2025路由器产品标准

GB191GB2894GB4798-90电子电工产品应用环境条件机械和试验环境条件GB3047.4高度进制为44.45mm的插箱、插件的基本尺寸系列GB/T3047.2高度进制为44.45mmGB/T17626GB/T14733-1993GB/T13426GB/T17618-2015电工电子产品环境试验第2AGB/TGB/T

ETSIEN300386电磁兼容和无线频谱管理（ERM）：通信设备：电磁兼容性（EMC）（ElectromagneticcompatibilityandRadiospectrumMatters(ERM);Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)requirements.）IEC62151（（Safetyofequipmentconnectedtoatelecommunication

Telecommunicationsandinformationexchangebetweensystems--Localmetropolitanareanetworks--Specificrequirements--Part3:CarrierSenseMultipleAccesswithCollisionDetection(CSMA/CD)AccessMethodandPhysicalLayerSpecificatiIEC62351Powersystemsmanagementandassociatedinformationexchange-DatacommunicationssecurityIEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand IEC61588Precisionclocksynchronizationprotocolfornetworkedmeasurementand

spectrum

Telecommunicationnetworkequipment;ElectroMagneticCompatibility(EMC)IEC62351-6IEC62351-7IEC62439YD/T1391.1-2005（MPLS）SJ/T10630-

IEC60950-1-2013GJB908AGJB726A-2004GJB571A-2005GJB1442A-2006GJB1362A-

IPC-A-610EnglishChinese LocalAreaMediumAccessAccessControlQualityofRoutinginformationBorderGatewayOpenShortestPathIntermediatesystemtointermediateLabelDistributionMulti-ProtocolLabelCustomerProviderFastVirtualLeasedVirtualPrivateLAN整机高度符合GB/T3047.2IEEEIEEEIEEE应符合GB4943相关规定。对下面相关的危险采取适当的防护措施，减少或避免由于下列各种危险1MPLSIGMPSnoopingMACConsole依据GJB908-90、GJB726A-2004、GJB1442-1992及IPC-A-6102BOMBOM;3456用电网供电的产品机箱内无≥3mm7振动：按照GB/T2423.10“试验Fc”的试验方法进行。冲击：按照GB/T2423.5“试验Ea”的试验方法进行。碰撞：按照GB/T2423.6“试验Eb”的试验方法进行。ConsolePort 设备正常上电，PC连接到设备ConsolePortconf-modepasswordconsolexxxpasswordconf-modexxxWEB PC/8gige0_0（设备出厂配置默认各接口属于vlan1，vlan-if1默认地址）WEB3WEBWEB PC/8IPgige0_0接口（设备出厂配置默认各接口属于vlan1，vlan-if1默认地址）WEB界面，在系统管理->管理员->Telnet、SSHtelnetSSH2radius DUT启用radius认证，并配置radiusPC上使用radiusWEBradius服务器上不存在的用户名密码访问设备WEB2SNMPGet/GetNext PC上安装MIBBrowserMIBfilePCvlanPCpingmibbrowser，以节点ifIndexget/selectInstance，UseselectInstance按钮，完成一次get1；mibbrowser，以节点ifIndexget/selectInstance，UseselectInstancegetnext操作，预期结1SNMPSet PC上安装MIBBrowserMIBfilePCvlanPCpingsetValuetoSetSetsetget2setSNMPTrap PC上安装MIBBrowserMIBfilePCvlanPCpingmibbrowser，打开Trap，且设置DUTTrap DUT上接口down/up1down/upTrapRMON RMON1RMON2bucketsPC访问InternetRMON告警统计表项及历史统计表项及RMON2NTP DUT1NTPServerDUT2NTPClientNTPserverDUT1DUT1中配置参考时钟地址为DUT3地址，并查看DUT1、DUT2的时间，预期2。DUT2DUT1DUT1、DUT2DUT3SNTP DUT1SNTPServerDUT2SNTPClientIPDUT1IP1DUT2DUT1验证端口自协商/ 231A223B 1A64IP2B1024kbps 1B64IP1A1024kbps 2 测试仪端口ADUT1和DUT2学到这个二层报文的源清除DUT2上所有端口统计数字，测试仪端口B发送目的MAC为刚学到的源1；DUT1DUT21DUT1DUT21UP3测试仪显示接收端口接收的报文与发送端口发送的报文一致，通过DUT2上显示的报文转发数字看，4个端口的转发比例为1:1:1:1；12、3、4 测试仪端口ADUT1和DUT2学到这个二层报文的源清除DUT2上所有端口统计数字，测试仪端口B发送目的MAC为刚学到的源1；DUT1DUT21DUT1DUT21UP3测试仪显示接收端口接收的报文与发送端口发送的报文一致，通过DUT2上显示的报文转发数字看，4个端口的转发比例为1:1:1:1；12、3、4 1、2加入vlan10313A、B3C能收到端口A、BC只收到端口ABC只收到端口BAvlan 1、2、3accessA1B、C均能收到端口Avlan 1、2、3accessAAA1B、C均收不到端口AVLAN VLAN1、2、3accessA3accessVLANAB、C均能收到端口AB能收到报文，CVLAN 12trunkVLAN1-4094DUT1、DUT2VLANDUT1、DUT2VLANDUT1、DUT2VLANIPVLAN三层接口，预期1；VLAN2VLAN三层接口，主从IPIP均可以pingvlan-if1VLANQinQ 1trunkvlanX、YVLAN2trunkvlanX、YVLANDUT1配置普通AtagXtagY1B抓包查看tagX的报文加上外层tagX，tagYtagXMAC 1VLAN102A、BMAC相同（00:00:00:00:00:01）1VLAN10、VLAN20MAC00:00:00:00:00:01MAC DUTMACMACA10MACMAC10sMAC210个MAC10个MACMAC 1、2、3AMACMACBMAC1MACMAC31MACB、CACMACMAC 1、2、31MACB发送目的MAC1MACMAC3MACACMACMAC 1、2、3DUTMAC1sendingport2receivingport，端口3为monitorport；MAC地址容量，设定需要学习的MACMAC1MACMAC MAC地址为不老化，并删除DUT1所有MAC1VLANPC1、PC21MAC地址0，PC1、PC2ping1VLAN1；PC1MAC1PC2MAC1PC14PC1、PC2pingPC1ping通，PC2pingPC1、PC2pingPC1ping不通，PC2pingARP AIPIPARP请求报文，预1；BIPIPUDP报文，预2；BDUT1ARPABUDP到达老化时间后，ARP AIP-54IP测试仪端口B线速发送UDP报文，源IP为，目的IP为DUTARPBDUT1上学习到满规格的ARPABIP的UDPARP 1ARP表项，IPBUDPIPIP为静态表项地址，2。ARPABIP的UDPDHCPserver DUT上与PCvlan10，vlan-if10vlan-if10-00，并开启DHCPPC获取IP1PCDHCPDHCPsnooping 3 4 DUT1DHCPserver，配置vlan-if10-00；端口1、2、3、4均加入vlan10；DUT2DHCPsnooping233PC1PC2IPPC1PC2PC2DHCP DUT1配置：vlan-if10开启DHCP服务器，地址池-00；DUT/16PC获取IP2DUT1ping PC成功获取到IPMPLS B与DUT3OSPFDUT之间使能OSPF、MPLSLDPDUTA2DUT与端口A、BLDPB可以正常收到测试仪端口A验证静态/ 验证静态/ /16 /16 1.1.1/16 DUTDUTPC1pingPC2DUT/16DUT25/16DUT1DUT2ping静态路由被成功删除，PC1ping 60.1 60.1 DUT1、DUT2、DUT3上启动RIP协议，使能所有三层接口的30sDUT1pingDUT3loopbackDUT2pingDUT1loopbackDUT3pingDUT2loopback2DUT1、DUT2、DUT3pingRIPRIP 60.1 60.1 DUT1、DUT2RIP30sDUT1DUT1、DUT2相连接口MD5DUT1、DUT2down/up操作，30sDUT1DUT1、DUT2MD5密码修改一致，DUT1DUT1、DUT2相连接口RIPText认证，且密码一致，30sDUT1路由1；DUT1、DUT2接口Text密码修改不一致，且将相连两设备的物理端口操作，30sDUT12/24网段路由，DUT1ping/24网段路由，DUT1pingOSPF 5.1 5.1 DUT1OSPF1使能loopback1和vlan-DUT2OSPF0使能loopback1和vlan-if41vlan-if3DUT3OSPF0使能loopback1和vlan-if42vlan-if5DUT4上启用OSPF，区域2使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingOSPFOSPF 60.1 60.1 DUT1OSPF1使能loopback1和vlan-if80，vlan-if80TextDUT2OSPF：01vlan-if80TextDUT1vlan-if80vlan-if60，使用MD5DUT3OSPF2loopback1vlan-if60，vlan-if60MD5认证，认证KEYID与DUT2上vlan-if60相同，但是认证密码不同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，预期结果2；DUT1DUT2vlan-if80Text认证密码相同，DUT2DUT3vlan-if60MD5认证密码相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，预期结果4。loopbackpingloopbackpingIS-IS 5.1 5.1 DUT1IS-ISlevel-1-2loopback1vlan-DUT2IS-ISlevel-2loopback1、vlan-if3vlan-if4DUT3IS-ISlevel-1-2loopback1、vlan-if4、vlan-if5DUT4上启用IS-IS，级别为level-1，使能loopback1和vlan-if5；30sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingIS-ISIS-IS 60.1 60.1 DUT1IS-ISloopback1vlan-if80，vlan-if80TextDUT2上启用IS-IS：使能loopback1、vlan-if80和vlan-if60，vlan-if80使用DUT1vlan-if80不同，vlan-if60MD5DUT3上启用IS-ISloopback1vlan-if60，vlan-if60MD5KEYIDDUT2vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，预期结果2；DUT1DUT2vlan-if80Text认证密码相同，DUT2DUT3vlan-if60MD5认证密码相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，预期结果4。loopbackpingloopbackpingBGP DUT1上启用OSPF，区域0使能loopback1和vlan-if3DUT2上启用OSPF，区域0使能loopback1和vlan-if3DUT3上启用OSPF，区域0使能loopback1和vlan-if5DUT4OSPF0使能loopback1和vlan-if5；DUT1BGP，AS100DUT-2loopback1loopback1网DUT2BGP，AS100DUT-1loopback1loopback1网DUT3BGP，AS200DUT-4loopback1loopback1网DUT4BGP，AS200DUT-3loopback1loopback1网DUT-2上启用BGP，AS100邻居为DUT-3vlan-if4DUT-3上启用BGP，AS200邻居为DUT-2vlan-if430sDUT1pingDUT2、DUT3DUT4loopback1地址DUT2pingDUT1、DUT3DUT4loopback1地址DUT3pingDUT1、DUT2DUT4loopback1地址DUT4pingDUT1、DUT2DUT3loopback1pingBGPBGP 60.1 60.1 DUT1BGP：AS100DUT2vlan-if80loopback1网段，vlan-if80使用MD5认证DUT2上启用BGP：AS100DUT1vlan-if80loopback1网段，vlan-if80使用MD5认证，认证密码与DUT1上vlan-if80不同；邻居为DUT3vlan-if60地址，vlan-if60使用MD5认证DUT3上启用BGP：AS200邻居为DUT-2vlan-if60loopback1vlan-if60使用MD5DUT2上vlan-if6030sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和DUT3loopback1地址，DUT3上pingDUT1和DUT2loopback1地址，预期结果2；DUT1DUT2vlan-if80MD5认证密码相同，DUT2DUT3vlan-if60MD5认证密码相同；30sDUT1上pingDUT2和DUT3loopback1地址，DUT2上pingDUT1和loopback1地址，DUT3pingDUT1和DUT2loopback14loopbackpingloopbackpingMPLSMPLSL3VPNMPLSL3VPN 5.1 5.1 DUT2OSPF0使能loopback1和vlan-if4DUT3OSPF0使能loopback1和vlan-DUT2上启用MPLS，vlan-if4启用LDPDUT3MPLS，vlan-if4LDP；DUT-2上启用BGP，AS号100邻居为DUT-3loopback1地址，激活MP-BGPDUT-3上启用BGP，AS100邻居为DUT-2loopback1MP-BGP；30sDUT2、DUT3DUT2上启用VRF，配置RD、RT，vlan-if3加入VRFDUT3VRFRD、RT，vlan-if5加入VRF；DUT2VRF-BGP，AS100邻居为DUT-1vlan-if3DUT1BGP，AS65010DUT-3vlan-if3loopback1网DUT3VRF-BGP，AS100邻居为DUT-4vlan-if5DUT4BGP，AS65020DUT-3vlan-if5loopback1网DUT1pingDUT4loopback1地址，DUT4上pingDUT1loopback12DUT2DUT3OSPF、LDP、BGP、MP-BGPpingVLAN4:/24VLAN4:VLAN1:/24 VLAN3:/24VLAN3:/24 VLAN1:/VLAN2:/24VLAN2:/24 DUT1上配置静态路由，使到达目的地址为/24网段下一跳地址分别为DUT2ARPDUT2A发送IPIP为IPDUT1MACDUT2VLAN2-43B可以接收到AB扔可以接收到AVLAN2-43ECMP 3 vlan-if20测试仪端口B/16的设备，端口C模拟/16的设备，端口IP配置策略路由：源/any1，动作策略路由转发（出接口vlan-if30，下一跳），预期结果2。B能收到流量，端口CB收不到流量，端口CIGMP vlan-if10开启测试仪端口A模拟并发送IGMPv2测试仪端口AIGMPv2DUT1组成2。IGMPIGMP 2、3、4DUT1DUT2IGMP-SnoopingVLAN10IGMP-BIGMP-Snooping组播信息，1；PC，查看IGMP-Snooping243PIM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMSMDUT1的vlan-if100使能DUT2loopback/32PIMOSPFvlan-ifDUT2loopback1PIMBSRRPBA003OSPFpingBSRRP节点，均为DUT2的B可以接收到端口APIMDMPIMDM DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100RIPRIPBA002pingB可以接收到端口A DUT2 /24 /24 30.1 100.0 vlan-ifvlan-ifPIMDMDUT1vlan-if100DUT124 DUT2242424DUT3242424DUT42424BA002pingB可以接收到端口AACL修改DSCP 1、2、3trunkvlan10-DSCP优先级为40；Atag10-20且DSCP0-631B、C收到报文情况：vlan10-15DSCP40，vlan16-20的报文DSCP仍为0-63。ACL 1、2、3trunkvlan10-1IP2IPIPv4ACL1：匹配规则为源IP3150；ACL2：匹配规则为源IP31IP2IP23123121:2ACL CA/24B/24网段，MACMAC1 不能访问服务器/32，入方向ACL三层IPv4配置：源IP/24，目的IP/32，端口1，动作丢包；AIP，源IP/24B发送目的IP，源IP/24的流量，预期结果1；ACLMAC/IPv4IP，源MACMAC12，动作通过；源IPany，源MACany，端口2，动作丢包；BIPMAC为MAC1且递增的流量，2。C只能收到端口BAC只能收到源IPMAC为MAC1QoS 1、2、3 1、2Cos13的cos1，端口2映射到端口3的cos3；3A20%3B90%3A、B33AABABSP 1、2VLAN10端口1配置优先级信任模式为DSCP模式，内部映射队列分别为cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN102SPVLAN10端口2配置出端口限速，限制速率为接口带宽的10%，突发流量为A81B10%DSCP63WRR 1、2VLAN10端口1配置优先级信任模式为DSCP模式，内部映射队列分别为cos0:0~56,cos1:57,cos2:58,cos3:59,cos4:60,cos5:61,cos6:62,VLAN10端口2WRRA81B10%的流量，8 1、2加入同一164kbpsA、B1128kbps164kbps128kbps14A64kbpsBAB128kbpsA64kbpsB128kbpsA、B802.1X 1 2 RADIUSDUT1、2加入vlan2，且vlan-if/16；启用802.1X认证；端口1使能Dot1x；PC，PCpingDUT802.1x客户端使用test1进行认证，预1；PC802.1xtest1RADIUSServertest2，且DUTRADIUSPC长pingDUT802.1xtest2PC802.1xtest25PCpingDUTPC能pingPCping不通PCpingDUTPC能pingPCping不通DUTMAC 1 2 RADIUSDUT1、2加入vlan2，且vlan-if2MAC地址认证，认证类型为本地认证且为MAC添加本地用户：用户名、密码、确认密码、MACPCMAC地址；端口1启用认证；PC，PCpingDUTPCMACRADIUSServertest2DUTRADIUS认证，且为固定方式，3；MAC地址认证中添加本地用户，MACPC的MACPC长pingDUT802.1xtest2DUT上关闭RADIUS5PC能pingPCping不通PC能pingPCping不通DUTPortal 1 2 RADIUS DUT端口1、2加入vlan2，且vlan-if2地址/16，vlan-if3地址/16且PortalAcl：硬件资源调配slice2选择认证模式。IP/32，目的IPany11；Portal认证中关闭WebRADIUS认证且test22PC时，webtest1Loopback 1、2、3、4、514545241down1downVRRP vl4 DUT11、2加入同一DUT2VRRP1IP11vlan-if100，优120；DUT3VRRP1IP11vlan-if100，优先级100，预期结果1；DUT1DUT2的连接断开，PCping113DUT2VRRPMASTER，DUT3VRRP状态为pingpingVSM 2、3分布在DUT14、5、6 WebDUT12、34、5AB发送源MACMAC1清除DUT2上所有端口流量清零，测试仪端口A发送目的MAC为MAC1，源MAC为8个连续增长的二层报文，预期结果4；2downup5（CPU、DUT1DUT21:1；B接收的报文与端口AIPv4IPv4ACL DUT接口与测试仪器连接，DUT上vlan-if10、vlan-i