MPLS网络改造中X.25路由的处理方法

标题：MPLS网络改造中X.25路由的处理 H=V}lTW
I、问题描述： J-l@J-kn
最近技术咨询中遇到的问题，某省运营商网络改造，建立MPLS骨干网络，MPLS目标省中心服务器将划分入对应VPN中。现网中 6)`;>{Ah
，地市有些很旧的话务采集机，系用X.25协议（不支持IP），现在穿过IP网络与省中心服务器有业务流量。勘查发现，现地市X .25配置类似： 6X;N~M R
------------------------------------------------------------ -G!)#4lS
--- 3)er!O0nD
! V.TAmrx
W
x25 route 1761 xot 15.14.10.9 xot-source .?oAD?8
FastEthernet1/0.99 3wtfF bH
x25 route 1762 xot 15.14.10.9 xot-source 
Ven)aK
FastEthernet1/0.99 A$MpyL R0"
x25 route 1751 xot 15.14.10.71 xot-source <]nH<:mi
FastEthernet1/0.99 L(K K5K.
x25 route 1752 xot 15.14.10.71 xot-source LY%83p1l 
FastEthernet1/0.99 Pbgvz-Mjv)
x25 route 1781 xot 15.19.10.111 xot-source ?M6&q?OPCe
FastEthernet1/0.99 r;$Yh8DamW
x25 route 1782 xot 15.14.10.111 xot-source 2JHq2X9nQ
FastEthernet1/0.99 RnD)&VT I%
x25 route 1771 xot 15.14.10.8 xot-source YzD'enMe^+
FastEthernet1/0.99 g7hK H9k
x25 route 1772 xot 15.14.10.8 xot-source U;JH\E1H
FastEthernet1/0.99 Caaf$<=4?
x25 route 1731 xot 15.14.10.141 xot-source }..yi=N`f
FastEthernet1/0.99 j>n1O?
x25 route 1732 xot 15.14.10.141 xot-source FastEthernet1/0.99 CPBt^-(p
|eD.T^
lXn1yaC>
----------------------------------------------------------- x~}ACCx;D$
II、问题分析： Pm+nQ}
该配置可能存在问题，目前接口Fa1/0.99在路由器上已经不存在。可以推测这个子接口曾经是存在的，否之以上这些命令配置不 |#R&[##
上。启用了MPLS VPN之后，只需保证XOT的源---目的地址连通，X.25的通讯即可维持现状，不致中断。但目前源地址并不可靠，需明确以上 TeU$}]wO
路由是否仍在使用，并且使用何源地址？ LW#CX1e\J
&dH8d8x
#=*III、调试过程： ~"_PW{N2"
实验室验证过程如下： jK[y$|`;+
连接R1--R2---R3---R4 /0]_'03$&
配置： t-KI"HX|i
JjuKhnR1： lH
[5G]h
! }"5P82[
hostname R1 iAEA R?z
! 4|p&3l6
x25 routing 80<|j

! ,c* bX9byh
inte***ce Serial1/0 ,gX= d5.k
no q0,>?0O
ip address E,Dmy=`UO{
encapsulation x25 D;9j^ A
no ip mroute-cache p8fvC(3
x25 4w ^gjKp
address 45678 y-sS:6
x25 win 5 y%a] d({
x25 wout 5 rEE!NK1cv
x25 ips zph
Q2#j5"
256 .m^O4p\
x25 ops 256 NZ{ 7
x25 idle 1 8-EDEc?c'h
! !9!HH%C])
R2： 4 PyQ4
service pad to-xot TF8fN|lR<
! "x 1o%:90q
hostname R2 C(o.,F(9
! \|W1[r
x25 ,?"M YdP|/
routing $=n5h/ 60
! i@iYn}t:^t
! =g >&5>4
! [sIQzbk +
inte***ce Loopback0 u:k,^)?MF%
ip address 10.1.2.2 4'&>:2$[
255.255.255.0 \ 6K
aSC
! r8n1HBG
inte***ce Loopback10 5~Z :mCk
ip address 10.99.99.99 mzq;xVB
255.255.255.0 Q-! #1GA}B-j
inte***ce Ethernet0/0 MZFBE~gFu
ip address 10.64.9.101 k]R5K+m" 
255.255.255.0 aIGdx&/o4
! GY';t[e*4
inte***ce Serial2/0 Rh&0

0'
no ip sTgR HJ|
address Fk!Tw
N
encapsulation x25 dce Kc':oulk
no ip mroute-cache > ]Bd{k
x25 FfI[3)8
win 5 mjsyztX.
x25 wout 5 f jx25 ips 256 yH._
}5'|
x25 ops 256 aY?U{k3wzi
x25 ~"]L c
idle 1 p`BoE
y
! u u3+bzS
router rip 1\9 8H07G
network 10.0.0.0 yh`uih G5
! :Im+Q
! OCF3hiQ
x25 route ^4 7 r00q .n
inte***ce Serial2/0 xot-keepalive-period 10 xot-keepalive-tries 3 .W
p2(Z +
x25 route  tJSNv<|
^12 xot 10.64.9.100 xot-source Loopback10 L 9x;w8
! p|:&y
"!WNH j
R3： P0 \xhM3
!hostname R3!x25 gv{Z;!5EQu
routing!!!inte***ce Loopback0 ip address Z_7 Y+ZZ_
10.1.3.1 255.255.255.0!inte***ce Ethernet0/0 ip address x>:vG]10.64.9.100 255.255.255.0!inte***ce Serial2/0 bandwidth wik +~o
384 no ip address encapsulation x25 no ip rG_DZfm
route-cache no ip mroute-cache x25 win a5Eg!Go#
7 x25 wout 7 x25 ips ;RS4&gF C
1024 x25 ops 1024 x25 idle HIdq8qGk|
1!router rip network 1q/ _e {
10.0.0.0!!x25 route ^12 inte***ce Serial2/0 X3[e*cv C
xot-keepalive-period 10 xot-keepalive-tries 3x25 route ^4 xot @VgZ|Bo
10.64.9.101 xot-keepalive-period 10 xot-keepalive-tries 3 xot-source zd&fB2qiQ/
Loopback0! }d .,%/L
R4： , UG66 q#
!hostname R4!inte***ce =yv'(q
Ethernet0/0 ip address 10.64.9.88 255.255.255.0 no RroriO7[
keepalive!inte***ce Serial1/0 bandwidth 8Q8Z _eJ
384 no ip address encapsulation x25 dce x25 address ?JT!/ >>
123456 x25 win 7 x25 wout 'K.N[?
7 x25 ips 1024 x25 ops iC  u
1024 x25 idle 1! e  f&@hgJ
line vty ,+0 #3f)N
0 4 ){~BT%<
no w[=pC&^`
login qN0Kk'^vx
! &@%5MDv%C 8
测试步骤： } a.tx%F
1、R1： !:\NCd
R1#pad 123456 3$ #2Q>.s
Trying Ar+8i YHV
123456...Open {wdU-y5E2i
Oy. *{F
R4> hiR(~H7
2、R2 !TS03d5V
R2#show tcp TU|EB
n@@IlVt
Stand-alone TCP connection to host mfKBe[C :>
10.64.9.100 ~UBL3 e
Connection state is ESTAB, I/O status: 1, unread input bytes: oyM|;N> m
0 '_28p
Local host: 10.99.99.99, Local port: uG |6myvt
11004 IlIJ0Kkk/
Foreign host: 10.64.9.100, Foreign port: Phn  p 
1998 8]t%*Mm
3、R2删除loopback10 c93~{>^
4、R1退出R4，再pad <123456 >N\B
oU/c
5、R2 #r m]`a
R2#show tcp :=uH<)%Mr~
1p^8S{
Stand-alone TCP connection to &p7iID,X
host 10.64.9.100 iv2Y*8p+
Connection state is ESTAB, I/O status: 1, unread input +gR "V,#(>
bytes: 0 G rA>~He
Local host: 10.64.9.101, Local port: 2PeOp}
11005 vK[=OHY
Foreign host: 10.64.9.100, Foreign port: nv}hdZo o
1998 FGGcm*v&
:'可见即使源接口不存在，XOT仍可建立会话，采用直连地址。 >?k) [6
?> (o ,cj
a#"l
AH
*!5|(~*0
IV、解决办法：通过查看对应目的地址的下一跳接口，本端接口即为源地址。这样源地址---目的地址明确，确保对应地址对可以通信即可。 Lx?#i L>
wkL
UsV=~
V、调试命令汇总： L#
{s /ip
show x25 pad—Shows information about current open connections, {}uqT(HzL
including packet transmissions, X.3 parameter settings, and the current status K|`zfe'
of virtual circuits. `$6's6'%
show x25 xot—Shows information for all XOT virtual circuits that match e#}<:/
a given criterion. SKWB,/K >e
show tcp—Shows the status of TCP connections. (!si"7pad—Use this command to log onto a PAD. ZVMk(_yPr
VI、本问题讨论URL： 6*LAsLwGD;
http://www.one-tom.com/bbs/forum_posts.asp?TID=1974&PN=1 xTMzO :
Jw:/BK=BA
VII、修订情况（日期、修订者邮箱）转自杜松之家http://www.juniperbbs.net