Huawei router and network Guard Cooperation skills

1. Why does the website need to be protected?

To make a call to the peer router, you need to maintain a corresponding table. The phone number corresponds to the IP address of the Peer router. About two hundred vrouters can be maintained and no phone number is added. A table is required for all vrouters on the network. If the number of vrouters is more than 200, add a phone number to check the workload.

2. What does the cyber guard do?

Maintain the table corresponding to the telephone number and IP address on the network guard. If the vro wants to enter a certain number and there is no corresponding table locally, go to the network guard to find the number. The Network guard sends an IP address to the router based on the phone number. To put it bluntly, the website guard is a telephone number book. To add a number on the network, you must add a record to the network guard. The maintenance workload is reduced.

3. How does a router interact with the network guard?

When the dial-up port is configured on the vro, it is indicated to the network guard for search. Through the command of the network guard and the interaction information of the network guard, the network guard can see the vro registration.

Example:
Normal table:
Entity 35 voip
Address ip28.1.40.htm
Match-template 23000330
Configure the number to be searched on the website:
Entity 9 voip address ras match-template ...... indicates that the 8-digit number is called to the network guard for search)
Required for communication with the network GUARD:
[Router-voice] Route keeper-client to gk View
[Router-voice-gk] gk-id gk-center gk-addr 3.3.3.3 1719 GK name and address, and port number
Pay attention to the essence, the parameters behind the GK-ID for the name of the network guard, most of the network guard in an IP address can be multiple threads, so the GK-ID must match with the network guard, otherwise the connection does not get through the phone .)
[Router-voice-gk] ras-on activates GK
Be sure to activate it. Otherwise, it will be invalid. When you modify the configuration, undo ras first .)
Other configurable configurations:
[Router-loopback1] ip address 1.1.1.1 255.255.255.0 configure loopback1 port ip address
[Router-voice-gk] gw-address 1.1.1.1gw ip address
[Router-voice-gk] gw-id beijing-gw's own id
[Router-voice-gk] area-id 1 # Region ID
If you have any questions, you can use
DEB VOIP RAS EVENT
INFO CONSOLE DEB
Check debugging information.