourceip 192

.168.1.2

huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3 sourceip sourceip 192.168.1.2

huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.1 sourceip sourceip 192.168.1.2

huawei(config-btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.2 sourceip 192.168.1.2

huawei(config Huawei MA5683T -btv)#igmp static-join cascade-port 0/7/2 ip 224.1.1.3 sourceip 192.168.1.2

Configuration Example of MPLS - Based on Binding the PVC with the PW Template

How to configure the multiprotocol label switching (MPLS) based on the binding the PVC with the PW template to set up the Label Distribution Protocol (LDP) remote session, label switching paths (LSP), and PW between the MA5680T    and the router.

Configure the route. PWE3 has no special requirement for the routing policy. Here, an open shortest path first (OSPF) route is considered as an example.
huawei(config)#ospf
huawei(config-ospf-1)#area 0
huawei(config-ospf-1-area-0.0.0.0)#network 1.1.1.1 0.0.0.0
huawei(config-ospf-1-area-0.0.0.0)#network 10.1.2.0 0.0.255.255
huawei(config-ospf-1-area-0.0.0.0)#quit
huawei(config-ospf-1)#quit
Configure the loopback interface.
huawei(config)#interface loopback 1
huawei(config-if-loopback1)#ip address 1.1.1.1 32
huawei(config-if-loopback1)#quit
Configure the label switch router (LSR) ID for the MPLS.
huawei(config)#mpls lsr-id 1.1.1.1
Enable the MPLS.
huawei(config)#mpls
huawei(config-mpls)#quit
huawei(config)#vlan 140 standard
huawei(config)#mpls vlan 140
huawei(config)#interface vlanif 140
huawei(config-if-vlanif140)#ip address 10.1.2.1 24
huawei(config-if-vlanif140)#mpls
huawei(config-if-vlanif140)#quit
Configure a VLAN interface.
huawei(config)#port vlan 140 0/7 2
huawei(config)#interface scu 0/7
huawei(config-if-scu-0/7)#native-vlan 2 vlan 140
huawei(config-if-scu-0/7)#quit
Enable the MPLS LDP.
huawei(config)#mpls ldp
huawei(config-mpls-ldp)#quit
huawei(config)#interface vlanif 140
huawei(config-if-vlanif140)#mpls ldp
huawei(config-if-vlanif140)#quit
Create a remote peer.
huawei(config)#mpls ldp remote-peer router
huawei(config-mpls-ldp-remote-router)#remote-ip 10.1.3.2
huawei(config-mpls-ldp-remote-router)#quit
Configure the MPLS LDP triggering mechanism.
huawei(config)#mpls
huawei(config-mpls)#lsp-trigger host
huawei(config-mpls)#label advertise non-null
huawei(config-mpls)#quit
Enable the MPLS L2VPN.
huawei(config)#mpls l2vpn
Configure a service port.
huawei(config)#service-port vlan aoe atm 0/5/0 vpi 1 vci 40 rx-cttr 6 upc off tx-cttr 6 upc off
Create a PW template.
huawei(config)#pw-template pwt
huawei(config-pw-template-pwt)#peer-address 10.1.3.2
huawei(config-pw-template-pwt)#pw-type atm sdu
huawei(config-pw-template-pwt)#quit
Bind the PVC with the PW template.
huawei(config)#pw-ac-binding pvc MA5683T    0/5/0 vpi 1 vci 40 pw 106 pw-template pwt

Configuring RADIUS Attribute Translation

The Huawei ME60 can communicate with RADIUS servers from different vendors through the RADIUS attribute translation function.

Run:
system-view
The system view is displayed.
Run:
radius-server group group-name
The RADIUS server group view is displayed.
Run:
radius-server attribute translate
RADIUS attribute translation is enabled.
Run:
radius-attribute translate extend src-attr-description dest-attr-description{ access-accept | { access-request | account } * }
RADIUS attribute translation is configured.


NOTE:
You can configure translation of up to 64 attributes on the ME60-X3

Configuration Example of the RADIUS Authentication

The Huawei MA5680T    is interconnected with the RADIUS server through the RADIUS protocol to implement authentication.

Configure the authentication scheme.

Configure authentication scheme newscheme (users are authenticated through RADIUS).

huawei(config)#aaa

huawei(config-aaa)#authentication-scheme newscheme

huawei(config-aaa-authen-newscheme)#authentication-mode radius

huawei(config-aaa-authen-newscheme)#quit

huawei(config-aaa)#quit

Configure the RADIUS protocol.

Create RADIUS server template template1. RADIUS server 10.10.66.66 functions as the primary authentication server, and RADIUS server 10.10.66.67 functions as the secondary authentication.

huawei(config)#radius-server template template1

 Note: Create a new server template

huawei(config-radius-template1)#radius-server authentication 10.10.66.66 1812

huawei(config-radius-template1)#radius-server authentication 10.10.66.67 1812 secondary

huawei(config-radius-template1)#quit

Create a domain.

Create domain isp1.

huawei(config)#aaa

huawei(config-aaa)#domain isp1

  Info: Create a new domain 

Reference the authentication scheme.

You can reference an authentication scheme in a domain only after the authentication scheme is created.

huawei(config-aaa-domain-isp1)#authentication-scheme newscheme

Reference the RADIUS server template.

You can reference a RADIUS server template in a domain only after the RADIUS server template is created.

huawei(config-aaa  MA5680T    -domain-isp1)#radius-server template1

huawei(config-aaa-domain-isp1)#quit

Configuration Example of the IPv4 Static Route

This topic describes how to manually add the IPv4 static route to implement the interconnection between MA5683T  /MA5600

Configure the IP address of the Layer 3 interface.

The configurations for the three MA5600T/MA5603T devices are the same. The configuration of the MA5600T/MA5603T is considered as an example.

huawei(config)#vlan 2 smart

huawei(config)#port vlan 2 0/19 0

huawei(config)#interface vlanif 2

huawei(config-if-vlanif2)#ip address 1.1.1.2 24

huawei(config-if-vlanif2)#ip address 1.1.2.1 24 sub

huawei(config-if-vlanif2)#quit

Configure IPv4 static routes.

Configure an IPv4 static route for MA5600T/MA5603T_A.

huawei(config)#ip route-static 1.1.5.0 255.255.255.0 1.1.2.2

huawei(config)#ip route-static 1.1.4.0 255.255.255.0 1.1.2.2

Configure an IPv4 static route for MA5600T/MA5603T_B.

huawei(config)#ip route-static 1.1.5.0 255.255.255.0 1.1.3.1

huawei(config)#ip route-static 1.1.1.0 255.255.255.0 1.1.3.1

Configure IPv4 static routes for MA5600T/MA5603T_C.

huawei(config)#ip route-static 1.1.1.0 255.255.255.0 1.1.2.1

huawei(config)#ip route-static 1.1.4.0 255.255.255.0 1.1.3.2

Configure the host gateways.

Configure the default gateway of Host A to 1.1.1.2.

Configure the default gateway of Host B to 1.1.4.2.

Configure the default gateway of Host C to 1.1.5.2.

Save the data.

huawei#save

Configuration example of MA5600T/MA5603T_A.

vlan 2 smart

port vlan 2 0/19 0

interface vlanif 2

ip address 1.1.1.2 24

ip address 1.1.2.1 24 sub

quit

ip route-static 1.1.5.0 255.255.255.0 1.1.2.2

ip route-static 1.1.4.0 255.255.255.0 1.1.2.2

Configuring Spatial Multicast

Only the NE80E/40E-X8 and ME60  /NE40E-X8    support spatial multicast.

Run:

system-view

The system view is displayed.

Run:

spatial-multicast

The spatial multicast view is displayed

Run:

spatial-multicast slot slot-id1 [ to slot-id2 ]

Spatial multicast is enabled on the board that resides in the specified slot.

Run:

spatial-multicast { p2mp-te | mldp } bandwidth bandwidth-value

The spatial multicast bandwidth is configured for P2MP traffic to implement load balancing.

Run:

commit

The configuration is committed.