VIETTEL PERU S.A.

C
GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 1/26

UPDATE TABLE No Pages Comments of updating Force day

Notes: Guideline will be modified, added for be appropriate with actual during execute.

Maker

Checker

Approved

Signature

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 2/26

1.

Purposes: - The purpose is to show all kinds of service for Branch. - This document guides the step to request to and choose the appropriate kind of service for Branch Places and how to configure them.

2.

Application area: - This guide applies to all CX600-X8 Huawei devices in Metro Network. - Application objects: Transmission department. OAM department. NOC department. Branch Office Bussines Center Technical Team Showroom

3.

Relevant document: - References associated with Bussines plan.

4. 4.1.

Content: Introduction - VTP is growing and expanding for lunching the service for Peruvian customer, so VTP needs to set up many place as Branch Office, Business Center, Showroom, Technical Team. - This kind of service belong to FTTx Family service.

4.2.

Kind of service in VTP Offices

4.2.1. Internet Service and Intranet Service - We have two kind of cases for this services: With modem, and with Switch Cisco SF300. It depends of the kind of Office. - Every office must use next Proxy server for access to internet; http://proxy.viettelperu.com/proxy.pac

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 3/26

- This kind of service is for access to many web pages and for the intranet. - If Viettel doesnt provide a connection to the office. It has to have an Internet connection by another Operator and use a VPN session to Viettel. 4.2.2. Videoconference Service - This kind of service belong to VPNL3 service. - This kind of service is for having a meeting with other province or Vietnam. - We have to use a switch CISCO SF300 for connect the CTH Client to Metro Network. 4.2.3. Camera Service - This kind of service belong to VPNL3 service. - This kind of service is for monitoring the place and office for save the security. - We have to use a switch CISCO SF300 or Modem for connect the Camera to Metro Network. 4.3. Kind of place in Branch 4.3.1. Branch Office - We had 18 Branch around Peru, all of them has 4 Kind of service; Internet, Intranet, Camera, and VideoConference service. - For detail information see annex 1. 4.3.2. Business Center - VTP is deploying many Business Center for commercial center - This place will need 4 kind of service; Internet, Intranet, Camera, and VideoConference service. - For detail information see annex 2. 4.3.3. Showroom - VTP is deploying many showroom for sell VTP Products. - This place will need 3 kind of service; Internet, Intranet, and Camera service. - For detail information see annex 3 and annex 5.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 4/26

4.3.4. Technical Team - VTP is deploying many SOS station as a rescue group to repair and fix any incident on Network.We use a modem for this kind of Branch. - This place will need 2 kind of service; Internet, Intranet and Camera services. - For detail information see annex 4. 4.4. Configuration for Internet, Intranet and Camera with Modem 4.4.1 Making the pppoe configuration on TP-LINK (TL-WR741ND) modem - Step 1: Configuring the PCs, set ip address on PCs the same subnet as the modem.

- Step 2: Access to the modem http://192.168.0.1 (username/password: admin/admin)

- Step 3: When login to the modem, the status screen will be appear. Click to choose Quick setup on the left dialog box.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 5/26

- Step 4: The Quick Setup screen will be appear. Click Next.

- Step 5: Choose PPPoE. Click Next.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 6/26

- Step 6: Type the username and the Password. You must call to Ip Team to require this information. For this example use the username branch@branch, and password branch. Click Next.

- Step 7: Create wireless configuration: wireless network name, wireless security or disable this function if no used. Click Next.

- Step 8: Click Finish or Reboot the modem if you enable wireless config.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 7/26

- Step 9: Check the status. Click the Status on the left dialog box and check.

Check whether the wan interface is get ip adderess or not. If it is nok is check username/password again.

4.4.2 Configurate the proxy on internet explorer - Step1: Click on Tools and select option Internet Options

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 8/26

- Step 2: Click connections option and then click option LAN setting

- Step 3: Activate only Box Use automatic configuration script and then type the name of the proxy http://proxy.viettelperu.com/proxy.pac. Finally clickOK

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 9/26

4.4.3 Configurate the proxy on internet explorer - Step 1: Pressing the top left option called Firefox- options

- Step 2: Select Advance option from the top

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 10/26

- Step 3: Finally select Automatic proxy configuration URL and insert the name of the proxy http://proxy.viettelperu.com/proxy.pac and ok.

4.4.4 Configurate the proxy on Google Chrome - Step 1: Click the Chrome menu select Settings located on the browser toolbar and

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 11/26

- Step 2: Click Show Advanced Options

- Step 3: Go to the section Network- Change proxy settings

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 12/26

- Step 4: Click connections option and then click option LAN setting

- Step 5: Activate only Box Use automatic configuration script and then type the name of the proxy http://proxy.viettelperu.com/proxy.pac. Finally clickOK

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 13/26

4.4.5 Configurate IP Address on Pc. - Step 1: You have to Configured for Obtain an IP address automatically. And for the DNS you have to Configured Static IP address: 10.121.127.193 and 10.121.127.194.

4.4.6 Configurate Modem for Connect IP Cameras - Step 1: Access to the modem with username/password: admin/admin using the IP Gateway (for example: http://192.168.1.1). You can check the IP using the command ipconfig in CMD windows (Run cmd enter).

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 14/26

- Step 2: After login successfully to the modem, the status screen will be appear. Click Forwarding option from the left side.

- Step 3: Select Virtual Servers. Then click in Add New.

- Step 5: Add New Virtual Server Entry. Fill all the information required, then click Save: o Service port: Insert the port that you will use to monitor the cameras from outside the network. o Internal Port: Insert the port that you configure on the camera. o IP Address: Insert the IP address of the camera. o Protocol, Status and Common service port dont change.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 15/26

This is an example of how to fill the information:

- Step 6: Add more Virtual Servers. After you save your first Virtual Server, you will get the following page:

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 16/26

From this page you can add many Virtual server as the number of cameras you have in the office/branch. For example:

From the example above, you can access to the cameras from outside or inside the network of the office: Inside the office: Access for Camera 1: 192.168.1.100:37777 Access for Camera 2: 192.168.1.101:37777 Access for Camera 3: 192.168.1.102:37777 Access for Camera 4: 192.168.1.103:37777 - Step 7: For access outside the camera first you have to check the IP assigned to your modem (this IP will be the same always). You can check the IP only by clicking in Status (from left side) then search WAN section:

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 17/26

From the above example, you can access to the cameras from outside the network of the office: Access for Camera 1: 172.16.0.50:37777 Access for Camera 2: 172.16.0.50:37778 Access for Camera 3: 172.16.0.50:37779 Access for Camera 4: 172.16.0.50:37780

Note: All IPs and ports configured on the cameras has to be provided by IT Billing department. 4.5. Configuration for Internet, Intranet, Video Conference and Ip Camera with Switch Cisco SF300 - Step 1: Before all, you must required to IP Team the Template for configure the Cisco Switch SF300. - Step 2: Enter to the Securte CRT. Click on File and then in Connect.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 18/26

- Step 3: Now you have to click on the icon of New Session

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 19/26

- Step 4: On Protocol, choose Serial, and click on Next

- Step 5: Now you have to choose the Correct Port COM, you can see it in the Device Manager. For Baud rate use 115200, and click on Next.

- Step 6: Now you can access and configured. The Username and Password by default is cisco.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 20/26

- Step 7: The first thing you must do when you are logging its to change the mode of the Switch. Using the command set system mode router. Press Enter and the Switch will reboot.
set system mode router ! !!!! WAIT UNTIL SF300 COMPLETE THE RESTART !!!! Username: cisco !!!! Password: cisco !

- Step 8: Now you can configured the template that Ip Team sent to you.
configure terminal vlan database vlan 2,3991,3993,4001 exit interface vlan 3993 ip address 172.16.193.129 255.255.255.248 name NMS exit interface vlan 2 ip address 172.16.212.62 255.255.255.192 name GATEWAY_INTERNET exit ip route 0.0.0.0 0.0.0.0 172.16.193.134

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 21/26

username viettel password viettel@123 privilege 15 ip telnet server interface gigabitethernet3 switchport trunk allowed vlan add 2,3991,3993,4001 exit

- Step 9: When you finish configure you must call Ip Team to Complete the Configuration of the switch. Also Ip Team will provide to you the IPs for PCs. The DNS address for configured on PCs are 10.121.127.193 and 10.121.127.194. - Step 10: Connect the devices to the Switch. o The port fastEthernet 1 of the Switch is for the Video Conference. o The port fastEthernet 2,3,4,5 are for the Camera IP. o The port fastEthernet 6 to 48 are for the Computers. o The port gigabitEhternet3 is for the Uplink to the Site Router.

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 22/26

ANNEX 1: Branch Office Traffic Flow

INTERNET

FIREWALL

FIREWALL

FIREWALL

FIREWALL

DCN_SI_R2911

Si

Si

Si

DCN_SI_S3560_AG03/04

DCN TRUST ZONE

Si

DCN OFFICE ZONE

MTU-CTH: 10.121.120.4

Camera: 10.121.115.1

METRO NETWORK

(1) (2)
RED COLOR: TRAFFIC FLOW VIDEOCONFERENCE (1) GREEN COLOR: TRAFFIC FLOW CAMERA (2) BLACK COLOR: TRAFICC FLOW INTRANET (3)

(3)
SF300_OFFICE_BRANCH

YELLOW COLOR: TRAFFIC FLOW INTERNET (4)

(4)

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 23/26

ANNEX 2: Business Center Traffic Flow

INTERNET

FIREWALL

FIREWALL

FIREWALL

FIREWALL

DCN_SI_R2911

Si

Si

Si

DCN TRUST ZONE

Si

DCN OFFICE ZONE

MTU-CTH: 10.121.120.4 Proxy: 10.121.127.195

Camera: 10.121.115.1

METRO NETWORK

(1) (2)
RED COLOR: TRAFFIC FLOW VIDEOCONFERENCE (1) GREEN COLOR: TRAFFIC FLOW CAMERA (2) BLACK COLOR: TRAFICC FLOW INTRANET (3)

(3)
SF300_OFFICE_BRANCH

YELLOW COLOR: TRAFFIC FLOW INTERNET (4)

(4)

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 24/26

ANNEX 3: Showroom Traffic Flow

INTERNET

FIREWALL

FIREWALL

FIREWALL

FIREWALL

Si

Si

Si

DCN TRUST ZONE

Si

DCN OFFICE ZONE

Camera: 10.121.115.1

Proxy: 10.121.127.195

METRO NETWORK

(1) (2)
SF300_OFFICE_BRANCH

GREEN COLOR: TRAFFIC FLOW CAMERA (1) BLACK COLOR: TRAFICC FLOW INTRANET (2) YELLOW COLOR: TRAFFIC FLOW INTERNET (3)

(3)

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 25/26

ANNEX 4: Technical Team Traffic Flow

INTERNET

FIREWALL FIREWALL

FIREWALL

FIREWALL

FIREWALL

Si

Si

Si

DCN TRUST ZONE

IPBN_SI_M600_BR01 IPBN_SI_M600_BR02

DCN OFFICE ZONE

Proxy: 10.121.127.195

METRO NETWORK

(1) (2)
MODEM RED COLOR: TRAFFIC FLOW INTRANET (1) GREEN COLOR: TRAFFIC FLOW INTERNET (2)

VIETTEL PERU S.A.C

GUIDELINE FOR DESCRIBING AND DEPLOYING BRANCH SERVICES
Say it your way

Code:GL.....TD Force day: Issued: 01 Pages: 26/26

ANNEX 5: Showroom Traffic Flow

FIREWALL

FIREWALL

Si

Si

DCN_SI_S3560_CS01

DCN_SI_S3560_CS02

INTERNET
CC E SS

DCN TRUST ZONE

(2) (1)

VP

RE

A TE MO

RED COLOR: TRAFFIC FLOW INTRANET (1) GREEN COLOR: TRAFFIC FLOW INTERNET (2)