EEE3080F Lab 3 Huawei Routers Student Lab Manual Before you start the lab exercises see the lab administrator or EEE3080F tutor to get assigned to your routers.
Contents 3.1 Introduction to Huawei routers... 8 3.1.1 Objective... 8 3.1.2 Introduction... 8 3.1.3 Preparation... 8 3.1.4 Diagram... 9 3.1.5 Experiment... 9 3.1.6 Conclusion... 14 3.1.7 Commands... 15 3.2 PAP (Password Authentication Protocol)... 15 3.2.1 Objective... 15 3.2.2 Introduction... 15 3.2.3 Preparation... 16 3.2.4 Diagram... 16 3.2.5 Experiment... 16 3.2.6 Conclusion... 19 3.2.7 Commands... 19 3.3 FRP (Frame Relay Protocol)... 20 3.3.1 Objective... 20 3.3.2 Introduction... 20 3.3.3 Preparation... 20 3.3.4 Diagram... 21 3.3.5 Experiment... 21 3.3.6 Conclusion... 24 3.3.7 Commands:... 25 3.4 CHAP (Challenge Handshake Authentication Protocol)... 25 3.4.1 Objective... 25 3.4.2 Introduction... 25 3.4.3 Preparation... 26 3.4.4 Diagram... 26 3.4.5 Experiment... 26 3.4.6 Conclusion... 29 3.4.7 Commands... 29 3.5 X.25... 30 3.5.1 Objective... 30 3.5.2 Introduction... 30 3.5.3 Preparation... 31 3.5.4 Diagram... 31 3.5.5 Experiment... 31 3.5.6 Conclusion... 36 3.5.7 Commands... 36 3.6 FRS (Frame Relay Sub-interface)... 37 3.6.1 Objective... 37 3.6.2 Introduction... 37
3.6.3 Preparation... 37 3.6.4 Diagram... 38 3.6.5 Experiment... 38 3.6.6 Conclusion... 44 3.6.7 Command... 44 3
Explanation of this Manual Attention please: when you log on the computer for LAB 3, make sure you ask the tutor to configure the cables for you, do not do it yourself!!! (1) We only prepare the manuals for compulsory labs, yet if you still have extra time, please get the manuals for other labs from the tutors. (2) Lab 3.2 and 3.3 are compulsory. The tutor will introduce 3.1, which is the basic lab of this manual. Remember the commands of the lab; try to answer the question asked. This will give you useful practice for the end of semester lab test. (3) Lab 3.4, 3.5 and 3.6 are optional. For this experiment you will need to work in pairs. The first pair will use PCs 1 and 2, second pair PCs 3 and 4, third pair PCs 5 and 6, and the fourth pair PCs 7 and 8. Before you telnet into the router you need to configure an IP address, subnet mask and default gateway for your PC. If you are using PC 1, 3, 5 or 7 configure the following: 1. IP address of PC - 10.128.0.2, subnet mask 255.255.255.0, and default gateway 10.128.0.1 (which is the IP address of the router port that you are connected to). If you are using PC 2, 4, 6 or 8 configure the following: 2. IP address of PC - 10.128.1.2, subnet mask 255.255.255.0, and default gateway 10.128.1.1 (which is the IP address of the router port that you are connected to). The configuration of the TCP/IP settings described above (these are the IP address, subnet mask and default gateway), is illustrated below: (N.B: Ignore the fact that the IP address is 202.0.0.2, it should actually be 10.128.0.2, and the gateway should be 10.128.0.1, instead of 202.0.0.1). We will give an example of the 10.128.0.2 IP address for PCs 1, 3, 5 and 7. A similar method can be used for PCs 2, 4, 6 and 8. 4
Steps: ( start - control panel )/ at the right bottom on your computer you will find the icon of- network connections -select properties of local area connections - general - internet protocol (TCP/IP)- using the following IP address (Question: Why should we configure the default gateway as 10.128.0.1?) 5
(4) We use telnet to configure the routers ( start run ): The telnet password for this lab is huawei. The IP address of the router port has already been configured so you do not need to worry about it. 6
(5) Abbreviation list (command can be abbreviated when typing if it does not conflict with another command): Normal Command Abbreviated Command Normal Command display disp Ethernet e Interface Serial Int s Abbreviated Command (6) When you finish the configuration, you can check the configuration by: [RTA] display current-configuration You can check the configuration of ports by: [RTA] display interface There are many more commands you can use which are not listed in this manual. (7) Type the first two/three letters of a command, the rest will be automatically completed by pressing Tab button on the keyboard. If you need help, then just type?, you may get the information you need. 7
3.1 Introduction to Huawei routers 3.1.1 Objective Users will learn how to use Huawei routers, how to configure the IP address of router ports, the IP address of the computer, and how to implement a network. Users will also realize communication between two routers and two PCs. 3.1.2 Introduction This lab will introduce you to the configuration of Huawei routers. In this experiment, two routers are connected by a serial cable. Each router connects to a PC. This lab will use the default protocol configurations. We only configure the IP address of the serial ports of Huawei routers and the IP address of PCs. To enable the 2 PCs to communicate with each other: 1. Enter the configuration mode of each router s serial port and set the IP address. 2. Set the IP address of PCs 1, 3, 5 or 7, to 10.128.0.2 for the PCs 2, 4, 6 or 8 to 10.128.1.2. 3. You will telnet into the router IP address which will be 10.128.0.1 for PCs 1, 3, 5 or 7, and 10.128.1.1 for PCs 2, 4, 6 or 8, and use the login password huawei. 3.1.3 Preparation Two PCs with 10/100M NIC installed Two Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables. 8
3.1.4 Diagram RTA 192.0.0.1 192.0.0.2 RTB 255.255.255.0 255.255.255.0 S 1/1 S 1/1 10.128.0.1 10.128.0.2 E 0/0 E 0/0 255.255.255.0 255.255.255.0 10.128.0.2 10.128.1.2 PC 2,4,6 or 8 255.255.255.0 PC 1,3,5 or 7 255.255.255.0 3.1.5 Experiment 1. Log in to the Router using: telnet 10.128.0.1 for connections to routers 1, 3, 5 or 7. The login password is huawei. telnet 10.128.1.1 for connections to routers 2, 4, 6 or 8. The login password is huawei. 9
2. Log in to the system and change the name of the router to RTA (if you are accessing router 1, 3, 5 or 7). If you are accessing routers 2, 4, 6 or 8, change the router name to RTB. If you get informational (logging) messages on your console screen, such as the ones shown below, ignore them and press enter, and continue with the lab. 10
3. Enter the serial port S 1/1 of RTA, interface configuration mode 4. Set the IP address of S 1/1 of RTA: 192.0.0.1 255.255.255.0 and if you are accessing RTB, set the IP address of its serial interface, S 1/1 to 192.0.0.2 255.255.255.0. If you get the following log messages: Shutdown and Undo Shutdown are to refresh the states of the ports. 11
Type shutdown then enter, followed by undo shutdown then enter. 5. The IP addresses of the E 0/0 ethernet ports were set before you began the lab. This was done to enable you to access the router using the telnet program. However for your own knowledge, the configuration of the IP address of an Ethernet port (in this case E 0/0) is shown below: Enter Ethernet port E 0/0 of RTA, interface configuration mode Set the IP address of Ethernet port E 0/0 of RTA as: 202.0.0.1 255.255.255.0. (N.B: In this case the IP address was set to 202.0.0.1, while in the actual lab experiment, router RTA, was set to 10.128.0.1. The subnet mask is 255.255.255.0 in both cases). 12
(Question: can we set the IP address here as 192.0.0.5 255.255.255.0? Why?) The same steps can be carried out to configure the IP address of router RTB, to 10.128.1.1, and the subnet mask to 255.255.255.0. 6. Log in to RTB using the same step as RTA. 7. Set the IP address of S 1/1 of RTB to 192.0.0.2 255.255.255.0 8. Check the communication between the computers and the routers. Using: start - run - cmd - on PCs 1, 3, 5 or 7: ping 10.128.0.1 ping 192.0.0.1 13
ping 192.0.0.2 From PCs 2, 4, 6 or 8: ping 10.128.1.1, 192.0.0.2 and 192.0.0.1. (Question: Why do we ping the IP addresses in this order from both PCs?) 3.1.6 Conclusion When you check the configuration of RTA and RTB by: [RTA]display interfaces You will find that PPP encapsulation has automatically been selected for the serial interfaces. That means the default protocol of the serial interface on a Huawei router is PPP. From this experiment we learn how to set the IP address of serial ports and Ethernet ports, how to set the IP address of PCs, and how to check the communication between the PCs. 14
The steps are summarized: (1) Log in to the routers. (2) Set the IP address of serial port and Ethernet port of RTA and RTB. (2) Set the IP address of the PCs. (3) Check the result of this experiment whether PCA and PCB can communicate. 3.1.7 Commands RTA: [RTA] interface S 1/1 [RTA-s 1/1] IP address 192.0.0.1 255.255.255.0 [RTA] display current-configuration [RTB]: [RTB] interface S 1/1 [RTB-s 1/1] IP address 192.0.0.2 255.255.255.0 [RTB] display current-configuration 3.2 PAP (Password Authentication Protocol) 3.2.1 Objective Learn to configure PPP PAP authentication protocol. Realize the communication between two routes with PAP authentication protocol. 3.2.2 Introduction PAP is a 2-handshake authentication and the password is transmitted in plain text. In the first lab of this chapter, we know that if we do not configure any protocol, PPP will be automatically encapsulated. This lab wants to configure PAP protocol to realize the communication between two Huawei routers. Serial ports s 1/1 are selected to configure PAP protocol. This lab wants to realize the communication between two s 1/1 with PAP 15
authentication protocol; therefore, the step for configuring the IP address of PCs in the first lab is unnecessary. It has the following steps. 1. Set the IP address of the selected serial port interface of the Router Authentication Party RTA: 2. Configure the user list. 3. Authorize PAP authentication. Authenticated Party RTB: 4. Configure PAP user. 3.2.3 Preparation One PC with 10/100M NIC installed Two Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables 3.2.4 Diagram RTA 11.22.33.44 255.255.255.0 S 1/1 11.22.33.40 255.255.255.0 S 1/0 RTB Console PC A 3.2.5 Experiment Configure RTA 16
1. Log in 2. Set the IP address of s1/1 of RTA 3. Add user RTB and set the password. 4. Authorize the PAP authentication mode. 17
Configure RTB 5. Log in and configure IP address of S 1/1 6. Configure PAP user and the password. 7. Check the communication between both PCs, and RTA and RTB 18
3.2.6 Conclusion This lab wants to realize the communication between two PCs with PAP authentication. There are two parts of PAP, authenticating party and authenticated party. In authenticating party we should: (1) Configure user list with the password and (2) Configure PAP authentication. In authenticated party we should (1) Configure PAP send user. 3.2.7 Commands RTA [RTA] local-user RTB [RTA-luser-RTB] password simple hello [RTA-luser-RTB] quit [RTA] int s 1/1 [RTA-s 1/1] IP address 11.22.33.44 255.255.255.0 [RTA-s 1/1] PPP authentication-mode pap RTB [RTB] int s 1/1 [RTB-s1/1] IP address 11.22.33.40 255.255.255.0 [RTB-s1/1] PPP pap local-user RTB 19
[RTB-luser-RTA] password simple hello 3.3 FRP (Frame Relay Protocol) 3.3.1 Objective Learn to configure FRP. Realize the communication of two routers with FRP protocol. 3.3.2 Introduction The frame relay protocol is a kind of fast packet switching technology based on X.25 protocol. FRP only implements the function of the core of the link layer; therefore it is simpler and more efficient to forward or switch data units in the data link layer. This experiment has the following steps: 1. Encapsulate interface. 2. Configure the terminal type of frame relay interface. 3. Allocate DLCI on DCE. 3.3.3 Preparation One PC with 10/100M NIC installed Two Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables 20
3.3.4 Diagram RTA Console 202.38.7.1 202.38.7.21 202.38.7.56 255.0.0.0 DLCI=100 255.0.0.0 S 1/1 DCE DTE S 1/1 RTB PC A 3.3.5 Experiment RTA 1. Enable frame relay switching 2. Configure the IP address of the interface 21
3. Configure the interface encapsulation as frame relay 4. Configure local virtual circuit 5. Configure static address mapping 22
RTB 6. Configure the IP address of the interface 7. Configure the interface encapsulation as frame relay 8. Configure static address mapping 23
9. Check the communication between both PCs, and RTA and RTB (Question: Change the DLCI for R1 S 2/1 as 200: [RTA -S 1/1] fr dlci 200 Ping the address 202.38.7.21, succeed or not? Then change the command as: [R1-S 2/1] fr inarp Ping the address 202.38.7.21, succeed or not?) 3.3.6 Conclusion FRP is an important lab. In this lab, the following job should be completed to realize the communication between two Huawei routers: (1) Encapsulate the frame relay protocol Link-protocol frame-relay (2) Configure the terminal type of the frame relay interface Fr interface {dce / dte} 24
3.3.7 Commands: RTA [RTA] fr switching [RTA] interface S 1/1 [RTA-S 1/1] IP address 202.38.7.21 255.0.0.0 [RTA-S 1/1] link-protocol fr [RTA-S 1/1] fr interface-type dce [RTA-S 1/1] fr dlci 100 [RTA-fr-dlci-S 1/1-100] fr map ip 202.38.7.56 dlci 100 RTB [RTB] interface S 1/1 [RTB-S 1/1] IP address 202.38.7.56 255.0.0.0 [RTB-S 1/1] link-protocol fr [RTB-S 1/1] fr interface-type dte [RTB-S 1/1] fr map IP 202.38.7.21 dlci 100 3.4 CHAP (Challenge Handshake Authentication Protocol) 3.4.1 Objective Learn to configure CHAP protocol. Realize the communication between two Huawei routers using CHAP authentication protocol. 3.4.2 Introduction CHAP is a 3-handshake protocol. The authentication is originated by the authenticating part. Like PAP authentication protocol, there are two parts in CHAP, authenticating party and authenticated party. 1. Set the IP address of the selected serial port interface of the Router Authentication Party: 2. Configure authentication method. 3. Configure local host name. 4. Add the remote user name and password to the local user list. 25
Authenticated Party: 5. Configure the local host name and the remote user name and password. 3.4.3 Preparation One PC with 10/100M NIC installed Two Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables 3.4.4 Diagram RTA 10.0.0.8 255.0.0.0 S 1/1 10.0.0.23 255.255.255.0 S 1/1 RTB Console PC A 3.4.5 Experiment RTA 26
RTB 27
28
Check the communication between both PC, and RTA and RTB. 3.4.6 Conclusion In CHAP authentication protocol, we have the following things to do: (1) Authenticating party configuration: Configure authentication method ppp authentication-mode chap Configure local host name ppp CHAP user username Add the remote user name and password to the local user list. local-user username password simple password (2) Authenticated party configuration: Configure the local host name and the remote user name and the password. ppp CHAP user username local-user username password simple password 3.4.7 Commands RTA [RTA] local-user RTB [RTA-luser-RTB] password simple hello [RTA] int s 1/1 [RTA-s 1/1] PPP chap user RTA [RTA-s 1/1]PPP authentication-mode chap 29
RTB [RTB] local-user RTA [RTA-luser-RTB] password simple hello [RTA] int s 1/1 [RTA-s1/1] PPP chap user RTB 3.5 X.25 3.5.1 Objective Learn to configure X.25 protocol. Realize the communication of two computer use X.25 protocol. 3.5.2 Introduction The X.25 recommendation is the interface specification between the DTE and the DCE. Its main function is to describe how to set up virtual circuit, transmission packets, set up links, transmit data, release links and to clear the virtual circuits between the DTE and the DCE, and in the meantime, it will implement the error control, flow control, statistics, etc. And also it provides users with some optional services and configuration functions. (Note: The DTE and DCE here are different form the DTE and DCE of the physical interface. Here DTE means the user equipment such as routers, etc; DCE means equipments such as packet switch, etc. Route can also sever as the DCE.) In the first experiment of this chapter, we know that if we do not configure any protocol, PPP will be automatically encapsulated. That means this experiment should configure X.25 by hand. It has the following steps. 1. Set the IP address of the selected interface of the Router 2. Configure the interface to encapsulate it as the X. 25. 3. Specify its work model: DTE or DCE. 4. Specify the address mapping. 5. Set the flow control parameter. 30
3.5.3 Preparation One PC with 10/100M NIC installed Two Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables 3.5.4 Diagram RTA (DTE) 202.38.160.1 202.38.1600.2 RTB (DCE) 20112451 255.255.255.0 255.255.255.0 20112452 S 1/1 S 1/1 Console PC A 3.5.5 Experiment RTA: 1. Configure the IP address of S 1/1 of RTA 31
2. Encapsulate this interface as the X.25 interface and specify that it works in the DTE mode. 3. Specify the X.121 address in this interface 32
4. Specify the address mapping to the remote end 5. Set the flow control parameter RTB: 6. Configure the IP address of S 1/1 of RTB 33
7. Encapsulate this interface as the X.25 interface and specify that it works in the DTE mode. 8. Specify the X.121 address in this interface 34
9. Specify the address mapping to the remote end 10. Set the flow control parameter 11. Check the communication between both PCs, and RTA and RTB 35
(Question: Please change the command of step 9 as: [RTB- S 1/1] X25 map IP 202.38.160.5 X121-address 20112451 Try to ping the address 202.38.160.2, succeed or fail? Why?) Then input: [RTB- S 1/1] undo X25 map IP 202.38.160.1 X121-address 20112451, ping again, succeed or fail? Why?) 3.5.6 Conclusion In this lab, the following steps should be completed: (1) Configure the work mode of X.25 link-protocol X. 25 [dte/dce] (2) Congigure the X. 121 address X25 X121-address X. 121-address (3) Create the map between network address and X. 121 address X25 map protocol protocol-address x121-address X.121-address [?] 3.5.7 Commands [RTA] interface s 1/1 [RTA- S 1/1] IP address 202.38.160.1 255.255.255.0 [RTA- S 1/1] link-protocol X25 DTE [RTA- S 1/1] X25 X121-address 20112451 [RTA- S 2/0] X25 map IP 202.38.160.2 X121-address 20112452 [RTB] interface s 1/1 [RTB- S 1/1] IP address 202.38.160.2 255.255.255.0 [RTA- S 1/1] link-protocol X25 DCE [RTA- S 1/1] X25 X121-address 20112452 [RTA- S 1/1] X25 map IP 202.38.160.1 X121-address 20112451 36
3.6 FRS (Frame Relay Sub-interface) 3.6.1 Objective Learn to configure FRS protocol. Realize the communication among the computers with FRS 3.6.2 Introduction FRS aims at solving the issue of split horizon in FR, therefore it adds a function called sutinterface. That means on each physical interface we can set several subinterfaces, each has its own IP address. The function of the subinterface is the same as the physical interface, therefore the problem of split horizon is solved. This experiment has the following steps: 1. Configure the frame relay switch, enable frame relay switching, configure frame relay interface type, and configure PVC route. 2. Create subterface, allocate DLCI, create address mapping, and configure IP address on one Router. 3. Allocate DLCI, create address mapping, and configure IP address on other two Routers. 3.6.3 Preparation One PC with 10/100M NIC installed Three Routers (Quidway AR 28-31) with 100/1000M Ethernet ports, Serial ports. Console cable, Cross cables. 37
3.6.4 Diagram 192.0.0.2 255.255.255.0 DLCI=100 S 1/1 R2 DTE R1 DTE 192.0.0.1 255.255.255.0 DLCI=300 S 1/1.1 S 1/1 S 1/1.2 S 2/0 R4 DCE Frame-relay switch Console 192.0.1.1 DLCI=400 255.255.255.0 S 2/1 PC A S 1/1 192.0.1.2 255.255.255.0 DLCI=200 R3 DTE 3.6.5 Experiment R1 1. Configure the interface encapsulation as FR 2. Create sub-interface of S 1/1.1, allocate DLCI, create address mapping, and configure IP address. 38
3. Create sub-interface of S 1/1.2, allocate DLCI, create address mapping, and configure IP address. R2: 4. Allocate DLCI, create address mapping, and configure IP address. 39
R3: 5. Allocate DLCI, create address mapping, and configure IP address. R4: 6. Enable frame relay switching 40
7. Configure frame relay interface type. Configure PVC switching route. 8. Create subinterface. 41
9. Configure FRP on S 2/0. 10. Configure FRP on S 2/1. 11. Check the communication among the routers: Ping from [R1] S 1/1.1 to 192.0.0.2 42
Ping from [R1] S 1/1.1 to 192.0.1.2 Ping from [R3] S 1/1 to 192.0.1.1 Ping from [R3] S 1/1 to 192.0.0.1 43
3.6.6 Conclusion In FRS lab, we should follow three steps: (1) Configure the frame relay switch (R4), including; Set IP address, enable frame relay switching, configure frame relay interface type, and configure PVC route. (Question: Why should not we set the IP address here?) (2) Configure R1, including: Create subinterface, set up address mapping, allocate DLCI (3) Configure R2 and R3, including: Sep IP address, enable frame relay switching, create address mapping, allocate DLCI. 3.6.7 Command R1: [R1] int s 1/1 [R1-s 1/1] link-protocol fr [R1-s 1/1] int s 1/1.1 [R1-s 1/1.1] fr map ip 192.0.0.2 300 [R1-s 1/1.1] fr dlci 300 [R1-s 1/1.1] ip address 192.0.0.1 255.255.255.0 [R1-s 1/1] int s 1/1.2 [R1-s 1/1.2] fr map ip 192.0.1.2 400 [R1-s 1/1.2] fr dlci 400 [R1-s 1/1.2] ip address 192.0.1.1 255.255.255.0 R2: [R2] fr switching [R2] link-protocol fr [R2-s 1/1] fr interface-type dce [R2-s 1/1] fr dlci-switch 300 interface s 2/0 dlci 100 [R2-s 1/1] fr dlci-switch 400 interface s 2/1 dlci 200 [R2-s 1/1] fr dlci 300 44
[R2-s 1/1] fr dlci 400 [R2-s 1/1] int s 1/1.1 [R2-s 1/1.1] int s 1/1.2 [R2] int s 2/0 [R2-s 2/0] link-protocol fr [R2-s 2/0] fr interface-type dce [R2-s 2/0] fr dlci-switch 100 interface s 1/1 dlci 300 [R2-s 2/0] fr dlci 100 [R2] int s 2/1 [R2-s 2/1] link-protocol fr [R2-s 2/1] fr interface-type dce [R2-s 2/1] fr dlci-switch 200 interface s 1/1 dlci 400 [R2-s 2/1] fr dlci 200 R3: [R3] int s 1/1 [R3-s 1/1] link-protocol fr [R3-s 1/1] fr map ip 192.0.0.1 100 [R3-s 1/1] fr dlci 100 [R3-s 1/1] ip add 192.0.0.2 255.255.255.0 R4: [R3] int s 1/1 [R4-s 1/1] link-protocol fr [R4-s 1/1] fr map ip 192.0.1.1 200 [R4-s 1/1] fr dlci 100 [R4-s 1/1] ip add 192.0.1.2 255.255.255.0 45