配置同网段Auto-Config功能示例 实验

配置同网段Auto-Config功能示例

组网需求

如图1所示，在小区接入组网的开局部署场景中，汇聚设备RouterD连接着整个小区各个楼层的新出厂设备（如RouterA、RouterB和RouterC）。

用户希望为小区内的各楼层的新设备加载相同的系统软件、补丁文件和配置文件；并且由于待配置的新设备较多，为了降低人工成本、节省开局部署的时间，用户希望各楼层设备能实现统一自动的配置。

图1 配置同网段Auto-Config功能组网图

 缺省情况下，设备的Auto-Config功能处于使能状态。

配置思路

采用以下思路配置设备：

1. RouterF与RouterD直接相连，在RouterF上配置SFTP服务器。并在RouterF上配置缺省路由，实现路由互通。
2. 将需要加载的配置文件、系统软件和补丁文件放至SFTP服务器的工作目录下，保证RouterA、RouterB和RouterC能够获取到需要加载的文件。
3. 在RouterD上配置DHCP服务器，为RouterA、RouterB和RouterC提供网络配置信息。由于待配置设备需加载相同的系统软件、补丁文件和配置文件，所以在配置DHCP服务器时，通过Option67和Option145提供需加载文件的信息。
4. RouterA、RouterB和RouterC上电，实现通过Auto-Config功能自动加载配置文件、系统软件和补丁文件。

操作步骤

配置文件

1. 在RouterF配置SFTP服务器

   # 配置SFTP服务器功能及参数。

   <Huawei> system-view
   [Huawei] sysname SFTP Server
   [SFTP Server] rsa local-key-pair create
   [SFTP Server] sftp server enable

   # 配置SSH用户登录的用户界面。

   [SFTP Server] user-interface vty 0 4
   [SFTP Server-ui-vty0-4] authentication-mode aaa
   [SFTP Server-ui-vty0-4] protocol inbound all
   [SFTP Server-ui-vty0-4] user privilege level 15
   [SFTP Server-ui-vty0-4] quit

   # 配置SSH用户。

   [SFTP Server] aaa
   [SFTP Server-aaa] local-user user password
   Please configure the login password (8-128)                                     
   It is recommended that the password consist of at least 2 types of characters, i
   ncluding lowercase letters, uppercase letters, numerals and special characters. 
   Please enter password:                                                          
   Please confirm password:
   [SFTP Server-aaa] local-user user privilege level 15
   [SFTP Server-aaa] local-user user service-type ssh
   [SFTP Server-aaa] local-user user ftp-directory flash:/autoconfig
   [SFTP Server-aaa] quit
   [SFTP Server] ssh user user authentication-type password

2. # 配置SFTP服务器的IP地址。

   [SFTP Server] interface gigabitethernet 0/0/1
   [SFTP Server-GigabitEthernet0/0/1] ip address 192.168.1.6 255.255.255.0
   [SFTP Server-GigabitEthernet0/0/1] quit

   # 在SFTP服务器上配置缺省路由。

   [SFTP Server] ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

3. 将配置文件、系统软件和补丁文件上传至SFTP服务器的工作目录flash:/autoconfig上（上传步骤略）
4. 配置DHCP服务器

   <Huawei> system-view
   [Huawei] sysname DHCP Server
   [DHCP Server] dhcp enable
   [DHCP Server] vlan 10
   [DHCP Server-vlan10] quit
   [DHCP Server] interface ethernet 5/0/1
   [DHCP Server-Ethernet5/0/1] port link-type hybrid 
   [DHCP Server-Ethernet5/0/1] port hybrid untagged vlan 10
   [DHCP Server-Ethernet5/0/1] port hybrid pvid vlan 10
   [DHCP Server-Ethernet5/0/1] quit
   [DHCP Server] interface ethernet 5/0/2
   [DHCP Server-Ethernet5/0/2] port link-type hybrid 
   [DHCP Server-Ethernet5/0/2] port hybrid untagged vlan 10
   [DHCP Server-Ethernet5/0/2] port hybrid pvid vlan 10
   [DHCP Server-Ethernet5/0/2] quit
   [DHCP Server] interface ethernet 5/0/3
   [DHCP Server-Ethernet5/0/3] port link-type hybrid 
   [DHCP Server-Ethernet5/0/3] port hybrid untagged vlan 10
   [DHCP Server-Ethernet5/0/3] port hybrid pvid vlan 10
   [DHCP Server-Ethernet5/0/3] quit
   [DHCP Server] interface gigabitEthernet 0/0/1
   [DHCP Server-GigabitEthernet0/0/1] ip address 192.168.1.1 255.255.255.0 
   [DHCP Server-GigabitEthernet0/0/1] quit
   [DHCP Server] interface vlanif 10
   [DHCP Server-Vlanif10] ip address 192.168.2.6 255.255.255.0
   [DHCP Server-Vlanif10] dhcp select global
   [DHCP Server-Vlanif10] quit
   [DHCP Server] ip pool auto-config
   [DHCP Server-ip-pool-auto-config] network 192.168.2.0 mask 255.255.255.0
   [DHCP Server-ip-pool-auto-config] gateway-list 192.168.2.6
   [DHCP Server-ip-pool-auto-config] option 67 ascii ar_V300R003.cfg
   [DHCP Server-ip-pool-auto-config] option 141 ascii user
   [DHCP Server-ip-pool-auto-config] option 142 cipher huawei@123
   [DHCP Server-ip-pool-auto-config] option 143 ip-address 192.168.1.6
   [DHCP Server-ip-pool-auto-config] option 145 ascii vrpfile=auto_V300R003.cc;vrpver=V300R003;patchfile=ar_V300R003.pat;
   [DHCP Server-ip-pool-auto-config] option 149 ascii ipaddr=192.168.1.6;port=22;
   [DHCP Server-ip-pool-auto-config] quit
   

5. SFTP服务器的配置文件

   #
    sysname SFTP Server
   #
   aaa
    local-user user ftp-directory flash:/autoconfig
    local-user user password cipher %$%$c|-D8KO4/,B[(FR.r!LHg]TK%$%$
    local-user user privilege level 15
    local-user user service-type ssh
   #
   interface GigabitEthernet0/0/1                      
    ip address 192.168.1.6 255.255.255.0 
   #
    sftp server enable
   #
   ip route-static 0.0.0.0 0.0.0.0 192.168.1.1 
   #
   user-interface vty 0 4
    authentication-mode aaa
    protocol inbound ssh
    user privilege level 15
   #
   return

6. DHCP服务器的配置文件

   #
    sysname DHCP Server
   #
   vlan batch 10
   #
    dhcp enable
   #
   ip pool auto-config
    gateway-list 192.168.2.6
    network 192.168.2.0 mask 255.255.255.0
    option 67 ascii ar_V200R003C00.cfg
    option 141 ascii user
    option 142 cipher %@%@djZ=#=yW^UB}YAMrrT;ItpY@%@%@  
    option 143 ip-address 192.168.1.6
    option 145 ascii vrpfile=auto_V300R003.cc;vrpver=V300R003;patchfile=ar_V300R003.pat;
    option 149 ascii ipaddr=192.168.1.6;port=22;
   #
   interface Vlanif10
    ip address 192.168.2.6 255.255.255.0
    dhcp select global
   #
   interface Ethernet5/0/1
    port hybrid pvid vlan 10                               
    port hybrid untagged vlan 10
   #
   interface Ethernet5/0/2
    port hybrid pvid vlan 10                           
    port hybrid untagged vlan 10
   #
   interface Ethernet5/0/3
    port hybrid pvid vlan 10                         
    port hybrid untagged vlan 10
   #
   interface GigabitEthernet0/0/1                      
    ip address 192.168.1.1 255.255.255.0 
   #
   return

7. 待配置设备RouterA、RouterB和RouterC上电启动，Auto-Config流程开始运行
8. 验证配置结果
   # Auto-Config流程结束后，登录到待配置设备执行命令display startup查看设备当前的启动系统软件，启动配置文件和启动补丁文件。以RouterA为例：

   <Huawei> display startup
   MainBoard:                                                                      
     Startup system software:                   flash:/ar_V300R003.cc      
     Next startup system software:              flash:/ar_V300R003.cc     
     Backup system software for next startup:   null                               
     Startup saved-configuration file:          flash:/ar_V300R003.cfg          
     Next startup saved-configuration file:     flash:/ar_V300R003.cfg          
     Startup license file:                      null                               
     Next startup license file:                 null                               
     Startup patch package:                     flash:/ar_V300R003.pat         
     Next startup patch package:                flash:/ar_V300R003.pat         
     Startup voice-files:                       null                               
     Next startup voice-files:                  null