5GCPEV100R002C0X

定位采數(shù)指導(dǎo)書(shū)

1采數(shù)前準(zhǔn)備

如果只需要采集CPE一鍵式日志，可以跳過(guò)該步驟，直接參考第2節(jié)。

1.1組網(wǎng)

CPE通過(guò)LANO或者LAN1連接至PC。

1.2版本與工具獲取

組件名稱18B19A19A28G19A4.9G19B

3.5G&3.7G

CPEC00SPC025TC00SPC120TC01SPC305TC01SPC103TC01SPC006T

ProbeProbe5.0.T2Probe5.0.T3N/AProbe5.0.T3N/A

OMTN/ACOOSPC117TC01SPC303TCOOSPC117TC01SPC007T

IPOPIPOPV4.1

Wiresharkhttps:〃/

ProbeLicense聯(lián)系z(mì)hangyongWX277460/jituo00183461獲取。

注意：Probe和0MT只能在CPE的Debug版本下使用（即版本號(hào)中帶T的版本，如5GCPE

V100R002C01SPC120T)

2PC側(cè)相關(guān)配置

2.1檢查PC網(wǎng)卡速率

使用CAT6類網(wǎng)線連接5GCPELAN口與PC的有線網(wǎng)卡，并確保有線網(wǎng)卡協(xié)商速率為

IGbps,請(qǐng)勿使用WIFI連接代替有線連接。

2.2添加路由規(guī)則

使用管理員權(quán)限從開(kāi)始菜單進(jìn)入cmd命令窗口，輸入如下命令并檢查ping結(jié)果：（說(shuō)明:

為登錄CPEWEBUI的IP地址）

routeadd/24-p

C：MJsers\ppublicu.s>

C：\Users\ppublicu.e>i*outeadd169.254.1.0/24192.168.1.1-p

「操作完成，

C:MJsers\ppublieue>ping169.254.1.1

正在Ping169.254.1.1具有32字節(jié)的數(shù)施

醫(yī)自169.254.1.1的回復(fù):寶節(jié)=32時(shí)間=2msTTL=254

悵百169.254.1.1的回復(fù)：字節(jié)=32時(shí)間=lmsTTL=254

169.254.1.1的Ping統(tǒng)計(jì)信息、:

「數(shù)據(jù)包:已發(fā)送=2,已劇攵=2,丟失=0<0z丟失〉，

往返行程的括計(jì)俞直:以量秒為單力:

取短=1ms,取長(zhǎng)=2ms,平均=1ms

Control-C

人C

C：MJsers\ppublicue).

2.3關(guān)閉PC防火墻

1）通過(guò)“控制面板'系統(tǒng)和安全'Windows防火墻”進(jìn)入防火墻配置，關(guān)閉防火墻。

>ControlPand,AllControlPanelItems?WindowsFirewall,CustomizeSettings

Customizesettingsforeachtypeofnetwork

Youcanmodifythefirewallsettingsforeachtypeofnetworklocationthatyouuse.

Whatarenetworklocations?

Homeorwork(pnvate)networklocationsettings

Q?TurnonWindowsFirewall

|Blockallincor^ingconnectioni.,,includingthoseinthelistofrallowedprograms

'NotifymewhenWindowsFirewallblocksanewprogram

0TurnoffWindowsFirewall(notrecommended)

Publicnetworklocationsettings

燈TurnonWindowsFirewall

Blocknilincomiivaconnections,inclu(i>nath。卬inthelistofallowedprogram,

?Motifvme,henWUKJOWSFttewdHblockianewprogram

oTurnoffWindowsFirewall(notrecommended)

2）如果采用公司的域策略，防火墻級(jí)別無(wú)法修改，可暫時(shí)忽略。

3CPEWEBUI添加白名單

3.1設(shè)置CPE防火墻級(jí)別

WEBUI->Security^Firewall,選擇Firewalllevel為【Medium】并點(diǎn)擊［Submit］提交

修改(CPE默認(rèn)為Medium)

IEnglish-▼HelpLogout

HUAW€I

■AM■仃

HomeInternetWLANSecuritySystem

FirewallLevel

FirewallLevel

MACFiltering

URLFilteringThefirewallprovidessecureNATandSPIaccess.Italsoprovidespacketfiltering,

includingMACaddressfiltering,URLfiltering,andIPaddressfiltering(indescending

IPFilteringorder).

Note:IfyousetFirewallleveltoHigh,thenexceptionsmustbeaddedtoservicerules

ServiceAccessControlinthefilteringlistOtherwise,youmaynotbeabletoaccesscertainInternetservices.

Thefirewallsettingsdonotapplytoexistingconnections.

ALG

PortForwardingFirewallLevel

UPnPCurrentfirewalllevel:

Firewalllevel:(standard)

DMZ

StatefulPacketInspection(SPI)isenabled.

Inbound(fromInternettoLAN)policy:Dropped.

Outbound(fromLANtoInternet)policy:Accepted.

Filteringstrategy:Thefilteringrulesyousetwilltakeprecedenceoverthe

defaultinboundandoutboundpolicies.

MACfiltering:Whitelistandblacklist

IPfiltering:Whitelistandblacklist

URLfiltering:Whitelistandblacklist

DoSattack:?Enable

BlockDenialofService(DoS)attacksfromtheLANand

Internet,suchasSYNfloodsandpingfloods.

SubmitCancel

3.2配置CPE的IPFilteringWhitelist規(guī)則

3.2.1添加IPFilteringWhitelist規(guī)則

點(diǎn)擊Security玲IPFilteringWhitelistAddItem,添加規(guī)則并Submit提交

ServiceProtocolSourceIPaddressrangeSourceDestinationIPDestination

portrangeaddressrangeportrange

Customudp-54

Customtcp-5421

322查看IPFilteringWhitelist配置結(jié)果

查看白名單規(guī)則，確認(rèn)配置結(jié)果與以下截圖一致。并確認(rèn)CurrentIPfilteringstatus為

Whitelistandblacklist狀態(tài)，如果為其他狀態(tài)，請(qǐng)參考3.1節(jié)設(shè)置CPE防火墻級(jí)別為Medium。

HomeInternetLANWLANSecuritySystem

FirewallLevel

IPFiltering

MACFiltering

URLFilteringTherouterdetectspacketsbasedonthesourceIPaddress,destnationIPaddress,sourceport,

destinationport,andprotocoltype,andmendetermineswhethertoenabletheirtransmission

IPFiltering

Note:Therulesofthewhrtelisttakeprecedenceoverthoseoftheblacklist

ServiceAccessControl

IPAddressWhitelist

ALG

CurrentIPfitteringstatus:Whitelistandblacklist

PortForwarding

IPfilteringmode:Blacklist?Whitelist

UPnP

DMZ

3.3關(guān)閉CPEDMZ功能

WEBUI->Sercurity->DMZ->DMZSettings頁(yè)面，去掉勾選【Enable】并點(diǎn)【submit】提

交以關(guān)閉DMZ功能。如果為下行TCP灌包，請(qǐng)將DMZIP配置為其他可進(jìn)行灌包PC,不能使

用運(yùn)行GENEXProbe軟件的PC進(jìn)行灌包測(cè)試。

|English▼HelpLogout

HUAWEI

HomeInternetLANWLANSecuritySystem

FirewallLevel

DMZ

MACFiltering

URLFilteringYoucansetacomputerastheDMZhostthatisopentotheInternettoimplementunlimitedservicesand

dataexchange,suchasonlinegamingandmeetings.

IPFiltering

Note:TheDMZhostmustbeself-protected.

ServiceAccessControl

ALGDMZSettings

DMZEnabledWan:BEnable

PortForwarding

Il|

Hostaddress:]*

UPnP

SubmitCancel

4CPE一鍵式日志采集

4.1System->Diagnosis->Systemcheck->Check

選擇System->Diagnosis,Method選擇Systemcheck,點(diǎn)擊Check

HomeInternetLANWLANSecuritySystem

Maintenance

Diagnosis

ChangePassword

Date&TimePingandTraceroutequicklycheckstatusofthenetworkconnection;systemcheckprovidestheone-click

se^checkfunction;wirelessstatuscheckprovidesimportantparametersforwirelessconnection;Modem

DiagnosisMaintenanceprovideabilitytoreconnectnetworkorrestartmodem;portmirrorisusedtosendacopyof

networkpacketstoanotherport;LockFrequencyisusedtolockorunlockfrequency;WLANDiagnosisis

usedtorecordandexporttheWLANinformation;RoamSettingisusedtoenableordisableroam.

Logs

SystemNotification

TR-069Settings

Diagnosismethod:

OPing?Traceroute

StatisticsSystemcheck|QWirelessstatuscheck

OModemMaintenanceOPortMirror

Alarms

OLockFrequencyOWLANDiagnosis

RoamSetting

SystemCheck

ClickChecktocheckthesystemstatus.

Check?Export

4.2System->Diagnosis->Systemcheck->Export

等待Export按鈕變藍(lán)可用，點(diǎn)擊Export,選擇路徑保存文件diagnose.tar.bz2

HomeInternetLANWLANSecuritySystem

Maintenance

Diagnosis

ChangePassword

Date&TimePingandTraceroutequicklycheckstatusofthenetworkconnection;systemcheckprovidestheone-click

self-checkfunction;wirelessstatuscheckprovidesimportantparametersforwirelessconnection;Modem

Maintenanceprovideabilitytorestartmodemorresetmodemprotocalstack;portmirrorIsusedtosenda

Diagnosis

copyofnetworkpacketstoanotherport;LockFrequencyisusedtolockorunlockfrequency.

Logs

Method

SystemNotification

Diagnosismethod:Ping*Traceroutesystemcheck'wireless

TR-069Settingsstatuscheck「ModemMaintenance「PortMirror「Lock

Frequency

ClickChecktocheckthesystemstatus.

ComputerInformation

1.1OSname:WindowsNT6.1

MSIE7.0

1.3UIlanguage:English

5Probe/OMT錄像采集

錄像主要是為了觀測(cè)問(wèn)題時(shí)刻的路測(cè)數(shù)據(jù)，以便觀察問(wèn)題出現(xiàn)的過(guò)程。

5.1Probe錄像

1）參考2.2節(jié)關(guān)閉PC防火墻和3CPEWEBUI添加白名單，完成防火墻相關(guān)配置。

2)點(diǎn)擊DeviceConfigure-〉A(chǔ)ddDevice,Model選擇HUAWEINRCPE

ProjectLogfileConfigurationViewTestWindowHelp

3）點(diǎn)擊Connect,連接CPE,并查看State狀態(tài)是否為Connected

4）確保LTE/NR消息正常上報(bào)后，點(diǎn)擊StartRecord，選擇好錄像文件的保存位置后

..GENEXProbe-(UnMlcdMnl)>Cj

■grojectConfigurationyiewJ?tU^ndowH*

a?*MIbHHIOQL3[^L:吃<?,)團(tuán)■，口”3NO■…一J----------------

RachoParameters:IMS3013Mey-1口1*

CdlrxfeBfMrdCode

razomz：17￡9。MSIeNode8-?RRCConnect>onRee*Ubli?hment

RSflPlcfim)?g：3M7496MSIMS->?No_RRCConn?ctiohR???ubli?hm?ntCompl?t?

RSRQIdei<20^2d7A96MSIHPSUEC*p?bAtyinforvr>?tion

RSSlfdBH-7；2032￡l7.711MSIeNadefi-^.RRCConntcbonReconfigurAtion

FVSCHPo?1MdsmI20:32d7.712MSIeNodeB—-AtUchAcopt

FUCTHPoxwtdBml20^2d7J58MSI8CCH-cNodtB--M?ct?rlnform4tion8lod<

FWCHPowoMBaH620皿，覦1MSIBCCH_?Node6-_Sy$tern!nfonnat>onBlodcTypel

SRSPara(<￡m|20t32:17￡84MSIMS-?eN。一RRCConnecbonAeest^blishmentRequest

20^2:17391MSJgNod?8'_RRCConrwdionRaconfiguracionRBConfig

POM?Headtoccr^dfi)2032:17St0MSI?Nod?6--RRCConn?d>on????ublishm?nt

kltlHULGiartCartJ20d2d7J16MSIM$->eNo_HPSUECapabiiitjrfnformation

|PD(XHDlGwtCart4

20d2d7J16MS!MS->eNo_RRCConnecbonAeesublishmentComplete

Aw?ge$<NRWBI”20^2d7S32MS!(Nod?8-_RRCConn?ctionR?configur?ti

OHSSINR|<￡)20^2d?J35MSI(Nod?8-~AUdiAcctM

SINRfdB)