GB191GB2894GB4798-90電子電工產(chǎn)品應(yīng)用環(huán)境條件機(jī)械和試驗(yàn)環(huán)境條件GB3047.4高度進(jìn)制為44.45mm的插箱、插件的基本尺寸系列GB/T3047.2高度進(jìn)制為44.45mmGB/T17626GB/T14733-1993GB/T13426GB/T17618-2015電工電子產(chǎn)品環(huán)境試驗(yàn)第2AGB/TGB/T

ETSIEN300386電磁兼容和無線頻譜管理（ERM）：通信設(shè)備：電磁兼容性（EMC）（ElectromagneticcompatibilityandRadiospectrumMatters(ERM);Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)requirements.）IEC62151（（Safetyofequipmentconnectedtoatelecommunication

Telecommunicationsandinformationexchangebetweensystems--Localmetropolitanareanetworks--Specificrequirements--Part3:CarrierSenseMultipleAccesswithCollisionDetection(CSMA/CD)AccessMethodandPhysicalLayerSpecificatiIEC62351Powersystemsmanagementandassociatedinformationexchange-DatacommunicationssecurityIEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand IEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand

spectrum

Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)IEC62351-6IEC62351-7IEC62439YD/T1391.1-2005（MPLS）SJ/T10630-

IEC60950-1-2013GJB908AGJB726A-2004GJB571A-2005GJB1442A-2006GJB1362A-

IPC-A-610EnglishChinese LocalAreaMediumAccessAccessControlQualityofRoutinginformationBorderGatewayOpenShortestPathIntermediatesystemtointermediateLabelDistributionMulti-ProtocolLabelCustomerProviderFastVirtualLeasedVirtualPrivateLAN整機(jī)高度符合GB/T3047.2IEEEIEEEIEEE應(yīng)符合GB4943相關(guān)規(guī)定。對下面相關(guān)的危險采取適當(dāng)?shù)姆雷o(hù)措施，減少或避免由于下列各種危險1MPLSIGMPSnoopingMACConsole依據(jù)GJB908-90、GJB726A-2004、GJB1442-1992及IPC-A-6102BOMBOM;3456用電網(wǎng)供電的產(chǎn)品機(jī)箱內(nèi)無≥3mm7振動：按照GB/T2423.10“試驗(yàn)Fc”的試驗(yàn)方法進(jìn)行。沖擊：按照GB/T2423.5“試驗(yàn)Ea”的試驗(yàn)方法進(jìn)行。碰撞：按照GB/T2423.6“試驗(yàn)Eb”的試驗(yàn)方法進(jìn)行。ConsolePort 設(shè)備正常上電，PC連接到設(shè)備ConsolePortconf-modepasswordconsolexxxpasswordconf-modexxxWEB PC/8gige0_0（設(shè)備出廠配置默認(rèn)各接口屬于vlan1，vlan-if1默認(rèn)地址）WEB3WEBWEB PC/8IPgige0_0接口（設(shè)備出廠配置默認(rèn)各接口屬于vlan1，vlan-if1默認(rèn)地址）WEB界面，在系統(tǒng)管理->管理員->Telnet、SSHtelnetSSH2radius DUT啟用radius認(rèn)證，并配置radiusPC上使用radiusWEBradius服務(wù)器上不存在的用戶名密碼訪問設(shè)備WEB2SNMPGet/GetNext PC上安裝MIBBrowserMIBfilePCvlanPCpingmibbrowser，以節(jié)點(diǎn)ifIndexget/selectInstance，UseselectInstance按鈕，完成一次get1；mibbrowser，以節(jié)點(diǎn)ifIndexget/selectInstance，UseselectInstancegetnext操作，預(yù)期結(jié)1SNMPSet PC上安裝MIBBrowserMIBfilePCvlanPCpingsetValuetoSetSetsetget2setSNMPTrap PC上安裝MIBBrowserMIBfilePCvlanPCpingmibbrowser，打開Trap，且設(shè)置DUTTrap DUT上接口down/up1down/upTrapRMON RMON1RMON2bucketsPC訪問InternetRMON告警統(tǒng)計表項(xiàng)及歷史統(tǒng)計表項(xiàng)及RMON2NTP DUT1NTPServerDUT2NTPClientNTPserverDUT1DUT1中配置參考時鐘地址為DUT3地址，并查看DUT1、DUT2的時間，預(yù)期2。DUT2DUT1DUT1、DUT2DUT3SNTP DUT1SNTPServerDUT2SNTPClientIPDUT1IP1DUT2DUT1驗(yàn)證端口自協(xié)商/ 231A223B 1A64IP2B1024kbps 1B64IP1A1024kbps 2 測試儀端口ADUT1和DUT2學(xué)到這個二層報文的源清除DUT2上所有端口統(tǒng)計數(shù)字，測試儀端口B發(fā)送目的MAC為剛學(xué)到的源1；DUT1DUT21DUT1DUT21UP3測試儀顯示接收端口接收的報文與發(fā)送端口發(fā)送的報文一致，通過DUT2上顯示的報文轉(zhuǎn)發(fā)數(shù)字看，4個端口的轉(zhuǎn)發(fā)比例為1:1:1:1；12、3、4 測試儀端口ADUT1和DUT2學(xué)到這個二層報文的源清除DUT2上所有端口統(tǒng)計數(shù)字，測試儀端口B發(fā)送目的MAC為剛學(xué)到的源1；DUT1DUT21DUT1DUT21UP3測試儀顯示接收端口接收的報文與發(fā)送端口發(fā)送的報文一致，通過DUT2上顯示的報文轉(zhuǎn)發(fā)數(shù)字看，4個端口的轉(zhuǎn)發(fā)比例為1:1:1:1；12、3、4 1、2加入vlan10313A、B3C能收到端口A、BC只收到端口ABC只收到端口BAvlan 1、2、3accessA1B、C均能收到端口Avlan 1、2、3accessAAA1B、C均收不到端口AVLAN VLAN1、2、3accessA3accessVLANAB、C均能收到端口AB能收到報文，CVLAN 12trunkVLAN1-4094DUT1、DUT2VLANDUT1、DUT2VLANDUT1、DUT2VLANIPVLAN三層接口，預(yù)期1；VLAN2VLAN三層接口，主從IPIP均可以pingvlan-if1VLANQinQ 1trunkvlanX、YVLAN2trunkvlanX、YVLANDUT1配置普通AtagXtagY1B抓包查看tagX的報文加上外層tagX，tagYtagXMAC 1VLAN102A、BMAC相同（00:00:00:00:00:01）1VLAN10、VLAN20MAC00:00:00:00:00:01MAC DUTMACMACA10MACMAC10sMAC210個MAC10個MACMAC 1、2、3AMACMACBMAC1MACMAC31MACB、CACMACMAC 1、2、31MACB發(fā)送目的MAC1MACMAC3MACACMACMAC 1、2、3DUTMAC1sendingport2receivingport，端口3為monitorport；MAC地址容量，設(shè)定需要學(xué)習(xí)的MACMAC1MACMAC MAC地址為不老化，并刪除DUT1所有MAC1VLANPC1、PC21MAC地址0，PC1、PC2ping1VLAN1；PC1MAC1PC2MAC1PC14PC1、PC2pingPC1ping通，PC2pingPC1、PC2pingPC1ping不通，PC2pingARP AIPIPARP請求報文，預(yù)1；BIPIPUDP報文，預(yù)2；BDUT1ARPABUDP到達(dá)老化時間后，ARP AIP-54IP測試儀端口B線速發(fā)送UDP報文，源IP為，目的IP為DUTARPBDUT1上學(xué)習(xí)到滿規(guī)格的ARPABIP的UDPARP 1ARP表項(xiàng)，IPBUDPIPIP為靜態(tài)表項(xiàng)地址，2。ARPABIP的UDPDHCPserver DUT上與PCvlan10，vlan-if10vlan-if10-00，并開啟DHCPPC獲取IP1PCDHCPDHCPsnooping 3 4 DUT1DHCPserver，配置vlan-if10-00；端口1、2、3、4均加入vlan10；DUT2DHCPsnooping233PC1PC2IPPC1PC2PC2DHCP DUT1配置：vlan-if10開啟DHCP服務(wù)器，地址池-00；DUT/16PC獲取IP2DUT1ping PC成功獲取到IPMPLS B與DUT3OSPFDUT之間使能OSPF、MPLSLDPDUTA2DUT與端口A、BLDPB可以正常收到測試儀端口A驗(yàn)證靜態(tài)/ 驗(yàn)證靜態(tài)/ /16 /16 1.1.1/16 DUTDUTPC1pingPC2DUT/16DUT25/16DUT1DUT2ping靜態(tài)路由被成功刪除，PC1ping 60.1 60.1 DUT1、DUT2、DUT3上啟動RIP協(xié)議，使能所有三層接口的30sDUT1pingDUT3loopbackDUT2pingDUT1loopbackDUT3pingDUT2loopback2DUT1、DUT2、DUT3pingRIPRIP 60.1 60.1 DUT1、DUT2RIP30sDUT1DUT1、DUT2相連接口MD5DUT1、DUT2down/up操作，30sDUT1DUT1、DUT2MD5密碼修改一致，DUT1DUT1、DUT2相連接口RIPText認(rèn)證，且密碼一致，30sDUT1路由1；DUT1、DUT2接口Text密碼修改不一致，且將相連兩設(shè)備的物理端口操作，30sDUT12/24網(wǎng)段路由，DUT1ping/24網(wǎng)段路由，DUT1pingOSPF 5.1 5.1 DUT1OSPF1使能loopback1和vlan-DUT2OSPF0使能loopback1和vlan-if41vlan-if3DUT3OSPF0使能loopback1和vlan-if42vlan-if5DUT4上啟用OSPF，區(qū)域2使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingOSPFOSPF 60.1 60.1 DUT1OSPF1使能loopback1和vlan-if80，vlan-if80TextDUT2OSPF：01vlan-if80TextDUT1vlan-if80vlan-if60，使用MD5DUT3OSPF2loopback1vlan-if60，vlan-if60MD5認(rèn)證，認(rèn)證KEYID與DUT2上vlan-if60相同，但是認(rèn)證密碼不同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預(yù)期結(jié)果2；DUT1DUT2vlan-if80Text認(rèn)證密碼相同，DUT2DUT3vlan-if60MD5認(rèn)證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預(yù)期結(jié)果4。loopbackpingloopbackpingIS-IS 5.1 5.1 DUT1IS-ISlevel-1-2loopback1vlan-DUT2IS-ISlevel-2loopback1、vlan-if3vlan-if4DUT3IS-ISlevel-1-2loopback1、vlan-if4、vlan-if5DUT4上啟用IS-IS，級別為level-1，使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingIS-ISIS-IS 60.1 60.1 DUT1IS-ISloopback1vlan-if80，vlan-if80TextDUT2上啟用IS-IS：使能loopback1、vlan-if80和vlan-if60，vlan-if80使用DUT1vlan-if80不同，vlan-if60MD5DUT3上啟用IS-ISloopback1vlan-if60，vlan-if60MD5KEYIDDUT2vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預(yù)期結(jié)果2；DUT1DUT2vlan-if80Text認(rèn)證密碼相同，DUT2DUT3vlan-if60MD5認(rèn)證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預(yù)期結(jié)果4。loopbackpingloopbackpingBGP DUT1上啟用OSPF，區(qū)域0使能loopback1和vlan-if3DUT2上啟用OSPF，區(qū)域0使能loopback1和vlan-if3DUT3上啟用OSPF，區(qū)域0使能loopback1和vlan-if5DUT4OSPF0使能loopback1和vlan-if5；DUT1BGP，AS100DUT-2loopback1loopback1網(wǎng)DUT2BGP，AS100DUT-1loopback1loopback1網(wǎng)DUT3BGP，AS200DUT-4loopback1loopback1網(wǎng)DUT4BGP，AS200DUT-3loopback1loopback1網(wǎng)DUT-2上啟用BGP，AS100鄰居為DUT-3vlan-if4DUT-3上啟用BGP，AS200鄰居為DUT-2vlan-if430sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingBGPBGP 60.1 60.1 DUT1BGP：AS100DUT2vlan-if80loopback1網(wǎng)段，vlan-if80使用MD5認(rèn)證DUT2上啟用BGP：AS100DUT1vlan-if80loopback1網(wǎng)段，vlan-if80使用MD5認(rèn)證，認(rèn)證密碼與DUT1上vlan-if80不同；鄰居為DUT3vlan-if60地址，vlan-if60使用MD5認(rèn)證DUT3上啟用BGP：AS200鄰居為DUT-2vlan-if60loopback1vlan-if60使用MD5DUT2上vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，預(yù)期結(jié)果2；DUT1DUT2vlan-if80MD5認(rèn)證密碼相同，DUT2DUT3vlan-if60MD5認(rèn)證密碼相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和loopback1地址，DUT3pingDUT1和DUT2loopback14loopbackpingloopbackpingMPLSMPLSL3VPNMPLSL3VPN 5.1 5.1 DUT2OSPF0使能loopback1和vlan-if4DUT3OSPF0使能loopback1和vlan-DUT2上啟用MPLS，vlan-if4啟用LDPDUT3MPLS，vlan-if4LDP；DUT-2上啟用BGP，AS號100鄰居為DUT-3loopback1地址，激活MP-BGPDUT-3上啟用BGP，AS100鄰居為DUT-2loopback1MP-BGP；30sDUT2、DUT3DUT2上啟用VRF，配置RD、RT，vlan-if3加入VRFDUT3VRFRD、RT，vlan-if5加入VRF；DUT2VRF-BGP，AS100鄰居為DUT-1vlan-if3DUT1BGP，AS65010DUT-3vlan-if3loopback1網(wǎng)DUT3VRF-BGP，AS100鄰居為DUT-4vlan-if5DUT4BGP，AS65020DUT-3vlan-if5loopback1網(wǎng)DUT1pingDUT4loopback1地址，DUT4上pingDUT1loopback12DUT2DUT3OSPF、LDP、BGP、MP-BGPpingVLAN4:/24VLAN4:VLAN1:/24 VLAN3:/24VLAN3:/24 VLAN1:/VLAN2:/24VLAN2:/24 DUT1上配置靜態(tài)路由，使到達(dá)目的地址為/24網(wǎng)段下一跳地址分別為DUT2ARPDUT2A發(fā)送IPIP為IPDUT1MACDUT2VLAN2-43B可以接收到AB扔可以接收到AVLAN2-43ECMP 3 vlan-if20測試儀端口B/16的設(shè)備，端口C模擬/16的設(shè)備，端口IP配置策略路由：源/any1，動作策略路由轉(zhuǎn)發(fā)（出接口vlan-if30，下一跳），預(yù)期結(jié)果2。B能收到流量，端口CB收不到流量，端口CIGMP vlan-if10開啟測試儀端口A模擬并發(fā)送IGMPv2測試儀端口AIGMPv2DUT1組成2。IGMPIGMP 2、3、4DUT1DUT2IGMP-SnoopingVLAN10IGMP-BIGMP-Snooping組播信息，1；PC，查看IGMP-Snooping243PIM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMSMDUT1的vlan-if100使能DUT2loopback/32PIMOSPFvlan-ifDUT2loopback1PIMBSRRPBA003OSPFpingBSRRP節(jié)點(diǎn)，均為DUT2的B可以接收到端口APIMDMPIMDM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100RIPRIPBA002pingB可以接收到端口A DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100DUT124 DUT2242424DUT3242424DUT42424BA002pingB可以接收到端口AACL修改DSCP 1、2、3trunkvlan10-DSCP優(yōu)先級為40；Atag10-20且DSCP0-631B、C收到報文情況：vlan10-15DSCP40，vlan16-20的報文DSCP仍為0-63。ACL 1、2、3trunkvlan10-1IP2IPIPv4ACL1：匹配規(guī)則為源IP3150；ACL2：匹配規(guī)則為源IP31IP2IP23123121:2ACL CA/24B/24網(wǎng)段，MACMAC1 不能訪問服務(wù)器/32，入方向ACL三層IPv4配置：源IP/24，目的IP/32，端口1，動作丟包；AIP，源IP/24B發(fā)送目的IP，源IP/24的流量，預(yù)期結(jié)果1；ACLMAC/IPv4IP，源MACMAC12，動作通過；源IPany，源MACany，端口2，動作丟包；BIPMAC為MAC1且遞增的流量，2。C只能收到端口BAC只能收到源IPMAC為MAC1QoS 1、2、3 1、2Cos13的cos1，端口2映射到端口3的cos3；3A20%3B90%3A、B33AABABSP 1、2VLAN10端口1配置優(yōu)先級信任模式為DSCP模式，內(nèi)部映射隊(duì)列分別為cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN102SPVLAN10端口2配置出端口限速，限制速率為接口帶寬的10%，突發(fā)流量為A81B10%DSCP63WRR 1、2VLAN10端口1配置優(yōu)先級信任模式為DSCP模式，內(nèi)部映射隊(duì)列分別為cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN10端口2WRRA81B10%的流量，8 1、2加入同一164kbpsA、B1128kbps164kbps128kbps14A64kbpsBAB128kbpsA64kbpsB128kbpsA、B802.1X 1 2 RADIUSDUT1、2加入vlan2，且vlan-if/16；啟用802.1X認(rèn)證；端口1使能Dot1x；PC，PCpingDUT802.1x客戶端使用test1進(jìn)行認(rèn)證，預(yù)1；PC802.1xtest1RADIUSServertest2，且DUTRADIUSPC長pingDUT802.1xtest2PC802.1xtest25PCpingDUTPC能pingPCping不通PCpingDUTPC能pingPCping不通DUTMAC 1 2 RADIUSDUT1、2加入vlan2，且vlan-if2MAC地址認(rèn)證，認(rèn)證類型為本地認(rèn)證且為MAC添加本地用戶：用戶名、密碼、確認(rèn)密碼、MACPCMAC地址；端口1啟用認(rèn)證；PC，PCpingDUTPCMACRADIUSServertest2DUTRADIUS認(rèn)證，且為固定方式，3；MAC地址認(rèn)證中添加本地用戶，MACPC的MACPC長pingDUT802.1xtest2DUT上關(guān)閉RADIUS5PC能pingPCping不通PC能pingPCping不通DUTPortal 1 2 RADIUS DUT端口1、2加入vlan2，且vlan-if2地址/16，vlan-if3地址/16且PortalAcl：硬件資源調(diào)配slice2選擇認(rèn)證模式。IP/32，目的IPany11；Portal認(rèn)證中關(guān)閉WebRADIUS認(rèn)證且test22PC時，webtest1Loopback 1、2、3、4、514545241down1downVRRP vl4 DUT11、2加入同一DUT2VRRP1IP11vlan-if100，優(yōu)120；DUT3VRRP1IP11vlan-if100，優(yōu)先級100，預(yù)期結(jié)果1；DUT1DUT2的連接斷開，PCping113DUT2VRRPMASTER，DUT3VRRP狀態(tài)為pingpingVSM 2、3分布在DUT14、5、6 WebDUT12、34、5AB發(fā)送源MACMAC1清除DUT2上所有端口流量清零，測試儀端口A發(fā)送目的MAC為MAC1，源MAC為8個連續(xù)增長的二層報文，預(yù)期結(jié)果4；2downup5（CPU、DUT1DUT21:1；B接收的報文與端口AIPv4IPv4ACL DUT接口與測試儀器連接，DUT上vlan-if10、vlan-i