s100
Short Description
s100 config...
Description
Content 1. Equipment Introduction ............................................................................................................. 2 1.1 System Overview ................................................................................................................. 2 1.2 Board Description................................................................................................................ 3 1.2.1 Control Card ............................................................................................................. 3 1.2.2 ADSL Service Card .................................................................................................... 4 1.2.3 VDSL Service Card..................................................................................................... 4 1.2.4 POTS Service Card .................................................................................................... 4 1.2.5 P2P FE card ............................................................................................................... 5 1.3 Cabinet Installation ............................................................................................................. 6 1.3.1 Scenario .................................................................................................................... 6 1.3.2 Case Study ................................................................................................................ 8 1.3.2 Important Notes ..................................................................................................... 14 1.3 Management Configuration .............................................................................................. 15 1.3.1 N2000 & U2000 ...................................................................................................... 15 1.3.2 Environment Monitor in F01S100 cabinet ............................................................. 16 1.3.3 Environment Monitor in F01S300 cabinet ............................................................. 17 1.3.3 Service General design ........................................................................................... 20 1.3.4 Security Design ....................................................................................................... 21 1.3.5 ADSL Service Configuration .................................................................................... 27 1.3.6 VDSL Service Configuration .................................................................................... 33 1.3.7 VOIP POTS Service Configuration ........................................................................... 46 1.3.8 FE Service Configuration ........................................................................................ 47 1.3 Feature Description ........................................................................................................... 52 1.3.1 Anti-Macspofing ..................................................................................................... 52 1.3.2 Ring Check .............................................................................................................. 53 1.3.3 Security Anti-dos .................................................................................................... 54 1.3.5 Security Mac-filter .................................................................................................. 54
1. Equipment Introduction 1.1 System Overview
Abbreviated Name
Full Name
CCUC
Centralized control unit board, 2GE/2GPON
ASPB
64-port narrowband subscriber board
ADLE
32-port ADSL2+ service board
VDSE
24-port VDSL2 over POTS service board
EIUA
16 Fe Electric Port
EIUD
4 Fe (fiber)+ 4 Ge(Combo)
PAIA
AC power board
PAIB
AC +DC power board
PDIA
DC power board
FCBA
Fan control board
1.2 Board Description 1.2.1 Control Card
Daughter Board
Port
Function
UP2A
Two multi-mode adaptive optical ports
Transmits broadband services upstream or cascades equipment, and supports stratum-4 clock synchronization.
UP2C
Two multi-mode adaptive optical ports
Transmits broadband services upstream or cascades equipment, and supports stratum-3 clock synchronization.
ASDA/ASDM
-
Provides a built-in DSP chip, processes voice frequency, and converts digital signals into VoIP packets. ASDM supports better call capability than ASDA.
1.2.2 ADSL Service Card
1.2.3 VDSL Service Card
1.2.4 POTS Service Card
1.2.5 P2P FE card
1.2.6 Power card
Note: 1. For PAIB card, it support AC and DC at the same time, but DC is the backup for AC, by nature, DC does not work. Only when the AC power on first and suddenly down, system will drive DC
to work. 2. For PAIB card, the DC connection is designed to connect to Battery and charge the battery by DSLAM himself. It is not recommendatory to connect the DC connection to other kind of DC power, otherwise it is likely to destroy the power card of DSLAM.
1.3 Cabinet Installation 1.3.1 Scenario
1.3.2 Case Study Waterproof Cap is used to keep from the water, so please install it back after using Mounting Bracket.
Make sure the Sealing The Cabinet well
Mounting Installation Part not be too tight
Routing the Fiber well.
Routing the user cable.
Off the two power Switch before connect the AC power.
Grounding Condition
Making the MDF for P2P FE access
Protective Unit
Environment Monitor for F01S100 cabinet
Environment Monitor for F01S300 cabinet
1.3.2 Important Notes 1. Choose the right location for Cabinet, for example if the area easily to be covered by raining water, it is suggested to install at Pole or Wall. 2. Face the cabinet door towards south or both if possible, ensures that the cabinet receives the minimum solar radiation from Sun. 3. The maximum weight of the fully loaded cabinet is 84Kg, so for safety, the bearing capacity of the steel cable for carrying the cabinet should be larger than 252 kg (triple of the maximum weight of the fully loaded cabinet. 4. If installed at the Pole, the diameter of the pole is required to be between 250mm and 350mm. 5. If installed on the ground, after the cabinet or battery compartments is installed on the base, use the waterproof glue (such as Huawei TSE382-C) to seal the installation hole around three expanding bolts. 6. Before routing the battery power cable, ensure that the batter switch is set to be off; The connection between two batteries, or the connection between batteries and equipment must be firm and correctly; Follow exactly the installation procedure to install the batteries, any short circuit may hurt personnel and damage the equipment. 7. Before routing the PGND cables, make the label for the cable to facilitate the onsite engineering and the subsequent maintenance; Route the PGND cable properly to ensure the cabinet is protected from the lighting and other interfaces. The diameter of the PGND cable should not be smaller than 16mm. 8. Before routing the AC power cable, make sure the label for the cable to facilitate the
onsite engineering and the subsequent maintenance; Before routing the AC power cable, ensure that the switch of the AC PDU is set to be OFF. 9. Before routing the user cables, make the label for the cable and when the service is enabled in the future the cable side terminal block must be installed with the protective unit. 10. When deploy the Optical cable and Optical Fiber: Make label; Only the qualified personnel are allowed to splice the optical fiber; When handling optical fibers do not stand close to or look into the optical fiber outlet with unproteced eyes; The optical fiber in the cabinet should be protected with a spiral rube; The bending radius of the optical fiber should be more than 20 times the cable diameter, in generally the bending radius of the optical fiber is greater than or equal to 40mm. 11. Check the cabinet carefully according with the "Check list " of the installation guide. 12. Power on the service device only when the input AC voltage is in the normal range: 100V to 240V. 13. If the cabling apertures at the bottom of the cabinet or battery compartment are the sleeves, cover the sealing material(such as sealing mud) onto the cabling apertures at the bottom of the cabinet; and if the cabling apertures at the bottom of cabinet are the PG connectors, fasten the PG connectors properly.
1.3 Management Configuration 1.3.1 N2000 & U2000 MA5616(config)#interface vlanif 3988 MA5616 (config-if-vlanif3988)# ip address 172.24.32.10 20 MA5616 (config-if-vlanif3988)#quit MA5616(config)# ip route-static 172.30.30.10 255.255.255.255 172.24.32.1 MA5616(config)# snmp-agent community read public MA5616(config)# snmp-agent community write private MA5616(config)# snmp-agent target-host trap-hostname U2000 address 172.30.30.10 udp-port 162 trap-paramsname U2000 MA5616(config)# snmp-agent target-host trap-paramsname U2000 v1 securityname private MA5616(config)# snmp-agent trap enable standard MA5616(config)# sysman source trap vlanif 3988 Note: IP address of N2000&U2000: 172.30.30.10 Management VLAN: 3988
IP address of DSLAM: 172.24.32.10 Gateway of DSLAM: 172.24.32.1 SNMP Communication Word: Read (public) and Write (private).
1.3.2 Environment Monitor in F01S100 cabinet 1.3.2.1 Power Module &Sensor MA5616(config)#display emu EMU parameter ---------------------------------------------------------------------------ID Type
State
| ID
Type
State
---------------------------------------------------------------------------0
FAN
2
H831PMU
4
-
6 8
Normal
|
1
H831VESC
|
3
-
-
-
| 5
-
-
-
-
| 7
-
-
-
-
| 9
-
-
10 -
-
| 11
-
-
12 -
-
| 13
-
-
14 -
-
| 15
-
-
Normal
Normal
---------------------------------------------------------------------------MA5616(config)#interface emu 1 MA5616(config-if-h831vesc-1)# esc digital 0 available-level low-level name hightemp MA5616(config-if-h831vesc-1)# esc digital 1 available-level low-level name door MA5616(config-if-h831vesc-1)# esc digital 2 available-level low-level name arrester MA5616(config-if-h831vesc-1)# display esc alarm EMU ID: 1
ESC alarm information
---------------------------------------------------------------------------DigitalID
Name
State
| DigitalID Name
State
0
hightemp
Normal
|
Alarm
2
arrester
Normal
|
1 3
Door Wiring
----------------------------------------------------------------------------
Normal
1.3.3 Environment Monitor in F01S300 cabinet 1.3.3.1 Power Module &Sensor
(config)#display emu EMU parameter ---------------------------------------------------------------------------ID Type State | ID Type State ---------------------------------------------------------------------------0 FAN normal | 1 2 | 3 4 | 5 6 | 7 8 | 9 10 | 11 12 | 13 14 | 15 16 | 17 18 | 19 20 | 21 22 | 23 24 | 25 26 | 27 28 | 29 30 | 31 32 | 33 (config)#emu add 1 Power4830L 0 0 (config-if-power4830l-1)#power outside-digital 3 available-level low-level name Arrester (config-if-power4830l-1)#power outside-digital 4 available-level high-level name smoke (config-if-power4830l-1)#power outside-digital 5 available-level low-level name fan
(config-if-power4830l-1)# power outside-digital 6 available-level low-level name mdfdoor (config-if-power4830l-2)# power battery parameter 0.15 60 1 110 (config-if-power4830l-2)# power battery temperature 80 -20 80 (config-if-power4830l-2)# power battery temperature 80 -20 80 (config-if-power4830l-2)# power environment temperature 68 -5 80 -20 (config-if-power4830l-2)# power temperature-off load-off-temperature 70 (config-if-power4830l-1)# display power alarm
1.3.3 Service General design Because in the DSLAM there is the “Service-port index” idea, that every service-port have one ID, so how to manage and use this “ID” well is important. Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
Note: Here suppose the max density of board is 64 ports. PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Suppose the MA5616 Demo site configured as Slot0
CCUC
ControlCard
Slot1
VDSE
VDSL
Slot2
ADLE
ADSL
Slot3
EIUA
FE
Slot4
ASPB
POTS
Slot5
PAIB
Power card
Note: It is not recommendatory to deploy the ADSL and VDSL at the same DSLAM, because there is crossing talking between VDSL and ADSL signal. And if there must configure ADSL and VDSL at the same time, please set the ADSL and VDSL cards far, for example, ADSL slot1 and VDSL slot4, and also the Copper line cable between ADSL and VDSL better to be isolated.
1.3.4 Security Design 1.3.4.1 PPPOE • • • • •
MA5616(config)#vlan service-profile profile-id 1 profile-name PPPOE MA5616(config-vlan-srvprof-1)# pitp enable MA5616(config-vlan-srvprof-1)# dhcp option82 disable MA5616(config-vlan-srvprof-1)# Anti-macspoofing enable MA5616(config-vlan-srvprof-1)# commit MA5616(config-vlan-srvprof-1)# quit
a. The PPPOE format for MINI DSLAM in future is: anid atm frame/frame/frame/frame/slot/port:vpi.vci (9 parameter) anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID (9 parameter) And now the current PPPOE format for DSLAM is: anid atm rack /frame/slot/port:vpi.vci (7 parameter) We can use the command the following command to customize the PPPOE message format: huawei(config)#raio-mode user-defined pitp-pmode huawei(config)#raio-format pitp-pmode cid anid atm frame/frame/frame/frame/slot/port:vpi.vci huawei(config)#raio-format pitp-pmode cid anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID or huawei(config)#raio-mode user-defined pitp-pmode huawei(config)#raio-format pitp-pmode anid atm rack/frame/slot/port:vpi.vci
1.3.4.2 IPTV • MA5616(config)#vlan service profile profile-id 2 profile-name IPTV • MA5616(config-vlan-srvprof-2)# Anti-macspoofing enable • MA5616(config-vlan-srvprof-2)# pitp disable • MA5616(config-vlan-srvprof-2)# dhcp option82 disable • MA5616(config-vlan-srvprof-2)# commit • MA5616(config-vlan-srvprof-2)# quit Note: Because now VASC not require DHCP option82 feature on DSLAM, so here we disable “dhcp option82” at DSLAM.
1.3.4.3 VOIP
• MA5616(config)#vlan service-profile profile-id 3 profile-name VOIP • MA5616(config-vlan-srvprof-3)# Anti-macspoofing enable • MA5616(config-vlan-srvprof-3)# pitp disable • MA5616(config-vlan-srvprof-3)# dhcp option82 enable • MA5616(config-vlan-srvprof-3)# commit • MA5616(config-vlan-srvprof-3)# quit a. The DHCP format for VOIP not yet defined by VTN yet, here we just list for example: anid atm frame/frame/frame/frame/slot/port:vpi.vci (9 parameter) anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID (9 parameter) or anid atm rack /frame/slot/port:vpi.vci (7 parameter) We can use the command the following command to customize the dhcp-option82 message format: huawei(config)#raio-mode user-defined dhcp-option82 huawei(config)#raio-format dhcp-option82 cid anid atm frame/frame/frame/frame/slot/port:vpi.vci huawei(config)#raio-format dhcp-option82 cid anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID or huawei(config)#raio-mode user-defined dhcp-option82 huawei(config)#raio-format dhcp-option82 anid atm rack/frame/slot/port:vpi.vci
1.3.4.4 IPOE • MA5616(config)#vlan service-profile profile-id 4 profile-name IPOE • MA5616(config-vlan-srvprof-4)# Anti-macspoofing disable • MA5616(config-vlan-srvprof-4)# pitp disable • MA5616(config-vlan-srvprof-4)# dhcp option82 disable • MA5616(config-vlan-srvprof-4)# commit • MA5616(config-vlan-srvprof-4)# quit Note: For IPOE service, we can not enable “Anti-Macspoofing” feature at IPOE VLAN, otherwise all of the static IPOE service will be down.
1.3.4.5 Unicast & Broadcast Traffic-suppress at uplink port We can choose depend on the requirement from VNPT, currently we deploy Level3 for MA5600. MA5616(config)#interface eth 0/0 MA5616(config-eth-0/0)# Traffic-suppress all unicast value 3. MA5616(config-eth-0/0)# Traffic-suppress all broadcast value 6.
1.3.4.6 Power Management Mode
In short, if VNPT require to protect the POTS card, and let Broad-band cards down after AC down, please enable such feature, otherwise please undo this feature.
1.3.4.7 Global Security • MA5616(config)# security anti-macspoofing enable • MA5616(config)# pitp pmode enable • MA5616(config)# dhcp option82 enable • MA5616(config)# security anti-dos enable • MA5616(config)#ring check enable • MA5616(config)# security mac-filter 1010-1010-3020 Note: The “Security mac-filter” is used to protect the BARS or some Server mac address, after that system will prohibit the user side simulate the Server mac-address. And in the command, the mac “1010-1010-3020” is one Server Mac, and DSLAM support configure 4 Mac at most.
1.3.4.8 QOS profile example
The above is designed for DSL access, ADSL & VDSL, and the following is for FE access:
1.3.4.7 Special Case Application
Case1: If MA5616 cascading under MA5600, MA5616 should set the DSLAM IGMP version to be as IGMP V2, because the current MA5600 work as IGMP V2. MA5616(config)#multicast-vlan 99 MA5616(config-mvlan99)# igmp version v2 And MA5600 should configure the GE port who connect with the MA5616 to be IPTV cascading port: MA5600(config)#igmp cascade-port frameid/slotid/portid quickleave disable Case2: If MA5616 connect to UPE or LSW, but UPE or LSW run the IGMP V2. In this case, MA5616 also need set the IGMP version to be IGMP V2. Note: MA5616 work as IGMP V3 by default.
1.3.5 ADSL Service Configuration 1.3.5.1 Line Profile Example
1.3.5.2 PPPOE configuration example •
Setp1 :Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2 MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 11
•
Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 600 smart MA5616(config)#port vlan 600 0/0 0 • Setp3: Create the service port to the VLAN MA5616(config)#service-port 64 vlan 600 ADSL 0/2/0 vpi 8 vci 35 rx-cttr 11 tx-cttr 11 Service-port ID: 64 Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
PVC : 8/35 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table: 11
•
Setp4: Configure the Security for PPPOE service MA5616(config)#vlan bind service-profile 600 profile-name PPPOE
1.3.5.3 IPTV configuration example •
Setp1 :Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2 MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 12
•
Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 1100 smart MA5616(config)#port vlan 1100 0/0 0 MA5616(config)#vlan 99 smart MA5616(config)#port vlan 99 0/0 0
•
Setp3: Create the service port to the VLAN MA5616(config)#service-port 320 vlan 1100 ADSL 0/2/0 vpi 8 vci 36 rx-cttr 12 tx-cttr 12 Note: Here the ID of “service-port” is “320”, every service-port have one id, later it will be used add the IPTV user.
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table 12 as following:
•
• • • • • • • • • • •
Setp4:Configure the security for IPTV service MA5616(config)#vlan bind service-profile 1100 profile-name IPTV
Setp5: Configure the “BTV” at DSLAM MA5616(config)#multicast-vlan 99 MA5616(config-mvlan99)# igmp mode proxy MA5616(config-mvlan99)# igmp uplink-port 0/0/0 MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253 priority 4 MA5616(config-mvlan99)#btv MA5616(config-btv)#igmp proxy router gen-query-interval 30 MA5616(config-btv)#igmp proxy router robustness 1 MA5616(config-btv)#igmp user add service-port 320 no-auth MA5616(config-btv)#multicast-vlan 99 MA5616(config-mvlan99)#igmp multicast-vlan member service-port 320 Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN.
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
1.3.5.4 VOIP configuration example Note: Here is the VOIP is based on the CPE, DSLAM just provide the channel to transparent the packets. •
Setp1 :Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2 MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 12
•
Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 88 smart MA5616(config)#port vlan 88 0/0 0
•
Setp3: Create the service port to the VLAN MA5616(config)#service-port 578 vlan 88 ADSL 0/2/0 vpi 8 vci 37 rx-cttr 13 tx-cttr 13 Note: Here the ID of “service-port” is “578”, every service-port have one id, later it will be used add the IPTV user. Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table 13 as following:
• •
Setp4: Configure the Security for VOIP service. MA5616(config)#vlan bind service-profile 88 profile-name VOIP
1.3.5.5 IPOE configuration example •
Setp1 : Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2 MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 11
•
Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 666 smart MA5616(config)#port vlan 666 0/0 0 Setp3: Create the service port to the VLAN MA5616(config)#service-port 768 vlan 666 ADSL 0/2/0 vpi 8 vci 38 rx-cttr 14 tx-cttr 14
•
Service-port ID as following: Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
PVC 8/38 as following: PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table 14 as following:
• Setp4: Configure the Security for IPOE service MA5616(config)#vlan bind service-profile 666 profile-name IPOE
1.3.6 VDSL Service Configuration 1.3.6.1 Line Profile Example
MA5616(config)#display vdsl line-profile 10 -----------------------------------------------------------------------------Profile index: 10
Name: 17A_B8-11_(SNR6-slow-INP2)
Transmission mode: All (G992.1~5,T1.413,G993.2)
Bit swap downstream
: Enable
Bit swap upstream
: Enable
Form of transmit rate adaptation downstream
: AdaptAtStartup
Form of transmit rate adaptation upstream
: AdaptAtStartup
Target SNR margin downstream(0.1dB)
: 60
Minimum SNR margin downstream(0.1dB)
: 0
Maximum SNR margin downstream(0.1dB)
: 300
Target SNR margin upstream(0.1dB)
: 60
Minimum SNR margin upstream(0.1dB)
: 0
Maximum SNR margin upstream(0.1dB)
: 300
UPBO US1 band reference PSD parameters[a, b]
: 1650,1020
UPBO US2 band reference PSD parameters[a, b]
: 1650,615
UPBO US3 band reference PSD parameters[a, b]
: 0,0
UPBO US4 band reference PSD parameters[a, b]
: 0,0
UPBO Boost Mode
: Enable
UPBO US1 band reference electrical length
: 0
UPBO US2 band reference electrical length
: 0
UPBO US3 band reference electrical length
: 0
UPBO US4 band reference electrical length
: 0
UPBO use of electrical length to compute UPBO
: Auto
Allow transition to idle
: not allowed
Allow transition to low power
: not allowed
L0 time(second)
: 255
L2 time(second)
: 30
L3 time(second)
: 255
Maximum aggregate transmit power reduction(dB)
: 3
Total maximum aggregate transmit power reduction (dB)
: 9
G.993.2 profile
: Profile17a
VDSL2 PSD class mask
: AnnexB998ADE17-M2x-A(B8-11)
VDSL2 link use of U0
: Unused
Maximum nominal aggregate transmit power downstream(0.1dBm)
: 145
Maximum nominal aggregate transmit power upstream(0.1dBm)
: 145
Upstream PSD mask selection
: ADLU-32/EU-32
Virtual noise mode downstream
: Disable
Virtual noise mode upstream Network timing reference clock mode
: Disable : FreeRun
INM inter arrival time offset downstream(symbol): 3 INM inter arrival time step downstream
: 0
INM cluster continuation value downstream (symbol)
: 0
INM equivalent INP mode downstream
: 0
INM inter arrival time offset upstream(symbol)
: 3
INM inter arrival time step upstream
: 0
INM cluster continuation value upstream(symbol) : 0 INM equivalent INP mode upstream
: 0
SOS time Window downstream(64ms)
: 0
Minimum percentage of degraded tones downstream : 0 Minimum number of normalized CRC anomalies downstream(0.02)
: 65535
Maximum number of SOS downstream
: 0
SNR margin offset of ROC downstream(0.1dB)
: 0
Minimum impulse noise protection of ROC downstream
: 0
SOS time Window upstream(64ms)
: 0
Minimum percentage of degraded tones upstream
: 0
Minimum number of normalized CRC anomalies upstream(0.02)
: 65535
Maximum number of SOS upstream
: 0
SNR margin offset of ROC upstream(0.1dB)
: 0
Minimum impulse noise protection of ROC upstream
: 0
------------------------------------------------------------------------------
MA5616(config)#display vdsl channel-profile 33 -----------------------------------------------------------------------------Profile index: 33
Name: 33M/10M(Down/Up)
Data path mode
: Both
Minimum impulse noise protection downstream
: TwoSymbols
Minimum impulse noise protection upstream
: TwoSymbols
Maximum interleaving delay downstream(ms)
: 16
Maximum interleaving delay upstream(ms)
: 16
Minimum transmit rate downstream(Kbps)
: 64
Minimum reserved transmit rate downstream(Kbps) : 64 Maximum transmit rate downstream(Kbps)
: 34837
Minimum transmit rate upstream(Kbps)
: 64
Minimum reserved transmit rate upstream(Kbps)
: 64
Maximum transmit rate upstream(Kbps)
: 10557
Rate threshold downshift downstream(Kbps)
: 0
Rate threshold upshift downstream(Kbps)
: 0
Rate threshold downshift upstream(Kbps)
: 0
Rate threshold upshift upstream(Kbps)
: 0
Retransmission control in downstream
: Disable
Retransmission control in upstream
: Disable
Erasure decoding switch
: Disable
Minimum SOS bit rate downstream(8Kbps)
: 8
Minimum SOS bit rate upstream(8Kbps)
: 8
------------------------------------------------------------------------------
MA5616(config)#display vdsl line-template 33 -----------------------------------------------------------------------------Template index: 33 Name:33M/10M Line profile index : 10 Channel1 profile index : 33 Channel1 rate adaptation ratio downstream : 100 Channel1 rate adaptation ratio upstream : 100 ------------------------------------------------------------------------------
VDSL (PTM)
Overhead = INT((L+4)/64)+4+MOD((L+4),64)/64
Packet size(L)
Overhead
total size
PTM efficiency
64
5.0625
69.0625
92.67%
128
6.0625
134.0625
95.48%
256
8.0625
264.0625
96.95%
512
12.0625
524.0625
97.70%
1024
20.0625
1044.0625
98.08%
1500
27.5
1527.5
98.20%
Down Line Speed= SLA 33M / 0.97 = 34837 Up line Speed = SLA 10M / 0.97 = 10557 In short, the Line Speed = SLA/0.97, it is recommendatory to use the PTM mode but not ATM mode, otherwise the Line Speed = SLA x 1.2, the same with ADSL port.
And if we need change the Line Speed, we can create the different Channel-Profile to define the speed but can reuse the same line-profile(10), for example, now we need create the 40M Down and 10M up, so we can define one more channel-profile who define the 40M/10M speed and reuse the old Line-profile(ID:10). MA5616(config)#display vdsl channel-profile 40 -----------------------------------------------------------------------------Profile index: 40
Name: 40M/10M(Down/Up)
Data path mode
: Both
Minimum impulse noise protection downstream
: TwoSymbols
Minimum impulse noise protection upstream
: TwoSymbols
Maximum interleaving delay downstream(ms)
: 16
Maximum interleaving delay upstream(ms)
: 16
Minimum transmit rate downstream(Kbps)
: 64
Minimum reserved transmit rate downstream(Kbps) : 64 Maximum transmit rate downstream(Kbps)
: 40960
Minimum transmit rate upstream(Kbps)
: 64
Minimum reserved transmit rate upstream(Kbps)
: 64
Maximum transmit rate upstream(Kbps)
: 10240
Rate threshold downshift downstream(Kbps)
: 0
Rate threshold upshift downstream(Kbps)
: 0
Rate threshold downshift upstream(Kbps)
: 0
Rate threshold upshift upstream(Kbps)
: 0
Retransmission control in downstream
: Disable
Retransmission control in upstream
: Disable
Erasure decoding switch
: Disable
Minimum SOS bit rate downstream(8Kbps)
: 8
Minimum SOS bit rate upstream(8Kbps)
: 8
------------------------------------------------------------------------------
MA5616(config)#display vdsl line-template 40 -----------------------------------------------------------------------------Template index: 40 Name:40M/10M Line profile index : 10 Channel1 profile index : 40 Channel1 rate adaptation ratio downstream : 100 Channel1 rate adaptation ratio upstream : 100 ------------------------------------------------------------------------------
How to configure the VDSL line-profile: MA5616(config)#vdsl line-profile add { |profile-index }:10 Command: vdsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >
Do you want to name the profile (y/n) [n]:y
>
Please input profile name:17a
>
Transmission mode:
>
0: Custom
>
1: All (G.992.1~5,T1.413,G.993.2)
>
2: Full rate(G.992.1/3/5,T1.413,G.993.2)
>
3: G.DMT (G.992.1/3/5,G.993.2)
>
4: G.HS (G.992.1~5,G.993.2)
>
5: ADSL (G.992.1~5,T1.413)
>
6: VDSL (G.993.2)
>
Please select (0~6) [1]:1
>
Bit swap downstream 1-disable 2-enable (1~2) [2]:
>
Bit swap upstream
>
Please select the form of transmit rate adaptation downstream:
>
1-fixed, 2-adaptAtStartup, 3-adaptAtRuntime (1~3) [2]:
>
Please select the form of transmit rate adaptation upstream:
1-disable 2-enable (1~2) [2]:
>
1-fixed, 2-adaptAtStartup, 3-adaptAtRuntime (1~3) [2]:
>
Will you set SNR margin parameters? (y/n) [n]:n
>
Will you set DPBO parameters? (y/n)[n]:
>
Will you set UPBO parameters? (y/n)[n]:
>
Will you set power management parameters? (y/n) [n]:
>
Will you set RFI notch configuration parameter? (y/n) [n]:
>
Will you set ADSL tone blackout configuration parameter? (y/n) [n]:
>
Will you set VDSL tone blackout configuration parameter? (y/n) [n]:
>
Will you set mode-specific parameters? (y/n) [n]:y
>
Current configured modes:
>
1-defmode
>
Please select 1-Add
>
1-defmode
>
Please select
>
G.993.2 profile:
>
1-Profile8a
2-Profile8b
3-Profile8c
4-Profile8d
>
5-Profile12a
6-Profile12b
7-Profile17a
8-Profile30a
>
Please select (1~8) [5]:7
>
VDSL2 PSD class mask:
>
1-AnnexA998-D-32
2-AnnexA998-D-64
>
3-AnnexBHPE17-M1(B7-7)
4-AnnexB997E17-M2x-A(B7-9)
>
5-AnnexB998E17-M2x-NUS0(B8-8)
6-AnnexB998E17-M2x-NUS0-M(B8-9)
>
7-AnnexB998ADE17-M2x-NUS0-M(B8-10)
8-AnnexB998ADE17-M2x-B(B8-12)
>
9-AnnexB998ADE17-M2x-A(B8-11)
10-AnnexA998-D-48
>
11-AnnexA998-D-128
>
Please select (1~11) [8]:9
>
VDSL2 link use of U0 1-unused, 2-used (1~2) [1]:
>
Maximum nominal aggregate transmit power downstream
>
(0~145 0.1dBm) [145]:
>
Maximum nominal aggregate transmit power upstream
2-Modify
3-Save and quit
[3]:2
[1]:
>
(0~145 0.1dBm) [145]:
>
Will you set PSD mask value downstream parameter? (y/n) [n]:
>
Will you set PSD mask value upstream parameter? (y/n) [n]:
>
Will you set Upstream PSD mask selection parameter? (y/n) [n]:
>
Will you set transmitter referred virtual noise parameters? (y/n)[n]:
>
Current configured modes:
>
1-defmode
>
Please select 1-Add
2-Modify
3-Save and quit
>
Will you set network timing reference? (y/n) [n]:
>
Will you set INM parameter? (y/n) [n]:
>
Will you set SOS downstream parameter? (y/n) [n]:
>
Will you set SOS upstream parameter? (y/n) [n]:
[3]:
Add profile 10 successfully
How to configure the VDSL Channel-profile: MA5616(config)#vdsl line-channel-profile add 100 { |profile-index }:100 Command: vdsl channel-profile add 100 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > >
Do you want to name the profile (y/n) [n]:y Please input profile name: 100M
>
Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:3
>
Will you set the minimum impulse noise protection? (y/n) [n]:y
>
Minimum impulse noise protection downstream:
>
1-noProtection
2-halfSymbol
3-singleSymbol
4-twoSymbols
>
5-threeSymbols
6-fourSymbols
7-fiveSymbols
8-sixSymbols
>
9-sevenSymbols
10-eightSymbols
11-nineSymbols
12-tenSymbols
>
13-elevenSymbols
14-twelveSymbols
15-thirteenSymbols 16-fourteenSymbols
>
17-fifteenSymbols 18-sixteenSymbols
>
Please select (1~18) [1]:4
>
Minimum impulse noise protection upstream:
>
1-noProtection
2-halfSymbol
3-singleSymbol
4-twoSymbols
>
5-threeSymbols
6-fourSymbols
7-fiveSymbols
8-sixSymbols
>
9-sevenSymbols
10-eightSymbols
11-nineSymbols
12-tenSymbols
>
13-elevenSymbols
14-twelveSymbols
15-thirteenSymbols 16-fourteenSymbols
>
17-fifteenSymbols 18-sixteenSymbols
>
Please select (1~18) [1]:4
>
Will you set interleaving delay parameters? (y/n) [n]:
>
Will you set parameters for rate? (y/n) [n]:y
>
Minimum transmit rate downstream (32~200000 Kbps) [32]:
>
Minimum reserved transmit rate downstream (32~200000 Kbps) [32]:
>
Maximum transmit rate downstream (32~200000 Kbps) [200000]:100000
>
Minimum transmit rate upstream (32~200000 Kbps) [32]:
>
Minimum reserved transmit rate upstream (32~200000 Kbps) [32]:
>
Maximum transmit rate upstream (32~200000 Kbps) [200000]:100000
>
Will you set rate thresholds? (y/n) [n]:
>
Will you set retransmission function (y/n) [n]:
>
Will you set erasure decoding? (y/n) [n]:
>
Will you set SOS bit rate (y/n) [n]: Add profile 100 successfully
How to configure the VDSL Line-Template: Note: Later we just use the VDSL line-template to activate one VDSL port, or we can say the VDSL line-profile and VDSL channel-profile is one part of the VDSL Template file. MA5616(config)# dsl line-template add 100 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected >
Do you want to name the template (y/n) [n]:y
>
Please input template name:100M
>
Please set the line-profile index (1~1024) [1]:10
>
Will you set channel configuration parameters? (y/n) [n]:y
>
Please set the channel number (1~2) [1]:
>
Channel1 configuration parameters:
>
Please set the channel-profile index (1~1024) [1]:100 Add template 100 successfully
1.3.6.2 PPPOE configuration example •
Setp1 :Activate the VDSL2 port. MA5616(config)# interface vdsl 0/1 MA5616(config-if-vdsl-0/1)#deactivate 0 MA5616(config-if-vdsl-0/1)#activate 0 template-index 33 Note: Here we choose the 33M/10M line profile. •
Setp2 : Check the VDSL port active mode, ATM or PTM, if not PTM, please check the Modem setting, it should be set to be PTM mode.
•
•
Setp3: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 600 smart MA5616(config)#port vlan 600 0/0 0 Setp4: Create the service port to the VLAN MA5616(config)#service-port 0 vlan 600 vdsl mode ptm 0/1/0 multi-service user-vlan 35 rx-cttr 11 tx-cttr 11 Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table 11 as following:
Setp5: Configure the security for PPPOE service. MA5616(config)#vlan bind service-profile 600 profile-name PPPOE
1.3.6.3 IPTV configuration example •
•
•
Setp1 :Activate the VDSL port. MA5616(config)# interface VDSL 0/1 MA5616(config-if-VDSL-0/1)#deactivate 0 MA5616(config-if-VDSL-0/1)#activate 0 template-index 33 Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 1100 smart MA5616(config)#port vlan 1100 0/0 0 MA5616(config)#vlan 99 smart MA5616(config)#port vlan 99 0/0 0 Setp3: Create the service port to the VLAN MA5616(config)#service-port 256 vlan 1100 VDSL mode ptm 0/1/0 multi-service user-vlan 36 rx-cttr 12 tx-cttr 12 Note: Here the ID of “service-port” is “256”, every service-port have one id, later it will be used add the IPTV user.
Traffic Table 12 as following:
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
User Vlan: 36 should be set at VDSL CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 36. PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
• • • • • • • • • • • • • •
Setp4: Configure the “Security” for IPTV service MA5616(config)#vlan bind service-profile 1100 profile-name IPTV Setp5: Configure the “BTV” at DSLAM MA5616(config)#multicast-vlan 99 MA5616(config-mvlan99)# igmp mode proxy MA5616(config-mvlan99)# igmp uplink-port 0/0/0 MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253 priority 4 MA5616(config-mvlan99)#btv MA5616(config-btv)#igmp proxy router gen-query-interval 30 MA5616(config-btv)#igmp proxy router robustness 1 MA5616(config-btv)#igmp user add service-port 256 no-auth MA5616(config-btv)#multicast-vlan 99 MA5616(config-mvlan99)#igmp multicast-vlan member service-port 256 Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN. Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
IPOE
768~999
512-577
578-639
640-703
704-767
1.3.6.4 VOIP configuration example Note: Here is the VOIP is based on the CPE, DSLAM just provide the channel to transparent the packets. •
•
•
Setp1 :Activate the VDSL port. MA5616(config)# interface VDSL 0/1 MA5616(config-if-VDSL-0/1)#deactivate 0 MA5616(config-if-VDSL-0/1)#activate 0 template-index 33 Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 88 smart MA5616(config)#port vlan 88 0/0 0 Setp3: Create the service port to the VLAN MA5616(config)#service-port 512 vlan 88 VDSL mode ptm 0/1/0 multi-service user-vlan 37 rx-cttr 13 tx-cttr 13 Note: Here the ID of “service-port” is “512”, every service-port have one id, later it will be used add the IPTV user.
Traffic Table 13 as following:
Service-port index: 512 Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
User Vlan: 37 should be set at VDSL CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 37.
PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
• •
Setp4: Configure the “Security” for VOIP service MA5616(config)#vlan bind service-profile 88 profile-name VOIP
1.3.6.5 IPOE configuration example •
Setp1 :Activate the VDSL2 port. MA5616(config)# interface vdsl 0/1 MA5616(config-if-vdsl-0/1)#deactivate 0 MA5616(config-if-vdsl-0/1)#activate 0 template-index 33 Note: Here we choose the 33M/10M line profile. •
Setp2 : Check the VDSL port active mode, ATM or PTM, if not PTM, please check the Modem setting, it should be set to be PTM mode.
•
Setp3: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 666 smart MA5616(config)#port vlan 666 0/0 0 Setp4: Create the service port to the VLAN MA5616(config)#service-port 768 vlan 666 vdsl mode ptm 0/1/0 multi-service user-vlan 38 rx-cttr 14 tx-cttr 14
•
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
IPOE
768~999
512-577
578-639
PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
640-703
704-767
Setp5: Configure the security for IPOE service. MA5616(config)#vlan bind service-profile 666 profile-name IPOE
1.3.7 VOIP POTS Service Configuration 1.3.7.1 SIP IMS IP: 113.171.225.6 (UDP port: 5060) //The “UDP port” is defined by IMS,DSLAM must follow IMS. DSLAM IP: 10.99.16.2 (UDP port: 5060) Gateway: 10.99.16.1 Home-Domain: ims.vnpt.vn //The “home-domain”—“ims.vnpt.vn” is defined by IMS. PhoneID/UserName/Password: +84432000201/84432000201/84432000201 MA5616(config)# vlan 88 smart MA5616(config)# port vlan 88 0/0 0 MA5616(config)# interface vlanif 88 MA5616(config-vlanif88)# ip address 10.99.16.2 24 MA5616(config-vlanif88)#quit MA5616(config)# ip route-static 113.171.225.6 255.255.255.255 vlanif 88 10.99.16.1 MA5616(config)# ping 10.99.16.1 MA5616(config)# ping 113.171.225.6
Note: Make sure that DSLAM can ping Gateway and IMS, otherwise please check the Routing from DSLAM to Gateway and IMS. MA5616(config)#voip MA5616(config-voip)#ip address media 10.99.16.2 10.99.16.1 MA5616(config-voip)#ip address signaling 10.99.16.2 MA5616(config-voip)#quit MA5616(config)#display protocol support System support SIP protocol Note: DSLAM support 2 mode, if the current mode is H248, we should use command “protocol support sip” to set the DSLAM mode to be “SIP” and restart the DSLAM. MA5616(config)#interface sip 0 MA5616(config-sip0)#if-sip attribute basic media-ip 10.99.16.2 signal-ip 10.99.16.2 signal-port 5060 home-domain ims.vnpt.vn MA5616(config-sip0)#if-sip attribute basic primary-proxy-ip1 113.171.225.6 primary-proxy-port 5060 MA5616(config-sip0)#reset //After a while, check the SIP interface status, if normal it should be “Up”, otherwise please help contact VTN expert for support. MA5616(config-sip0)#display if-sip attribute running 0 MA5616(config-sip0)#quit MA5616(config)# esl user MA5616(config-esl user)# sippstnuser add 0/4/1 0 telno +84432000201 MA5616(config-esl user)#sippstnuser auth set 0/4/1 telno +84432000201 84432000201 password-mode password 84432000201 MA5616(config-esl user)#quit
auth-username
//After a while, please check phone status, if can not be normal after 5 mins, please help capture the SIP packets between DSLAM and IMS with wireshark or ethereal software and send to VTN expert for trouble shooting.
1.3.8 FE Service Configuration 1.3.8.1 PPPOE configuration example •
Setp1: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 600 smart
•
MA5616(config)#port vlan 600 0/0 0 Setp2: Create the service port to the VLAN (30M up/down) MA5616(config)#service-port 128 vlan 600 eth 0/3/0 multi-service user-vlan 35 rx-cttr 30 tx-cttr 30
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Setp3: Configure the security for PPPOE service. MA5616(config)#vlan bind service-profile 600 profile-name PPPOE
1.3.8.2 IPTV configuration example •
Setp1: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 1100 smart MA5616(config)#port vlan 1100 0/0 0 MA5616(config)#vlan 99 smart MA5616(config)#port vlan 99 0/0 0
•
Setp3: Create the service port to the VLAN MA5616(config)#service-port 384 vlan 1100 eth 0/3/0 multi-service user-vlan 36 rx-cttr 101 tx-cttr 111 Note: Here the ID of “service-port” is “384”, every service-port have one id, later it will be used add the IPTV user.
Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
User Vlan: 36 should be set at VDSL CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 36. PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
• • • • • • •
Setp4: Configure the “Security” for IPTV service MA5616(config)#vlan bind service-profile 1100 profile-name IPTV Setp5: Configure the “BTV” at DSLAM MA5616(config)#multicast-vlan 99 MA5616(config-mvlan99)# igmp mode proxy MA5616(config-mvlan99)# igmp uplink-port 0/0/0
• • • • • • • •
MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253 priority 4 MA5616(config-mvlan99)#btv MA5616(config-btv)#igmp proxy router gen-query-interval 30 MA5616(config-btv)#igmp proxy router robustness 1 MA5616(config-btv)#igmp user add service-port 384 no-auth MA5616(config-btv)#multicast-vlan 99 MA5616(config-mvlan99)#igmp multicast-vlan member service-port 384 Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN.
1.3.8.3 VOIP configuration example Note: Here is the VOIP is based on the CPE, DSLAM just provide the channel to transparent the packets. •
Setp1: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 88 smart MA5616(config)#port vlan 88 0/0 0
•
Setp2: Create the service port to the VLAN MA5616(config)#service-port 640 vlan 88 eth 0/3/0 multi-service user-vlan 37 rx-cttr 120 tx-cttr 120 Note: Here the ID of “service-port” is “640”, every service-port have one id, later it will be used add the IPTV user. Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999
User Vlan: 37 should be set at FE CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 37. PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic-Table: 120
• Setp3: Configure the “Security” for VOIP service MA5616(config)#vlan bind service-profile 88 profile-name VOIP
1.3.8.4 IPOE configuration example •
•
Setp1: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 666 smart MA5616(config)#port vlan 666 0/0 0 Setp2: Create the service port to the VLAN (30M up/down) MA5616(config)#service-port 768 vlan 660 eth 0/3/0 multi-service user-vlan 38 rx-cttr 80 tx-cttr 80 Range
Service-Slot1
Service-Slot2
Service-Slot3
Service-Slot4
PPPOE
0-255
0-63
64-127
128-171
172-255
IPTV
256-511
256-319
320-383
384-447
448-511
VOIP
512-767
512-577
578-639
640-703
704-767
IPOE
768~999 PPPOE
IPTV
VOIP
IPOE
ADSL (pvc)
8/35
8/36
8/37
8/38
VDSL (uservlan)
35
36
37
38
FE
35
36
37
38
(uservlan)
Traffic Table: 80
Setp3: Configure the security for IPOE service. MA5616(config)#vlan bind service-profile 660 profile-name IPOE
1.4 Feature Description 1.4.1 Anti-Macspofing MAC spoofing means that the malicious users forge the MAC addresses and attack the network by transmitting packets. Malicious users can forge the MAC addresses of common users to damage the services of these users. Malicious users can also transmit a large number of forged packets that contain different MAC addresses to the system, which affects the normal operation of the system or even causes the system to be down. The anti MAC spoofing feature refers to the feature that the system prevents users from attacking the system by forging MAC addresses.
PC1 and PC2 use the PPPoE service. PC1 uses the MAC address of the BRAS server as its source MAC address to send packets. The forwarding entries on the access device are changed. As a result, the PPPoE service packets of PC2 are sent to PC1 instead of to the BRAS server. Normal services of PC2 fail.
Note: 1. This feature is just for PPPOE and DHCP service, can not be used for IPOE service, otherwise the IPOE service will be down. 2. After use the feature at PPPOE and DHCP vlan, please use another command to check the MAC address for this 2 Vlan: display security bind mac
1.4.2 Ring Check •
•
• •
If there is one user port have too much protocol packet, system can detect and discard all of the protocol packets of that port but the common data packet can be transfer still. And if this port recovers, system will release this port and begin to deal with the protocol packet of that port again. MA5616(config)#ring check { enable | disable } By default, the ring check function is disabled.
• •
• • •
•
When the Ring Check feature is enabled in the device, the device sends 16 Ring Check packets (proprietary BPDU packets) to the subscriber port per second. The device sends the Ring Check packets to only the traffic stream that is in the Up state. Ring check mechanism: If the MA5616 receives the private ring check packet from a user port, it blocks the user port and sends the matched alarm. If the device receives Ring Check packet from a user port, it determines whether the root bridge in the packet is the same as that in the device. If they are the same, the device blocks the user port and sends the matched alarm. If the device received the private Ring Check packet from the upstream port, it determines whether the packet is sent from the root bridge. If the packet is sent from the root bridge, the device blocks the user port and sends the matched alarm.
1.4.3 Security Anti-dos • •
MA5616(config)#security anti-dos { enable | disable } Prevent the end-user attack the Server/BRAS with the same MAC address of Server, otherwise the whole Internet service of that VLAN will be affected.
1.4.5 Security Mac-filter • • • • •
huawei(config)#security mac-filter { mac_addr }:1010-1010-3020 Command: security mac-filter 1010-1010-3020 Note: System can configure 4 different “Security MAC-Filter” in total.
1.4.6 PPPOE Simulation
Note: In this way, DSLAM can check the port status, it can work or not, before deploy the real service.
1.4.7 VOIP Simulation
The callee can hear the test tone from the phone, and can feedback the quality by press button “*” to report to DSLAM good quality and other button not good. Note: In this way, DSLAM can check the port status, it can work or not, before deploy the real service.
View more...
Comments