GB191GB2894GB4798-90電子電工產品應用環境條件機械和試驗環境條件GB3047.4高度進制為44.45mm的插箱、插件的基本尺寸系列GB/T3047.2高度進制為44.45mmGB/T17626GB/T14733-1993GB/T13426GB/T17618-2015電工電子產品環境試驗第2AGB/TGB/T

ETSIEN300386電磁兼容和無線頻譜管理（ERM）：通信設備：電磁兼容性（EMC）（ElectromagneticcompatibilityandRadiospectrumMatters(ERM);Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)requirements.）IEC62151（（Safetyofequipmentconnectedtoatelecommunication

Telecommunicationsandinformationexchangebetweensystems--Localmetropolitanareanetworks--Specificrequirements--Part3:CarrierSenseMultipleAccesswithCollisionDetection(CSMA/CD)AccessMethodandPhysicalLayerSpecificatiIEC62351Powersystemsmanagementandassociatedinformationexchange-DatacommunicationssecurityIEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand IEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand

spectrum

Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)IEC62351-6IEC62351-7IEC62439YD/T1391.1-2005（MPLS）SJ/T10630-

IEC60950-1-2013GJB908AGJB726A-2004GJB571A-2005GJB1442A-2006GJB1362A-

IPC-A-610EnglishChinese LocalAreaMediumAccessAccessControlQualityofRoutinginformationBorderGatewayOpenShortestPathIntermediatesystemtointermediateLabelDistributionMulti-ProtocolLabelCustomerProviderFastVirtualLeasedVirtualPrivateLAN整機高度符合GB/T3047.2IEEEIEEEIEEE應符合GB4943相關規定。對下面相關的危險采取適當的防護措施，減少或避免由于下列各種危險1MPLSIGMPSnoopingMACConsole依據GJB908-90、GJB726A-2004、GJB1442-1992及IPC-A-6102BOMBOM;3456用電網供電的產品機箱內無≥3mm7振動：按照GB/T2423.10“試驗Fc”的試驗方法進行。沖擊：按照GB/T2423.5“試驗Ea”的試驗方法進行。碰撞：按照GB/T2423.6“試驗Eb”的試驗方法進行。ConsolePort 設備正常上電，PC連接到設備ConsolePortconf-modepasswordconsolexxxpasswordconf-modexxxWEB PC/8gige0_0（設備出廠配置默認各接口屬于vlan1，vlan-if1默認地址）WEB3WEBWEB PC/8IPgige0_0接口（設備出廠配置默認各接口屬于vlan1，vlan-if1默認地址）WEB界面，在系統管理->管理員->Telnet、SSHtelnetSSH2radius DUT啟用radius認證，并配置radiusPC上使用radiusWEBradius服務器上不存在的用戶名密碼訪問設備WEB2SNMPGet/GetNext PC上安裝MIBBrowserMIBfilePCvlanPCpingmibbrowser，以節點ifIndexget/selectInstance，UseselectInstance按鈕，完成一次get1；mibbrowser，以節點ifIndexget/selectInstance，UseselectInstancegetnext操作，預期結1SNMPSet PC上安裝MIBBrowserMIBfilePCvlanPCpingsetValuetoSetSetsetget2setSNMPTrap PC上安裝MIBBrowserMIBfilePCvlanPCpingmibbrowser，打開Trap，且設置DUTTrap DUT上接口down/up1down/upTrapRMON RMON1RMON2bucketsPC訪問InternetRMON告警統計表項及歷史統計表項及RMON2NTP DUT1NTPServerDUT2NTPClientNTPserverDUT1DUT1中配置參考時鐘地址為DUT3地址，并查看DUT1、DUT2的時間，預期2。DUT2DUT1DUT1、DUT2DUT3SNTP DUT1SNTPServerDUT2SNTPClientIPDUT1IP1DUT2DUT1驗證端口自協商/ 231A223B 1A64IP2B1024kbps 1B64IP1A1024kbps 2 測試儀端口ADUT1和DUT2學到這個二層報文的源清除DUT2上所有端口統計數字，測試儀端口B發送目的MAC為剛學到的源1；DUT1DUT21DUT1DUT21UP3測試儀顯示接收端口接收的報文與發送端口發送的報文一致，通過DUT2上顯示的報文轉發數字看，4個端口的轉發比例為1:1:1:1；12、3、4 測試儀端口ADUT1和DUT2學到這個二層報文的源清除DUT2上所有端口統計數字，測試儀端口B發送目的MAC為剛學到的源1；DUT1DUT21DUT1DUT21UP3測試儀顯示接收端口接收的報文與發送端口發送的報文一致，通過DUT2上顯示的報文轉發數字看，4個端口的轉發比例為1:1:1:1；12、3、4 1、2加入vlan10313A、B3C能收到端口A、BC只收到端口ABC只收到端口BAvlan 1、2、3accessA1B、C均能收到端口Avlan 1、2、3accessAAA1B、C均收不到端口AVLAN VLAN1、2、3accessA3accessVLANAB、C均能收到端口AB能收到報文，CVLAN 12trunkVLAN1-4094DUT1、DUT2VLANDUT1、DUT2VLANDUT1、DUT2VLANIPVLAN三層接口，預期1；VLAN2VLAN三層接口，主從IPIP均可以pingvlan-if1VLANQinQ 1trunkvlanX、YVLAN2trunkvlanX、YVLANDUT1配置普通AtagXtagY1B抓包查看tagX的報文加上外層tagX，tagYtagXMAC 1VLAN102A、BMAC相同（00:00:00:00:00:01）1VLAN10、VLAN20MAC00:00:00:00:00:01MAC DUTMACMACA10MACMAC10sMAC210個MAC10個MACMAC 1、2、3AMACMACBMAC1MACMAC31MACB、CACMACMAC 1、2、31MACB發送目的MAC1MACMAC3MACACMACMAC 1、2、3DUTMAC1sendingport2receivingport，端口3為monitorport；MAC地址容量，設定需要學習的MACMAC1MACMAC MAC地址為不老化，并刪除DUT1所有MAC1VLANPC1、PC21MAC地址0，PC1、PC2ping1VLAN1；PC1MAC1PC2MAC1PC14PC1、PC2pingPC1ping通，PC2pingPC1、PC2pingPC1ping不通，PC2pingARP AIPIPARP請求報文，預1；BIPIPUDP報文，預2；BDUT1ARPABUDP到達老化時間后，ARP AIP-54IP測試儀端口B線速發送UDP報文，源IP為，目的IP為DUTARPBDUT1上學習到滿規格的ARPABIP的UDPARP 1ARP表項，IPBUDPIPIP為靜態表項地址，2。ARPABIP的UDPDHCPserver DUT上與PCvlan10，vlan-if10vlan-if10-00，并開啟DHCPPC獲取IP1PCDHCPDHCPsnooping 3 4 DUT1DHCPserver，配置vlan-if10-00；端口1、2、3、4均加入vlan10；DUT2DHCPsnooping233PC1PC2IPPC1PC2PC2DHCP DUT1配置：vlan-if10開啟DHCP服務器，地址池-00；DUT/16PC獲取IP2DUT1ping PC成功獲取到IPMPLS B與DUT3OSPFDUT之間使能OSPF、MPLSLDPDUTA2DUT與端口A、BLDPB可以正常收到測試儀端口A驗證靜態/ 驗證靜態/ /16 /16 1.1.1/16 DUTDUTPC1pingPC2DUT/16DUT25/16DUT1DUT2ping靜態路由被成功刪除，PC1ping 60.1 60.1 DUT1、DUT2、DUT3上啟動RIP協議，使能所有三層接口的30sDUT1pingDUT3loopbackDUT2pingDUT1loopbackDUT3pingDUT2loopback2DUT1、DUT2、DUT3pingRIPRIP 60.1 60.1 DUT1、DUT2RIP30sDUT1DUT1、DUT2相連接口MD5DUT1、DUT2down/up操作，30sDUT1DUT1、DUT2MD5密碼修改一致，DUT1DUT1、DUT2相連接口RIPText認證，且密碼一致，30sDUT1路由1；DUT1、DUT2接口Text密碼修改不一致，且將相連兩設備的物理端口操作，30sDUT12/24網段路由，DUT1ping/24網段路由，DUT1pingOSPF 5.1 5.1 DUT1OSPF1使能loopback1和vlan-DUT2OSPF0使能loopback1和vlan-if41vlan-if3DUT3OSPF0使能loopback1和vlan-if42vlan-if5DUT4上啟用OSPF，區域2使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingOSPFOSPF 60.1 60.1 DUT1OSPF1使能loopback1和vlan-if80，vlan-if80TextDUT2OSPF：01vlan-if80TextDUT1vlan-if80vlan-if60，使用MD5DUT3OSPF2loopback1vlan-if60，vlan-if60MD5認證，認證KEYID與DUT2上vlan-if60相同，但是認證密碼不同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預期結果2；DUT1DUT2vlan-if80Text認證密碼相同，DUT2DUT3vlan-if60MD5認證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預期結果4。loopbackpingloopbackpingIS-IS 5.1 5.1 DUT1IS-ISlevel-1-2loopback1vlan-DUT2IS-ISlevel-2loopback1、vlan-if3vlan-if4DUT3IS-ISlevel-1-2loopback1、vlan-if4、vlan-if5DUT4上啟用IS-IS，級別為level-1，使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingIS-ISIS-IS 60.1 60.1 DUT1IS-ISloopback1vlan-if80，vlan-if80TextDUT2上啟用IS-IS：使能loopback1、vlan-if80和vlan-if60，vlan-if80使用DUT1vlan-if80不同，vlan-if60MD5DUT3上啟用IS-ISloopback1vlan-if60，vlan-if60MD5KEYIDDUT2vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預期結果2；DUT1DUT2vlan-if80Text認證密碼相同，DUT2DUT3vlan-if60MD5認證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預期結果4。loopbackpingloopbackpingBGP DUT1上啟用OSPF，區域0使能loopback1和vlan-if3DUT2上啟用OSPF，區域0使能loopback1和vlan-if3DUT3上啟用OSPF，區域0使能loopback1和vlan-if5DUT4OSPF0使能loopback1和vlan-if5；DUT1BGP，AS100DUT-2loopback1loopback1網DUT2BGP，AS100DUT-1loopback1loopback1網DUT3BGP，AS200DUT-4loopback1loopback1網DUT4BGP，AS200DUT-3loopback1loopback1網DUT-2上啟用BGP，AS100鄰居為DUT-3vlan-if4DUT-3上啟用BGP，AS200鄰居為DUT-2vlan-if430sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingBGPBGP 60.1 60.1 DUT1BGP：AS100DUT2vlan-if80loopback1網段，vlan-if80使用MD5認證DUT2上啟用BGP：AS100DUT1vlan-if80loopback1網段，vlan-if80使用MD5認證，認證密碼與DUT1上vlan-if80不同；鄰居為DUT3vlan-if60地址，vlan-if60使用MD5認證DUT3上啟用BGP：AS200鄰居為DUT-2vlan-if60loopback1vlan-if60使用MD5DUT2上vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預期結果2；DUT1DUT2vlan-if80MD5認證密碼相同，DUT2DUT3vlan-if60MD5認證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和loopback1地址，DUT3pingDUT1和DUT2loopback14loopbackpingloopbackpingMPLSMPLSL3VPNMPLSL3VPN 5.1 5.1 DUT2OSPF0使能loopback1和vlan-if4DUT3OSPF0使能loopback1和vlan-DUT2上啟用MPLS，vlan-if4啟用LDPDUT3MPLS，vlan-if4LDP；DUT-2上啟用BGP，AS號100鄰居為DUT-3loopback1地址，激活MP-BGPDUT-3上啟用BGP，AS100鄰居為DUT-2loopback1MP-BGP；30sDUT2、DUT3DUT2上啟用VRF，配置RD、RT，vlan-if3加入VRFDUT3VRFRD、RT，vlan-if5加入VRF；DUT2VRF-BGP，AS100鄰居為DUT-1vlan-if3DUT1BGP，AS65010DUT-3vlan-if3loopback1網DUT3VRF-BGP，AS100鄰居為DUT-4vlan-if5DUT4BGP，AS65020DUT-3vlan-if5loopback1網DUT1pingDUT4loopback1地址，DUT4上pingDUT1loopback12DUT2DUT3OSPF、LDP、BGP、MP-BGPpingVLAN4:/24VLAN4:VLAN1:/24 VLAN3:/24VLAN3:/24 VLAN1:/VLAN2:/24VLAN2:/24 DUT1上配置靜態路由，使到達目的地址為/24網段下一跳地址分別為DUT2ARPDUT2A發送IPIP為IPDUT1MACDUT2VLAN2-43B可以接收到AB扔可以接收到AVLAN2-43ECMP 3 vlan-if20測試儀端口B/16的設備，端口C模擬/16的設備，端口IP配置策略路由：源/any1，動作策略路由轉發（出接口vlan-if30，下一跳），預期結果2。B能收到流量，端口CB收不到流量，端口CIGMP vlan-if10開啟測試儀端口A模擬并發送IGMPv2測試儀端口AIGMPv2DUT1組成2。IGMPIGMP 2、3、4DUT1DUT2IGMP-SnoopingVLAN10IGMP-BIGMP-Snooping組播信息，1；PC，查看IGMP-Snooping243PIM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMSMDUT1的vlan-if100使能DUT2loopback/32PIMOSPFvlan-ifDUT2loopback1PIMBSRRPBA003OSPFpingBSRRP節點，均為DUT2的B可以接收到端口APIMDMPIMDM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100RIPRIPBA002pingB可以接收到端口A DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100DUT124 DUT2242424DUT3242424DUT42424BA002pingB可以接收到端口AACL修改DSCP 1、2、3trunkvlan10-DSCP優先級為40；Atag10-20且DSCP0-631B、C收到報文情況：vlan10-15DSCP40，vlan16-20的報文DSCP仍為0-63。ACL 1、2、3trunkvlan10-1IP2IPIPv4ACL1：匹配規則為源IP3150；ACL2：匹配規則為源IP31IP2IP23123121:2ACL CA/24B/24網段，MACMAC1 不能訪問服務器/32，入方向ACL三層IPv4配置：源IP/24，目的IP/32，端口1，動作丟包；AIP，源IP/24B發送目的IP，源IP/24的流量，預期結果1；ACLMAC/IPv4IP，源MACMAC12，動作通過；源IPany，源MACany，端口2，動作丟包；BIPMAC為MAC1且遞增的流量，2。C只能收到端口BAC只能收到源IPMAC為MAC1QoS 1、2、3 1、2Cos13的cos1，端口2映射到端口3的cos3；3A20%3B90%3A、B33AABABSP 1、2VLAN10端口1配置優先級信任模式為DSCP模式，內部映射隊列分別為cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN102SPVLAN10端口2配置出端口限速，限制速率為接口帶寬的10%，突發流量為A81B10%DSCP63WRR 1、2VLAN10端口1配置優先級信任模式為DSCP模式，內部映射隊列分別為cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN10端口2WRRA81B10%的流量，8 1、2加入同一164kbpsA、B1128kbps164kbps128kbps14A64kbpsBAB128kbpsA64kbpsB128kbpsA、B802.1X 1 2 RADIUSDUT1、2加入vlan2，且vlan-if/16；啟用802.1X認證；端口1使能Dot1x；PC，PCpingDUT802.1x客戶端使用test1進行認證，預1；PC802.1xtest1RADIUSServertest2，且DUTRADIUSPC長pingDUT802.1xtest2PC802.1xtest25PCpingDUTPC能pingPCping不通PCpingDUTPC能pingPCping不通DUTMAC 1 2 RADIUSDUT1、2加入vlan2，且vlan-if2MAC地址認證，認證類型為本地認證且為MAC添加本地用戶：用戶名、密碼、確認密碼、MACPCMAC地址；端口1啟用認證；PC，PCpingDUTPCMACRADIUSServertest2DUTRADIUS認證，且為固定方式，3；MAC地址認證中添加本地用戶，MACPC的MACPC長pingDUT802.1xtest2DUT上關閉RADIUS5PC能pingPCping不通PC能pingPCping不通DUTPortal 1 2 RADIUS DUT端口1、2加入vlan2，且vlan-if2地址/16，vlan-if3地址/16且PortalAcl：硬件資源調配slice2選擇認證模式。IP/32，目的IPany11；Portal認證中關閉WebRADIUS認證且test22PC時，webtest1Loopback 1、2、3、4、514545241down1downVRRP vl4 DUT11、2加入同一DUT2VRRP1IP11vlan-if100，優120；DUT3VRRP1IP11vlan-if100，優先級100，預期結果1；DUT1DUT2的連接斷開，PCping113DUT2VRRPMASTER，DUT3VRRP狀態為pingpingVSM 2、3分布在DUT14、5、6 WebDUT12、34、5AB發送源MACMAC1清除DUT2上所有端口流量清零，測試儀端口A發送目的MAC為MAC1，源MAC為8個連續增長的二層報文，預期結果4；2downup5（CPU、DUT1DUT21:1；B接收的報文與端口AIPv4IPv4ACL DUT接口與測試儀器連接，DUT上vlan-if10、vlan-i