随着移动通讯3G技术的发展，移动通讯3G网络日趋完善，国内三大ISP也都提供相应的3G接入服务。近日由于项目需要，对Cisco 的3G路由器进行了相关的测试和研究，一些经验与大家共享，不足之处，也请各位高手斧正。
Cisco目前支持3G的路由器主要是固定配置的880G系列路由器以及模块化的1841，1861，2800和3800 ISR。需要注意的是，880G系列路由器不需要另购3G模块，每一台880G系列路由器都会带一块3G模块PCEX-3G-×××（×××为支持不同的3G制式）；而1841，1861，2800和3800等模块化的ISR需要另配一块3G模块（HWIC-3G-CDMA或HWIC-3G-GSM）。不过目前看来，无论是那种3G模块，都只支持HSPA（联通的WCDMA）和EVDO（电信的CDMA2000），而不支持移动的TD-SCDMA（可能由于只有中国和少数国家使用，覆盖面太少，Cisco不屑开发吧）。
这种3G的接入方式极为适合小型办公室或者分支机构的接入，或者作为关键业务的备份线路（按需拨号，因此费用也不是问题），也很适合诸如银行离行式ATM机的接入。随着电信CDMA（原联通CDMA已经划归电信）明年开始停止新办业务，我想将有更多的客户转而使用3G接入。
PCEX-3G-××× HWIC-3G-×××
Cisco880G系列路由器不仅支持最新的3G数据业务标准，如前面提到的HSPA和EVDO Rev A，同时也向下兼容EDGE，GPRS，和CDMA，具体是：
PCEX-3G-HSAP支持HSPA、UMTS、EDGE和GPRS
PCEX-3G-CDMA支持EVDO
HWIC模块与此类似，不再列出。
在实际的测试中，我使用的是CISCO881G-A-K9路由器，带的3G模块是PCEX-3G-HSPA，选择使用一张新联通的“沃3G”sim卡，接入新联通的WCDMA网络。在给路由器上电前，需要将sim卡插入PCEX模块中，然后将模块插入881G前面板的插槽，同时将外置天线（个头蛮大的）连接到PCEX模块上。
上电之后，会看到PCEX上的电源灯亮，同时模块上的3G灯闪蓝光（如果向下兼容接入2G网络，则2G灯闪蓝光）。
之后可以开始进行正常的路由器的配置。
使用880G路由器的三种用法;
1. 正常使用WAN接口
2. 仅适用cellular接口（即仅使用3G）。
3. WAN接口做主用线路，cellular做back up。
方法1就不多说了，重点讲一下方法3，使用3G做back up，即WAN端口故障后切换到cellular端口，这涉及到两个方面的倒换问题：路由的倒换和nat的倒换，需要使用SLA和EEM。具体配置可以参考：
经过我实测，正常主备切换会丢7-8个包（忘记截图了。。。），下图中由于cellular端口已经事先被激活，故只丢了两个包。另外实测ping www.baidu.com延时稳定在179ms，十分稳定，下载测试速度30K-100K不等。
附一个标准的3G拨号上网的配置。
1. 插入SIM卡,天线到3G卡,将3G卡插入880,然后开机；
2. 执行show run或show ip int brief将看到一个cellular0的接口，这个就是3G接口；
3. 在enable模式下通过命令“cellular 0 gsm profile create 1 uninet”创建一个对应联通的Profile;
4. 参考下面的配置实例进行配置，红色的命令是需要的配置命令：
Current configuration : 5677 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 881G
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 51200 warnings
!
no aaa new-model
service-module wlan-ap 0 bootimage autonomous !
crypto pki trustpoint TP-self-signed-1505563592 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1505563592
revocation-check none
rsakeypair TP-self-signed-1505563592
!
!
crypto pki certificate chain TP-self-signed-1505563592 certificate self-signed 01
3082024B 308201B4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31353035 35363335 3932301E 170D3039 30333131 30363033
31325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 35303535
36333539 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81009221 504002BA C4676CC4 33770558 AE4CBC64 A9240DD6 1AA77A24 8488788C
EC4B2504 9A29A8DD D2B04164 98863BE3 9A9CAF8F 05794111 B48B3B59 80542329
0376869B 824E78C9 BEC4D5ED 6E42ECC3 176EBB6F 64CC9C1C 2CD716A5 39086F6C
5AABBB0D 645A1D25 8C1A7A00 D4329109 2FDB515D 92AC9563 CA7AA215 D4961903
8E1F0203 010001A3 73307130 0F060355 1D130101 FF040530 030101FF 301E0603
551D1104 17301582 13383831 472E796F 7572646F 6D61696E 2E636F6D 301F0603
551D2304 18301680 1445CCF6 83629C47 F5816132 517A8B44 2F052128 CA301D06
03551D0E 04160414 45CCF683 629C47F5 81613251 7A8B442F 052128CA 300D0609
2A864886 F70D0101 04050003 81810090 E862FC9E 292C019D 2BC9C2A5 F84D8594
3E0AAB8B 49737374 616790E1 3A663F15 4C760C96 7A3B9339 28E7ED72 26092203
140D01EE 0F509725 34623E46 903899D6 6BAB883B 8F8EC9D9 2DF355E3 E5352E4B
887C479B AF580C0A 338F700E C5829962 D3F4F3F7 E9F496F5 BB6901B0 566A9E50
82820329 62B2ADA0 0E5CDB23 401E2F
quit
ip source-route
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool lan
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 221.130.33.52
!
!
ip cef
ip domain name yourdomain.com
!
no ipv6 cef
!
multilink bundle-name authenticated
chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"
!
!
username cisco privilege 15 secret 5 $1$I1J/$u/hsiTFL7u7xBz6FALfDV1 !
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP no ip address arp timeout 0 !
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP !
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer in-band
dialer string gsm
dialer-group 1
async mode interactive
ppp chap hostname UNINET
ppp chap password 0 UNINET
ppp ipcp dns request
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 !
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Cellular0
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000 !
!
ip nat inside source list 1 interface Cellular0 overload !
access-list 1 permit any
dialer-list 1 protocol ip list 1
no cdp run
!
!
!
!
!
control-plane
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device and it provides the default username "cisco" for one-time use. If you have already used the username "cisco" to login to the router and your IOS image supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit this session.
It is strongly suggested that you create a new username with a privilege level of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you want to use.
-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the password "cisco". These default credentials have a privilege level of 15.
YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN CREDENTIALS
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword> no username cisco
Replace <myuser> and <mypassword> with the username and password you want to use.
IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.
For more information about Cisco CP please follow the instructions in the QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
privilege level 15
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
line 3
script dialer gsm
no exec
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
5. 等待一会，直到show ip route直到看到路由表中的缺省路由：
C880#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
C 192.168.1.0/24 is directly connected, Vlan1
S* 0.0.0.0/0 is directly connected, Cellular0
6. 执行ping 1.1.1.1，cellular接口会UP并获得IP地址；
7. 执行show cellular 0 network,确认其中的“Packet Service”是HSDPA或UMTS：
C1841#show cellular 0 network
Current Service Status = Normal, Service Error = None
Current Service = Combined
Packet Service = HSDPA (Attached)
Packet Session Status = Active
Current Roaming Status = Home
Network Selection Mode = Automatic
Country = CHN, Network = CMCC
Mobile Country Code (MCC) = 460
Mobile Network Code (MNC) = 0
Location Area Code (LAC) = 4375
Routing Area Code (RAC) = 100
Cell ID = 23166
Primary Scrambling Code = 0
PLMN Selection = Automatic
Registered PLMN = CHINA MOBILE , Abbreviated = CMCC
Service Provider =
发表评论 评论 (8 个评论)