📄 stun.htm
字号:
<html>
<head>
<meta http-equiv="Content-Type"
content="text/html; charset=gb_2312-80">
<meta name="GENERATOR" content="Microsoft FrontPage Express 2.0">
<title>STUN配置向导</title>
</head>
<body bgcolor="#FFFFFF">
<p><font color="#008080" size="6"><em><strong><img
src="webimages/stun.GIF" width="300" height="64"></strong></em></font></p>
<hr>
<table border="0">
<tr>
<td><p align="right">这一章我们主要<br>
介绍STUN技术,什么<br>
环境会用到它,以<br>
及如何在路由器上<br>
配置实现它.最后<br>
介绍一些监控命<br>
令和配置实例.</p>
</td>
<td> </td>
<td> </td>
<td> </td>
<td> </td>
<td><ul>
<li><a href="#ss1"><font color="#008080">介绍STUN技术</font></a></li>
<li><a href="#ss2"><font color="#008080">STUN配置步骤</font></a><ul>
<li><a href="#ss3"><font color="#008080">定义STUN</font></a></li>
<li><a href="#ss4"><font color="#008080">定义STUN协议组</font></a><ul>
<li>Basic</li>
<li>SDLC</li>
<li>SDLC TG</li>
</ul>
</li>
<li><a href="#ss8"><font color="#008080">在串口上指定走STUN方式</font></a></li>
<li><a href="#ss9"><font color="#008080">定义帧打包方式</font></a><ul>
<li><a href="#ss10"><font
color="#008080">有本地应答和优先级的TCP打包方式</font></a></li>
</ul>
</li>
<li><a href="#ss11"><font color="#008080">设定STUN传输优先级</font></a></li>
</ul>
</li>
<li><a href="#ss12"><font color="#008080">监控命令</font></a></li>
<li><a href="#ss13"><font color="#008080">配置实例</font></a></li>
</ul>
</td>
</tr>
</table>
<hr>
<p><a name="ss1"></a><font color="#008080" size="5"><em><strong>介绍STUN技术</strong></em></font></p>
<p>Cisco的串口隧道技术(Serial tunnel)是Cisco为同步数据链路控制(SDLC)设备多协议的与网上设备互连而设计的.它为SDLC到SDLC数据透过IP网传输实现一条链路上走多协议提供了解决方案.</p>
<p>它能实现PU 4到PU2.0/2.1,PU 4到PU 4等互连,并且有本地应答(Local
acknowledge)功能,尽可能节省广域网带宽,保证有效数据传输.</p>
<p>它比DLSw+产生的早,目前它的大多数功能,如PU 4到PU
2.0/2.1,均可由DLSw+实现.但要用路由器实现PU 4到PU 4连接,TG组传输还要用STUN技术.</p>
<hr>
<p><a name="ss2"></a><font color="#008080" size="5"><em><strong>STUN配置步骤</strong></em></font></p>
<p><a name="ss3"></a><font color="#808080" size="4"><em><strong>定义STUN</strong></em></font></p>
<p>对STUN命令,首先配置peer-name.这条命令是定义STUN必需的(作BASIC和SDLC).没有peer-name配置,你就不能进入下面配置.</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>特殊IP地址定义STUN</td>
<td><strong>stun peer-name</strong><em> ip-address</em></td>
</tr>
</table>
<p>IP地址必须是有效的,如果定义了loopback interface,最好用looppback地址.</p>
<p><a name="ss4"></a><font color="#808080" size="4"><em><strong>定义STUN协议组</strong></em></font></p>
<p>这一步是确切决定你使用哪一种STUN协议.它有三种模式:</p>
<ul>
<li>Basic<br>
全通过方式(passthrough mode),不依赖SDLC地址,所有包不作任何控制全部转发出去.</li>
</ul>
<ul>
<li>SDLC<br>
本地应答方式,在广域网上只传输数据包,控制包在本地作应答,减少广域网流量.</li>
</ul>
<ul>
<li>SDLC Transmission Group<br>
SNA TG组是FEP间多条并行线,实现冗余和负载平衡.</li>
</ul>
<p>如果你要用本地应答特性,你必须指定SDLC协议或SDLC
transmission group协议.</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>指定basic协议组和组号</td>
<td><strong>stun protocol-group </strong><em>group-number
</em><strong>basic </strong></td>
</tr>
<tr>
<td>指定SDLC协议组和组号</td>
<td><strong>stun protocol-group </strong><em>group-number</em>
<strong>sdlc </strong></td>
</tr>
<tr>
<td>指定SDLC协议组和组号,产生SNA TG组</td>
<td><strong>stun protocol-group </strong><em>group-number</em>
<strong>sdlc</strong> <strong>sdlc-tg </strong></td>
</tr>
</table>
<p><a name="ss8"></a><font color="#808080" size="4"><em><strong>在串口上指定走STUN方式</strong></em></font></p>
<p>在我们想要走STUN端口上作定义,并把它放在刚刚指定的协议组里.</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>在串口上指定STUN方式</td>
<td><strong>encapsulation stun</strong></td>
</tr>
<tr>
<td>把端口加入前面指定的协议组里</td>
<td><strong>stun group </strong><em>group-number</em></td>
</tr>
</table>
<p><a name="ss9"></a><font color="#808080" size="4"><em><strong>定义帧打包方式</strong></em></font></p>
<p>STUN技术实现SDLC数据在IP网上传输,它的原理就是把SDLC帧再加上IP地址等IP的包头,作为一个IP数据帧传送出去.有几种不同打包方式:</p>
<ul>
<li>无本地应答的HDLC打包方式</li>
</ul>
<ul>
<li>无本地应答的TCP打包方式</li>
</ul>
<ul>
<li>有本地应答和优先级的TCP打包方式</li>
</ul>
<ul>
<li>本地应答的直接帧中继连接</li>
</ul>
<p>我们将详细说明有本地应答和优先级的TCP打包方式,其它的请参阅Cisco文档.</p>
<p><a name="ss10"></a><em><strong>有本地应答和优先级的TCP打包方式</strong></em></p>
<p>SDLC本地应答,两个末端节点SDLC会话不是端到端的,而是终止在两个路由器之间,如图所示.</p>
<p><strong>图:SDLC Session with Local Acknowledgment </strong></p>
<p><strong><img src="gif/s2079.gif" width="552" height="179"></strong></p>
<p>配置本地应答和优先级的TCP打包方式,需以下步骤:</p>
<ul>
<li>指定路由器作primary或secondary</li>
<li>指定SDLC本地应答方式</li>
<li>建立优先队列等级</li>
</ul>
<p><em>指定路由器作primary或secondary</em></p>
<p>建立SDLC本地应答,路由器必须指定作主站primary或从站secondary.主站依次轮询从站.</p>
<p>例如,在IBM环境中,一个FEP是主站而群集控制器作从站.如果路由器连接cluster
controller,路由器被当作FEP而必须指定成主站.若路由器连在EFP上,</p>
<p>路由器被当作群集控制器而指定成从站.</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>指定路由器作主站</td>
<td><strong>stun sdlc-role primary </strong></td>
</tr>
<tr>
<td>指定路由器作从站</td>
<td><strong>stun sdlc-role secondary</strong></td>
</tr>
</table>
<p><em>指定SDLC本地应答方式</em></p>
<p>在端口配置模式下:</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>TCP打包建立SDLC本地应答</td>
<td><strong>stun route address</strong> <em>address-number</em>
<strong>tcp</strong> <em>ip-address </em>[<strong>local-ack</strong>]
[<strong>priority</strong>] [<strong>tcp-queue-max</strong>]
</td>
</tr>
</table>
<p><em>建立优先队列等级</em></p>
<p>在SDLC本地应答下,可用优先级队列给串口指定优先级.有四种级别:Low,Medium,Normal,High.</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>优先级队列指定串口优先级</td>
<td><strong>stun route address </strong><em>address-number</em>
<strong>tcp</strong> <em>ip-address </em>[<strong>local-ack</strong>]
<strong>priority</strong> [<strong>tcp-queue-max</strong>]
</td>
</tr>
</table>
<p><a name="ss11"></a><font color="#808080" size="4"><em><strong>设定STUN传输优先级</strong></em></font></p>
<p>用串口地址或TCP端口号设定优先级.需要完成以下两步:</p>
<p>i) 在global配置模式下:</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>用STUN端口指定优先级</td>
<td><strong>priority-list</strong> <em>list-number</em> <strong>stun</strong>
<em>queue</em> <strong>address</strong> <em>group-number
address-number </em></td>
</tr>
<tr>
<td>指定TCP端口优先级</td>
<td><strong>priority-list </strong><em>list-number</em> <strong>protocol
ip</strong> <em>queue</em> <strong>tcp</strong> <em>tcp-port-number
</em></td>
</tr>
</table>
<p>ii) 在端口配置模式下:</p>
<table border="2" bordercolordark="#808080"
bordercolorlight="#808080">
<tr>
<td>功 能</td>
<td>命 令</td>
</tr>
<tr>
<td>把优先级队列表指定到端口上</td>
<td><strong>priority-group </strong><em>list-number </em></td>
</tr>
</table>
<hr>
<p><a name="ss12"></a><font color="#008080" size="5"><em><strong>监控命令</strong></em></font></p>
<ul>
<li><font face="Times New Roman"><em><strong>show stun</strong></em></font></li>
<li><font face="Times New Roman"><em><strong>show stun peer</strong></em></font></li>
<li><font face="Times New Roman"><em><strong>show interface</strong></em></font></li>
<li><font face="Times New Roman"><em><strong>debug stun</strong></em></font></li>
</ul>
<hr>
<p><a name="ss13"></a><font color="#008080" size="5"><em><strong>配置实例</strong></em></font></p>
<ul>
<li><a href="#ss14"><font color="#008080">STUN Basic Example</font></a></li>
<li><a href="#ss15"><font color="#008080">STUN Multipoint
(local-ack)</font></a></li>
</ul>
<p><a name="ss14"></a><strong>STUN Basic Example</strong></p>
<p>Configuration for router:</p>
<p>stun peer-name 1.0.0.1<br>
stun protocol-group 1 basic<br>
!<br>
interface serial 0<br>
no ip address<br>
encapsulation stun<br>
stun group 1<br>
stun route all tcp 1.0.0.2<br>
priority-group 1<br>
!<br>
interface ethernet 0<br>
ip address 1.0.0.1 255.0.0.0</p>
<p><a name="ss15"></a><strong>STUN Multipoint (local-ack)</strong></p>
<p>Configuration for 4700:</p>
<p>stun peer-name 1.0.0.1<br>
stun protocol-group 1 sdlc<br>
stun remote-peer-keepalive 5<br>
!<br>
interface serial 0<br>
no ip address<br>
encapsulation stun<br>
nrzi-encoding<br>
stun group 1<br>
stun sdlc-role secondary<br>
sdlc address C1<br>
sdlc address A7<br>
stun route address C1 tcp 1.0.0.2 local-ack priority<br>
stun route address A7 tcp 1.0.0.2 local-ack priority<br>
priority-group 1<br>
!<br>
interface serial 0<br>
ip address 1.0.0.1 255.0.0.0<br>
!<br>
priority-list 1 protocol ip high tcp 1994<br>
priority-list 1 protocol ip medium tcp 1990<br>
priority-list 1 protocol ip normal tcp 1991<br>
priority-list 1 protocol ip low tcp 1992<br>
priority-list 1 stun high address 1 C1<br>
priority-list 1 stun normal address 2 A7</p>
<p>Configuration for 2522:</p>
<p>stun peer-name 1.0.0.2<br>
stun protocol-group 1 sdlc<br>
stun protocol-group 2 sdlc<br>
stun remote-peer-keepalive 5<br>
!<br>
interface serial 0<br>
no ip address<br>
encapsulation stun<br>
nrzi-encoding<br>
stun group 1<br>
stun sdlc-role primary<br>
sdlc address C1<br>
stun route address C1 tcp 1.0.0.1 local-ack priority<br>
priority-group 1<br>
!<br>
interface serial 1<br>
no ip address<br>
encapsulation stun<br>
stun group 2<br>
stun sdlc-role primary<br>
sdlc address A7<br>
stun route address A7 tcp 1.0.0.1 local-ack priority<br>
priority-group 2<br>
!<br>
interface serial 0<br>
ip address 1.0.0.2 255.0.0.0<br>
!<br>
priority-list 1 protocol ip high tcp 1994<br>
priority-list 1 protocol ip medium tcp 1990<br>
priority-list 1 protocol ip normal tcp 1991<br>
priority-list 1 protocol ip low tcp 1992<br>
priority-list 1 stun high address 1 C1<br>
!<br>
priority-list 2 protocol ip high tcp 1994<br>
priority-list 2 protocol ip medium tcp 1990<br>
priority-list 2 protocol ip normal tcp 1991<br>
priority-list 2 protocol ip low tcp 1992<br>
priority-list 2 stun normal address 2 A7</p>
<hr>
<p><img src="zijin%20copywrite.GIF" width="600" height="48"></p>
</body>
</html>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -