江蘇聯(lián)通GGSN培訓課件

GGSNtrainingforJiangsuUnicomMotorolaCindyWang1GGSNtrainingGGSN簡介 -GGSN主要功能 -GGSN單板組成數(shù)據(jù)配置 -接口配置

-APN配置 -VPN配置 -計費配置常見故障定位和告警排除現(xiàn)網(wǎng)網(wǎng)絡拓撲2GGSN簡介GGSN主要功能提供數(shù)據(jù)包在GPRS/UMTS網(wǎng)絡和外部數(shù)據(jù)網(wǎng)絡之間的路由和封裝GGSN在網(wǎng)絡中的位置3GGSN簡介GGSN單板組成 5GGSN簡介SRU單板（Switchingandroutingunit，交換與路由單元）系統(tǒng)管理的核心單板，固定配置在9,10槽負責搜集路由信息，產(chǎn)生和分發(fā)路由表GGSN數(shù)據(jù)報文交換中心GGSN操作維護代理SPU單板（Serviceprocessingunit，業(yè)務處理單元）業(yè)務處理，包括GTP-U和GTP-C處理功能計費消息處理LPU單板（Lineinterfaceprocessingunit，線路接口處理單元）提供到外部網(wǎng)絡（SGSN、PDN、AAAServer、CG等）的物理接口，一般配置在1,2槽6數(shù)據(jù)配置接口配置邏輯接口GGSN邏輯接口圖接口命名規(guī)則：邏輯接口類型+接口編號接口編號=SPU板所在槽號/虛擬接口卡號/虛擬端口號（forgn/ga/gi）or全局編號(forg接口)如：gnif3/0/0gaif3/0/0giif3/0/0gif0SGSNGGSNCGDNSServerAAAServerRRPDNGnGiGaGaG(Inner)RLNSDHCPServerNetworkRGi7數(shù)據(jù)配置物理接口與硬件網(wǎng)口對應，由LPU板提供命名規(guī)則：物理接口類型+接口編號接口編號=LPU板所在槽位號/業(yè)務接口卡號/端口號如：ethernet1/0/2邏輯接口和物理接口的對應關系：LPUSPUSRUGGSNGn/GpGaGiG123SGSNCGAAA/DHCPServerPDNLogicalInterfacePhysicalInterface8數(shù)據(jù)配置Ga接口接口協(xié)議棧配置步驟：配置物理接口配置Ga邏輯接口配置CG相關信息Eg:SETCG:IP="3",GRD=0,TP=UMTS,SPN=3386;配置到CG的路由ADDIPRT;10數(shù)據(jù)配置Gi接口配置步驟配置物理接口配置Gi邏輯接口配置G邏輯接口配置到PDN，AAAServer/DHCPServer的路由配置G接口和MS下行路由接口維護CommandFunctionLSTINTFListstheconfigurationofaninterfaceLSTIPListstherunningstateofaninterface.PINGCheckwhetherthelinkbetweentheGGSNandtheotherentity(eg,SGSN,CGW,etc)isnormalLSTCGSTATQuerytheworkingstateofallCGsoraspecifiedCG.12數(shù)據(jù)配置APN配置APN基本信息SETAPN;包括APN名稱、接入方式、地址分配方式、是否使用VPN，是否允許漫游用戶或拜訪用戶接入等；APN對應的本地地址池SETPOOL;DHCP動態(tài)分配IP地址SETDHCPSVRIP;SETAPNDHCPSVRIP;AAA鑒權和計費SETAUTH；SETACCT配置DNS信息SETDNS;14數(shù)據(jù)配置虛擬APN目的：用戶可以通過攜帶同一個APN(虛擬APN)來接入不同的PDN實現(xiàn)：在GGSN上設置匹配規(guī)則，根據(jù)用戶攜帶的虛擬APN來查找對應的真實APN，再接入到相應的PDN。提供以下四類匹配類型：VirtualAPNoftheIMSIresolutionmode15數(shù)據(jù)配置

VirtualAPNoftheMSISDNresolutionmode16數(shù)據(jù)配置

VirtualAPNoftheRATresolutionmode17數(shù)據(jù)配置VirtualAPNofthePCOresolutionmode配置：SETAPN:VIRTUALAPN=ENABLE;SETVIRTUALAPN:SETAPNRPESPT:SETAPNSUFSPT;18數(shù)據(jù)配置VPN（VirtualPrivateNetwork）配置VPN特點:地址隔離數(shù)據(jù)安全同一VPN內(nèi)可達VPN分類:第二層隧道封裝協(xié)議（將整個幀封裝在隧道中）L2TP(Layer2TunnelingProtocol)PPTP(Point-to-PointTunnelingProtocol)第三層隧道封裝協(xié)議（只將第三層報文封裝在隧道中）GRE(GenericRoutingEncapsulation)IPSec(IPSecurity)20數(shù)據(jù)配置VPN的實現(xiàn)：21數(shù)據(jù)配置GREVPN相關概念VPNinstanceVPN標識，維護獨立的路由表，與全局路由表和其它VPN實例路由表隔離 RD(RouteDistinguisher)VPN-IPaddress=RD+IPaddress每個VPN實例的RD值必須在GGSN全局上唯一BindingAPN綁定VPN實例；確定MS上行包屬于哪個VPN實例G接口綁定VPN實例：確定MS下行包屬于哪個VPN實例Gi接口綁定VPN實例：確定GGSN與AAAserver的報文屬于哪個VPN實例GRE隧道綁定VPN實例：確定VPN使用哪個GRE隧道23數(shù)據(jù)配置GREVPN應用于企業(yè)網(wǎng)的配置思路創(chuàng)建GRE隧道ADDINTF;配置隧道的源端和目的端地址SETTUNNELSRC;SETTUNNELDES;創(chuàng)建VPNInstance，并指定該實例的RDCREVPNI;SETVPNRTDSTG;將MS所屬APN、與APN相關的G接口、GRE隧道均捆綁到該VPN實例上SETAPN;SETVPNIBIND設置VPN實例的路由信息ADDIPRTVPN24數(shù)據(jù)配置內(nèi)容計費目的：針對MS使用的不同業(yè)務類型進行不同計費實現(xiàn)：通過在GGSN上對MS的上下行數(shù)據(jù)包配置不同的包過濾／分析規(guī)則第三層過濾：源／目的地IP地址第四層過濾：協(xié)議/端口號第七層過濾：應用協(xié)議／URL 26數(shù)據(jù)配置內(nèi)容計費配置舉例ADDFILTER:NAME="wap20_tcp",PTYPE=TCP,DSTIP="72",L7PROT=WAP20,URL1="";ADDCHGRULE:RNAME="uniwap_rule",FGNAME="wap20_tcp",PRIORITY=1,CK=UPDOWNSID,CHGMODE=FLOW,ACT=PARSE,UPSID="0000000001",DOWNSID="0000000001";ADDRULEUSR:OP=APN,APN="uniwap",RNAME="uniwap_rule"; 27常見故障定位和告警排除CommonToolsCommonCommandsCasesMSAccessFailedDueToAPNConfigurationErrorMSAccessFailedDueToNoAddressAvailableMSAccessSucceededButDroppedQuicklyNoDownlinkDataReceivedWithoutGifInterfaceConfiguredNoG-CDRSenttoCGWWithoutGaifConfiguration28常見故障定位和告警排除CommonCommandsThefollowingcommandsareusuallyusedtodotroubleshooting:LSTINTF:isusedtoquerythedetailsofaninterface.LSTIP:isusedtoquerytheIPaddressinformationonaninterface.LSTIPRT:isusedtoquerytheroutinginformation.PING:isusedtotesttheinterconnectivitybetweentheC-GGSNandsomenetworknode.TRACERT:isusedtotestthepathbetweentheC-GGSNandsomenetworknode.LSTUSR:isusedtoquerythenumberofonlineusers.LSTCONTEXT:isusedtoquerythedetailsofPDPContextofauser.LSTAPN:ListsthedetailsofanAPN.LSTAUTH:ListsauthenticationinformationofAPN.LSTAUTHSEC:ListsauthenticationsecuritykeyofAPN.LSTACCT:ListsaccountinformationofAPN.LSTACCTSEC:ListsaccountsecuritykeyofAPN.30常見故障定位和告警排除MSAccessFailedDueToAPNConfigurationErrorFaultSymptomtheuserfailstologintothenetwork.FaultAnalysisJudgewhethertheactivationmessagereachestheGGSN.ViewingtheGn/GpinterfacetracingmessagesItshowsthatthecommunicationbetweentheSGSNandtheGGSNisnormal.DoubleclicktheCreatePDPContextResponsemessagetoviewitscontents:31常見故障定位和告警排除Asshown,missingorunknownapnisdisplayedinthecausefields,thatis,theAPNcarriedintheactivationrequestmessageisnotconfigured.Inthiscase,theGGSNrejectstheMSaccessrequest.ViewtheAPNconfigurationintheCreatePDPContextRequestmessage32常見故障定位和告警排除ChecktheAPNconfigurationontheGGSNbyusingtheLSTAPNcommand.FaultHandlingIncorrecttheAPNconfigurationbyreconfiguringAPN33常見故障定位和告警排除MSAccessFailedDueToNoAddressAvailableFaultSymptomTheMSfailstologintothenetwork.FaultAnalysisVerifywhethertheMSaccessrequestreachestheGGSN.ViewingtheGn/GpinterfacetracingmessagesItshowsthatthecommunicationbetweentheSGSNandtheGGSNisnormal.DoubleclicktheCreatePDPContextResponsemessagetoviewitscontents:34常見故障定位和告警排除Asshowninabove,noresourcesavailableisdisplayedinthecausefield,thatis,theGGSNfailstoassigntheresourcefortheMScontext,thenrejectstheMSaccessrequest.Itshowsthatalltheaddressesinthedynamicaddresspoolareassigned.QuerytheusageoftheaddresspoolbyusingtheLSTPOOLUSAGEcommandontheGGSN.35常見故障定位和告警排除QuerythenumberofonlineMSsbyusingtheLSTUSRcommandontheGGSN:%%LSTPOOLUSAGE:APN="C-GGSNlb";%%RETCODE=0Executionsucceeded

AddressPoolIpusage

Totalvalidipnumber=100Usedipnumber=100Unusedipnumber=0LSTUSR:OP=APN,APN="C-GGSNlb";%%RETCODE=0ExecutionsucceededAPNUserNumberInformation:

ThetotalAPNuser=100!FaultHandlingReconfigureadynamicaddresspoolfortheAPNC-GGSNlbontheGGSN36常見故障定位和告警排除MSAccessSucceededButDroppedQuicklyFaultSymptomTheMSlogsintotheUMTSnetworksuccessfullybutdropsquicklyFoundthefollowingalarminformationofGGSNinalarmconsole:37常見故障定位和告警排除FaultAnalysisEnabletheGiinterfacetracingtoolontheGGSN:PingtheIPaddressoftheaccountingserverontheGGSN.Thefollowinginformationisdisplayed:PING:IP="",SRCIP="";%%RETCODE=0Executionsucceeded

PING:56databytes,pressCTRL_CtobreakRequesttimeoutRequesttimeoutRequesttimeoutRequesttimeoutpingstatistics4packet(s)transmitted0packet(s)received100.00%packetloss

38常見故障定位和告警排除ChecktheAAAaccountingserverandfindthattheaccountingserverhasstartednormally.ChecktheroutingconfigurationoftheAAAaccountingserverandfindthatnoroutetotheGiifinterfaceaddressoftheGGSNisconfigured.FaultHandlingConfigurearoutetotheGiifinterfaceaddressoftheGGSNontheAAAaccountingserver.39常見故障定位和告警排除NoDownlinkDataReceivedWithoutGifInterfaceConfiguredFaultSymptomTheusercannotbrowsWebpages.FaultAnalysisOpentheusertraceinGGSN,foundthatthePDPactivationissuccessful.ButthereisonlyUplinkData,noDownlinkData.YoucanalsoquerythePDPContextrecordoftheMSbyLSTCONTEXTontheGGSN.40常見故障定位和告警排除StarttheEtherealtocapturepacketsontheGnandGiinterfacesAnalyzethecapturedpackets.ThereisuplinkMSdatabutnodownlinkdataontheGn/Gpinterface.ThereisbothuplinkuserdataanddownlinkuserdataontheGiinterface.CheckthedataconfigurationofrelatedportsandfindthattheGifinterfaceandtherelevantdownlinkroutearenotconfiguredontheGGSN.FaultHandlingConfiguretheGifinterfaceandspecifythedownlinkroutesforalltheMSIPaddresses 41常見故障定位和告警排除NoG-CDRSenttoCGWWithoutGaifConfigurationFaultSymptomNoG-CDR