江苏联通GGSN培训.ppt

《江苏联通GGSN培训.ppt》由会员分享，可在线阅读，更多相关《江苏联通GGSN培训.ppt（44页珍藏版）》请在三一办公上搜索。

1、GGSN training for Jiangsu Unicom,Motorola Cindy Wang,2,GGSN training,GGSN简介-GGSN主要功能-GGSN单板组成数据配置-接口配置-APN配置-VPN配置-计费配置常见故障定位和告警排除现网网络拓扑,3,GGSN简介,GGSN主要功能提供数据包在GPRS/UMTS网络和外部数据网络之间的路由和封装GGSN在网络中的位置,4,GGSN简介,提供的业务与功能路由静态路由,RIP,OSPF,IS-IS,BGP接入PDN透明接入非透明接入GTP功能GTP封装/解封装创建/更新/删除PDP上下文GTP承载IP,GTP承载PPP计费

2、普通计费，热计费，内容计费，预付费VPNGREL2TPMPLS安全AAA认证包过滤，ACL，Gi接口重定向QoS,5,GGSN简介,GGSN单板组成,6,GGSN简介,SRU单板（Switching and routing unit，交换与路由单元）系统管理的核心单板，固定配置在9,10槽负责搜集路由信息，产生和分发路由表GGSN数据报文交换中心GGSN操作维护代理SPU单板（Service processing unit，业务处理单元）业务处理，包括GTP-U和GTP-C处理功能 计费消息处理LPU单板（Line interface processing unit，线路接口处理单元）提供到外

3、部网络（SGSN、PDN、AAA Server、CG等）的物理接口，一般配置在1,2槽,7,数据配置,接口配置逻辑接口,GGSN逻辑接口图,接口命名规则：逻辑接口类型+接口编号 接口编号=SPU板所在槽号/虚拟接口卡号/虚拟端口号（for gn/ga/gi）or 全局编号(for g接口)如：gnif3/0/0 gaif3/0/0 giif3/0/0 gif0,SGSN,GGSN,CG,DNS,Server,AAA Server,PDN,Gn,Gi,Ga,Ga,G(Inner),LNS,DHCP Se,rver,Network,Gi,8,数据配置,物理接口与硬件网口对应，由LPU板提供命名规则

4、：物理接口类型+接口编号 接口编号=LPU板所在槽位号/业务接口卡号/端口号 如：ethernet1/0/2 逻辑接口和物理接口的对应关系：,9,数据配置,Gn/Gp接口接口协议栈,配置步骤：配置物理接口 Eg:ACT INTF:INTFN=ethernet1/0/0;ADD IP:INTFN=ethernet1/0/0,IPADDR=192.168.8.2,MASK=255.255.255.240;配置Gn/Gp逻辑接口Eg:ADD INTF:INTFN=Gnif3/0/0;ADD IP:INTFN=Gnif3/0/0,IPADDR=220.206.131.33,MASK=255.255.2

5、55.255;配置GTP相关参数 SET GTP;配置到SGSN的路由 ADD IPRT;,10,数据配置,Ga接口接口协议栈,配置步骤：配置物理接口配置Ga逻辑接口配置CG相关信息 Eg:SET CG:IP=192.168.8.23,GRD=0,TP=UMTS,SPN=3386;配置到CG的路由 ADD IPRT;,11,数据配置,Gi接口接口协议栈,非透明方式,透明方式,12,数据配置,Gi接口配置步骤配置物理接口配置Gi逻辑接口配置G逻辑接口配置到PDN，AAA Server/DHCP Server的路由配置G接口和MS下行路由 接口维护,13,数据配置,Eth-trunk接口目的：采用

6、其主备工作模式，做可靠性组网。实现：将多个物理接口捆绑成为一个Eth-trunk，以主备方式工作，主用物理接口故障，系统自动切换到备用物理接口。,GGSN reliability networking,Eth-trunk0,14,数据配置,APN配置APN基本信息 SET APN;包括APN名称、接入方式、地址分配方式、是否使用VPN，是否允许漫游用户或拜访用户接入等；APN对应的本地地址池 SET POOL;DHCP动态分配IP地址 SET DHCPSVRIP;SET APNDHCPSVRIP;AAA鉴权和计费 SET AUTH；SET ACCT配置DNS信息 SET DNS;,15,数据配

7、置,虚拟APN目的：用户可以通过携带同一个APN(虚拟APN)来接入不同的PDN实现：在GGSN上设置匹配规则，根据用户携带的虚拟APN来查找对应的真实APN，再接入到相应的PDN。提供以下四类匹配类型：,Virtual APN of the IMSI resolution mode,16,数据配置,Virtual APN of the MSISDN resolution mode,17,数据配置,Virtual APN of the RAT resolution mode,18,数据配置,Virtual APN of the PCO resolution mode,配置：SET APN:VI

8、RTUALAPN=ENABLE;SET VIRTUALAPN:SET APNRPESPT:SET APNSUFSPT;,19,数据配置,APN Aliases目的：APN别名，不同的APN使用相同的网络资源配置：SET APNRELAT,20,数据配置,VPN（Virtual Private Network）配置 VPN特点:地址隔离数据安全同一VPN内可达VPN分类:第二层隧道封装协议（将整个帧封装在隧道中）L2TP(Layer 2 Tunneling Protocol)PPTP(Point-to-Point Tunneling Protocol)第三层隧道封装协议（只将第三层报文封装在隧道

9、中）GRE(Generic Routing Encapsulation)IPSec(IP Security),21,数据配置,VPN的实现：,22,数据配置,GRE VPN的应用企业网GGSN和AAA server之间IP over GTP layer 3 GRE VPN示意图,23,数据配置,GRE VPN相关概念VPN instanceVPN标识，维护独立的路由表，与全局路由表和其它VPN实例路由表隔离RD(Route Distinguisher)VPN-IP address=RD+IP address每个VPN实例的RD值必须在GGSN全局上唯一 BindingAPN绑定VPN实例；确定

10、MS上行包属于哪个VPN实例G接口绑定VPN实例：确定MS下行包属于哪个VPN实例Gi接口绑定VPN实例：确定GGSN与AAA server的报文属于哪个VPN实例GRE隧道绑定VPN实例：确定VPN使用哪个GRE隧道,24,数据配置,GRE VPN应用于企业网的配置思路创建GRE隧道 ADD INTF;配置隧道的源端和目的端地址 SET TUNNELSRC;SET TUNNELDES;创建VPN Instance，并指定该实例的RD CRE VPNI;SET VPNRTDSTG;将MS所属APN、与APN相关的G接口、GRE隧道均捆绑到该VPN实例上 SET APN;SET VPNIBIND

11、设置VPN实例的路由信息 ADD IPRTVPN,25,数据配置,计费配置计费分类普通计费热计费预付费内容计费相关配置配置计费参数 SET CHARGE:CDRFORMAT=G3CDR,G3CV=R4V440,GVCL=20,THRESHOLD=5;配置节假日、星期和费率信息 SET FESTVL；SET WEEKDAY；SET TARIFF；,26,数据配置,内容计费目的：针对MS使用的不同业务类型进行不同计费 实现：通过在GGSN上对MS的上下行数据包配置不同的包过滤分析规则第三层过滤：源目的地IP地址第四层过滤：协议/端口号第七层过滤：应用协议URL,27,数据配置,内容计费配置举例AD

12、D FILTER:NAME=wap20_tcp,PTYPE=TCP,DSTIP=10.0.0.172,L7PROT=WAP20,URL1=;ADD CHGRULE:RNAME=uniwap_rule,FGNAME=wap20_tcp,PRIORITY=1,CK=UPDOWNSID,CHGMODE=FLOW,ACT=PARSE,UPSID=0000000001,DOWNSID=0000000001;ADD RULEUSR:OP=APN,APN=uniwap,RNAME=uniwap_rule;,28,常见故障定位和告警排除,Common ToolsCommon CommandsCasesMS A

13、ccess Failed Due To APN Configuration ErrorMS Access Failed Due To No Address AvailableMS Access Succeeded But Dropped QuicklyNo Downlink Data Received Without Gif Interface ConfiguredNo G-CDR Sent to CGW Without Gaif Configuration,29,常见故障定位和告警排除,Common ToolsMessage tracing tools in GGSNEthereal,30,

14、常见故障定位和告警排除,Common CommandsThe following commands are usually used to do troubleshooting:,LST INTF:is used to query the details of an interface.LST IP:is used to query the IP address information on an interface.LST IPRT:is used to query the routing information.PING:is used to test the interconnectiv

15、ity between the C-GGSN and some network node.TRACERT:is used to test the path between the C-GGSN and some network node.LST USR:is used to query the number of online users.LST CONTEXT:is used to query the details of PDP Context of a user.LST APN:Lists the details of an APN.LST AUTH:Lists authenticati

16、on information of APN.LST AUTHSEC:Lists authentication security key of APN.LST ACCT:Lists account information of APN.LST ACCTSEC:Lists account security key of APN.,31,常见故障定位和告警排除,MS Access Failed Due To APN Configuration Error Fault Symptomthe user fails to log in to the network.Fault Analysis Judge

17、 whether the activation message reaches the GGSN.Viewing the Gn/Gp interface tracing messagesIt shows that the communication between the SGSN and the GGSN is normal.Double click the Create PDP Context Response message to view its contents:,32,常见故障定位和告警排除,As shown,missing or unknown apn is displayed

18、in the cause fields,that is,the APN carried in the activation request message is not configured.In this case,the GGSN rejects the MS access request.View the APN configuration in the Create PDP Context Request message,33,常见故障定位和告警排除,Check the APN configuration on the GGSN by using the LST APN command

19、.Fault HandlingIncorrect the APN configuration by reconfiguring APN,34,常见故障定位和告警排除,MS Access Failed Due To No Address Available Fault SymptomThe MS fails to log in to the network.Fault AnalysisVerify whether the MS access request reaches the GGSN.Viewing the Gn/Gp interface tracing messagesIt shows

20、that the communication between the SGSN and the GGSN is normal.Double click the Create PDP Context Response message to view its contents:,35,常见故障定位和告警排除,As shown in above,no resources available is displayed in the cause field,that is,the GGSN fails to assign the resource for the MS context,then reje

21、cts the MS access request.It shows that all the addresses in the dynamic address pool are assigned.Query the usage of the address pool by using the LST POOLUSAGE command on the GGSN.,36,常见故障定位和告警排除,Query the number of online MSs by using the LST USR command on the GGSN:,%LST POOLUSAGE:APN=C-GGSNlb;%

22、RETCODE=0 Execution succeeded Address Pool Ip usage-Total valid ip number=100 Used ip number=100 Unused ip number=0,LST USR:OP=APN,APN=C-GGSNlb;%RETCODE=0 Execution succeeded APN User Number Information:-The total APN user=100!,Fault HandlingReconfigure a dynamic address pool for the APN C-GGSNlb on

23、 the GGSN,37,常见故障定位和告警排除,MS Access Succeeded But Dropped Quickly Fault Symptom The MS logs in to the UMTS network successfully but drops quicklyFound the following alarm information of GGSN in alarm console:,38,常见故障定位和告警排除,Fault AnalysisEnable the Gi interface tracing tool on the GGSN:Ping the IP ad

24、dress of the accounting server on the GGSN.The following information is displayed:,PING:IP=192.168.200.1,SRCIP=192.168.70.1;%RETCODE=0 Execution succeeded PING 192.168.200.1:56 data bytes,press CTRL_C to break Request time out Request time out Request time out Request time out-192.168.200.1 ping sta

25、tistics-4 packet(s)transmitted 0 packet(s)received 100.00%packet loss,39,常见故障定位和告警排除,Check the AAA accounting server and find that the accounting server has started normally.Check the routing configuration of the AAA accounting server and find that no route to the Giif interface address of the GGSN

26、is configured.Fault HandlingConfigure a route to the Giif interface address of the GGSN on the AAA accounting server.,40,常见故障定位和告警排除,No Downlink Data Received Without Gif Interface ConfiguredFault SymptomThe user cannot brows Web pages.Fault Analysis Open the user trace in GGSN,found that the PDP ac

27、tivation is successful.But there is only Uplink Data,no Downlink Data.You can also query the PDP Context record of the MS by LST CONTEXT on the GGSN.,41,常见故障定位和告警排除,Start the Ethereal to capture packets on the Gn and Gi interfacesAnalyze the captured packets.There is uplink MS data but no downlink d

28、ata on the Gn/Gp interface.There is both uplink user data and downlink user data on the Gi interface.Check the data configuration of related ports and find that the Gif interface and the relevant downlink route are not configured on the GGSN.Fault HandlingConfigure the Gif interface and specify the

29、downlink routes for all the MS IP addresses,42,常见故障定位和告警排除,No G-CDR Sent to CGW Without Gaif ConfigurationFault SymptomNo G-CDR is sent to the CGWFault AnalysisQuery the alarm and find the The path to CGW is down prompt,which shows that the communication between the GGSN and the CGW fails.Enable the

30、 Ga interface tracing and find that the GGSN sends the Echo Request message to the CGW but receives no response from the CGW.It shows that the CG information has been configured on GGSN,otherwise,the GGSN cannot send Echo Request to CGW.Check the data configuration about Ga interface and ip route to CGW,find that the Gaif is not configured.Fault HandlingConfigure the Gaif interface on the SPU and specify the IP address.Configure the relevant routing on the CGW.,43,现网网络拓扑图,44,Thanks!,