Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Procedure
Step 1 Import flows from the S9700 to the SPU.
1.
2.
Step 2 Configure outbound NAT on the SPU.
[SPU] nat address-group 1 202.169.10.100 202.169.10.200
[SPU] nat address-group 2 202.169.10.80 202.169.10.83
[SPU] acl 2000
Issue 01 (2012-03-15)
Configure flow import on the S9700.
<S9700> system-view
[S9700] vlan batch 101 to 103
[S9700] interface Eth-Trunk 1
[S9700-Eth-Trunk1] port link-type trunk
[S9700-Eth-Trunk1] port trunk allow-pass vlan 101 to 103
[S9700-Eth-Trunk1] quit
[S9700] interface GigabitEthernet2/0/1
[S9700-GigabitEthernet2/0/1] port link-type trunk
[S9700-GigabitEthernet2/0/1] port trunk allow-pass vlan 101
[S9700-GigabitEthernet2/0/1] quit
[S9700] interface GigabitEthernet2/0/2
[S9700-GigabitEthernet2/0/2] port link-type trunk
[S9700-GigabitEthernet2/0/2] port trunk allow-pass vlan 102
[S9700-GigabitEthernet2/0/2] quit
[S9700] interface GigabitEthernet2/0/3
[S9700-GigabitEthernet2/0/3] port link-type trunk
[S9700-GigabitEthernet2/0/3] port trunk allow-pass vlan 103
[S9700-GigabitEthernet2/0/3] quit
[S9700] interface XGigabitEthernet5/0/0
[S9700-XgigabitEthernet5/0/0] eth-trunk 1
[S9700-XgigabitEthernet5/0/0] quit
[S9700] interface XGigabitEthernet5/0/1
[S9700-XgigabitEthernet5/0/1] eth-trunk 1
[S9700-XgigabitEthernet5/0/1] quit
On the SPU, configure IP addresses for interfaces and add interfaces to VLANs.
<SPU> system-view
[SPU] interface Eth-Trunk 1
[SPU-Eth-Trunk1] quit
[SPU] interface Eth-Trunk 1.1
[SPU-Eth-Trunk1.1] control-vid 101 dot1q-termination
[SPU-Eth-Trunk1.1] dot1q termination vid 101
[SPU-Eth-Trunk1.1] ip address 192.168.20.1 255.255.255.0
[SPU-Eth-Trunk1.1] arp broadcast enable
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] control-vid 102 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 102
[SPU-Eth-Trunk1.2] ip address 202.169.10.1 255.255.255.0
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
[SPU] ip vpn-instance vpn_b
[SPU-vpn-instance-vpn_b] route-distinguisher 0:1
[SPU-vpn-instance-vpn_b] quit
[SPU] interface Eth-Trunk 1.3
[SPU-Eth-Trunk1.2] control-vid 103 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 103
[SPU-Eth-Trunk1.3] ip binding vpn-instance vpn_b
[SPU-Eth-Trunk1.2] ip address 10.0.0.1 255.255.255.0
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
[SPU] ip route-static vpn-instance vpn_b 0.0.0.0 0.0.0.0 Eth-Trunk 1.2
202.169.10.2
[SPU] interface XGigabitEthernet0/0/1
[SPU-XGigabitEthernet0/0/1] eth-trunk 1
[SPU-XGigabitEthernet0/0/1] quit
[SPU] interface XGigabitEthernet0/0/2
[SPU-XGigabitEthernet0/0/2] eth-trunk 1
[SPU-XGigabitEthernet0/0/2] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
105
Advertisement
Table of Contents
