![Huawei Quidway NetEngine40E Configuration Manual - Reliability Download Page 1378](http://html.mh-extra.com/html/huawei/quidway-netengine40e/quidway-netengine40e_configuration-manual-reliability_1694531378.webp)
# On CGN2, create a service instance group named
slz
and bind it to HA backup group 1.
[CGN2]
service-instance-group slz
[CGN2-service-instance-group-slz]
service-location 1
[CGN2-service-instance-group-slz]
quit
Step 7
On CGN1 and CGN2, create NAT instances and bind them to service instance groups.
# On CGN1, create a NAT instance named
nat
and bind it to service instance group
slz
.
[CGN1]
nat instance nat id 1
[CGN1-nat-instance-nat]
service-instance-group slz
# On CGN2, create a NAT instance named
nat
and bind it to service instance group
slz
.
[CGN2]
nat instance nat id 1
[CGN2-nat-instance-nat]
service-instance-group slz
Step 8
Configure user side sub-interface on the two CGN devices.
# Configure user side sub-interface on CGN1.
[CGN1]
interface GigabitEthernet2/0/0.10
[CGN1-GigabitEthernet2/0/0.10]
user-vlan 2010
[CGN1-GigabitEthernet2/0/0.10]
remote-backup-profile natbras
[CGN1-GigabitEthernet2/0/0.10]
bas
[CGN1-GigabitEthernet2/0/0.10-bas]
access-type layer2-subscriber default-domain
pre-authentication natbras authentication natbras
[CGN1-GigabitEthernet2/0/0.10]
quit
# Configure user side sub-interface on CGN2.
[CGN2]
interface GigabitEthernet2/0/1.10
[CGN2-GigabitEthernet2/0/1.10]
user-vlan 2010
[CGN2-GigabitEthernet2/0/1.10]
remote-backup-profile natbras
[CGN2-GigabitEthernet2/0/1.10]
bas
[CGN2-GigabitEthernet2/0/1.10-bas]
access-type layer2-subscriber default-domain
pre-authentication natbras authentication natbras
[CGN2-GigabitEthernet2/0/1.10]
quit
Step 9
Configure user information, include user-group natbras, IP pool natbras, domain natbras, and
AAA on the two CGN devices. Bind user group to the NAT instance nat on the two CGN devices.
# Configure user information, include user-group natbras, IP pool natbras, domain natbras, and
AAA on CGN1. Bind user group to the NAT instance nat on the CGN1.
[CGN1]
user-group natbras
[CGN1]
ip pool natbras bas local
[CGN1-ip-pool-natbras]
gateway 192.168.0.1 255.255.0.0
[CGN1-ip-pool-natbras]
section 0 192.168.0.2 192.168.0.254
[CGN1-ip-pool-natbras]
aaa
[CGN1-aaa]
domain natbras
[CGN1-aaa-domain-natbras]
authentication-scheme default0
[CGN1-aaa-domain-natbras]
accounting-scheme default0
[CGN1-aaa-domain-natbras]
ip-pool natbras
[CGN1-aaa-domain-natbras]
user-group natbras bind nat instance nat
[CGN1-aaa-domain-natbras]
quit
[CGN1-aaa]
quit
# Configure user information, include user-group natbras, IP pool natbras, domain natbras, and
AAA on CGN2. Bind user group to the NAT instance nat on the CGN2.
[CGN2]
user-group natbras
[CGN2]
ip pool natbras bas local
[CGN2-ip-pool-natbras]
gateway 192.168.0.1 255.255.0.0
[CGN2-ip-pool-natbras]
section 0 192.168.0.2 192.168.0.254
[CGN2-ip-pool-natbras]
aaa
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
12 CGN Backing Up HA Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1361