HCIP-Access V2.5 Lab Guide
Uploaded by
Roberto MaloneyHCIP-Access V2.5 Lab Guide
Uploaded by
Roberto MaloneyHuawei Access Certification Training
HCIP-Access
Lab Guide for Access Engineers
ISSUE:2.5
HUAWEI TECHNOLOGIES CO., LTD.
1
Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without
prior written consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their
respective holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei
and the customer. All or part of the products, services and features described in this document may
not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all
statements, information, and recommendations in this document are provided "AS IS" without
warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made
in the preparation of this document to ensure accuracy of the contents, but all statements,
information, and recommendations in this document do not constitute a warranty of any kind,
express or implied.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base Bantian, Longgang Shenzhen 518129
People's Republic of China
Website: http://e.huawei.com
Huawei Prorietary and Confidential
Copyright © Huawei Technologies Co,Ltd
Huawei Access Certification Training Lab Guide Page 1
Huawei Certificate System
Huawei Certification follows the "platform + ecosystem" development strategy, which is a new
collaborative architecture of ICT infrastructure based on "Cloud-Pipe-Terminal". Huawei has set up
a complete certification system consisting of three categories: ICT infrastructure certification,
Platform and Service certification and ICT vertical certification, and grants Huawei certification the
only all-range technical certification in the industry.
Huawei offers three levels of certification: Huawei Certified ICT Associate (HCIA), Huawei
Certified ICT Professional (HCIP), and Huawei Certified ICT Expert (HCIE).
HCIP-Access (Huawei Certified ICT Professional-Access, Huawei Certified Network
Professional-Access) is intended for Huawei representative offices, frontline engineers of
representative offices, and other personnel who want to learn Huawei access products. HCIP-
Access authentication covers VoIP principles and configuration, multicast principles and
configuration, PON security basics, QoS basics, PON networking protection, NMS service
configuration, access network planning and design, and typical PON troubleshooting.
The HCIP-Access certificate system introduces you to the industry and market, helps you in
innovation, and enables you to stand atop the access frontiers.
Huawei Access Certification Training Lab Guide Page 2
Huawei Access Certification Training Lab Guide Page 3
About This Document
Introduction
This document is a training course for HCIP-ACCESS certification. It is intended for
trainees who are going to take the HCIP-ACCESS exam or readers who want to
understand access network technologies such as features of Huawei access network
products and related service configurations.
Description
This document consists of five exercises, which describe the configuration of the voice
service, multicast service, QoS, security protection, and networking protection in the
access network one by one.
Experiment 1: Configuring the SIP/H.248 VoIP service in the GPON scenario. This experiment
helps you understand the configuration roadmap and common test methods of the GPON
SIP/H.248 VoIP service on the ONU.
Experiment 2: The basic configuration of the IPTV multicast service in the GPON scenario. By
performing operations and configurations, you can get familiar with the configuration roadmap
and common query commands of the IPTV service in the GPON scenario.
Experiment 3: PON QoS configuration. This exercise aims to help you understand how to
configure traffic classification, priority application, traffic shaping, and traffic adjustment.
Experiment 4: PON security feature configuration. This exercise aims to help readers understand
how to defend against DoS/ICMP/IP attacks, filter MAC addresses, and manage address
segments.
Experiment 5: GPON protection configuration. This exercise aims to help you understand how to
configure and verify GPON downstream and upstream protection, including GPON type B
protection, GPON type C protection, Ethernet link aggregation, and Ethernet port protection
groups.
Background Knowledge Required
This course is a basic course for Huawei certification. To better understand this document, the
readers of this document must meet the following requirements:
Common Icons
NMS BRAS/Router IPTV Server
Huawei Access Certification Training Lab Guide Page 4
ONT MDU OLT
Splitter Switch Soft switch
PC TV Telephone
Experiment Environment Overview
Networking Introduction
This lab environment is intended for access network engineers who are preparing for
the HCIP-Access exam. 2 OLTs, 2 to 16 ONUs/MDUs, 1 core switch, 1 eSight/NCE-FAN
server, 1 AR/BRAS device (terminating PPPoE dialup and functioning as a network
gateway), 1 soft switch, and 1 IPTV server, each lab environment is suitable for 1 to 16
trainees.
Version Description
This document is also compatible with the MA5680T, MA5800, and EA5800. The CLI and
NMS operations described in this document are based on the MA5680T. If the MA5800
or EA5800 is used, perform the operations according to the instructions of the trainer.
Device Introduction
To meet the HCIP-Access lab requirements, you are advised to configure each lab
environment as follows:
Huawei Access Certification Training Lab Guide Page 5
Device Name Device Model Software Version
S3700-28TP-PWR-EI or Version 5.70 (S3700 V100R005C01SPC100) or later
Core switch
S5700-28C-PWR-EI Version 5.130 (S5700 V200R003C00SPC300) or later
MA5680T or MA5800 or MA5680T: V800R013C00 and later/EA5800:
OLT device
EA5800 V100R019C20
ONT device HG8247H9 (EG8145V5) AP4030DN V200R007C10SPC100
EA5821 and EA5822
MxU V800R018C00
(P612E/ P805E)
optical splitter 1:16, 2:16 or higher
NMS server eSight PON V300R010C00
NMS server NCE-FAN R19C00
Other SIP server software can be used instead, such
SIP server Huawei SoftX3000
as TeKSIP.
Router/BRAS AR1220/ME60 AR V200R005
Experiment Environment Preparation
Checking Whether All Devices Are Available
Before starting the experiment, check whether all required devices are ready. The
following table lists the required devices.
Device Name Quantity Remarks
Shared by all
eSight&NCE-FAN 1 PCS
experimental groups
Shared by all
SIP server 1 PCS
experimental groups
Huawei S3700 Shared by all
All groups share one
or Huawei 5700 switch experimental groups
Shared by all
AR1220 router/ME60 1 for all groups
experimental groups
Shared by all
OLT 2 in all groups
experimental groups
Huawei Access Certification Training Lab Guide Page 6
One desktop ONT and one
ONU Two for each group
MDU
Shared by all
experimental groups
optical splitter Two to four
Ensure that the split ratio
is proper.
A desktop computer must
Notebook or desktop
One for each group have two network
computer
adapters.
All groups can share two
RJ11 ordinary phone Two for each group
devices for testing.
Twisted pair One for each group Used for data service tests
Console cable One for each group Alternatively, use Telnet.
Each group must check whether the following devices are ready:
Prepare one desktop ONT and one MDU.
Prepare one laptop or desktop computer.
One twisted pair cable.
One console cable (or a remote Telnet device)
A telephone set (which can be shared by all groups).
Huawei Access Certification Training Lab Guide Page 7
Clearing OLT Configurations
To avoid the impact of residual configurations on the experiment, the environment
builder must clear the configuration information saved on the device after the
experiment is complete and before the device is shut down. At the beginning of the
experiment, ensure that the device starts from the empty configuration. Otherwise,
clear the configuration and restart the device.
Note: If the trainee logs in to the OLT through Telnet, do not perform this operation.
Otherwise, the account data created on the OLT will be lost and the trainee will fail to
log in to the OLT.
You need to enter the user name and password to log in to the OLT. In this experiment,
the default user name and password are root and admin respectively.
>>User name:root
>>User password:
Huawei Integrated Access Software (MA5680T).
Copyright(C) Huawei Technologies Co., Ltd. 2002-2013. All rights reserved.
-----------------------------------------------------------------------------
User last login information:
-----------------------------------------------------------------------------
Access Type: Serial
IP-Address: --
Login Time: 2018-04-17 10:30:32+08:00
Logout Time: 2018-04-17 11:00:51+08:00
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
All user fail login information:
-----------------------------------------------------------------------------
Access Type IP-Address Time Login Times
-----------------------------------------------------------------------------
Telnet 10.175.195.116 2018-04-17 10:46:06+08:00 1
Serial -- 2018-04-17 10:30:28+08:00 1
-----------------------------------------------------------------------------
User root has used a default password. Change the password in time.
huawei>.
To clear the configuration, run the following command:
huawei>enable
huawei#
huawei#erase
{flash<K>}:flash
{data<K>}:data
{Options<E><active,standby>}:active
Command:
erase flash data active
This command will clear the active board data that has been loaded or saved
Please remember to backup the system configuration data
Are you sure to continue? (y/n)[n]:y
Command executes successfully, and will take effect after active board
rebooted
To restart an OLT, run the following command:
Huawei Access Certification Training Lab Guide Page 8
huawei#reboot
{Options<E><system,active,standby>}:active
Command:
reboot active
Please check whether data has saved, the unsaved data may lose if reboot
active board, are you sure to reboot active board? (y/n)[n]:y
Standby board failure or not exist, reboot active will cause system reboot,
are you sure to reboot active board? (y/n)[n]:y
huawei#
Platform System start...
Memory Data Bus Test.................pass.
Memory Address Bus Test..............pass.
Press Ctrl+T to start the memory test.
Trace code: 0x00000000
Copy from ROM to RAM...... OK!
Uncompress from ROM to RAM...... OK!
Update fpga...OK.
Copyright (c) 1998 - 2013 by Huawei Technologies Co.,Ltd.
All Rights Reserved.
The last update date of base BIOS B is: Jan 15 2013 16:39:10
===============================================================
BOARD INFORMATION:
CPU: MPC8548E - Security Engine. Processor #1.(Rev 2.02) running at 1333Mhz
512M bytes DDR(ECC), 128M bytes flash installed on board
Baudrate of serial channel is 9600bps
Board's LAN IP address is 10.11.104.6
Board's LAN Subnet mask is 255.255.255.0
Board' s LAN MAC address is 08:19:A6:C1:6A:52
===============================================================
Base BIOS version is 307
Save extended BIOS disable start flag...OK!
Transferring control to the extended BIOS...OK!
System Vfs init...OK
The last update date of extended BIOS is: Feb 28 2013 16:23:52
System is booting from extended BIOS...
Extended BIOS version is 311
Press <D> key to stop auto-boot 0
Now system will boot from flash memory.
Testing Flash memory...OK!
Select area information: Program Area A ,Data Area A.
Begin to expand program... OK!
Save extended BIOS enable start flag...OK!
Transferring control to the loaded program...OK!
Starting system application init......successfully!
Starting system configuration data init...successfully!
Press any key to get started
>>User name:
Huawei Access Certification Training Lab Guide Page 9
Contents
About This Document ................................................................................................................... 3
Introduction ............................................................................................................................................................. 3
Description ............................................................................................................................................................... 3
Background Knowledge Required ............................................................................................................................... 3
Common Icons ............................................................................................................................................................ 3
Experiment Environment Overview ............................................................................................................................. 4
Experiment Environment Preparation .......................................................................................................................... 5
1 GPON ONT SIP Voice Service Configuration .................................................................... 14
1.1 Experiment Introduction.................................................................................................................................14
1.1.1 About This Experiment.................................................................................................................................14
1.1.2 Objectives .......................................................................................................................................................14
1.1.3 Experiment Networking ...............................................................................................................................14
1.1.4 Experiment Planning ....................................................................................................................................15
1.2 Experiment Task Configuration .....................................................................................................................16
1.2.1 Configuration Roadmap...............................................................................................................................16
1.2.2 Configuration Procedure (OLT Side) .........................................................................................................16
1.2.3 Configuration Procedure (ONT Side) ........................................................................................................26
1.2.4 Experiment Verification ...............................................................................................................................34
1.3 Configuration Reference .................................................................................................................................34
1.3.1 OLT Data Configuration...............................................................................................................................34
1.4 Questions ..........................................................................................................................................................35
2 GPON ONU SIP Voice Service Configuration ................................................................... 35
2.1 Experiment Introduction.................................................................................................................................35
2.1.1 About This Experiment.................................................................................................................................35
2.1.2 Objectives .......................................................................................................................................................35
2.1.3 Experiment Networking ...............................................................................................................................36
2.1.4 Experiment Planning ....................................................................................................................................36
2.2 Experiment Task Configuration .....................................................................................................................38
2.2.1 Configuration Roadmap...............................................................................................................................38
2.2.2 Configuration Procedure (OLT Side) .........................................................................................................38
2.2.3 Configuration Procedure on the MDU Side ..............................................................................................47
2.2.4 Experiment Verification ...............................................................................................................................54
2.2.5 Configuration Reference ..............................................................................................................................61
2.3 Questions ..........................................................................................................................................................63
3 GPON ONT H.248 Voice Service Configuration ............................................................... 64
Huawei Access Certification Training Lab Guide Page 10
3.1 Experiment Introduction.................................................................................................................................64
3.1.1 About This Experiment.................................................................................................................................64
3.1.2 Objectives .......................................................................................................................................................64
3.1.3 Experiment Networking ...............................................................................................................................64
3.1.4 Experiment Planning ....................................................................................................................................65
3.2 Experiment Task Configuration .....................................................................................................................65
3.2.1 Configuration Roadmap...............................................................................................................................65
3.2.2 Configuration Procedure (OLT Side) .........................................................................................................66
3.2.3 Configuration Procedure (ONT Side) ........................................................................................................75
3.2.4 Experiment Verification ...............................................................................................................................79
3.3 Configuration Reference .................................................................................................................................79
3.3.1 OLT Data Configuration...............................................................................................................................79
3.4 Questions ..........................................................................................................................................................80
4 GPON ONU H.248 Voice Service Configuration .............................................................. 80
4.1 Experiment Introduction.................................................................................................................................80
4.1.1 About This Experiment.................................................................................................................................80
4.1.2 Objectives .......................................................................................................................................................80
4.1.3 Experiment Networking ...............................................................................................................................81
4.1.4 Experiment Planning ....................................................................................................................................81
4.2 Experiment Task Configuration .....................................................................................................................83
4.2.1 Configuration Roadmap...............................................................................................................................83
4.2.2 Configuration Procedure (OLT Side) .........................................................................................................83
4.2.3 Configuration Procedure on the MDU Side ..............................................................................................92
4.2.4 Experiment Verification ...............................................................................................................................96
4.2.5 Configuration Reference ..............................................................................................................................96
4.3 Questions ..........................................................................................................................................................97
5 GPON ONT IPTV Service Configuration ............................................................................ 98
5.1 Experiment Introduction.................................................................................................................................98
5.1.1 About This Experiment.................................................................................................................................98
5.1.2 Objectives .......................................................................................................................................................98
5.1.3 Experiment Networking ...............................................................................................................................98
5.1.4 Experiment Planning ....................................................................................................................................98
5.2 Experiment Task Configuration ................................................................................................................... 100
5.2.1 Service Configuration Process ................................................................................................................... 100
5.2.2 Configuration Procedure............................................................................................................................ 100
5.3 Verification...................................................................................................................................................... 103
5.4 Questions ........................................................................................................................................................ 105
6 GPON ONU IPTV Service Configuration ......................................................................... 106
Huawei Access Certification Training Lab Guide Page 11
6.1 Experiment Introduction............................................................................................................................... 106
6.1.1 About This Experiment............................................................................................................................... 106
6.1.2 Objectives ..................................................................................................................................................... 106
6.1.3 Experiment Networking............................................................................................................................. 106
6.1.4 Experiment Planning .................................................................................................................................. 106
6.2 Experiment Task Configuration ................................................................................................................... 107
6.2.1 Service Configuration Process ................................................................................................................... 107
6.2.2 Configuration Procedure............................................................................................................................ 108
6.3 Verification...................................................................................................................................................... 111
6.4 Questions ........................................................................................................................................................ 112
7 POL Multicast Service Configuration ............................................................................... 113
7.1 Experiment Introduction............................................................................................................................... 113
7.1.1 About This Experiment............................................................................................................................... 113
7.1.2 Objectives ..................................................................................................................................................... 113
7.1.3 Experiment Networking ............................................................................................................................. 113
7.1.4 Experiment Planning .................................................................................................................................. 113
7.2 Experiment Task Configuration ................................................................................................................... 115
7.2.1 Service configuration process: .................................................................................................................. 115
7.2.2 Configuration Procedure............................................................................................................................ 115
7.3 Verification...................................................................................................................................................... 118
7.4 Questions ........................................................................................................................................................ 119
8 QoS Application and Configuration ................................................................................. 120
8.1 Experiment Introduction............................................................................................................................... 120
8.1.1 About This Experiment............................................................................................................................... 120
8.1.2 Objectives ..................................................................................................................................................... 120
8.1.3 Experiment Networking............................................................................................................................. 121
8.1.4 Experiment Planning .................................................................................................................................. 121
8.2 Experiment 1: Priority Application Configuration .................................................................................... 122
8.2.1 Configuration Roadmap............................................................................................................................. 122
8.2.2 Configuration Procedure............................................................................................................................ 122
8.3 Experiment 2: Traffic Policing Configuration ............................................................................................ 126
8.3.1 Configuration Roadmap............................................................................................................................. 126
8.3.2 Configuration Procedure............................................................................................................................ 126
9 Configuring Anti-DoS Attack............................................................................................. 130
9.1 Experiment Introduction............................................................................................................................... 130
9.1.1 About This Experiment............................................................................................................................... 130
9.1.2 Objectives ..................................................................................................................................................... 130
9.1.3 Experiment Networking ............................................................................................................................. 130
Huawei Access Certification Training Lab Guide Page 12
9.1.4 Experiment Planning .................................................................................................................................. 130
9.2 Experiment Task Configuration ................................................................................................................... 131
9.2.1 Configuration Roadmap............................................................................................................................. 131
9.2.2 Configuration Procedure............................................................................................................................ 131
9.3 Verification...................................................................................................................................................... 135
9.3.1 Check whether an alarm is generated on the OLT. .............................................................................. 135
9.4 Reference. ....................................................................................................................................................... 135
9.4.1 OLT Configuration ...................................................................................................................................... 135
9.5 Questions ........................................................................................................................................................ 136
10 Configuring Anti-ICMP/IP Attack ................................................................................... 137
10.1 Experiment Introduction ............................................................................................................................. 137
10.1.1 About This Experiment ............................................................................................................................. 137
10.1.2 Objectives ................................................................................................................................................... 137
10.1.3 Experiment Networking ........................................................................................................................... 137
10.1.4 Experiment Planning ................................................................................................................................ 137
10.2 Experiment Task Configuration ................................................................................................................. 138
10.2.1 Configuration Roadmap ........................................................................................................................... 138
10.2.2 Configuration Procedure .......................................................................................................................... 138
10.3 Verification.................................................................................................................................................... 144
10.3.1 Check whether the PC can ping the OLT. ............................................................................................. 144
11 Configuring MAC Address Filtering ............................................................................... 145
11.1 Experiment Introduction ............................................................................................................................. 145
11.1.1 About This Experiment ............................................................................................................................. 145
11.1.2 Objectives ................................................................................................................................................... 145
11.1.3 Experiment Networking ........................................................................................................................... 145
11.1.4 Experiment Planning ................................................................................................................................ 145
11.2 Experiment Task Configuration ................................................................................................................. 146
11.2.1 Configuration Roadmap ........................................................................................................................... 146
11.2.2 Configuration Procedure .......................................................................................................................... 146
11.3 Verification.................................................................................................................................................... 150
12 Configuring Access/DOA Address Segments ................................................................ 151
12.1 Experiment Introduction ............................................................................................................................. 151
12.1.1 About This Experiment ............................................................................................................................. 151
12.1.2 Objectives ................................................................................................................................................... 151
12.1.3 Experiment Networking ........................................................................................................................... 151
12.1.4 Experiment Planning ................................................................................................................................ 151
12.2 Experiment Task Configuration ................................................................................................................. 152
12.2.1 Configuration Procedure .......................................................................................................................... 152
Huawei Access Certification Training Lab Guide Page 13
12.3 Verification.................................................................................................................................................... 153
12.3.1 Check whether the PC can log in to the OLT. ...................................................................................... 153
13 802.1X authentication....................................................................................................... 154
13.1 Experiment Introduction ............................................................................................................................. 154
13.1.1 About This Experiment ............................................................................................................................. 154
13.1.2 Objectives ................................................................................................................................................... 154
13.1.3 Experiment Networking ........................................................................................................................... 154
13.1.4 Experiment Planning ................................................................................................................................ 154
13.2 Experiment Task Configuration ................................................................................................................. 155
13.2.1 Configuration Roadmap ........................................................................................................................... 155
13.2.2 Configuration Procedure .......................................................................................................................... 155
13.3 Verification.................................................................................................................................................... 155
14 PON Networking Protection Configuration ................................................................. 156
14.1 Experiment Introduction ............................................................................................................................. 156
14.1.1 About This Experiment ............................................................................................................................. 156
14.1.2 Objectives ................................................................................................................................................... 156
14.1.3 Configuring Type B Single-Homing Automatic Protection Switching.............................................. 157
14.1.4 Configuring Type B Dual-Homing Automatic Switching Protection ................................................ 164
14.1.5 Configuring Type C Single-Homing Automatic Protection Switching.............................................. 170
14.1.6 Configuring Type C Dual-Homing Automatic Switching Protection ................................................ 177
14.1.7 Configuring Ethernet Link Aggregation ................................................................................................ 182
14.1.8 Configuring an Ethernet Port Protection Group .................................................................................. 195
Huawei Access Certification Training Lab Guide Page 14
1 GPON ONT SIP Voice Service
Configuration
1.1 Experiment Introduction
1.1.1 About This Experiment
In this experiment, data is configured on the OLT and ONT so that two users connected
to different ONTs connected to the same PON port can make voice calls.
1.1.2 Objectives
Understand the basic principles of GPON.
Understand the basic principles of VoIP.
Understand the GPON data profile.
Configure voice service profiles.
Understand the overall configuration process of the voice service.
1.1.3 Experiment Networking
Figure 1-1 Topology of the GPON ONT SIP configuration experiment
PC 1
ONT 1
Tel 1
NMS BRAS/Router Soft switch IPTV Server
TV 1
PC 2 MDU 1
Splitter 1
Tel 2
TV 2
......
PC n
ONT n OLT
Tel n
TV n
PC n+1 MDU n Splitter n
Tel n+1
TV n+1
Huawei Access Certification Training Lab Guide Page 15
1.1.4 Experiment Planning
According to the VoIP configuration scenario of the access network, phone 1 and phone
2 are common phones, and PC1 and PC2 run the Windows operating system.
Table 1-1 SIP data plan for a GPON ONT
Configuration
ONT1 data Configuration Item ONT2 data
Item
OLT service VLAN 172. Smart OLT service VLAN 172. Smart
OLT upstream
0/20/0 OLT upstream port 0/20/0
port
OLT downstream OLT downstream
0/3/0 0/3/0
port port
ONT ID,SN 1, SN 48575443B205EC07 ONT ID,SN 2, SN 48575443B203E407
TCONT,DBA 1. DBA profile ID: 10 TCONT,DBA 2. DBA profile ID: 20
GEM Port 1 GEM Port 2
ONT user VLAN 172 ONT user VLAN 172
Table 1-2 Data plan for the GPON ONT SIP voice server
Configuration Item Data Configuration Item Data
SIP server 200.200.200.200 Voice gateway 17.0.0.1/8
Port number of the
5060 Phone Number 7727033/7727034
SIP server
IP address of the SIP 17.1.1.33/8(ONT1) 7727033/7727000,
Username/Password
local terminal 17.1.1.34/8(ONT2) 7727034/7727000
Huawei Access Certification Training Lab Guide Page 16
1.2 Experiment Task Configuration
1.2.1 Configuration Roadmap
Figure 1-2 Flowchart for configuring SIP for a GPON ONT
Create a VLAN.
Configure the upstream port Prerequisite: The ONT
of the VLAN. has been added
successfully.
OLT Basic
Service
Configure a service
Configuration
port.
Configure the IP address of
the VLAN L3 interface.
Configure ARP proxy.
Configuring Static Routes
ONT SIP
protocol
configuration
Configure WAN and
voice interfaces.
Configuring User
Numbers
1.2.2 Configuration Procedure (OLT Side)
Step 1 DBA Profile Configuration
# Run the display dba-profile command to query the existing DBA profiles in the system.
If the existing DBA profile in the system cannot meet the requirements, run the dba-
profile add command to add a DBA profile. Set the profile ID to 10, bandwidth type to
type1, and bandwidth value to 2048 kbit/s.
Huawei_OLT(config)#dba-profile
{add<K>|delete<K>|modify<K>}:add
{profile-id<K>|profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:profile-id
{profile-id<U><10,512>}:10
{profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:type1
{fix<K>}:fix
Huawei Access Certification Training Lab Guide Page 17
{fix-bandwidth<U><128,10000000>}:2048
{<cr>|bandwidth_compensate<K>}:
Command:
dba-profile add profile-id 10 type1 fix 2048
Adding a DBA profile succeeded
Profile ID: 10
Profile name: dba-profile_10
# Display the DBA profile status.
Huawei_OLT(config)#display dba-profile profile-id 10
-----------------------------------------------------------------
Profile-name: dba-profile_10
Profile-ID: 10
type: 1
Bandwidth compensation: No
Fix-delay: No
Fix(kbps): 2048
Assure(kbps): 0
Max(kbps): 0
Additional-bandwidth: -
Best-effort-priority: -
Best-effort-weight: -
bind-times: 1
-----------------------------------------------------------------
Step 2 Configuring an ONT Line Profile
# Set the line profile ID to 10 and profile name to 1hg8247.
Huawei_OLT(config)#ont-lineprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:10
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:1hg8247
Command:
ont-lineprofile gpon profile-id 10 profile-name 1hg8247
# Bind T-CONT 1 to DBA profile 10.
HUAWEI(config-gpon-lineprofile-10)#tcont
{tcont-list<S><Length 1-13>}:1
{<cr>|dba-profile-id<K>|dba-profile-name<K>}:dba-profile-id
{profile-id<U><0,512>}:10
Command:
tcont 1 dba-profile-id 10
# Add GEM port 1 to carry ETH service flows, and bind GEM port 1 to T-CONT 1.
HUAWEI(config-gpon-lineprofile-10)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:1
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont 1
Huawei Access Certification Training Lab Guide Page 18
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 1 eth tcont 1
# Map the service flow of CVLAN 172 to GEM port 1. The mapping index is 1.
HUAWEI(config-gpon-lineprofile-10)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:1
{mapping-index<U><0,7>}:1
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:172
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 1 1 vlan 172
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-lineprofile-10)#commit
HUAWEI(config-gpon-lineprofile-10)#quit
# Check information about the line profile.
Huawei_OLT(config)#display ont-lineprofile gpon
{all<K>|bound-info<K>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:10
Command:
display ont-lineprofile gpon profile-id 10
-----------------------------------------------------------------------------
Profile-ID :10
Profile-name :1hg8247
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<T-CONT 1> DBA Profile-ID:10
<Gem Index 1>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
1 172 - - - - - -
--------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
Huawei Access Certification Training Lab Guide Page 19
traffic table configuration
-----------------------------------------------------------------------------
Binding times :0
-----------------------------------------------------------------------------
Step 3 Configuring a Service Profile
# Set the service profile ID to 10 and profile name to 1hg8247.
Huawei_OLT(config)#ont-srvprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:10
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:1hg8247
Command:
ont-srvprofile gpon profile-id 10 profile-name 1hg8247
# Configure the port type and number of ports on the ONT. The number of LAN ports
is 4, and the number of POTS ports is 2.
HUAWEI(config-gpon-srvprofile-10)#ont-port
{catv<K>|eth<K>|moca<K>|pots<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}:eth
{adaptive<K>|eth-port<U><0,8>}:4
{<cr>|catv<K>|moca<K>|pots<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}:pots
{adaptive<K>|pots-port<U><0,32>}:2
{<cr>|catv<K>|moca<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}:catv
{adaptive<K>|catv-port<U><0,8>}:1
{<cr>|moca<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>|vdsl<K>}:
Command:
ont-port eth 4 pots 2 catv 1
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-srvprofile-10)#commit
HUAWEI(config-gpon-srvprofile-10)#quit
# Check the service profile status.
Huawei_OLT(config)#display ont-srvprofile gpon profile-id 10
-----------------------------------------------------------------------------
Profile-ID: 10
Profile-name: 1hg8247
Access-type: GPON
-----------------------------------------------------------------------------
Port-type Port-number
-----------------------------------------------------------------------------
POTS 2
ETH 4
VDSL 0
TDM 0
MOCA 0
CATV 1
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 20
TDM port type: E1
TDM service type: TDMoGem
MAC learning function switch: Enable
ONT transparent function switch: Disable
Ring check switch: Disable
Ring port auto-shutdown: Enable
Ring detect frequency: 8 (pps)
Ring resume interval: 300 (s)
Multicast forward mode: Unconcern
Multicast forward VLAN: -
Multicast mode: Unconcern
Upstream IGMP packet forward mode: Unconcern
Upstream IGMP packet forward VLAN: -
Upstream IGMP packet priority: -
Native VLAN option: Concern
Upstream PQ color policy: -
Downstream PQ color policy: -
-----------------------------------------------------------------------------
Port-type Port-ID QinQmode PriorityPolicy Inbound Outbound
-----------------------------------------------------------------------------
ETH 1 unconcern unconcern unconcern unconcern
ETH 2 unconcern unconcern unconcern unconcern
ETH 3 unconcern unconcern unconcern unconcern
ETH 4 unconcern unconcern unconcern unconcern
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Port-type Port-ID DownstreamMode MismatchPolicy
-----------------------------------------------------------------------------
ETH 1 operation discard
ETH 2 operation discard
ETH 3 operation discard
ETH 4 operation discard
-----------------------------------------------------------------------------
Port-type Port-ID Dscp-mapping-table-index
-----------------------------------------------------------------------------
ETH 1 0
ETH 2 0
ETH 3 0
ETH 4 0
IPHOST 1 0
-----------------------------------------------------------------------------
Port-type Port-ID IGMP-mode IGMP-VLAN IGMP-PRI Max-MAC-Count
-----------------------------------------------------------------------------
ETH 1 - - - Unlimited
ETH 2 - - - Unlimited
ETH 3 - - - Unlimited
ETH 4 - - - Unlimited
-----------------------------------------------------------------------------
Binding times: 0
-----------------------------------------------------------------------------
Step 4 Enable the auto-discovery function of the PON port.
Huawei Access Certification Training Lab Guide Page 21
# Enter the PON board view and enable the auto-discovery function of the PON port in
the network topology.
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:gpon
{frameid/slotid<S><Length 3-15>}:0/3
Command:
interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#port
{dba<K>|optical-alarm-profile<K>|portid<U><0,7>}:0
{fec<K>|laser-switch<K>|ont-auto-find<K>|ont-password-renew<K>|range<K>}:ont-auto-find
{switch<E><enable,disable>}:enable
Command:
port 0 ont-auto-find enable
Step 5 Querying the ONTs that are automatically discovered by a PON port
HUAWEI(config-if-gpon-0/3)#display ont autofind 0
----------------------------------------------------------------------------
Number: 1
F/S/P: 0/3/0
Ont SN: 48575443B205EC07 (HWTC-B203E407)
Password: 0x00000000000000000000
Loid:
Checkcode:
VendorID: HWTC
Ont Version: 120D4600
Ont SoftwareVersion: V1R006C01S220
Ont EquipmentID: 247
Ont autofind time: 2018-04-13 15:56:02+08:00
----------------------------------------------------------------------------
Step 6 ONT registration
# Register an ONT, set the authentication mode to SN authentication and management
type to OMCI, and bind line profile 10 and service profile 10 to the ONT.
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:confirm
{portid<U><0,7>}:0
{all<K>|loid-auth<K>|ontid<K>|password-auth<K>|sn-auth<K>}:ontid
{ontid<U><0,127>}:1
{loid-auth<K>|password-auth<K>|sn-auth<K>}:sn-auth
{sn-value<S><Length 12-16>}:48575443B205EC07
{omci<K>|password-auth<K>|snmp<K>}:omci
{<cr>|desc<K>|ont-lineprofile-id<K>|ont-lineprofile-name<K>|ont-srvprofile-id<K>|ont-srvprofile-
name<K>}:ont-lineprofile-id
{profile-id<U><0,8192>}:10
{<cr>|desc<K>|ont-srvprofile-id<K>|ont-srvprofile-name<K>}:ont-srvprofile-id 10
Huawei Access Certification Training Lab Guide Page 22
{<cr>|desc<K>}:
Command:
ont confirm 0 ontid 1 sn-auth 48575443B205EC07 omci ont-lineprofile-id 10 ont-srvprofile-id 10
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :1
# Display the ONT status.
HUAWEI(config-if-gpon-0/3)#display ont info 0 all
-----------------------------------------------------------------------------
F/S/P ONT SN Control Run Config Match Protect
ID flag state state state side
-----------------------------------------------------------------------------
0/ 3/0 1 48575443B205EC07 active online normal match no
-----------------------------------------------------------------------------
F/S/P ONT-ID Description
-----------------------------------------------------------------------------
0/ 3/0 1 ONT_NO_DESCRIPTION
-----------------------------------------------------------------------------
In port 0/ 3/0, the total of ONTs are:1, online: 1
# Run the display ont info 0 1 command to query the detailed information about the
ONT.
Step 7 Configure a voice service VLAN.
# Configure voice VLAN 172.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 172 smart
# Add an upstream interface to the voice VLAN.
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 172 0/20 0
# Display information about VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
Huawei Access Certification Training Lab Guide Page 23
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
Service virtual port number: 0
Step 8 Configuring a VLAN Layer 3 Interface
# Set the IP address of the Layer 3 interface to 17.1.1.100/8.
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:172
Command:
interface vlanif 172
HUAWEI(config-if-vlanif172)#ip
{address<K>|binding<K>|verify<K>}:address
{ip_addr<I><X.X.X.X>}:17.1.1.100
{integer<U><0,32>|ip_addr<I><X.X.X.X>}:8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.1.1.100 8
Step 9 Configure a service port in the voice VLAN.
# Set the VLAN to which the service flow belongs to 172, the PON port to which the
service flow belongs to 0/3/0, the ONT ID to 1, the GEM port ID to 1, and the C-VLAN
to 172.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:172
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:1
{eth<K>|gemport<K>|iphost<K>}: gemport
{gemindex<U><0,1023>}:1
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:172
Huawei Access Certification Training Lab Guide Page 24
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 172 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 172
# Check the status of the service virtual port.
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
0 172 common gpon 0/3 /0 1 1 vlan 172 - - up
----------------------------------------------------------------------------
Total: 1 (Up/Down: 1/0)
# The status of the service virtual port is up.
Step 10 Check voice VLAN 172.
# Run the display vlan 172 command to check the status of the upstream and
downstream interfaces of VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
-------------------------------------------------------------
INDEX TYPE STATE F /S /P VPI VCI FLOWTYPE FLOWPARA
-------------------------------------------------------------
0 gpon up 0 /3 /0 1 1 vlan 172
-------------------------------------------------------------
Service virtual port number: 1
Huawei Access Certification Training Lab Guide Page 25
Note: F--Frame, S--Slot, P--Port,
VPI indicates ONT ID for PON, VCI indicates GEM index for GPON,
v/e--vlan/encap, pritag--priority-tagged
# The status of the upstream port 0/20/0 and the service virtual port is normal.
Step 11 Enable global ARP proxy.
Huawei_OLT(config)#arp
{aging-mode<K>|aging-time<K>|conflict<K>|gratuitous-
arp<K>|ip_addr<I><X.X.X.X>|learning<K>|proxy<K>}:proxy
{disable<K>|enable<K>}:enable
Command:
arp proxy enable
Step 12 Enable ARP proxy on the Layer 3 interface.
Huawei_OLT(config)#interface vlanif 172
HUAWEI(config-if-vlanif172)#arp
{proxy<K>}:proxy
{disable<K>|enable<K>}:enable
{<cr>|subvlan<K>}:
Command:
arp proxy enable
Step 13 Configuration of ONT 2
The configuration of ONT2 is similar to that of ONT1.
Step 14 Common Commands
Table 1-3 Common Commands
Common Commands Function
display dba-profile This command is used to query the information about the dynamic
bandwidth assignment (DBA) profile in the system.
This command is used to query the information about the GPON ONT
display ont-lineprofile line profile that has taken effect, including the binding relationship
between the T-CONT and the DBA profile, the QoS mode of the traffic
stream, and the mapping between the GEM port and the ONT-side
service.
This command is used to query the information about a GPON ONT
display ont-srvprofile
service profile.
This command is used to query the basic information about the
display ont autofind
currently auto-found ONT in the system.
This command is used to query the information about an ONT,
display ont info including the current status of the ONT, the related configuration of
the ONT, and the information about the ONT T-CONT.
Huawei Access Certification Training Lab Guide Page 26
display vlan This command is used to query the VLAN information.
This command is used to query the information about a service virtual
display service-port
port.
1.2.3 Configuration Procedure (ONT Side)
Step 1 Log in to the HG8247.
Use a network cable to connect the PC to the network port of the HG8247 and set the
IP address of the PC to 192.168.100.100/24.
Enter HYPERLINK "http://192.168.100.1/" http://192.168.100.1/ in the address box of the
browser on the PC.
Login account: telecomadmin/admintelecom
The login page is displayed, as shown in the following figure.
Step 2 ONT WAN Port Configuration
Set the WAN port type to route WAN port, service type to VoIP, VLAN ID to 172, IP
address of the ONT to 17.1.1.33, subnet mask to 255.0.0.0, and default gateway to
17.0.0.1. Click Apply.
Huawei Access Certification Training Lab Guide Page 27
Step 3 Connectivity test
Perform a ping test on the ONT to check whether the connectivity between the ONT
and the softswitch is normal.
Huawei Access Certification Training Lab Guide Page 28
Step 4 Route Configuration
Step 5 ONT Voice Interface, Digitmap, and Digitmap Matching Mode Configuration
Huawei Access Certification Training Lab Guide Page 29
Table 1-4 Digitmap rules
Symbol Meaning Symbol Meaning
T Start timer - Range, for example, 2-4.
Matches any structure that appears
L Long timer .
before it one or more times.
S Short timer | Separator
E Key (*) Digit 0, 1, 2, 3, 4, 5, 6, 7, 8, 9
Matches any number or character within
F Press #. []
the range of parentheses.
Wildcard Matches any number from 0
x to 9.
Step 6 Voice User Configuration
Step 7 View the configuration result.
Huawei Access Certification Training Lab Guide Page 30
Step 8 ONT loop line test
Huawei Access Certification Training Lab Guide Page 31
Step 9 ONT circuit line test
Step 10 (Optional) ONT remote mirroring
The source IP address is the management IP address of the ONT, and the destination IP
address is the IP address of the PC connected to the LAN port.
Huawei Access Certification Training Lab Guide Page 32
After setting the IP address, click Start.
Run the Wireshark software on the PC to capture packets on the network adapter
connected to the ONT LAN port.
Right-click a packet whose Info is unknown and choose Decode As from the shortcut
menu.
Huawei Access Certification Training Lab Guide Page 33
Select ETHERIP and click OK.
SIP and RTP packets can be obtained after the user picks up the phone and dials a
number.
Huawei Access Certification Training Lab Guide Page 34
1.2.4 Experiment Verification
Verification method: Connect two phones to different POTS ports on the ONT and make
calls to each other.
1.3 Configuration Reference
1.3.1 OLT Data Configuration
dba-profile add profile-id 10 type1 fix 2048
ont-lineprofile gpon profile-id 10 profile-name 1hg8247
tcont 1 dba-profile-id 10
gem add 1 eth tcont 1
gem mapping 1 1 vlan 172
commit
quit
ont-srvprofile gpon profile-id 10 profile-name 1hg8247
ont-port eth 4 pots 2catv 1
commit
quit
interface gpon 0/53
port 0 ont-auto-find enable
ont confirm 0 ontid 1 sn-auth 48575443B205EC07 omci ont-lineprofile-id 10 ont-srvprofile-id 10
quit
vlan 172 smart
port vlan 172 0/20 0
interface vlanif 172
Huawei Access Certification Training Lab Guide Page 35
ip address 17.1.1.100 8
quit
service-port 1 vlan 172 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 172
arp proxy enable
interface vlanif 172
arp proxy enable
quit
1.4 Questions
1. If the ARP proxy is not enabled on the phones connected to two ONTs connected to
the same PON port, can the phones communicate with each other? If not, please explain
why?
2. Does ARP proxy need to be enabled for two ONTs connected to different PON ports?
2 GPON ONU SIP Voice Service
Configuration
2.1 Experiment Introduction
2.1.1 About This Experiment
In this experiment, the data configuration of the OLT and the MDU is used to implement
the voice call between two users of different MDUs connected to the same PON.
2.1.2 Objectives
Understand the basic principles of GPON.
Understand the basic principles of VoIP.
Understand the GPON data profile.
Huawei Access Certification Training Lab Guide Page 36
Master the configuration of the MDU data.
Configure voice service profiles.
Understand the overall configuration process of the voice service.
2.1.3 Experiment Networking
Figure 2-1 Topology for configuring the GPON ONU VoIP service
PC 1
ONT 1
Tel 1
NMS BRAS/Router Soft switch IPTV Server
TV 1
PC 2 MDU 1 Splitter 1
Tel 2
TV 2
......
PC n
ONT n OLT
Tel n
TV n
PC n+1 MDU n Splitter n
Tel n+1
TV n+1
2.1.4 Experiment Planning
According to the VoIP configuration scenario of the access network, phone 1 and phone
2 are common phones, and PC1 and PC2 run the Windows operating system.
Table 2-1 GPON ONU VoIP data plan
Configuration Item Data Configuration Item Data
VLAN:172 VLAN:172
OLT service VLAN Type: Smart OLT service VLAN Type: Smart
IP:17.1.1.100/8 IP:17.1.1.100/8
VLAN:500 VLAN:500
OLT management OLT management
Type: Smart Type: Smart
VLAN VLAN
IP:10.1.1.1/24 IP:10.1.1.1/24
OLT upstream port 0/20/0 OLT upstream port 0/20/0
OLT downstream port 0/3/0 OLT downstream port 0/3/0
ID:3 ID:4
MDU MDU
SN:4857544329FC9507 SN:48575443F2154B04
Huawei Access Certification Training Lab Guide Page 37
IP:10.1.1.3/24 IP:10.1.1.4/24
0 (management) 0 (management)
TCONT,DBA 3 (service) TCONT,DBA 4 (service)
DBA profile ID: 30 DBA profile ID: 40
0 (management) 0 (management)
GEM Port GEM Port
3 (service) 4 (service)
500 (management) 500 (management)
ONT user VLAN ONT user VLAN
172 (service) 172 (service)
Table 2-2 Data plan for the GPON ONU SIP voice server
Configuration
Data Configuration Item Data
Item
17.1.1.43(MDU1)
SIP server 200.200.200.200 Signaling IP address
17.1.1.44(MDU2)
Port number of 17.1.1.43(MDU1)
5060 Media IP address
the SIP server 17.1.1.44(MDU2)
Transmission
UDP Domain Name huawei
Mode
Voice gateway 17.0.0.1/8 Phone Number 7727043/7727044
17.1.1.43/8(MDU1) 7727043/7727000
VLANIF IP Username/Password
17.1.1.44/8(MDU2) 7727044/7727000
Huawei Access Certification Training Lab Guide Page 38
2.2 Experiment Task Configuration
2.2.1 Configuration Roadmap
Figure 2-2 Flowchart for configuring the GPON ONU VoIP service
Prerequisite: The ONU is Logging In to the ONU
successfully added and an Through the Inband
inband channel is Management Channel
established. Through Telnet
Create a VLAN. Configure a service VLAN and
an upstream port.
Configure the upstream port Set the communication IP
of the VLAN. address of the MG.
Configure a service port. Configuring Static Routes
Configure the parameters of
Configure the IP address of
the VLAN L3 interface. the MG interface and start
the MG interface.
Configuring ARP Proxy
Configuring an MG User
Configuration on Configuring the
the OLT MDU
Th
2.2.2 Configuration Procedure (OLT Side)
Step 1 DBA Profile Configuration
# Run the display dba-profile command to query the existing DBA profiles in the system.
If the existing DBA profile in the system cannot meet the requirements, run the dba-
profile add command to add a DBA profile. Set the profile ID to 30, bandwidth type to
type1, and bandwidth value to 1024 kbit/s.
Huawei_OLT(config)#dba-profile
{add<K>|delete<K>|modify<K>}:add
{profile-id<K>|profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:profile-id
{profile-id<U><10,512>}:30
{profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:type1
{fix<K>}:fix
Huawei Access Certification Training Lab Guide Page 39
{fix-bandwidth<U><128,10000000>}:1024
{<cr>|bandwidth_compensate<K>}:
Command:
dba-profile add profile-id 30 type1 fix 1024
Adding a DBA profile succeeded
Profile ID: 30
Profile name: dba-profile_30
# Display the status of a DBA profile.
Huawei_OLT(config)#display dba-profile profile-id 30
-----------------------------------------------------------------
Profile-name: dba-profile_30
Profile-ID: 30
type: 1
Bandwidth compensation: No
Fix-delay: No
Fix(kbps): 1024
Assure(kbps): 0
Max(kbps): 0
Additional-bandwidth: -
Best-effort-priority: -
Best-effort-weight: -
bind-times: 0
-----------------------------------------------------------------
Step 2 Configuring a Line Profile
# Set the line profile ID to 30 and profile name to EA5822.
Huawei_OLT(config)#ont-lineprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:30
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:EA5822
Command:
ont-lineprofile gpon profile-id 30 profile-name EA5822
# Bind T-CONT 1 to DBA profile 30.
HUAWEI(config-gpon-lineprofile-30)#tcont
{tcont-list<S><Length 1-13>}:1
{<cr>|dba-profile-id<K>|dba-profile-name<K>}:dba-profile-id
{profile-id<U><0,512>}:30
Command:
tcont 1 dba-profile-id 30
# Add GEM port 0 to carry ETH service flows, and bind GEM port 0 to T-CONT 0.
HUAWEI(config-gpon-lineprofile-30)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:0
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont
Huawei Access Certification Training Lab Guide Page 40
{tcont-id<U><0,127>}:0
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 0 eth tcont 0
# Add GEM port 3 to carry ETH service flows, and bind GEM port 3 to T-CONT 1.
HUAWEI(config-gpon-lineprofile-30)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:3
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont
{tcont-id<U><0,127>}:1
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 3 eth tcont 1
# Map the management flow of user-side VLAN 500 to GEM port 0. The mapping index
is 0.
HUAWEI(config-gpon-lineprofile-30)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:0
{mapping-index<U><0,7>}:0
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:500
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 0 0 vlan 500
# Map the service flow of CVLAN 172 to GEM port 3 with the mapping index of 1.
HUAWEI(config-gpon-lineprofile-30)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:3
{mapping-index<U><0,7>}:1
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:172
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 3 1 vlan 172
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-lineprofile-30)#commit
HUAWEI(config-gpon-lineprofile-30)#quit
# Display information about the line profile.
Huawei_OLT(config)#display ont-lineprofile gpon profile-id 30
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 41
Profile-ID :30
Profile-name :EA5822
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<Gem Index 0>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 500 - - - - - -
--------------------------------------------------------------------
<T-CONT 1> DBA Profile-ID:30
<Gem Index 3>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
1 172 - - - - - -
--------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Binding times :0
-----------------------------------------------------------------------------
Step 3 Enable the auto-discovery function of the PON port.
# Enter the PON board view and enable the auto-discovery function of the PON port in
the network topology.
Huawei_OLT(config)#interface gpon
{frameid/slotid<S><Length 3-15>}:0/3
Command:
interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#port
{dba<K>|optical-alarm-profile<K>|portid<U><0,7>}:0
{fec<K>|laser-switch<K>|ont-auto-find<K>|ont-password-renew<K>|range<K>}:ont-auto-find
{switch<E><enable,disable>}:enable
Command:
port 0 ont-auto-find enable
Huawei Access Certification Training Lab Guide Page 42
Step 4 Querying the MDUs that are automatically discovered by a PON port
HUAWEI(config-if-gpon-0/3)#display ont autofind 0
----------------------------------------------------------------------------
Number: 1
F/S/P: 0/3/0
Ont SN: 4857544329FC9507 (HWTC-F2154B04)
Password: 0x30303030303030303030(0000000000)
Loid: 0000000000
Checkcode:
VendorID: HWTC
Ont Version: EA5822 VER.B
Ont SoftwareVersion: V8R018 C00
Ont EquipmentID: SmartAX EA5822
Ont autofind time: 2019-04-13 15:56:02+08:00
----------------------------------------------------------------------------
Step 5 MDU registration
# Register the MDU, set the authentication mode to SN authentication, set the
management type to SNMP, and bind line profile 30 to the MDU.
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:confirm
{portid<U><0,7>}:0
{all<K>|loid-auth<K>|ontid<K>|password-auth<K>|sn-auth<K>}:ontid
{ontid<U><0,127>}:3
{loid-auth<K>|password-auth<K>|sn-auth<K>}:sn-auth
{sn-value<S><Length 12-16>}:4857544329FC9507
{omci<K>|password-auth<K>|snmp<K>}:snmp
{<cr>|desc<K>|ont-lineprofile-id<K>|ont-lineprofile-name<K>}:ont-lineprofile-id
{profile-id<U><0,8192>}:30
{<cr>|desc<K>}:
Command:
Ont confirm 0 ontid 3 sn-auth 48575443F43FF304 snmp ont-lineprofile-id 30
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :3
# Display the ONT status.
HUAWEI(config-if-gpon-0/3)#display ont info 0 all
-----------------------------------------------------------------------------
F/S/P ONT SN Control Run Config Match Protect
ID flag state state state side -----------------------------------------------------------------------------
0/ 3/0 3 4857544329FC9507 active online normal match no
-----------------------------------------------------------------------------
F/S/P ONT-ID Description
-----------------------------------------------------------------------------
0/ 3/0 3 ONT_NO_DESCRIPTION
-----------------------------------------------------------------------------
In port 0/ 3/0, the total of ONTs are: 1, online: 1
Huawei Access Certification Training Lab Guide Page 43
Step 6 Configure management VLAN 500.
# Configure management VLAN 500, add the upstream interface to VLAN 500, and set
the IP address of the interface in VLAN 500 to 10.1.1.1/24.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:500
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 500 smart
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:500
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 500 0/20 0
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:500
Command:
interface vlanif 500
HUAWEI(config-if-vlanif500)#ip address
{ip_addr<I><X.X.X.X>}:10.1.1.1
{integer<U><0,32>|ip_addr<I><X.X.X.X>}:24
{<cr>|description<K>|sub<K>}:
Command:
ip address 10.1.1.1 24
Step 7 Configure a service channel for management VLAN 500.
# Set the VLAN ID of the service port to 500, PON port to 0/3/0, ONT ID to 3, GEM port
ID to 0, and C-VLAN ID to 500.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:500
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:3
{eth<K>|gemport<K>|iphost<K>}:gemport
{gemindex<U><0,1023>}:0
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:500
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 500 gpon 0/3/0 ont 3 gemport 0 multi-service user-vlan 500
# Display the status of a service port.
Huawei Access Certification Training Lab Guide Page 44
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
1 500 common gpon 0/3 /0 3 0 vlan 500 - - up
----------------------------------------------------------------------------
Total: 1 (Up/Down: 1/0)
Step 8 Configure the inband management VLAN and IP address of the MDU.
# On the OLT, issue the IP address 10.1.1.3 24, gateway 10.1.1.1, and VLAN 500 to the
MDU.
Huawei_OLT(config)#interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:ipconfig
{portid<U><0,7>}:0
{ontid<U><0,127>}:3
{dhcp<K>|dscp-mapping-table<K>|ip-index<K>|pppoe<K>|static<K>}:static
{<cr>|gateway<K>|ip-address<K>|pri-dns<K>|slave-dns<K>|vlan<K>}:ip-address
{ip-address<I><X.X.X.X>}:10.1.1.3
{mask<K>}:mask
{mask<M><X.X.X.X>}:255.255.255.0
{<cr>|gateway<K>|pri-dns<K>|slave-dns<K>|vlan<K>}:gateway
{gateway<I><X.X.X.X>}:10.1.1.1
{<cr>|pri-dns<K>|slave-dns<K>|vlan<K>}:vlan
{vlanid<U><0,4095>}:500
{<cr>|pri-dns<K>|priority<K>|slave-dns<K>}:
Command:
ont ipconfig 0 3 static ip-address 10.1.1.3 mask 255.255.255.0 gateway 10.1.1.1 vlan 500
Step 9 Test the connectivity between the OLT and the MDU.
Huawei_OLT(config)#ping 10.1.1.3
PING 10.1.1.3:56 data bytes, press CTRL_C to break
Reply from 10.1.1.3: bytes=56 Sequence=1 ttl=255 time=1 ms
Reply from 10.1.1.3: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 10.1.1.3: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 10.1.1.3: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 10.1.1.3: bytes=56 Sequence=5 ttl=255 time=1 ms
--- 10.1.1.3 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/1 ms
Huawei Access Certification Training Lab Guide Page 45
Step 10 Configure a voice service VLAN.
# Configure voice service VLAN 172 and add an upstream port to the voice service VLAN.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 172 smart
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 172 0/20 0
Step 11 Configure the Layer 3 interface of the service VLAN.
# Set the IP address of the Layer 3 interface to 17.1.1.100 /8.
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:172
Command:
interface vlanif 172
HUAWEI(config-if-vlanif172)#ip address 17.1.1.100 8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.1.1.100 8
Step 12 Configure a service port in the voice VLAN.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:172
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:3
{eth<K>|gemport<K>|iphost<K>}: gemport
{gemindex<U><0,1023>}:3
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:172
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 172 gpon 0/3/0 ont 3 gemport 3 multi-servi user-vlan 172
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
Huawei Access Certification Training Lab Guide Page 46
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
1 500 common gpon 0/3 /0 3 0 vlan 500 - - up
2 172 common gpon 0/3 /0 3 3 vlan 172 - - up
----------------------------------------------------------------------------
Total: 2 (Up/Down: 2/0)
Step 13 Check the information about service VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
-------------------------------------------------------------
INDEX TYPE STATE F /S /P VPI VCI FLOWTYPE FLOWPARA
-------------------------------------------------------------
3 gpon up 0 /3 /0 3 3 vlan 172
-------------------------------------------------------------
Service virtual port number: 2
Note: F--Frame, S--Slot, P--Port,
VPI indicates ONT ID for PON, VCI indicates GEM index for GPON,
v/e--vlan/encap, pritag--priority-tagged
Step 14 Enable global ARP proxy.
Huawei_OLT(config)#arp
{aging-mode<K>|aging-time<K>|conflict<K>|gratuitous-
arp<K>|ip_addr<I><X.X.X.X>|learning<K>|proxy<K>}:proxy
{disable<K>|enable<K>}:enable
Command:
arp proxy enable
Huawei Access Certification Training Lab Guide Page 47
Step 15 Enable ARP proxy on the Layer 3 interface.
Huawei_OLT(config)#interface vlanif 172
HUAWEI(config-if-vlanif172)#arp
{proxy<K>}:proxy
{disable<K>|enable<K>}:enable
{<cr>|subvlan<K>}:
Command:
arp proxy enable
Step 16 Configuration of MDU 2
The configuration of MDU2 on the OLT is similar to that of MDU1.
Step 17 Common Commands
Table 2-3 Common Commands
Common Commands Function
display dba-profile This command is used to query the information about the dynamic
bandwidth assignment (DBA) profile in the system.
This command is used to query the information about the GPON
display ont-lineprofile ONT line profile that has taken effect, including the binding
relationship between the T-CONT and the DBA profile, the QoS
mode of the traffic stream, and the mapping between the GEM port
and the ONT-side service.
This command is used to query the information about a GPON ONT
display ont-srvprofile
service profile.
This command is used to query the basic information about the
display ont autofind
currently auto-found ONT in the system.
This command is used to query the information about an ONT,
display ont info including the current status of the ONT, the related configuration of
the ONT, and the information about the ONT T-CONT.
display vlan This command is used to query the VLAN information.
This command is used to query the information about a service
display service-port
virtual port.
2.2.3 Configuration Procedure on the MDU Side
Step 1 Log in to the MDU.
Huawei_OLT(config)#telnet 10.1.1.3
{<cr>|service-port<U><1,65535>}:
Command:
telnet 10.1.1.3
Press CTRL_] to quit telnet mode
Huawei Access Certification Training Lab Guide Page 48
Trying 10.1.1.3...
Connected to 10.1.1.3...
>>User name:root
>>User password:mduadmin
Huawei Integrated Access Software (EA5822).
Copyright(C) Huawei Technologies Co., Ltd. 2002-2012. All rights reserved.
EA5822>
User root has used a default password. Change the password in time.
Step 2 Check the current voice protocol. If the current voice protocol is switched to SIP,
run the protocol support command to configure the voice protocol.
EA5822(config)#display protocol support
System support H.248 protocol
EA5822(config)#protocol support sip
Changing of the protocol configuration takes effect after you save the data
and then reboot the system. To ensure that the digitmap file is consistent with the protocol
configuration, reboot the system and then re-load the digitmap file or config the digitmap. Are
you sure to change the protocol configuration? (y/ n)[n]:y
EA5822(config)#save
EA5822(config)#reboot system
Step 3 Create SVLAN 172 and add the upstream port to VLAN 172.
EA5822(config)#vlan
{attrib<K>|bind<K>|desc<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart>}:smart
Command:
vlan 172 smart
EA5822(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frame/slot<S><Length 1-15>|to<K>}:0/0
{portlist<S><Length 1-256>}:1
Command:
port vlan 172 0/0 1
Step 4 Configure the Layer 3 interface of the service VLAN.
EA5822(config)#interface
{emu<K>|eponnni<K>|eth<K>|gponnni<K>|loopback<K>|meth<K>|null<K>|sip<K>|vlanif<K>}:vlanif
{<1-4093>}:172
EA5822(config-if-vlanif172)#ip
{address<K>|verify<K>}:address
{ip_addr<I><X.X.X.X>}:17.1.1.43 8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.1.1.43 8
EA5822(config-if-vlanif172)#
Step 5 Test the connectivity of the voice service between the MDU and the OLT.
EA5822(config)#ping 17.1.1.100
PING 17.1.1.100:56 data bytes, press CTRL_C to break
Huawei Access Certification Training Lab Guide Page 49
Reply from 17.1.1.100: bytes=56 Sequence=1 ttl=255 time=30 ms
Reply from 17.1.1.100: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=5 ttl=255 time=10 ms
--- 17.1.1.100 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/8/30 ms
Step 6 Configure the default route from the MDU to the softswitch.
EA5822(config)#ip route-static 200.200.200.0 24 17.0.0.1
{<cr>|description<K>|permanent<K>|preference<K>|tag<K>}:
Command:
ip route-static 200.200.200.0 24 17.0.0.1
Step 7 Add an address pool in VoIP mode.
EA5822(config)#voip
EA5822(config-voip)#ip
{address<K>}:address
{media<K>|signaling<K>}:media
{media-ip-address<I><X.X.X.X>}:17.1.1.43
{gateway<I><X.X.X.X>}:17.0.0.1
Command:
ip address media 17.1.1.43 17.0.0.1
EA5822(config-voip)#ip
{address<K>}:address
{media<K>|signaling<K>}:signaling
{signaling-ip-address<I><X.X.X.X>}:17.1.1.43
Command:
ip address signaling 17.1.1.43
Step 8 Add a SIP interface.
EA5822(config)#interface
{emu<K>|eponnni<K>|eth<K>|gponnni<K>|loopback<K>|meth<K>|null<K>|sip<K>|vlanif<K>}:sip
{mgid<U><0,16777215>}:30
Command:
interface sip 30
Are you sure to add the SIP interface?(y/n)[n]:y
Step 9 Configuring the Attributes of a SIP Interface
EA5822(config-if-sip-30)#if-sip
{attribute<K>}:attribute
{basic<K>|optional<K>}:basic
{home-domain<K>|media-ip<K>|primary-proxy-domain<K>|primary-proxy-ip1<K>|primary-proxy-
ip2<K>|primary-proxy-port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-
proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|signal-
ip<K>|signal-port<K>|sipprofile-index<K>|srvlogic-index<K>|transfer<K>}:media-ip
Huawei Access Certification Training Lab Guide Page 50
{media-addr-name<K>|media-dhcp-vlan<K>|media-ip-value<I>}:17.1.1.43
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip1<K>|primary-proxy-
ip2<K>|primary-proxy-port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-
proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|signal-
ip<K>|signal-port<K>|sipprofile-index<K>|srvlogic-index<K>|transfer<K>}:signal-ip
{signal-addr-name<K>|signal-dhcp-vlan<K>|signal-ip-value<I>}:17.1.1.43
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip1<K>|primary-proxy-
ip2<K>|primary-proxy-port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-
proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|signal-
port<K>|sipprofile-index<K>|srvlogic-index<K>|transfer<K>}:signal-port
{signal-port-value<U><5000,5999>}:5060
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip1<K>|primary-proxy-
ip2<K>|primary-proxy-port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-
proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|sipprofile-
index<K>|srvlogic-index<K>|transfer<K>}:transfer
{transfermode<E><tcp,udp,sctp,tls>}:udp
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip1<K>|primary-proxy-
ip2<K>|primary-proxy-port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-
proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|sipprofile-
index<K>|srvlogic-index<K>}:primary-proxy-ip1
{primary-proxy-ip1-value<I><X.X.X.X>}:200.200.200.200
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip2<K>|primary-proxy-
port<K>|proxy-addr-mode<K>|secondary-proxy-domain<K>|secondary-proxy-ip1<K>|secondary-
proxy-ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|sipprofile-index<K>|srvlogic-
index<K>}:primary-proxy-port
{primary-proxy-port-value<U><1,65535>}:5060
{<cr>|home-domain<K>|primary-proxy-domain<K>|primary-proxy-ip2<K>|proxy-addr-
mode<K>|secondary-proxy-domain<K>|secondary-proxy-ip1<K>|secondary-proxy-
ip2<K>|secondary-proxy-port<K>|server-dhcp-option<K>|sipprofile-index<K>|srvlogic-
index<K>}:home-domain
{home-domain-name<S><Length 1-64>}:huawei
{<cr>|primary-proxy-domain<K>|primary-proxy-ip2<K>|proxy-addr-mode<K>|secondary-proxy-
domain<K>|secondary-proxy-ip1<K>|secondary-proxy-ip2<K>|secondary-proxy-port<K>|server-
dhcp-option<K>|sipprofile-index<K>|srvlogic-index<K>}:
Command:
if-sip attribute basic media-ip 17.1.1.43 signal-ip 17.1.1.43 signal-port 5060 transfer udp primary-
proxy-ip1 200.200.200.200 primary-proxy-port 5060 home-domain huawei
Step 10 Enable the SIP interface.
EA5822(config-if-sip-30)#reset
Are you sure to reset the SIP interface?(y/n)[n]:y
EA5822(config-if-sip-30)#
Resetting SIP interface 30 succeeded
Step 11 Configure the data of the PSTN subscriber in slot 0/2.
EA5822(config)#esl
{user<K>}:user
Command:
esl user
EA5822(config-esl-user)#sippstnuser
{add<K>|attribute<K>|auth<K>|batadd<K>|batdel<K>|del<K>|modify<K>|rightflag<K>|servicedata<K
>}:add
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
Huawei Access Certification Training Lab Guide Page 51
{mgid<U><0,16777215>}:30
{<cr>|telno<K>}:telno
{telno-value<S><Length 1-64>}:7727043
Command:
sippstnuser add 0/2/1 30 telno 7727043
Command processing is completed. User data has been added successfully
EA5822(config-esl-user)#display sippstnuser
{attribute<K>|authinfo<K>|call-state<K>|frameid/slotid/portid<S><Length 1-
15>|frameid/slotid<S><Length 1-15>|reg-state<K>|rightflag<K>|servicedata<K>}:0/2/1
{<cr>|endframeid/slotid/portid<S><Length 1-15>}:
Command:
display sippstnuser 0/2/1
-----------------------------------------
F /S /P MGID TelNo
---------------------------------------
0 /2 /1 30 7727043
-----------------------------------------
Step 12 Configuring Authentication Data for PSTN Subscribers
EA5822(config-esl-user)#sippstnuser
{add<K>|attribute<K>|auth<K>|batadd<K>|batdel<K>|del<K>|modify<K>|rightflag<K>|servicedata<K
>}:auth
{set<K>}:set
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
{telno<K>}:telno 7727043
{<cr>|password-mode<K>}:password-mode
{password-mode-value<E><password,ha1>}:password
Command:
sippstnuser auth set 0/2/1 telno 7727043 password-mode password
User Name(<=64 characters, "-" indicates deletion):7727043
User Password(<=64 characters, "-" indicates deletion): 7727000
Step 13 Adding a local SIP digitmap
EA5822(config)#local-digitmap
{add<K>|append<K>|delete<K>|modify<K>}:add
{name-value<S><Length 1-32>}:SIPmap
{type-value<E><normal,emergency,scc,direct-centrex,second-centrex>}:normal
{body-value<S><Length 1-256>}:7727xxx|x.S|x.F
Command:
local-digitmap add SIPmap normal 7727xxx|x.S|x.F
Table 2-4 Digitmap rules
Symbol Meaning Symbol Meaning
T Start timer - Range, for example, 2-4.
Matches any structure that appears
L Long timer .
before it one or more times.
Huawei Access Certification Training Lab Guide Page 52
S Short timer | Separator
E Key (*) Digit 0, 1, 2, 3, 4, 5, 6, 7, 8, 9
Matches any number or character within
F Press #. []
the range of parentheses.
Wildcard Matches any number from 0
x to 9.
Run the display local-digitmap command to check whether the created digitmap rule is
correct.
EA5822(config)#display local-digitmap all
------------------------------------------
Name: SIPmap
Type: normal
Body: 7727xxx|X.S|X.F
------------------------------------------
Step 14 Modify the digitmap matching mode.
The default matching mode is 0, that is, the minimum matching mode is used. You are
advised to change the value to 1, that is, the maximum matching mode is used. When
there are multiple digitmap rules, the minimum matching mode may cause the system
to report an incorrect number due to incorrect matching rules. As a result, the call fails.
EA5822(config)#interface sip 30
EA5822(config-if-sip-30)#mg-software
{parameter<K>|strpara<K>}:parameter
{name<U><0,27>}:13
{{value<L>}}:1
Command:
mg-software parameter 13 1
EA5822(config)#display mg-software parameter
{mgid<U><0,16777215>}:30
{<cr>|name<U><0,27>}:13
Command:
display mg-software parameter 30 13
-------------------------------------------------
MGID:30 para index:13 value:1
-------------------------------------------------
APPENDIX:
-------------------------------------------------
Parameter Index: Interface software parameter name:
13: Digitmap matching mode
0: Minimum
1: Maximum
Huawei Access Certification Training Lab Guide Page 53
Step 15 (Optional) Configuring the Standalone Mode
The default value is 0, indicating that the emergency standalone function is not
supported. You can change the value to 1, indicating that the emergency standalone
function is supported. When the connectivity between the MDU and the softswitch is
faulty, the MDU can automatically process the calls between the users connected to the
same MDU.
EA5822(config)#interface sip 30
EA5822(config-if-sip-30)#mg-software
{parameter<K>|strpara<K>}:parameter
{name<U><0,27>}:2
{{value<L>}}:1
Command:
mg-software parameter 2 1
EA5822(config)#display mg-software parameter
{mgid<U><0,16777215>}:30
{<cr>|name<U><0,27>}:2
Command:
display mg-software parameter 30 2
-------------------------------------------------
MGID:30 para index:2 value:1
-------------------------------------------------
APPENDIX:
-------------------------------------------------
Parameter Index: Interface software parameter name:
2: SAL Support
0: No
1: Yes
Step 16 (Optional) MDU Packet Mirroring
Mirror upstream and downstream packets passing through PON port 0/0/1 of the MDU
to PON port 0/0/2. A GE copper module is installed on port 0/0/2, and the PC is
connected to port 0/0/2 using a network cable.
EA5822(config)#diagnose
EA5822(diagnose)%%mirror port
{frameid/slotid/portid<S><Length 1-15>}:0/0/1
{frameid/slotid/portid<S><Length 1-15>}:0/0/2
{mirror-direction<E><ingress,egress,all>}:all
Command:
mirror port 0/0/1 0/0/2 all
Run the Wireshark software on the PC to capture packets on the network adapter
connected to MDU port 0/0/2.
Huawei Access Certification Training Lab Guide Page 54
Step 17 Configuration of MDU 2
The configuration of MDU2 is similar to that of MDU1.
2.2.4 Experiment Verification
Test method: Connect two phones to different POTS ports on the MDU and make a call
to each other.
Step 1 When the two parties are in conversation, run the display esl online-info command
to query the information about the MG online users.
EA5822(config)#display esl online-info all
-----------------------------------------------------------------------------
UserPort DSPChannel Codec PT EC VAD Gain(I/O) Duration MIX
Huawei Access Certification Training Lab Guide Page 55
-----------------------------------------------------------------------------
0/ 2/ 1 0/ 2/0/ 9 G711A 20 ms On Off 0/0 dB 00:00:08 No
0/ 2/ 2 0/ 2/0/ 10 G711A 20 ms On Off 0/0 dB 00:00:08 No
-----------------------------------------------------------------------------
EA5822(config)#display esl online-info startuser 0/2/1
{<cr>|enduser<K>}:
Command:
display esl online-info startuser 0/2/1
-----------------------------------------------------------------------------
User Port: 0/2/1
DSP Channel: 0/2/0/9
MIX: No
Codec: G711A
PT(ms): 20
EC: On
VAD: Off
Gain(I/O)(dB): 0/0
Duration(hh:mm:ss): 00:00:44
Local IP:UDP Port: 17.1.1.43:58080
Remote IP:UDP Port: 17.1.1.43:58076
RTCP State: On
Remote PT(ms): 20
Vlan ID: 172
Vlan Priority: 6
QoS Strategy: DSCP
QoS Value: 56
Receive Package Count: 2185
Send Package Count: 2042
Receive Octet Count: 349600
Send Octet Count: 326720
Loop Delay(ms): 2
Local Jitter: 0
Remote Jitter: 0
Local Loss Rate(%): 0
Remote Loss Rate(%): 0
Network Packet Loss Rate(%): 0
Huawei Access Certification Training Lab Guide Page 56
Jitter Buffer Discard Rate(%): 0
RTCP Round-Trip Delay: 2
End System Delay: 33
Signal Level: -
Noise Level: 220
Residual Echo Return Loss: 30
R Factor: 77
Estimated MOSLQ: 4.0
Estimated MOSCQ: 3.9
Burst Loss Density: 0
Burst Duration: 0
Gap Loss Density: 0
Gap Duration: 39360
-----------------------------------------------------------------------------
Step 2 Subscriber loop line test
EA5822(config)#test
EA5822(config-test)#pots
{circuit-test<K>|emulational-call<K>|emulational-callee<K>|emulational-
caller<K>|emulational<K>|loop-line-test<K>|loop-line-threshold<K>|path-
test<K>|search-tone-test<K>|test-para<K>}:loop-line-test
{frameid/slotid/portid<S><Length 1-15>|mgid<K>|telno<K>}:0/2/1
{<cr>|busy<K>}:
Command:
pots loop-line-test 0/2/1
Frame 0 slot 2 port 1 (telno 7727043 mgid 30 terminalid -)
under testing, Please wait......
EA5822(config-test)#
Testing port: 0/2/1
Telno: 7727043
MGid: 30
Terminalid: -
-----------------------------------------------------------------------------
Test conclusion:
-----------------------------------------------------------------------------
Line state Normal
Huawei Access Certification Training Lab Guide Page 57
Line length
Line A 0 m
Line B 0 m
PPA No PPA between A,B line
Termination type R-C network
-----------------------------------------------------------------------------
Test parameter item Value Validity
-----------------------------------------------------------------------------
Primary test result parameter:
A->ground AC voltage 0.000 V Valid
B->ground AC voltage 0.000 V Valid
A->B AC voltage 0.000 V Valid
A->ground AC Frequency 0 Hz Invalid
B->ground AC Frequency 0 Hz Invalid
A->B AC Frequency 0 Hz Invalid
A->ground DC voltage 0.053 V Valid
B->ground DC voltage 0.003 V Valid
A->B DC voltage 0.053 V Valid
A->ground insulation resistance >10 MΩ Valid
B->ground insulation resistance >10 MΩ Valid
A->B insulation resistance(Low voltage) 5.555 MΩ Valid
B->A insulation resistance(Low voltage) 5.094 MΩ Valid
A->B insulation resistance(High voltage) 2.546 KΩ Valid
B->A insulation resistance(High voltage) - Not support
A->ground capacitance 0 nF Valid
B->ground capacitance 0 nF Valid
A->B capacitance(Low voltage) 966 nF Valid
A->B capacitance(High voltage) 33 nF Invalid
-----------------------------------------------------------------------------
Secondary test result parameter:
A->ground conductance 0.457 uS Valid
B->ground conductance 0.599 uS Valid
A->B conductance(Low voltage) 5.305 uS Valid
A->B conductance(High voltage) - Not support
A->ground admittance -1.638 uS Valid
B->ground admittance -8.512 uS Valid
A->B admittance(Low voltage) 24.350 uS Valid
Huawei Access Certification Training Lab Guide Page 58
A->B admittance(High voltage) - Not support
A->ground DC current 0 uA Valid
B->ground DC current 0 uA Valid
A->B DC current 0 uA Valid
B->A DC current 0 uA Valid
A->ground AC current 0 uA Valid
B->ground AC current 0 uA Valid
A->B AC current 0 uA Valid
B->A AC current 0 uA Valid
-----------------------------------------------------------------------------
Test auxiliary parameter:
Test frequency for admittance - Not support
Resistance to test the abnoraml voltage - Not support
Max. voltage to conduct the signature - Not support
A->ground max. voltage -2.544 V Valid
A->ground min. voltage -48.860 V Valid
B->ground max. voltage -2.569 V Valid
B->ground min. voltage -48.920 V Valid
A->B max. voltage 46.610 V Valid
A->B min. voltage -46.570 V Valid
A->ground max. current -36 uA Valid
A->ground min. current -87 uA Valid
B->ground max. current 17 uA Valid
B->ground min. current -34 uA Valid
A->B max. positive current 187 uA Valid
A->B max. negative current 121 uA Valid
-----------------------------------------------------------------------------
Step 3 Subscriber circuit test.
EA5822(config-test)#pots
{circuit-test<K>|emulational-call<K>|emulational-callee<K>|emulational-
caller<K>|emulational<K>|loop-line-test<K>|loop-line-threshold<K>|path-
test<K>|search-tone-test<K>|test-para<K>}:circuit-test
{frameid/slotid/portid<S><Length 1-15>|mgid<K>|telno<K>}:0/2/1
{<cr>|busy<K>}:
Command:
pots circuit-test 0/2/1
Huawei Access Certification Training Lab Guide Page 59
Frame 0 slot 2 port 1 (telno 7727043 mgid 30 terminalid -)
under testing, Please wait......
EA5822(config-test)#
Testing port: 0/2/1
Telno: 7727043
MGid: 30
Terminalid: -
-------------------------------------------------------
Test item Result
-------------------------------------------------------
Digital Voltage: Normal
Low Battery: Normal
High Battery: Normal
Positive Battery: Normal
Loop current: Normal
Feeder voltage: Normal
Ringing current voltage: Normal
Ringing current frequency: Normal
VAG: Normal
VBG: Normal
-------------------------------------------------------
Feeder voltage(V): -50.760
Ringing current voltage(V): 50.690
Loop current(mA): 20.000
-------------------------------------------------------
Step 4 In the calling party emulation test, the called party needs to connect to the phone
to answer the call, press keys as instructed, and hang up to obtain the test result.
EA5822(config-test)#pots
{circuit-test<K>|emulational-call<K>|emulational-callee<K>|emulational-
caller<K>|emulational<K>|loop-line-test<K>|loop-line-threshold<K>|path-
test<K>|search-tone-test<K>|test-para<K>}:emulational-caller
{caller-port<K>}:caller-port
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
{callee-telno<K>}:callee-telno
{telno-value<S><Length 1-32>}:7727044
Command:
Huawei Access Certification Training Lab Guide Page 60
pots emulational-caller caller-port 0/2/1 callee-telno 7727044
EA5822(config-test)#
Caller port: 0/2/1
Callee telno: 7727044
Test result: Test Succeed
Step 5 In a called party emulation test, the calling party needs to connect to a phone to
dial a number, press a key as instructed, and then hang up to obtain the test result.
EA5822(config-test)#pots
{circuit-test<K>|emulational-call<K>|emulational-callee<K>|emulational-
caller<K>|emulational<K>|loop-line-test<K>|loop-line-threshold<K>|path-
test<K>|search-tone-test<K>|test-para<K>}:emulational-callee
{callee-port<K>}:callee-port
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
Command:
pots emulational-callee callee-port 0/2/1
EA5822(config-test)#
Callee port: 0/2/1
Test result: Test Succeed
Step 6 In a call emulation test, no phone needs to be connected. After the test is
complete, the device returns the test result.
EA5822(config-test)#pots
{circuit-test<K>|emulational-call<K>|emulational-callee<K>|emulational-
caller<K>|emulational<K>|loop-line-test<K>|loop-line-threshold<K>|path-
test<K>|search-tone-test<K>|test-para<K>}:emulational-call
{caller-port<K>}:caller-port
{frameid/slotid/portid<S><Length 1-15>}:0/2/2
{callee-port<K>}:callee-port
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
{callee-telno<K>}:callee-telno
{telno-value<S><Length 1-32>}:7727043
Command:
pots emulational-call caller-port 0/2/2 callee-port 0/2/1 callee-telno 7727043
EA5822(config-test)#
Huawei Access Certification Training Lab Guide Page 61
Caller port: 0/2/2
Callee port: 0/2/1
Test result: Test Succeed
Step 7 Common Commands
Table 2-5 Common Commands
Common Commands Function
display local-digitmap This command is used to query the digitmap rules created locally.
display mg-software This command is used to query the software parameters of the MG
parameter interface that supports the SIP protocol.
This command is used to query the information about the MG
online users. When you need to query the information about the
display esl online-info
MG online users, such as the DSP port number, codec, and packet
length, run this command.
This command is used to perform an analog subscriber loop line
pots loop-line-test test. The subscriber to be tested must be in the idle, locked, or
blocked state.
This command is used to simulate the circuit test of a subscriber to
pots circuit-test
check whether the functions of the subscriber circuit are normal.
This command is used to start the caller emulation test of a PSTN
pots emulational-caller
port.
This command is used to start the callee emulation test on a PSTN
pots emulational-callee
port.
Starts the call emulation test between two PSTN ports
automatically. When you need to perform the call emulation test
pots emulational-call
between PSTN ports without manual intervention, run this
command.
2.2.5 Configuration Reference
#OLT side
dba-profile add profile-id 30 type1 fix 1024
ont-lineprofile gpon profile-id 30 profile-name EA5822
tcont 1 dba-profile-id 30
gem add 0 eth tcont 0
gem add 3 eth tcont 1
gem mapping 0 0 vlan 500
gem mapping 3 1 vlan 172
Commit
quit
interface gpon 0/3
Huawei Access Certification Training Lab Guide Page 62
port 0 ont-auto-find enable
ont add 0 3 sn-auth 48575443F43FF304 snmp ont-lineprofile-id 30
quit
vlan 500 smart
port vlan 500 0/20 0
interface vlanif 500
ip address 10.1.1.1 24
quit
service-port vlan 500 gpon 0/3/0 ont 3 gemport 0 multi-service user-vlan 500
interface gpon 0/3
ont ipconfig 0 3 static ip-address 10.1.1.3 mask 255.255.255.0 gateway 10.1.1.1 vlan 500
quit
vlan 172 smart
port vlan 172 0/20 0
interface vlanif 172
ip address 17.1.1.100 8
quit
service-port vlan 172 gpon 0/3/0 ont 3 gemport 3 multi-service user-vlan 172
telnet 10.1.1.3
>>User name:root
>>User password: mduadmin
#On the MDU side
vlan 172
port vlan 172 0/0 1
interface vlanif 172
ip address 17.1.1.43 8
quit
Voip
ip address media 17.1.1.43 17.0.0.1
ip address signaling 17.1.1.43
quit
ip route-static 200.200.200.0 24 17.0.0.1
interface sip 30
if-sip attribute basic media-ip 17.1.1.43 signal-ip 17.1.1.43 signal-port 5060 transfer udp primary-
proxy-ip1 200.200.200.200 primary-proxy-port 5060 home-domain huawei
sip-auth-parameter password-mode password auth-username "7727043" auth-password
*T1I=2A;*][OQ=^Q`MAF4<1!!*
reset
quit
esl user
Huawei Access Certification Training Lab Guide Page 63
sippstnuser add 0/2/1 30 telno 7727043
2.3 Questions
1. Can the call emulation test be used to test numbers of different devices?
2. How do I query the media port used by the calling and called parties in a call?
Huawei Access Certification Training Lab Guide Page 64
3 GPON ONT H.248 Voice Service
Configuration
3.1 Experiment Introduction
3.1.1 About This Experiment
In this experiment, data is configured on the OLT and ONT so that two users connected
to different ONTs connected to the same PON port can make voice calls.
3.1.2 Objectives
Understand the basic principles of GPON.
Understand the basic principles of VoIP.
Understand the GPON data profile.
Configure voice service profiles.
Understand the overall configuration process of the voice service.
3.1.3 Experiment Networking
Figure 3-1 Topology of the GPON ONT H.248 configuration experiment
PC 1
ONT 1
Tel 1
NMS BRAS/Router Soft switch IPTV Server
TV 1
PC 2 MDU 1
Splitter 1
Tel 2
TV 2
......
PC n
ONT n OLT
Tel n
TV n
PC n+1 MDU n Splitter n
Tel n+1
TV n+1
Huawei Access Certification Training Lab Guide Page 65
3.1.4 Experiment Planning
According to the VoIP configuration scenario of the access network, phone 1 and phone
2 are common phones, and PC1 and PC2 run the Windows operating system.
Table 3-1 H.248 data plan for a GPON ONT
Configuration Item ONT1 data Configuration Item ONT2 data
OLT service VLAN 172. Smart OLT service VLAN 172. Smart
OLT upstream port 0/20/0 OLT upstream port 0/20/0
OLT downstream OLT downstream
0/3/0 0/3/0
port port
5, SN
ONT ID,SN ONT ID,SN 6, SN 48575443B203E407
48575443B205EC07
TCONT,DBA 1. DBA profile ID: 50 TCONT,DBA 2. DBA profile ID: 60
GEM Port 1 GEM Port 2
ONT user VLAN 172 ONT user VLAN 172
Table 3-2 Data plan for the GPON ONT H.248 voice server
Configuration Item Data Configuration Item Data
H.248 server 200.200.200.200 Voice gateway 17.0.0.1/8
H.248 server port 18980100 (ONT1)
2944 Phone Number
number 18980200 (ONT2)
17.248.48.1/8 (ONT1) 0 (ONT1)
MG IP Terminal ID
17.248.48.2/8 (ONT2) 1 (ONT2)
3.2 Experiment Task Configuration
3.2.1 Configuration Roadmap
Huawei Access Certification Training Lab Guide Page 66
Figure 3-2 Flowchart for configuring GPON ONT H.248
Create a VLAN.
Configure the upstream Prerequisite: The ONT
port of the VLAN. has been added
successfully.
OLT Basic
Service
Configure a service
Configuration
port.
Configure the IP
address of the VLAN
L3 interface.
Configure ARP proxy.
ONT H.248 Configuring Static
Configuration Routes
Configure WAN and
voice interfaces.
Configuring User
Information
3.2.2 Configuration Procedure (OLT Side)
Step 1 DBA Profile Configuration
# Run the display dba-profile command to query the existing DBA profiles in the system.
If the existing DBA profile in the system cannot meet the requirements, run the dba-
profile add command to add a DBA profile. Set the profile ID to 50, bandwidth type to
type1, and bandwidth value to 2048 kbit/s.
Huawei_OLT(config)#dba-profile
{add<K>|delete<K>|modify<K>}:add
{profile-id<K>|profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:profile-id
{profile-id<U><10,512>}:50
{profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:type1
{fix<K>}:fix
{fix-bandwidth<U><128,10000000>}:2048
{<cr>|bandwidth_compensate<K>}:
Command:
dba-profile add profile-id 50 type1 fix 2048
Adding a DBA profile succeeded
Profile ID: 50
Huawei Access Certification Training Lab Guide Page 67
Profile name: dba-profile_50
# Display the DBA profile status.
Huawei_OLT(config)#display dba-profile profile-id 50
-----------------------------------------------------------------
Profile-name: dba-profile_50
Profile-ID: 50
type: 1
Bandwidth compensation: No
Fix-delay: No
Fix(kbps): 2048
Assure(kbps): 0
Max(kbps): 0
Additional-bandwidth: -
Best-effort-priority: -
Best-effort-weight: -
bind-times: 0
-----------------------------------------------------------------
Step 2 Configuring an ONT Line Profile
# Set the line profile ID to 50 and profile name to 5hg8247.
Huawei_OLT(config)#ont-lineprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:50
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:5hg8247
Command:
ont-lineprofile gpon profile-id 50 profile-name 5hg8247
# Bind T-CONT 1 to DBA profile 50.
HUAWEI(config-gpon-lineprofile-50)#tcont
{tcont-list<S><Length 1-13>}:1
{<cr>|dba-profile-id<K>|dba-profile-name<K>}:dba-profile-id
{profile-id<U><0,512>}:50
Command:
tcont 1 dba-profile-id 50
# Add GEM port 1 to carry ETH service flows, and bind GEM port 1 to T-CONT 1.
HUAWEI(config-gpon-lineprofile-50)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:1
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont 1
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 1 eth tcont 1
# Map the service flow of CVLAN 172 to GEM port 1. The mapping index is 1.
Huawei Access Certification Training Lab Guide Page 68
HUAWEI(config-gpon-lineprofile-50)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:1
{mapping-index<U><0,7>}:1
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:172
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 1 1 vlan 172
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-lineprofile-50)#commit
HUAWEI(config-gpon-lineprofile-50)#quit
# Display information about the line profile.
Huawei_OLT(config)#display ont-lineprofile gpon
{all<K>|bound-info<K>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:50
Command:
display ont-lineprofile gpon profile-id 50
-----------------------------------------------------------------------------
Profile-ID :50
Profile-name :5hg8247
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<T-CONT 1> DBA Profile-ID:50
<Gem Index 1>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
1 172 - - - - - -
--------------------------------------------------------------------
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Binding times :0
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 69
Step 3 Configuring a Service Profile
# Set the service profile ID to 50 and profile name to 5hg8247.
Huawei_OLT(config)#ont-srvprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:50
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:5hg8247
Command:
ont-srvprofile gpon profile-id 50 profile-name 5hg8247
# Configure the port type and number of ports on the ONT. The number of LAN ports
is 4, and the number of POTS ports is 2.
HUAWEI(config-gpon-srvprofile-50)#ont-port
{catv<K>|eth<K>|moca<K>|pots<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}:eth
{adaptive<K>|eth-port<U><0,8>}:4
{<cr>|catv<K>|moca<K>|pots<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}:pots
{adaptive<K>|pots-port<U><0,32>}:2
{<cr>|catv<K>|moca<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>}: catv
{adaptive<K>|catv-port<U><0,8>}:1
{<cr>|moca<K>|tdm-srvtype<K>|tdm-type<K>|tdm<K>|vdsl<K>}:
Command:
ont-port eth 4 pots 2 catv 1
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-srvprofile-50)#commit
HUAWEI(config-gpon-srvprofile-50)#quit
# Display the service profile status.
Huawei_OLT(config)#display ont-srvprofile gpon profile-id 50
-----------------------------------------------------------------------------
Profile-ID: 50
Profile-name: 5hg8247
Access-type: GPON
-----------------------------------------------------------------------------
Port-type Port-number
-----------------------------------------------------------------------------
POTS 2
ETH 4
VDSL 0
TDM 0
MOCA 0
CATV 1
-----------------------------------------------------------------------------
TDM port type: E1
TDM service type: TDMoGem
MAC learning function switch: Enable
ONT transparent function switch: Disable
Ring check switch: Disable
Huawei Access Certification Training Lab Guide Page 70
Ring port auto-shutdown: Enable
Ring detect frequency: 8 (pps)
Ring resume interval: 300 (s)
Multicast forward mode: Unconcern
Multicast forward VLAN: -
Multicast mode: Unconcern
Upstream IGMP packet forward mode: Unconcern
Upstream IGMP packet forward VLAN: -
Upstream IGMP packet priority: -
Native VLAN option: Concern
Upstream PQ color policy: -
Downstream PQ color policy: -
-----------------------------------------------------------------------------
Port-type Port-ID QinQmode PriorityPolicy Inbound Outbound
-----------------------------------------------------------------------------
ETH 1 unconcern unconcern unconcern unconcern
ETH 2 unconcern unconcern unconcern unconcern
ETH 3 unconcern unconcern unconcern unconcern
ETH 4 unconcern unconcern unconcern unconcern
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Port-type Port-ID DownstreamMode MismatchPolicy
-----------------------------------------------------------------------------
ETH 1 operation discard
ETH 2 operation discard
ETH 3 operation discard
ETH 4 operation discard
-----------------------------------------------------------------------------
Port-type Port-ID Dscp-mapping-table-index
-----------------------------------------------------------------------------
ETH 1 0
ETH 2 0
ETH 3 0
ETH 4 0
IPHOST 1 0
-----------------------------------------------------------------------------
Port-type Port-ID IGMP-mode IGMP-VLAN IGMP-PRI Max-MAC-Count
-----------------------------------------------------------------------------
ETH 1 - - - Unlimited
ETH 2 - - - Unlimited
ETH 3 - - - Unlimited
ETH 4 - - - Unlimited
-----------------------------------------------------------------------------
Binding times: 0
-----------------------------------------------------------------------------
Step 4 Enable the auto-discovery function of the PON port.
# Enter the PON board view and enable the auto-discovery function of the PON port in
the network topology.
Huawei_OLT(config)#interface
Huawei Access Certification Training Lab Guide Page 71
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:gpon
{frameid/slotid<S><Length 3-15>}:0/3
Command:
interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#port
{dba<K>|optical-alarm-profile<K>|portid<U><0,7>}:0
{fec<K>|laser-switch<K>|ont-auto-find<K>|ont-password-renew<K>|range<K>}:ont-auto-find
{switch<E><enable,disable>}:enable
Command:
port 0 ont-auto-find enable
Step 5 Querying the ONTs that are automatically discovered by a PON port
HUAWEI(config-if-gpon-0/3)#display ont autofind 0
----------------------------------------------------------------------------
Number: 1
F/S/P: 0/3/0
Ont SN: 48575443B205EC07 (HWTC-B203E407)
Password: 0x00000000000000000000
Loid:
Checkcode:
VendorID: HWTC
Ont Version: 120D4600
Ont SoftwareVersion: V1R006C01S220
Ont EquipmentID: 247
Ont autofind time: 2018-08-13 16:45:50+08:00
----------------------------------------------------------------------------
Step 6 ONT registration
# Register the ONT, set the authentication mode to SN authentication and management
type to OMCI, and bind line profile 50 and service profile 50 to the ONT.
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:confirm
{portid<U><0,7>}:0
{all<K>|loid-auth<K>|ontid<K>|password-auth<K>|sn-auth<K>}:ontid
{ontid<U><0,127>}:5
{loid-auth<K>|password-auth<K>|sn-auth<K>}:sn-auth
{sn-value<S><Length 13-16>}:48575443B205EC07
{omci<K>|password-auth<K>|snmp<K>}:omci
{<cr>|desc<K>|ont-lineprofile-id<K>|ont-lineprofile-name<K>|ont-srvprofile-id<K>|ont-srvprofile-
name<K>}:ont-lineprofile-id
{profile-id<U><0,8192>}:50
{<cr>|desc<K>|ont-srvprofile-id<K>|ont-srvprofile-name<K>}:ont-srvprofile-id 50
{<cr>|desc<K>}:
Command:
ont confirm 0 ontid 5 sn-auth 48575443B205EC07 omci ont-lineprofile-id 50 ont-srvprofile-id 50
Number of ONTs that can be added: 1, success: 1
Huawei Access Certification Training Lab Guide Page 72
PortID :0, ONTID :5
# Display the ONT status.
HUAWEI(config-if-gpon-0/3)#display ont info 0 all
-----------------------------------------------------------------------------
F/S/P ONT SN Control Run Config Match Protect
ID flag state state state side
-----------------------------------------------------------------------------
0/ 3/0 5 48575443B205EC07 active online normal match no
-----------------------------------------------------------------------------
F/S/P ONT-ID Description
-----------------------------------------------------------------------------
0/ 3/0 5 ONT_NO_DESCRIPTION
-----------------------------------------------------------------------------
In port 0/ 3/0, the total of ONTs are: 1, online: 1
# Run the display ont info 0 5 command to query the detailed information about the
ONT.
Step 7 Configure a voice service VLAN.
# Configure voice VLAN 172.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 172 smart
# Add an upstream interface to the voice VLAN.
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 172 0/20 0
# Display information about VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
Huawei Access Certification Training Lab Guide Page 73
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
Service virtual port number: 0
Step 8 Configuring a VLAN Layer 3 Interface
# Set the IP address of the Layer 3 interface to 17.1.1.100 /8.
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:172
Command:
interface vlanif 172
HUAWEI(config-if-vlanif172)#ip
{address<K>|binding<K>|verify<K>}:address
{ip_addr<I><X.X.X.X>}:17.1.1.100
{integer<U><0,32>|ip_addr<I><X.X.X.X>}:8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.1.1.100 8
Step 9 Configure a service port in the voice VLAN.
# Set the VLAN ID of the service flow to 172, PON port to 0/3/0, ONT ID to 5, GEM port
ID to 1, and C-VLAN ID to 172.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:172
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:5
{eth<K>|gemport<K>|iphost<K>}: gemport
{gemindex<U><0,1023>}:1
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:172
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 172 gpon 0/3/0 ont 5 gemport 1 multi-service user-vlan 172
# Display the status of the service virtual port.
Huawei Access Certification Training Lab Guide Page 74
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
0 172 common gpon 0/3 /0 5 1 vlan 172 - - up
----------------------------------------------------------------------------
Total: 1 (Up/Down: 1/0)
# The status of the service virtual port is up.
Step 10 Check voice VLAN 172.
# Run the display vlan 172 command to check the status of the upstream and
downstream interfaces of VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
-------------------------------------------------------------
INDEX TYPE STATE F /S /P VPI VCI FLOWTYPE FLOWPARA
-------------------------------------------------------------
0 gpon up 0 /3 /0 5 1 vlan 172
-------------------------------------------------------------
Service virtual port number: 1
Note: F--Frame, S--Slot, P--Port,
VPI indicates ONT ID for PON, VCI indicates GEM index for GPON,
v/e--vlan/encap, pritag--priority-tagged
# The status of the upstream port 0/20/0 and the service virtual port is normal.
Step 11 Enable global ARP proxy.
Huawei Access Certification Training Lab Guide Page 75
Huawei_OLT(config)#arp
{aging-mode<K>|aging-time<K>|conflict<K>|gratuitous-
arp<K>|ip_addr<I><X.X.X.X>|learning<K>|proxy<K>}:proxy
{disable<K>|enable<K>}:enable
Command:
arp proxy enable
Step 12 Enable ARP proxy on the Layer 3 interface.
Huawei_OLT(config)#interface vlanif 172
HUAWEI(config-if-vlanif172)#arp
{proxy<K>}:proxy
{disable<K>|enable<K>}:enable
{<cr>|subvlan<K>}:
Command:
arp proxy enable
Step 13 Configuration of ONT 2
The configuration of ONT2 is similar to that of ONT1.
Step 14 Common Commands
Table 3-3 Common Commands
Common Commands Function
display dba-profile This command is used to query the information about the dynamic
bandwidth assignment (DBA) profile in the system.
This command is used to query the information about the GPON
display ont-lineprofile ONT line profile that has taken effect, including the binding
relationship between the T-CONT and the DBA profile, the QoS
mode of the traffic stream, and the mapping between the GEM port
and the ONT-side service.
This command is used to query the information about a GPON ONT
display ont-srvprofile
service profile.
This command is used to query the basic information about the
display ont autofind
currently auto-found ONT in the system.
This command is used to query the information about an ONT,
display ont info including the current status of the ONT, the related configuration of
the ONT, and the information about the ONT T-CONT.
display vlan This command is used to query the VLAN information.
This command is used to query the information about a service
display service-port
virtual port.
3.2.3 Configuration Procedure (ONT Side)
Step 1 Log in to the HG8247.
Huawei Access Certification Training Lab Guide Page 76
Use a network cable to connect the PC to the network port of the HG8247 and set the
IP address of the PC to 192.168.100.100/24.
Enter HYPERLINK "http://192.168.100.1/" http://192.168.100.1/ in the address box of the
browser on the PC.
Login account: telecomadmin/admintelecom
The login page is displayed, as shown in the following figure.
Step 2 ONT WAN Port Configuration
Set the WAN port type to route WAN port, service type to VoIP, VLAN ID to 172, IP
address of the ONT to 17.248.48.1/8, subnet mask to 255.0.0.0, and gateway to 17.0.0.1.
Then, click Apply.
Huawei Access Certification Training Lab Guide Page 77
Step 3 Route Configuration
Step 4 ONT Voice Interface Configuration
Huawei Access Certification Training Lab Guide Page 78
Step 5 Voice User Configuration
Step 6 View the configuration result.
Huawei Access Certification Training Lab Guide Page 79
3.2.4 Experiment Verification
Verification method: Connect two phones to different POTS ports on the ONT and make
calls to each other.
3.3 Configuration Reference
3.3.1 OLT Data Configuration
dba-profile add profile-id 50 type1 fix 2048
ont-lineprofile gpon profile-id 50 profile-name 5hg82471
tcont 1 dba-profile-id 50
gem add 1 eth tcont 1
gem mapping 1 1 vlan 172
commit
quit
ont-srvprofile gpon profile-id 50 profile-name 5hg8247
ont-port eth 4 pots 2catv 1
commit
quit
interface gpon 0/3
port 0 ont-auto-find enable
ont confirm 0 ontid 5 sn-auth 48575443B203E407 omci ont-lineprofile-id 50 ont-srvprofile-id 50
quit
Huawei Access Certification Training Lab Guide Page 80
vlan 172 smart
port vlan 172 0/20 0
interface vlanif 172
ip address 17.1.1.100 8
quit
service-port 1 vlan 172 gpon 0/3/0 ont 5 gemport 1 multi-service user-vlan 172
arp proxy enable
interface vlanif 172
arp proxy enable
quit
ip route-static 200.200.200.0 255.255.255.0 17.0.0.1
3.4 Questions
1. Where can I define the mapping between user numbers and terminal IDs?
4 GPON ONU H.248 Voice Service
Configuration
4.1 Experiment Introduction
4.1.1 About This Experiment
In this experiment, the data configuration of the OLT and the MDU is used to implement
the voice call between two users of different MDUs connected to the same PON port.
4.1.2 Objectives
Understand the basic principles of GPON.
Understand the basic principles of VoIP.
Understand the GPON data profile.
Master the configuration of the MDU data.
Huawei Access Certification Training Lab Guide Page 81
Configure voice service profiles.
Understand the overall configuration process of the voice service.
4.1.3 Experiment Networking
Figure 4-1 Topology for configuring the GPON ONU VoIP service
PC 1
ONT 1
Tel 1
NMS BRAS/Router Soft switch IPTV Server
TV 1
PC 2 MDU 1 Splitter 1
Tel 2
TV 2
......
PC n
ONT n OLT
Tel n
TV n
PC n+1 MDU n Splitter n
Tel n+1
TV n+1
4.1.4 Experiment Planning
According to the VoIP configuration scenario of the access network, phone 1 and phone
2 are common phones, and PC1 and PC2 run the Windows operating system.
Table 4-1 GPON ONU VoIP data plan
Configuration
Data Configuration Item Data
Item
VLAN:172 VLAN:172
OLT service
Type: Smart OLT service VLAN Type: Smart
VLAN
IP:17.1.1.100/8 IP:17.1.1.100/8
OLT VLAN:500 VLAN:500
OLT management
management Type: Smart Type: Smart
VLAN
VLAN IP:10.1.1.1/24 IP:10.1.1.1/24
OLT upstream
0/20/0 OLT upstream port 0/20/0
port
OLT
downstream 0/3/0 OLT downstream port 0/3/0
port
Huawei Access Certification Training Lab Guide Page 82
ID:7 ID:8
MDU SN:4857544329FC9507 MDU SN:48575443F2154B04
IP:10.1.1.7/24 IP:10.1.1.8/24
0 (management) 0 (management)
TCONT,DBA 3 (service) TCONT,DBA 4 (service)
DBA profile ID: 70 DBA profile ID: 80
0 (management) 0 (management)
GEM Port GEM Port
3 (service) 4 (service)
500 (management) 500 (management)
ONT user VLAN ONT user VLAN
172 (service) 172 (service)
Table 4-2 Data plan for the GPON ONU H.248 voice server
Configuration
Configuration Item Data Data
Item
Signaling IP 17.248.48.1(MDU1)
H.248 server 200.200.200.200
address 17.248.48.2(MDU2)
17.248.48.1(MDU1)
H.248 server port 2944 Media IP address
17.248.48.2(MDU2)
Transmission Mode UDP Encoding Text
Voice gateway 17.0.0.1/8 Phone Number 18980100/18980200
17.248.48.1/8(MDU1)
VLANIF IP Terminal ID 0 (MDU1 and MDU2)
17.248.48.2/8(MDU2)
Huawei Access Certification Training Lab Guide Page 83
4.2 Experiment Task Configuration
4.2.1 Configuration Roadmap
Figure 4-2 Flowchart for configuring the GPON ONU VoIP service
Prerequisite: The ONU is
successfully added and an Logging In to the ONU
inband channel is Through the Inband
established. Management Channel
Through Telnet
Create a VLAN.
Configure a service VLAN and
an upstream port.
Configure the upstream port
of the VLAN.
Set the communication IP
address of the MG.
Configure a service port.
Configuring Static Routes
Configure the IP address of
the VLAN L3 interface. Configure the parameters of
the MG interface and start
the MG interface.
Configuring ARP Proxy
Configuring an MG User
Configuration on Configuring the
the OLT MDU
Th
4.2.2 Configuration Procedure (OLT Side)
Step 1 DBA Profile Configuration
# Run the display dba-profile command to query the existing DBA profiles in the system.
If the existing DBA profile in the system cannot meet the requirements, run the dba-
profile add command to add a DBA profile. Set the profile ID to 70, bandwidth type to
type1, and bandwidth value to 1024 kbit/s.
Huawei_OLT(config)#dba-profile
{add<K>|delete<K>|modify<K>}:add
{profile-id<K>|profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:profile-id
{profile-id<U><10,512>}:70
{profile-name<K>|type1<K>|type2<K>|type3<K>|type4<K>|type5<K>}:type1
{fix<K>}:fix
Huawei Access Certification Training Lab Guide Page 84
{fix-bandwidth<U><128,10000000>}:1024
{<cr>|bandwidth_compensate<K>}:
Command:
dba-profile add profile-id 70 type1 fix 1024
Adding a DBA profile succeeded
Profile ID: 70
Profile name: dba-profile_70
# Display the status of a DBA profile.
Huawei_OLT(config)#display dba-profile profile-id 70
-----------------------------------------------------------------
Profile-name: dba-profile_30
Profile-ID: 30
type: 1
Bandwidth compensation: No
Fix-delay: No
Fix(kbps): 1024
Assure(kbps): 0
Max(kbps): 0
Additional-bandwidth: -
Best-effort-priority: -
Best-effort-weight: -
bind-times: 0
-----------------------------------------------------------------
Step 2 Configuring a Line Profile
# Set the line profile ID to 70 and profile name to EA5822.
Huawei_OLT(config)#ont-lineprofile
{epon<K>|gpon<K>}:gpon
{<cr>|profile-id<K>|profile-name<K>}:profile-id
{profile-id<U><0,8192>}:70
{<cr>|profile-name<K>}:profile-name
{profile-name<S><Length 1-32>}:EA5822
Command:
ont-lineprofile gpon profile-id 70 profile-name EA5822
# Bind T-CONT 1 to DBA profile 30.
HUAWEI(config-gpon-lineprofile-70)#tcont
{tcont-list<S><Length 1-13>}:1
{<cr>|dba-profile-id<K>|dba-profile-name<K>}:dba-profile-id
{profile-id<U><0,512>}:70
Command:
tcont 1 dba-profile-id 70
# Add GEM port 0 to carry ETH service flows, and bind GEM port 0 to T-CONT 0.
HUAWEI(config-gpon-lineprofile-70)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:0
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont
Huawei Access Certification Training Lab Guide Page 85
{tcont-id<U><0,127>}:0
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 0 eth tcont 0
# Add GEM port 3 to carry ETH service flows, and bind GEM port 3 to T-CONT 1.
HUAWEI(config-gpon-lineprofile-70)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:add
{gem-index<U><0,1023>}:3
{service-type<E><eth,tdm>}:eth
{tcont<K>}:tcont
{tcont-id<U><0,127>}:1
{<cr>|cascade<K>|downstream-priority-queue<K>|encrypt<K>|gem-car<K>|priority-queue<K>}:
Command:
gem add 3 eth tcont 1
# Map the management flow of user-side VLAN 500 to GEM port 0. The mapping index
is 0.
HUAWEI(config-gpon-lineprofile-70)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:0
{mapping-index<U><0,7>}:0
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:500
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 0 0 vlan 500
# Map the service flow of CVLAN 172 to GEM port 3 with the mapping index of 1.
HUAWEI(config-gpon-lineprofile-70)#gem
{add<K>|delete<K>|mapping<K>|modify<K>}:mapping
{gem-index<U><0,1023>}:3
{mapping-index<U><0,7>}:1
{e1<K>|eth-bundle<K>|eth<K>|flow-car<K>|iphost<K>|ippath<K>|moca<K>|priority<K>|tdm-
vcl<K>|transparent<K>|vlan<K>}:vlan
{untag<K>|vlan-id<U><0,4095>}:172
{<cr>|flow-car<K>|priority<K>|transparent<K>}:
Command:
gem mapping 3 1 vlan 172
# After the configuration is complete, run the commit command to make the
configuration take effect.
HUAWEI(config-gpon-lineprofile-70)#commit
HUAWEI(config-gpon-lineprofile-70)#quit
# Display information about the line profile.
Huawei_OLT(config)#display ont-lineprofile gpon profile-id 70
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 86
Profile-ID :70
Profile-name :EA5822
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<Gem Index 0>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 500 - - - - - -
--------------------------------------------------------------------
<T-CONT 1> DBA Profile-ID:70
<Gem Index 3>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
1 172 - - - - - -
--------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Binding times :0
-----------------------------------------------------------------------------
Step 3 Enable the auto-discovery function of the PON port.
# Enter the PON board view and enable the auto-discovery function of the PON port in
the network topology.
Huawei_OLT(config)#interface gpon
{frameid/slotid<S><Length 3-15>}:0/3
Command:
interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#port
{dba<K>|optical-alarm-profile<K>|portid<U><0,7>}:0
{fec<K>|laser-switch<K>|ont-auto-find<K>|ont-password-renew<K>|range<K>}:ont-auto-find
{switch<E><enable,disable>}:enable
Command:
port 0 ont-auto-find enable
Huawei Access Certification Training Lab Guide Page 87
Step 4 Querying the MDUs that are automatically discovered by a PON port
HUAWEI(config-if-gpon-0/3)#display ont autofind 0
----------------------------------------------------------------------------
Number: 1
F/S/P: 0/3/0
Ont SN: 4857544329FC9507 (HWTC-F2154B04)
Password: 0x30303030303030303030(0000000000)
Loid: 0000000000
Checkcode:
VendorID: HWTC
Ont Version: EA5822 VER.B
Ont SoftwareVersion: V8R312 C00
Ont EquipmentID: SmartAX EA5822
Ont autofind time: 2018-04-13 15:56:02+08:00
----------------------------------------------------------------------------
Step 5 MDU registration
# Register the MDU, set the authentication mode to SN authentication, set the
management type to SNMP, and bind line profile 70 to the MDU.
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:confirm
{portid<U><0,7>}:0
{all<K>|loid-auth<K>|ontid<K>|password-auth<K>|sn-auth<K>}:ontid
{ontid<U><0,127>}:7
{loid-auth<K>|password-auth<K>|sn-auth<K>}:sn-auth
{sn-value<S><Length 12-16>}:4857544329FC9507
{omci<K>|password-auth<K>|snmp<K>}:snmp
{<cr>|desc<K>|ont-lineprofile-id<K>|ont-lineprofile-name<K>}:ont-lineprofile-id
{profile-id<U><0,8192>}:70
{<cr>|desc<K>}:
Command:
Ont confirm 0 ontid 7 sn-auth 48575443F43FF304 snmp ont-lineprofile-id 70
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :7
# Display the ONT status.
HUAWEI(config-if-gpon-0/3)#display ont info 0 all
-----------------------------------------------------------------------------
F/S/P ONT SN Control Run Config Match Protect
ID flag state state state side
-----------------------------------------------------------------------------
0/ 3/0 7 4857544329FC9507 active online normal match no
-----------------------------------------------------------------------------
F/S/P ONT-ID Description
-----------------------------------------------------------------------------
0/ 3/0 7 ONT_NO_DESCRIPTION
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 88
In port 0/ 3/0, the total of ONTs are: 1, online: 1
Step 6 Configure management VLAN 500.
# Configure management VLAN 500, add the upstream interface to VLAN 500, and set
the IP address of the interface in VLAN 500 to 10.1.1.1/24.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:500
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 500 smart
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:500
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 500 0/20 0
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:500
Command:
interface vlanif 500
HUAWEI(config-if-vlanif500)#ip address
{ip_addr<I><X.X.X.X>}:10.1.1.1
{integer<U><0,32>|ip_addr<I><X.X.X.X>}:24
{<cr>|description<K>|sub<K>}:
Command:
ip address 10.1.1.1 24
Step 7 Configure a service channel for management VLAN 500.
# Set the VLAN to which the service port belongs to 500, PON port to 0/3/0, ONT ID to
7, GEM port ID to 0, and C-VLAN ID to 500.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:500
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:7
{eth<K>|gemport<K>|iphost<K>}:gemport
{gemindex<U><0,1023>}:0
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:500
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 500 gpon 0/3/0 ont 7 gemport 0 multi-service user-vlan 500
Huawei Access Certification Training Lab Guide Page 89
# Display the status of a service port.
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
1 500 common gpon 0/3 /0 7 0 vlan 500 - - up
----------------------------------------------------------------------------
Total: 1 (Up/Down: 1/0)
Step 8 Configure the inband management VLAN and IP address of the MDU.
# On the OLT, issue the IP address 10.1.1.3 24, gateway 10.1.1.1, and VLAN 500 to the
MDU.
Huawei_OLT(config)#interface gpon 0/3
HUAWEI(config-if-gpon-0/3)#ont
{activate<K>|add<K>|alarm-policy<K>|alarm-profile<K>|cancel<K>|confirm<K>|cos-queue-map-
profile<K>|deactivate<K>|delete<K>|factory-setting-
restore<K>|gemport<K>|ipconfig<K>|modify<K>|optical-alarm-profile<K>|port<K>|power-shedding-
config<K>|re-discovery<K>|re-register<K>|remote-ping<K>|reset<K>|snmp-profile<K>|snmp-
route<K>|statistics<K>|tdm-vcl<K>|tr069-server-config<K>|voip<K>}:ipconfig
{portid<U><0,7>}:0
{ontid<U><0,127>}:7
{dhcp<K>|dscp-mapping-table<K>|ip-index<K>|pppoe<K>|static<K>}:static
{<cr>|gateway<K>|ip-address<K>|pri-dns<K>|slave-dns<K>|vlan<K>}:ip-address
{ip-address<I><X.X.X.X>}:10.1.1.7
{mask<K>}:mask
{mask<M><X.X.X.X>}:255.255.255.0
{<cr>|gateway<K>|pri-dns<K>|slave-dns<K>|vlan<K>}:gateway
{gateway<I><X.X.X.X>}:10.1.1.1
{<cr>|pri-dns<K>|slave-dns<K>|vlan<K>}:vlan
{vlanid<U><0,4095>}:500
{<cr>|pri-dns<K>|priority<K>|slave-dns<K>}:
Command:
ont ipconfig 0 7 static ip-address 10.1.1.7 mask 255.255.255.0 gateway 10.1.1.1 vlan 500
Step 9 Test the connectivity between the OLT and the MDU.
Huawei_OLT(config)#ping 10.1.1.7
PING 10.1.1.7:56 data bytes, press CTRL_C to break
Reply from 10.1.1.7: bytes=56 Sequence=1 ttl=255 time=1 ms
Reply from 10.1.1.7: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 10.1.1.7: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 10.1.1.7: bytes=56 Sequence=4 ttl=255 time=10 ms
Reply from 10.1.1.7: bytes=56 Sequence=5 ttl=255 time=10 ms
--- 10.1.1.7 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
Huawei Access Certification Training Lab Guide Page 90
0.00% packet loss
round-trip min/avg/max = 1/6/10 ms
Step 10 Configure a voice service VLAN.
# Configure voice service VLAN 172 and add an upstream port to the voice service VLAN.
Huawei_OLT(config)#vlan
{attrib<K>|bind<K>|desc<K>|forwarding<K>|loop<K>|name<K>|packet-
policy<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
Command:
vlan 172 smart
Huawei_OLT(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{name<K>|vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frameid/slotid<S><Length 3-15>|inner-vlan-list<K>|to<K>}:0/20
{portlist<S><Length 1-256>}:0
Command:
port vlan 172 0/20 0
Step 11 Configure the Layer 3 interface of the service VLAN.
# Set the IP address of the Layer 3 interface to 17.1.1.100 /8.
Huawei_OLT(config)#interface
{adsl<K>|atm<K>|csp<K>|edt<K>|emu<K>|epon<K>|eponnni<K>|eth<K>|giu<K>|gpon<K>|gponnni<K
>|h248<K>|loopback<K>|meth<K>|null<K>|opf<K>|opg<K>|scu<K>|shl<K>|top-
stm1<K>|top<K>|tunnel<K>|vdsl<K>|vlanif<K>|vrgw<K>}:vlanif
{<1-4093>}:172
Command:
interface vlanif 172
HUAWEI(config-if-vlanif172)#ip address 17.1.1.100 8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.1.1.100 8
Step 12 Configure a service port in the voice VLAN.
Huawei_OLT(config)#service-port
{desc<K>|index<U><0,32767>|remote-desc<K>|source<K>|uplink-port<K>|vlan<K>}:vlan
{aoe<K>|name<K>|vlanid<U><1,4093>}:172
{adsl<K>|atm<K>|epon<K>|eth<K>|gpon<K>|port<K>|shdsl<K>|vdsl<K>}:gpon
{frameid/slotid/portid<S><Length 5-18>}:0/3/0
{ont<K>}:ont
{ontid<U><0,127>}:7
{eth<K>|gemport<K>|iphost<K>}: gemport
{gemindex<U><0,1023>}:3
{<cr>|bundle<K>|inbound<K>|multi-service<K>|rx-cttr<K>|tag-transform<K>}:multi-service
{user-8021p<K>|user-encap<K>|user-vlan<K>}:user-vlan
{other-all<K>|priority-tagged<K>|untagged<K>|user-vlanid<U><1,4095>}:172
{<cr>|bundle<K>|inbound<K>|rx-cttr<K>|tag-transform<K>|user-encap<K>}:
Command:
service-port vlan 172 gpon 0/3/0 ont 7 gemport 3 multi-servi user-vlan 172
Huawei Access Certification Training Lab Guide Page 91
Huawei_OLT(config)#display service-port all
{<cr>|sort-by<K>||<K>}:
Command:
display service-port all
Switch-Oriented Flow List
----------------------------------------------------------------------------
INDEX VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE
ID ATTR TYPE TYPE PARA
----------------------------------------------------------------------------
1 500 common gpon 0/3 /0 7 0 vlan 500 - - up
2 172 common gpon 0/3 /0 7 3 vlan 172 - - up
----------------------------------------------------------------------------
Total: 2 (Up/Down: 2/0)
Step 13 Check the information about service VLAN 172.
Huawei_OLT(config)#display vlan 172
{<cr>|inner-vlan<K>|to<K>}:
Command:
display vlan 172
VLAN ID: 172
VLAN name: VLAN_0172
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode in control board: VLAN-MAC
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
-----------------------------
F /S /P Native VLAN State
-----------------------------
0 /20/0 1 up
-----------------------------
Standard port number: 1
-------------------------------------------------------------
INDEX TYPE STATE F /S /P VPI VCI FLOWTYPE FLOWPARA
-------------------------------------------------------------
3 gpon up 0 /3 /0 7 3 vlan 172
-------------------------------------------------------------
Service virtual port number: 2
Note: F--Frame, S--Slot, P--Port,
VPI indicates ONT ID for PON, VCI indicates GEM index for GPON,
v/e--vlan/encap, pritag--priority-tagged
Step 14 Enable global ARP proxy.
Huawei_OLT(config)#arp
{aging-mode<K>|aging-time<K>|conflict<K>|gratuitous-
arp<K>|ip_addr<I><X.X.X.X>|learning<K>|proxy<K>}:proxy
{disable<K>|enable<K>}:enable
Huawei Access Certification Training Lab Guide Page 92
Command:
arp proxy enable
Step 15 Enable ARP proxy on the Layer 3 interface.
Huawei_OLT(config)#interface vlanif 172
HUAWEI(config-if-vlanif172)#arp
{proxy<K>}:proxy
{disable<K>|enable<K>}:enable
{<cr>|subvlan<K>}:
Command:
arp proxy enable
Step 16 Configuration of MDU 2
The configuration of MDU2 is similar to that of MDU1.
4.2.3 Configuration Procedure on the MDU Side
Step 1 Log in to the MDU.
Huawei_OLT(config)#telnet 10.1.1.7
{<cr>|service-port<U><1,65535>}:
Command:
telnet 10.1.1.7
Press CTRL_] to quit telnet mode
Trying 10.1.1.7...
Connected to 10.1.1.7...
>>User name:root
>>User password:mduadmin
Huawei Integrated Access Software (EA5822).
Copyright(C) Huawei Technologies Co., Ltd. 2002-2012. All rights reserved.
EA5822>
User root has used a default password. Change the password in time.
Step 2 Create SVLAN 172 and add the upstream port to VLAN 172.
EA5822(config)#vlan
{attrib<K>|bind<K>|desc<K>|priority<K>|reserve<K>|service-profile<K>|vlan-list<S><Length 1-
256>|vlanid<U><2,4093>}:172
{<cr>|to<K>|vlantype<E><mux,standard,smart>}:smart
Command:
vlan 172 smart
EA5822(config)#port
{desc<K>|mode<K>|vlan<K>}:vlan
{vlan-list<S><Length 1-256>|vlanid<U><1,4093>}:172
{frame/slot<S><Length 1-15>|to<K>}:0/0
{portlist<S><Length 1-256>}:1
Command:
port vlan 172 0/0 1
Step 3 Configure the Layer 3 interface of the service VLAN.
EA5822(config)#interface
Huawei Access Certification Training Lab Guide Page 93
{emu<K>|eponnni<K>|eth<K>|gponnni<K>|loopback<K>|meth<K>|null<K>|sip<K>|vlanif<K>}:vlanif
{<1-4093>}:172
EA5822(config-if-vlanif172)#ip
{address<K>|verify<K>}:address
{ip_addr<I><X.X.X.X>}:17.248.48.1 8
{<cr>|description<K>|sub<K>}:
Command:
ip address 17.248.48.1 8
EA5822(config-if-vlanif172)#
Step 4 Test the connectivity of the voice service between the MDU and the OLT.
EA5822(config)#ping 17.1.1.100
PING 17.1.1.100:56 data bytes, press CTRL_C to break
Reply from 17.1.1.100: bytes=56 Sequence=1 ttl=255 time=10 ms
Reply from 17.1.1.100: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 17.1.1.100: bytes=56 Sequence=5 ttl=255 time=1 ms
--- 17.1.1.100 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/2/10 ms
Step 5 Configure the default route from the MDU to the softswitch.
EA5822(config)#ip route-static 200.200.200.0 24 17.0.0.1
{<cr>|description<K>|permanent<K>|preference<K>|tag<K>}:
Command:
ip route-static 200.200.200.0 24 17.0.0.1
Step 6 Add an address pool in VoIP mode.
EA5822(config)#voip
EA5822(config-voip)#ip
{address<K>}:address
{media<K>|signaling<K>}:media
{media-ip-address<I><X.X.X.X>}:17.248.48.1
{gateway<I><X.X.X.X>}:17.0.0.1
Command:
ip address media 17.248.48.1 17.0.0.1
EA5822(config-voip)#ip
{address<K>}:address
{media<K>|signaling<K>}:signaling
{signaling-ip-address<I><X.X.X.X>}:17.248.48.1
Command:
ip address signaling 17.248.48.1
Step 7 Add a SIP interface.
EA5822(config)#interface
{emu<K>|eponnni<K>|eth<K>|gponnni<K>|h248<K>|loopback<K>|meth<K>|null<K>|vlanif<K>}:h248
{mgid<U><0,16777215>}:70
Huawei Access Certification Training Lab Guide Page 94
Command:
interface h248 70
Are you sure to add the MG interface?(y/n)[n]:y
Step 8 Configuring the Attributes of a SIP Interface
EA5822(config-if-h248-70)#if-h248 attribute
{2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|hear
tBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip1<K>|mg-media-ip2<K>|mgc-
domain-name1<K>|mgc-domain-name2<K>|mgip<K>|mgport<K>|MIDType<K>|primary-mgc-
ip1<K>|primary-mgc-ip2<K>|primary-mgc-port<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>|start-negotiate-version<K>|transfer<K>}:mgip
{mgip<I>|signal-addr-name<K>|signal-dhcp-vlan<K>}:17.248.48.11
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip1<K>|mg-media-ip2<K>|mgc-
domain-name1<K>|mgc-domain-name2<K>|mgport<K>|MIDType<K>|primary-mgc-
ip1<K>|primary-mgc-ip2<K>|primary-mgc-port<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>|start-negotiate-version<K>|transfer<K>}:mgport 2944
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip1<K>|mg-media-ip2<K>|mgc-
domain-name1<K>|mgc-domain-name2<K>|MIDType<K>|primary-mgc-ip1<K>|primary-mgc-
ip2<K>|primary-mgc-port<K>|profile-index<K>|profile-negotiation<K>|retrans<K>|secondary-mgc-
ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-port<K>|start-negotiate-
version<K>|transfer<K>}:mg-media-ip1
{media-addr-name<K>|media-dhcp-vlan<K>|mg-media-ip<I>}:17.248.48.11
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-
name1<K>|mgc-domain-name2<K>|MIDType<K>|primary-mgc-ip1<K>|primary-mgc-
ip2<K>|primary-mgc-port<K>|profile-index<K>|profile-negotiation<K>|retrans<K>|secondary-mgc-
ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-port<K>|start-negotiate-
version<K>|transfer<K>}:primary-mgc-ip1
{primary-mgc-ip1<I><X.X.X.X>}:200.200.200.200
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-
name1<K>|mgc-domain-name2<K>|MIDType<K>|primary-mgc-ip2<K>|primary-mgc-
port<K>|profile-index<K>|profile-negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-
mgc-ip2<K>|secondary-mgc-port<K>|start-negotiate-version<K>|transfer<K>}:primary-mgc-port
{primary-mgc-port<U><1,65535>}:2944
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-
name1<K>|mgc-domain-name2<K>|MIDType<K>|primary-mgc-ip2<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>|start-negotiate-version<K>|transfer<K>}:transfer
{transfer<E><tcp,udp,sctp>}:udp
{<cr>|2833encrypt<K>|code<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|
heartBeatRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-
name1<K>|mgc-domain-name2<K>|MIDType<K>|primary-mgc-ip2<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>|start-negotiate-version<K>}:code
{code<E><text,binary>}:text
{<cr>|2833encrypt<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|heartBea
tRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-name1<K>|mgc-
Huawei Access Certification Training Lab Guide Page 95
domain-name2<K>|MIDType<K>|primary-mgc-ip2<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>|start-negotiate-version<K>}:start-negotiate-version
{start-negotiate-version<U><0,3>}:0
{<cr>|2833encrypt<K>|desc<K>|deviceName<K>|domainName<K>|heartBeatGenTimer<K>|heartBea
tRetransTimer<K>|heartBeatRetransTimes<K>|mg-media-ip2<K>|mgc-domain-name1<K>|mgc-
domain-name2<K>|MIDType<K>|primary-mgc-ip2<K>|profile-index<K>|profile-
negotiation<K>|retrans<K>|secondary-mgc-ip1<K>|secondary-mgc-ip2<K>|secondary-mgc-
port<K>}:
Command:
if-h248 attribute mgip 17.248.48.1 mgport 2944 mg-media-ip1 17.248.48.1 primary-mgc-ip1
200.200.200.200 primary-mgc-port 2944 transfer udp code text start-negotiate-version 0
Step 9 Enable the H.248 interface.
EA5822(config-if-h248-70)#reset coldstart
Are you sure to reset the MG interface?(y/n)[n]:y
EA5822(config-if-h248-70)#
Resetting MG interface 30 succeeded
Step 10 Configure the data of the PSTN subscriber in slot 0/2.
EA5822(config)#esl user
EA5822(config-esl-user)#mgpstnuser add
{frameid/slotid/portid<S><Length 1-15>}:0/2/1
{mgid<U><0,16777215>}:70
{<cr>|potslinetype<K>|priority<K>|telno<K>|terminalid<K>}:telno
{telno-value<S><Length 1-16>}:18980100
{<cr>|potslinetype<K>|priority<K>|terminalid<K>}:terminalid
{terminalid-value<U><0,9999>}:0
{<cr>|potslinetype<K>|priority<K>}:
Command:
mgpstnuser add 0/2/1 70 telno 18980100 terminalid 0
EA5822(config-esl-user)#display mgpstnuser
{attribute<K>|frameid/slotid/portid<S><Length 1-15>|frameid/slotid<S><Length 1-
15>|mgid<U><0,16777215>}:0/2/1
{<cr>|endframeid/slotid/portid<S><Length 1-15>}:
Command:
display mgpstnuser 0/2/1
----------------------------------------------------------------------------
F /S /P MGID TelNo Priority PotsLineType TerminalID
----------------------------------------------------------------------------
0 /2 /1 70 18980100 Cat3 DEL A0
----------------------------------------------------------------------------
Step 11 Configuration of MDU 2
The configuration of MDU2 is similar to that of MDU1.
Huawei Access Certification Training Lab Guide Page 96
4.2.4 Experiment Verification
Test method: Connect two phones to different POTS ports on the MDU and make a call
to each other.
4.2.5 Configuration Reference
#OLT side
dba-profile add profile-id 70 type1 fix 1024
ont-lineprofile gpon profile-id 70 profile-name EA5822
tcont 1 dba-profile-id 70
gem add 0 eth tcont 0
gem add 3 eth tcont 1
gem mapping 0 0 vlan 500
gem mapping 3 1 vlan 172
Commit
quit
interface gpon 0/3
port 0 ont-auto-find enable
ont confirm 0 ontid 7 sn-auth 4857544329FC9507 snmp ont-lineprofile-id 70
quit
vlan 500 smart
port vlan 500 0/20 0
interface vlanif 500
ip address 10.1.1.1 24
quit
service-port vlan 500 gpon 0/3/0 ont 7 gemport 0 multi-service user-vlan 500
interface gpon 0/3
ont ipconfig 0 7 static ip-address 10.1.1.7 mask 255.255.255.0 gateway 10.1.1.1 vlan 500
quit
vlan 172 smart
port vlan 172 0/20 0
interface vlanif 172
ip address 17.1.1.100 8
quit
service-port vlan 172 gpon 0/3/0 ont 7 gemport 3 multi-service user-vlan 172
telnet 10.1.1.7
>>User name:root
>>User password: mduadmin
#On the MDU side
Huawei Access Certification Training Lab Guide Page 97
vlan 172
port vlan 172 0/0 1
interface vlanif 172
ip address 17.248.48.1 8
quit
Voip
ip address media 17.248.48.1 17.0.0.1
ip address signaling 17.248.48.1
quit
ip route-static 200.200.200.0 24 17.0.0.1
interface h248 30
if-h248 attribute mgip 17.248.48.1 mgport 2944 mg-media-ip1 17.248.48.1 primary-mgc-ip1
200.200.200.200 primary-mgc-port 2944 transfer udp code text start-negotiate-version 0
reset
quit
esl user
mgpstnuser add 0/2/1 70 terminalid 0 telno 18980100
4.3 Questions
1. Can the phone number of a user be not configured when the user information is
configured? Whether services are affected?
Huawei Access Certification Training Lab Guide Page 98
5 GPON ONT IPTV Service Configuration
5.1 Experiment Introduction
5.1.1 About This Experiment
In this experiment, the multicast service is configured to provision the multicast service
for users in the GPON ONT IPTV networking scenario.
5.1.2 Objectives
Understand the multicast working principle.
Understand the functions of the multicast VLAN.
Understand the functions of user service VLANs.
Understand the differences between IGMP users and multicast members.
Learn the differences between the dynamic and static program matching modes.
Understand the control of user rights.
Master the configuration of the multicast service.
5.1.3 Experiment Networking
STB ONT MAN
Optical
STB ONT OLT BRAS Multicast server
splitter
Figure 5-1 Example network of the GPON ONT IPTV service
5.1.4 Experiment Planning
Before the configuration, pay attention to the data planning to avoid data conflict
during the configuration. Please perform the experiment based on your data plan.
Collect the following information based on the actual conditions of the devices in the
equipment room:
Huawei Access Certification Training Lab Guide Page 99
Parameter Value
OLT upstream port ID
0/19/0
Multicast uplink port
OLT GPON port ID 0/3/0
ONT ID 0
Profile ID: 10
DBA profile
Assure:10M Max:20M
Profile ID: 11
Line profile T-CONT ID:2
Gem Index:0
Template ID: 13
Service template
Multicast forwarding mode: untag
Service VLAN: 200
VLAN type: smart
VLAN attribute: common
VLAN
Multicast VLAN: 200
User VLAN: 200
ONT port native-vlan: 200
Indicates the ONT
ETH 2
downstream port ID.
Multicast User Authentication
no-auth
Mode
Version: V3
IGMP mode: proxy
IGMP
Multicast program configuration mode:
disable
Server IP address: 192.168.46.240
Multicast server
Multicast group IP address: 224.1.1.1
Huawei Access Certification Training Lab Guide Page 100
5.2 Experiment Task Configuration
5.2.1 Service Configuration Process
5.2.2 Configuration Procedure
5.2.2.1 OLT Basic Service Configuration
1. Add an ONT to a GPON port.
2. Configure the OLT service VLAN, upstream port, and downstream port.
5.2.2.2 OLT Multicast Service Configuration
1. Create a multicast VLAN.
In the global config mode, the multicast VLAN is created. The VLAN type and VLAN ID
must be consistent with those of the upper layer device according to the networking
environment.
2. Configure the upstream port of the multicast VLAN.
In the global config mode, configure the upstream port of the multicast VLAN according
to the actual networking and the data plan.
3. Configure the multicast upstream port mode.
In BTV mode, configure the upstream port mode of the multicast VLAN according to
the actual networking and data plan.
4. Configure an IGMP user.
In the BTV mode, configure the IGMP user, configure the added service virtual port as
the IGMP user, and allow the user to send IGMP messages.
Huawei Access Certification Training Lab Guide Page 101
5. Configure the upstream port and default upstream port of the multicast VLAN.
In multicast VLAN mode, configure the upstream port and default upstream port of the
multicast VLAN according to the actual networking and data plan.
6. Configure the program matching mode of the multicast VLAN.
In the multicast VLAN mode, you can configure the mode for generating the multicast
program. The mode can be automatic or manual. If the manual mode is used, you need
to manually add multicast programs.
7. Configure the IGMP packet version of the multicast VLAN.
In the multicast VLAN mode, configure the IGMP version according to the actual
network planning. By default, the IGMP version is V3.
8. Configure the IGMP mode of the multicast VLAN.
In multicast VLAN mode, select the working mode of the multicast VLAN according to
the network planning. Generally, IGMP proxy is recommended to effectively manage
IGMP messages.
9. Configure multicast VLAN members.
In the multicast VLAN mode, add a member to the multicast VLAN. Only the member
can watch the programs in the multicast VLAN.
5.2.2.3 Configuration Reference
The following configuration uses an HG8245 connected to GPON port 0/3/0 as an
example. The ONT ID is 0, and FE port 2 on the ONT is configured with VLAN 10 and
multicast VLAN 200.
Step 1 Add a DBA profile.
Huawei(config)#dba-profile add profile-id 10 profile-name HG8245 type3 assure 10240 max
20240
Step 2 Add an ONT line profile named IPTV.
Huawei(config)#ont-lineprofile gpon profile-name IPTV profile-id 11
Huawei(config-gpon-lineprofile-11)#t-cont 2 dba-profile-id 10
Huawei(config-gpon-lineprofile-11)#gem add 0 eth tcont 2
Huawei(config-gpon-lineprofile-11)#mapping-mode vlan
Huawei(config-gpon-lineprofile-11)#gem mapping 0 0 vlan 200
Huawei(config-gpon-lineprofile-11)#commit
Huawei(config-gpon-lineprofile-11)#quit
Step 3 Configuring a Service Profile
Huawei(config)#ont-srvprofile gpon profile-name IPTV profile-id 13
Huawei(config-gpon-srvprofile-13)#ont port eth 4 pots 2
Huawei(config-gpon-srvprofile-13)#port vlan eth 2 200
Huawei(config-gpon-srvprofile-13)#multicast-forward untag
Huawei(config-gpon-srvprofile-13)#commit
Huawei(config-gpon-srvprofile-13)#quit
Step 4 Enabling the GPON port auto-discovery function
Huawei Access Certification Training Lab Guide Page 102
Huawei(config)# interface gpon 0/3
Huawei(config-if-gpon-0/3)# port 0 ont-auto-find enable
Step 5 Query the discovered ONTs.
Huawei(config)# display ont autofind
{all<K>|time<K>}:all
Command:
display ont autofind all
------------------------------------------------------------
Number F/ S/ P SN Password
------------------------------------------------------------
1 0/ 3/ 0 323031312E396341
2 0/ 3/ 0 323031312E396A41
------------------------------------------------------------
Step 6 Confirming the automatically discovered ONT (binding the ONT line profile and
service profile)
Huawei(config-if-gpon-0/3)#ont confirm
{portid<U><0,7>}:0
{all<K>|ontid<K>|password-auth<K>|sn-auth<K>}:ontid
{ontid<U><0,127>}:0
{password-auth<K>|sn-auth<K>}:sn-auth
{sn<S><Length 13-16>}:323031312E396341
{omci<K>|password-auth<K>|snmp<K>}:omci
{ont-lineprofile-id<K>|ont-lineprofile-name<K>}:ont-lineprofile-id
{profile-id<U><1,4096>}:11
{ont-srvprofile-id<K>|ont-srvprofile-name<K>}:ont-srvprofile-id
{profile-id<U><1,4096>}:13
{<cr>|desc<K>}:
Step 7 Creating an IGMP VLAN
Huawei(config)#vlan 200 smart
Huawei(config)#service-port 10 vlan 200 gpon 0/3/0 ont gemport 0 multi-service user-vlan 200
Step 8 Configure the user VLAN of the ONT. (This step is optional. Perform this step when
the STB cannot identify the VLAN or is directly connected to the PC.)
Huawei(config-if-gpon-0/3)#ont port native-vlan 0 0 eth 2 vlan 200
Step 9 Configuring an IGMP User
Huawei(config)#btv
Huawei(config-btv)#igmp user add service-port 10 no-auth
Huawei(config)#quit
Step 10 Configuring a Multicast VLAN
Huawei(config)#vlan 200 smart
Huawei(config)#port vlan 200 0/19 0
Huawei(config)#mutlcast-vlan 200
Huawei Access Certification Training Lab Guide Page 103
Step 11 Set up a multicast uplink port.
Huawei(config-mvlan200)#igmp uplink-port 0/19/0
Step 12 Configure the IGMP version of the multicast VLAN.
Huawei(config-mvlan200)#igmp version v3
This operation will delete all programs in current multicast vlan
Are you sure to change current IGMP version? (y/n)[n]: y
Step 13 Configure the program matching mode of the multicast VLAN.
Huawei(config-mvlan200)#igmp match mode disable
//Disable the IGMP matching mode. The OLT automatically searches for program streams based
on user requirements and does not match programs based on OLT program configurations.//
Step 14 Configure the IGMP mode of the multicast VLAN.
Huawei(config-mvlan200)#igmp mode proxy
Are you sure to change IGMP mode?(y/n)[n]:y
Step 15 Configure multicast VLAN members.
Huawei(config-mvlan200)#igmp multicast-vlan member service-port 10
5.3 Verification
Step 1 Connect the FE port of the ONT configured with the multicast service to the PC.
Step 2 The VLC is used on the user computer to simulate the IPTV, play programs, and
order and watch programs according to the multicast program source provided by
the actual network server.
Huawei Access Certification Training Lab Guide Page 104
Step 3 By using this method, you can watch all the programs on the server.
UDP://[email protected]:1001
If IGMPv3 is used, the IP address of the multicast server must be
added.
Huawei Access Certification Training Lab Guide Page 105
5.4 Questions
1. What can I do if there is no program stream after I order a program? How can I
troubleshoot the fault?
2. How to check whether a user is online?
3. How to query the program bandwidth allocated to a physical port on a board?
4. How to change the program matching mode to manual?
5. How to control the user authority and specify that the user can watch only programs
224.1.1.2 and 224.1.1.4?
Huawei Access Certification Training Lab Guide Page 106
6 GPON ONU IPTV Service Configuration
6.1 Experiment Introduction
6.1.1 About This Experiment
In this experiment, the multicast service is configured to implement the multicast
service provisioning in the GPON ONU IPTV scenario.
6.1.2 Objectives
Understand the multicast working principle.
Understand the functions of the multicast VLAN.
Understand the functions of user service VLANs.
Understand the differences between IGMP users and multicast members.
Learn the differences between the dynamic and static program matching modes.
Understand the control of user rights.
Master the configuration of the multicast service.
6.1.3 Experiment Networking
STB ONU MAN
Optical Multicast server
OLT BRAS
STB ONU splitter
Figure 6-1 Example network of the GPON ONU IPTV service
6.1.4 Experiment Planning
Before the configuration, pay attention to the data planning to avoid data conflict
during the configuration. Please perform the experiment based on your data plan.
Collect the following information based on the actual conditions of the devices in the
equipment room:
Huawei Access Certification Training Lab Guide Page 107
Parameter Value
OLT upstream port ID
0/19/0
Multicast uplink port
OLT GPON port ID 0/3/0
ONT ID 0
Profile ID: 10
DBA profile
Assure:10M Max:20M
Profile ID: 11
Line profile T-CONT ID:2
Gem Index:0
Service VLAN: 200
VLAN type: smart
VLAN attribute: common
VLAN
Multicast VLAN: 200
User VLAN: 200
ONU user VLAN: untag
Indicates the upstream port ID
0/0/1
of the ONU.
Indicates the ONU
FE 0/1/2
downstream port ID.
Multicast User Authentication
no-auth
Mode
Version: V3
OLT IGMP mode: proxy
IGMP ONU IGMP mode: snooping
OLT and ONU multicast program
configuration mode: enable (default)
Server IP address: 192.168.46.240
Multicast server
Multicast group IP address: 224.1.1.1
6.2 Experiment Task Configuration
6.2.1 Service Configuration Process
Huawei Access Certification Training Lab Guide Page 108
6.2.2 Configuration Procedure
6.2.2.1 OLT-side service configuration
1. Add an ONT to a GPON port.
2. Configure the OLT service VLAN, upstream port, and downstream port.
3. Create a multicast VLAN.
In the global config mode, the multicast VLAN is created. The VLAN type and VLAN ID
must match the upper layer device according to the networking environment.
4. Configure the upstream port of the multicast VLAN.
In the global config mode, configure the upstream port of the multicast VLAN according
to the actual networking and the data plan.
5. Configure the multicast upstream port mode.
In BTV mode, configure the upstream port mode of the multicast VLAN according to
the actual networking and data plan.
6. Configure an IGMP user.
In the BTV mode, configure the IGMP user, configure the added service virtual port as
the IGMP user, and allow the user to send IGMP messages.
7. Configure the upstream port and default upstream port of the multicast VLAN.
In multicast VLAN mode, configure the upstream port and default upstream port of the
multicast VLAN according to the actual networking and data plan.
8. Configure the program matching mode of the multicast VLAN.
Huawei Access Certification Training Lab Guide Page 109
In multicast VLAN mode, you can configure the mode for generating multicast programs,
which can be automatic or manual. If the manual mode is used, you need to manually
add multicast programs.
9. Configure the IGMP packet version of the multicast VLAN.
In the multicast VLAN mode, configure the IGMP version according to the actual
network planning. By default, the IGMP version is V3.
10. Configure the IGMP mode of the multicast VLAN.
In multicast VLAN mode, select the working mode of the multicast VLAN according to
the network planning. Generally, IGMP proxy is recommended to effectively manage
IGMP messages.
11. Configure multicast VLAN members.
In the multicast VLAN mode, add a member to the multicast VLAN. Only the member
can watch the programs in the multicast VLAN.
6.2.2.2 ONU-side service configuration
1. Configure a service VLAN for the ONU.
In global config mode, create a VLAN. The VLAN type and VLAN ID must be the same
as those on the OLT.
2. Configure the upstream port of the ONU.
In the system view, add an upstream port to the service VLAN. The upstream port of
the ONU is a GPON port, which is always represented as 0/0/1 on the ONU.
3. Configure traffic entries.
In the global config mode, check the existing traffic indexes in the system. If no traffic
index meets the requirement, create a traffic entry to control the user bandwidth. As
the multicast service occupies a large bandwidth, configure the bandwidth to 4 Mbit/s
or higher to ensure the video quality.
4. Add a service port.
In the system view, map the service virtual port to the service VLAN and create the
mapping between the FE port of the ONU and the user VLAN.
5. Create a multicast VLAN.
In the global config mode, the multicast VLAN is created. The VLAN type and VLAN ID
must match the upper layer device according to the networking environment.
6. Configure multicast VLAN members,
In the multicast VLAN mode, add a member to the multicast VLAN. Only the member
can watch the programs in the multicast VLAN.
6.2.2.3 Configuration Reference
The following configurations are based on an ONU connected to GPON port 0/3/0, ONT
ID 0, and FE port 0/1/2 on the ONU. The user service VLAN is VLAN 200, the multicast
VLAN is VLAN 200, and the management VLAN of the ONU is VLAN 4000.
Huawei Access Certification Training Lab Guide Page 110
OLT-side service configuration
Step 1 Adding an ONU
For details, see the basic operations on the terminal. When configuring the ONT line
profile, pay attention to the following points:
(1) Add the GEM port and T-CONT of the multicast user VLAN, and configure the
mapping between them.
(2) Add the GEM port and T-CONT of the multicast VLAN, and configure the mapping
between them.
(3) Add the GEM port and T-CONT of the NMS VLAN, and configure the mapping
between them.
Step 2 Configure a user VLAN and add a service port to the user VLAN.
Huawei(config)#vlan 200 smart
Huawei(config)#port vlan 200 0/19 0
Huawei(config)#service-port 10 vlan 200 gpon 0/3/0 ont 0 gemport 0
multi-service user-vlan 20
Step 3 Configuring a Multicast User
Huawei(config)#btv
Huawei(config-btv)#igmp user add service-port 10 no-auth
Step 4 Configuring a Multicast VLAN
Huawei(config)#mutlcast-vlan 200
Step 5 Set up a multicast uplink port.
Huawei(config-mvlan200)#igmp uplink-port 0/19/0
Step 6 Configure the multicast program and multicast source.
Huawei(config-mvlan200)#igmp program add name program1 ip 224.1.1.1 sourceip
192.168.46.240
Step 7 Configuring the IGMP Protocol Processing Mode
Huawei(config-mvlan200)#igmp mode proxy
Are you sure to change IGMP mode?(y/n)[n]:y
Step 8 Configure multicast VLAN members.
Huawei(config-mvlan200)#igmp multicast-vlan member service-port 10
ONU-side service configuration
Huawei Access Certification Training Lab Guide Page 111
Step 9 Create a multicast VLAN and add an upstream port and a service port to the
multicast VLAN.
HuaweiONU(config)# vlan 200
HuaweiONU(config)# port vlan 200 0/0 1
Step 10 Configuring a Traffic Profile
HuaweiONU(config)#traffic table ip index 10 cir off priority 4 priority-policy tag-In-Packag
Step 11 Configure service ports.
HuaweiONU(config)# service-port 100 vlan 200 eth 0/1/2 multi-service user-vlan untagged rx-cttr
10 tx-cttr 10
Step 12 Configure the multicast mode and multicast protocol version.
HuaweiONU(config)# btv
HuaweiONU(config -btv)#igmp version v3
HuaweiONU(config -btv)#igmp mode snooping
Step 13 Adding an IGMP User
HuaweiONU(config -btv)# igmp user add service-port 100 no-auth
Step 14 Create a multicast VLAN.
HuaweiONU(config)#mutlcast-vlan 200
Step 15 Configure the multicast upstream port and multicast program.
HuaweiONU(config-mvlan200)#igmp uplink-port 0/0/1
HuaweiONU(config-mvlan200)#igmp program add name program1 ip 224.1.1.1 sourceip
192.168.46.240
Step 16 Configure multicast VLAN members.
HuaweiONU(config -mvlan200)# igmp multicast-vlan member service-port 100
6.3 Verification
Step 1 Connect the FE port of the ONU configured with the multicast service to the PC.
Step 2 The VLC is used on the user computer to simulate the IPTV, play programs, and
order and watch programs according to the multicast program source provided by
the actual network server.
Huawei Access Certification Training Lab Guide Page 112
Step 3 By using this method, you can watch all the programs on the server.
UDP://[email protected]:1001
If IGMPv3 is used, the IP address of the multicast server must be
added.
6.4 Questions
1. What can I do if there is no program stream after I order a program? How can I
troubleshoot the fault?
2. How to check whether a user is online?
3. How to query the program bandwidth allocated to a physical port on a board?
4. How to change the program matching mode to manual?
5. How to control the user authority and specify that the user can watch only programs
224.1.1.2 and 224.1.1.4?
Huawei Access Certification Training Lab Guide Page 113
7 POL Multicast Service Configuration
7.1 Experiment Introduction
7.1.1 About This Experiment
In this experiment, multicast services are configured to implement multicast service
provisioning in the POL scenario.
7.1.2 Objectives
Understand the multicast working principle.
Understand the multicast routing protocol configuration process.
Understand the multicast configuration of the access router on the POL campus
network.
Understand the functions of the multicast VLAN.
Understand the functions of user service VLANs.
Understand the differences between IGMP users and multicast members.
Learn the differences between the dynamic and static program matching modes.
Understand the control of user rights.
Master the configuration of the multicast service.
7.1.3 Experiment Networking
Campus
PC ONU network
Optical Multicast server
PC ONU OLT Router
splitter
Figure 7-1 Networking diagram of the POL GPON multicast service
G
r
o
u Experiment Planning
7.1.4
p Before the configuration, pay attention to the data planning to avoid data conflict
during the configuration. Please perform the experiment based on your data plan.
G
2
Huawei Access Certification Training Lab Guide Page 114
Collect the following information based on the actual conditions of the devices in the
equipment room:
Parameter Value
Router uplink port number GigabitEthernet1/0/0
Downlink port number of the
GigabitEthernet2/0/0
router
VLAN of the downlink sub-
200
interface on the router
OLT upstream port ID 0/19/0
OLT GPON port ID 0/3/0
Indicates the upstream port ID of
0/0/1
the ONU.
ONU Ethernet service port 0/1/2
PIM working mode SSM
IGMP version V3
Server IP address: 192.168.46.240
Multicast server
Multicast group IP address: 224.1.1.1
Huawei Access Certification Training Lab Guide Page 115
7.2 Experiment Task Configuration
7.2.1 Service configuration process:
7.2.2 Configuration Procedure
7.2.2.1 Service Configuration on the Access Router Side
1. Create a sub-interface on the OLT-oriented downstream interface and configure
VLAN parameters.
2. Configure an IP address and a unicast routing protocol for each interface on the
router.
3. Enable multicast routing on all routers that provide multicast services.
4. PIM-SM is enabled on all interfaces of the multicast router.
5. Enable IGMP on the interface of the router that is directly connected to the OLT.
6. Set the same SSM group address range on each router.
7.2.2.2 OLT-side service configuration
1. Add an ONT to a GPON port.
2. Configure the OLT service VLAN, upstream port, and downstream port.
3. Create a multicast VLAN.
In the global config mode, the multicast VLAN is created. The VLAN type and VLAN ID
must match the upper layer device according to the networking environment.
4. Configure the upstream port of the multicast VLAN.
Huawei Access Certification Training Lab Guide Page 116
In the global config mode, configure the upstream port of the multicast VLAN according
to the actual networking and the data plan.
5. Configure the multicast upstream port mode.
In BTV mode, configure the upstream port mode of the multicast VLAN according to
the actual networking and data plan.
6. Configure an IGMP user.
In the BTV mode, configure the IGMP user, configure the added service virtual port as
the IGMP user, and allow the user to send IGMP messages.
7. Configure the upstream port and default upstream port of the multicast VLAN.
In multicast VLAN mode, configure the upstream port and default upstream port of the
multicast VLAN according to the actual networking and data plan.
8. Configure the program matching mode of the multicast VLAN.
In multicast VLAN mode, you can configure the mode for generating multicast programs,
which can be automatic or manual. If the manual mode is used, you need to manually
add multicast programs.
9. Configure the IGMP packet version of the multicast VLAN.
In the multicast VLAN mode, configure the IGMP version according to the actual
network planning. By default, the IGMP version is V3.
10. Configure the IGMP mode of the multicast VLAN.
In multicast VLAN mode, select the working mode of the multicast VLAN according to
the network planning. Generally, IGMP proxy is recommended to effectively manage
IGMP messages.
11. Configure multicast VLAN members.
In the multicast VLAN mode, add a member to the multicast VLAN. Only the member
can watch the programs in the multicast VLAN.
7.2.2.3 ONU-side service configuration
1. Configure a service VLAN for the ONU.
In global config mode, create a VLAN. The VLAN type and VLAN ID must be the same
as those on the OLT.
2. Configure the upstream port of the ONU.
In the system view, add an upstream port to the service VLAN. The upstream port of
the ONU is a GPON port, which is always represented as 0/0/1 on the ONU.
3. Configure traffic entries.
In the global config mode, check the existing traffic indexes in the system. If no traffic
index meets the requirement, create a traffic entry to control the user bandwidth. As
the multicast service occupies a large bandwidth, configure the bandwidth to 4 Mbit/s
or higher to ensure the video quality.
4. Add a service port.
In the system view, map the service virtual port to the service VLAN and create the
mapping between the FE port of the ONU and the user VLAN.
5. Create a multicast VLAN.
Huawei Access Certification Training Lab Guide Page 117
In the global config mode, the multicast VLAN is created. The VLAN type and VLAN ID
must match the upper layer device according to the networking environment.
6. Configure multicast VLAN members,
In the multicast VLAN mode, add a member to the multicast VLAN. Only the member
can watch the programs in the multicast VLAN.
7.2.2.4 Configuration Reference
In the following example, the access router GigabitEthernet1/0/0 is connected to
another multicast router, GigabitEthernet2/0/0 is connected to an ONU under OLT
0/19/0, GPON 0/3/0, the ONT ID is 0, and the FE port on the ONU is 0/1/2. The user
service VLAN is 200 and the multicast VLAN is 200, ONU management VLAN 4000. The
single-domain PIM-SSM scenario is used as an example.
Service Configuration on the Access Router Side
Step 1 Create a sub-interface on the OLT-oriented downstream interface and configure
VLAN parameters.
[*Router] interface gigabitethernet 2/0/0.1
[*Router-GigabitEthernet2/0/0.1] vlan-type dot1q 200
[*Router-GigabitEthernet2/0/0.1] commit
Step 2 Configure an IP address for each interface on each router and configure a unicast
routing protocol. The configuration details are not provided here.
Reference:
(1) Configure IP addresses for the interfaces according to the planning.
(2) Enable the unicast routing protocol on the router. For details, see the configurations
of OSPF and IS-IS.
Step 3 Enable the multicast function on the access router and enable PIM-SM on each
interface.
[~Router] multicast routing-enable
[*Router] interface gigabitethernet 2/0/0.1
[*Router-GigabitEthernet2/0/0.1] pim sm
[*Router-GigabitEthernet2/0/0.1] quit
[*Router] interface gigabitEthernet 1/0/0
[*Router-GigabitEthernet1/0/0] pim sm
[*Router-GigabitEthernet1/0/0] commit
[~Router-GigabitEthernet1/0/0] quit
Step 4 Enable the IGMP function on the interface of the access router connected to the
OLT. In this example, the IGMP version is set to 3.
[~Router] interface gigabitethernet 2/0/0.1
Huawei Access Certification Training Lab Guide Page 118
[~Router-GigabitEthernet2/0/0.1] igmp enable
[*Router-GigabitEthernet2/0/0.1] igmp version 3
[*Router-GigabitEthernet2/0/0.1] commit
[~Router-GigabitEthernet2/0/0.1] quit
Step 5 Configure the SSM group address range. In this example, the SSM group address
range is set to 224.1.1.0/24 on all routers.
[~Router] acl number 2000
[*Router-acl4-basic-2000] rule permit source 224.1.1.0 0.0.0.255
[*Router-acl4-basic-2000] quit
[*Router] pim
[*Router-pim] ssm-policy 2000
[*Router-pim] commit
[~Router-pim] quit
For details about service configurations on the OLT and ONU, see the multicast
configurations in the GPON ONT&ONU scenario.
7.3 Verification
Step 1 Connect the FE port of the ONU configured with the multicast service to the PC.
Step 2 The VLC is used on the user computer to simulate the IPTV, play programs, and
order and watch programs according to the multicast program source provided by
the actual network server.
Huawei Access Certification Training Lab Guide Page 119
UDP://[email protected]:1001
If IGMPv3 is used, the IP address of the multicast server must be
added.
Step 3 By using this method, you can watch all the programs on the server.
7.4 Questions
1. After configuring the access router, how to configure the OLT, ONU, or ONT?
2. How to check whether the multicast routing protocol is correctly configured?
Huawei Access Certification Training Lab Guide Page 120
2. How to control the user authority and specify that the user can watch only programs
224.1.1.2 and 224.1.1.4?
8 QoS Application and Configuration
8.1 Experiment Introduction
8.1.1 About This Experiment
This experiment describes the QoS application scenario, data configuration, and
verification on the OLT.
8.1.2 Objectives
Describe the application of QoS in different scenarios.
Have a basic command of PON QoS implementation mechanisms.
Configure PON QoS data based on different applications.
To verify the function of implementing PON QoS.
Huawei Access Certification Training Lab Guide Page 121
8.1.3 Experiment Networking
Figure 8-1 Networking diagram of QoS application configuration
8.1.4 Experiment Planning
According to the networking scenario in the lab, the optical splitter uses the 1:32 optical
splitting ratio. The upstream GICG board 0/19/0 of the OLT is connected to the
convergence switching device. The aggregation switch is interconnected with the
softswitch, BRAS, and multicast server. In addition, related service data is configured on
the interconnected NEs, connect upstream port 0/19/1 of the OLT to the FTP server (a
host) and use the port as the host for packet capture and analysis.
Table 8-1 Experiment Data Planning
Type Parameter
GIU:0/19/0
OLT
GPON:0/3/0
Service VLAN: 2000; inner VLAN: 35
VLAN type: smart; attribute: qinq
VLAN
Service VLAN: 1000; inner VLAN: 35
VLAN type: smart; attribute: common
HG8245Q ETH 1
PC IP address 192.168.100.5/24
FTP server/
IP address 192.168.100.105/24
Packet capture host
Huawei Access Certification Training Lab Guide Page 122
8.2 Experiment 1: Priority Application Configuration
8.2.1 Configuration Roadmap
The following uses the IP traffic profile as an example to describe how to configure the
priority.
1. Configuring a Double-VLAN Service Flow
2. Setting the service VLAN priority in the traffic profile Copying the inner VLAN
priority
3. Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
4. Modify the local configuration of the service VLAN priority in the traffic profile. Set
the priority to 3.
5. Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
6. Configure a single-tagged VLAN for the service flow.
7. Setting the service VLAN priority in the traffic profile Copying the inner VLAN
priority
8. Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
9. Modify the local configuration of the service VLAN priority in the traffic profile. Set
the priority to 3.
10. Use the PC to initiate a dial-up connection and use the Wireshark to capture packets
and analyze the VLAN ID.
8.2.2 Configuration Procedure
Step 1 Create a line profile, a service profile, and an ONT.
HUAWEI(config)# dba-profile add profile-name QoS type2 assure 2048
HUAWEI(config)#ont-lineprofile gpon profile-name QoS
HUAWEI(config-gpon-lineprofile-2)#tcont 1 dba-profile-name QoS
HUAWEI(config-gpon-lineprofile-2)#gem add 1 eth tcont 1
HUAWEI(config-gpon-lineprofile-2)#gem mapping 1 0 vlan 35
HUAWEI(config-gpon-lineprofile-2)#commit
HUAWEI(config)#ont-srvprofile gpon profile-name QoSHUAWEI(config-gpon-srvprofile-2)#ont-
port eth adaptive pots adaptive
HUAWEI(config-gpon-srvprofile-2)#port vlan eth 1 35
HUAWEI(config-gpon-srvprofile-2)#commit
HUAWEI(config-if-gpon-0/3)#ont confirm 0 ontid 1 sn-auth 485754434D23C27B omci ont-
lineprofile-name QoS ont-srvprofile-name QoS
Step 2 Sets the priority of the inner VLAN tag on the ONT side to 5.
HUAWEI(config-if-gpon-0/3)#ont port native-vlan 0 1 eth 1 vlan 35 priority 5
Huawei Access Certification Training Lab Guide Page 123
Step 3 Copying the inner VLAN priority as the service VLAN priority in the traffic profile
QoS1
HUAWEI(config)#traffic table ip name QoS1 cir off priority user-cos 3 priority-policy tag-In-
package
Create traffic descriptor record successfully
------------------------------------------------
TD Index: 7
TD Name: QoS1
Priority: 3
Copy Priority: user-cos
Mapping Index: 0
CTAG Mapping Priority: -
CTAG Mapping Index: -
CTAG Default Priority: 0
Priority Policy: tag-pri
CIR: off
CBS: off
PIR: off
PBS: off
Fix: off
CAR Threshold Profile: -
Color Mode: color-blind
Color Policy: dei
Referenced Status: not used
------------------------------------------------
Step 4 Binding an IP Traffic Profile to a Service Port
HUAWEI(config)#vlan 2000 smart
HUAWEI(config)#vlan attrib 2000 q-in-q
HUAWEI(config)#port vlan 2000 0/19 0
HUAWEI(config)#service-port 1 vlan 2000 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 35
rx-cttr 7 tx-cttr 7
Step 5 Port mirroring is configured on the upstream port of the OLT and the traffic on
port 0/19/0 is duplicated to port 0/19/1.
HUAWEI(config)#interface giu 0/19
HUAWEI(config-if-giu-0/19)#mirror port 0 1 egress
Step 6 Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
Huawei Access Certification Training Lab Guide Page 124
Result analysis: The outer VLAN 2000 copies the priority 5 of the inner VLAN 35, and the priority
of SVLAN 2000 is 5.
Step 7 Modify the local VLAN priority of QoS1 in the traffic profile to 3.
HUAWEI(config)#traffic table ip modify name QoS1 priority 3 priority-policy local-Setting
Step 8 Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
Result analysis: The priority of outer VLAN 2000 is 3 (locally configured) and the priority of inner
VLAN 2000 is 5 (configured on the ONT side).
Step 9 A double-tagged VLAN service flow is deleted, a single-tagged VLAN service flow is
created, and a specified traffic profile is not bound.
HUAWEI(config)#undo service-port 1
HUAWEI(config)#vlan 1000 smart
HUAWEI(config)#port vlan 1000 0/19 0
HUAWEI(config)#service-port 2 vlan 1000 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 35
Result analysis: The specified traffic profile is not bound, and the priority of service VLAN 1000 is
the default value 0.
Step 10 Create traffic profile QoS2 for the traffic stream with a single VLAN tag, and set
the priority policy to copy from the inner VLAN tag.
HUAWEI(config)#traffic table ip name QoS2 cir off priority user-cos 3 priority-policy tag-In-
package
Create traffic descriptor record successfully
------------------------------------------------
TD Index: 9
TD Name: QoS2
Priority: 3
Copy Priority: user-cos
Mapping Index: 0
CTAG Mapping Priority: -
CTAG Mapping Index: -
CTAG Default Priority: 0
Huawei Access Certification Training Lab Guide Page 125
Priority Policy: tag-pri
CIR: off
CBS: off
PIR: off
PBS: off
Fix: off
CAR Threshold Profile: -
Color Mode: color-blind
Color Policy: dei
Referenced Status: not used
------------------------------------------------
Step 11 Re-create a service flow and bind the traffic profile QoS2 to the service flow. The
SVLAN priority is copied from the inner VLAN priority.
HUAWEI(config)#undo service-port 2
HUAWEI(config)#service-port 2 vlan 1000 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 35
rx-cttr 9 tx-cttr 9
Step 12 Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
Result analysis: The priority of service VLAN 1000 is copied from the inner VLAN 35
side and the priority is 5.
Step 13 Modify the local VLAN priority of QoS2 in the traffic profile to 3.
HUAWEI(config)#traffic table ip modify name QoS2 priority 3 priority-policy local-Setting
Step 14 Use the PC to initiate a dial-up connection, and use the Wireshark to capture
packets on the PC.
Result analysis: The priority of service VLAN 1000 is priority 3 set locally.
Huawei Access Certification Training Lab Guide Page 126
8.3 Experiment 2: Traffic Policing Configuration
8.3.1 Configuration Roadmap
1. The configuration of traffic policing is based on the priority application experiment.
2. Download rate test when the downstream rate is not limited
3. Test the download rate after the downstream rate is limited.
4. Testing the upload rate when the upstream traffic profile limits the rate higher than
the DBA rate
5. Testing the upload rate when the DBA rate in the upstream direction is higher than
the rate in the traffic profile
8.3.2 Configuration Procedure
# Assume that PON port 0/3/0 is connected to an ONT. The ONT ETH1 port is connected
to a PC, the service upstream port is 0/19/0, the FTP server is connected to port 0/19/1
on the OLT, and the IP address of the FTP server is 192.168.100.105/24. The PC is
configured with a static IP address 192.168.100.x/24.
Step 1 Create a service flow without binding a traffic profile.
HUAWEI(config)#service-port 3 vlan 1000 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 35
Step 2 Change the native VLAN of port 0/19/1. The PC can ping the FTP server.
HUAWEI(config)#port vlan 1000 0/19 1
HUAWEI(config)#interface giu 0/19
HUAWEI(config-if-giu-0/19)#native-vlan 1 vlan 1000
Step 3 Use the PC to download files from the FTP server and test the download rate.
Result analysis: The average download speed is 7151.67 KB/s, which is about 57213.36
kbit/s.
Step 4 Create a traffic profile, set the upstream and downstream rates to 4 Mbit/s
respectively, re-create service flows, and bind the traffic profile to the service flows.
HUAWEI(config)#traffic table ip name QoS3 cir 4096 pir 4096 priority 0 priority-policy local-
Setting
Huawei Access Certification Training Lab Guide Page 127
Create traffic descriptor record successfully
------------------------------------------------
TD Index: 10
TD Name: QoS3
Priority: 0
Copy Priority: -
Mapping Index: -
CTAG Mapping Priority: -
CTAG Mapping Index: -
CTAG Default Priority: 0
Priority Policy: local-pri
CIR: 4096 kbps
CBS: 133072 bytes
PIR: 4096 kbps
PBS: 133072 bytes
Fix: 0 kbps
CAR Threshold Profile: -
Color Mode: color-blind
Color Policy: dei
Referenced Status: not used
------------------------------------------------
HUAWEI(config)#undo service-port 3
HUAWEI(config)#service-port 3 vlan 1000 gpon 0/3/0 ont 1 gemport 1 multi-service user-vlan 35
rx-cttr 10 tx-cttr 10
Step 5 Use the PC to download files from the FTP server and test the download rate.
Result analysis: The average download rate is 502.98 KB/s, which is about 4023 kbit/s. This meets
the rate limit result.
Step 6 Check the DBA profile bound to the service T-CONT. It is found that the rate is
limited to 2048 kbit/s and the upstream rate is limited to 4096 kbit/s.
HUAWEI(config)#display ont info 0 3 0 1
-----------------------------------------------------------------------------
F/S/P: 0/3/0
ONT-ID: 1
Control flag: active
Run state: online
Config state: normal
Match state: match
DBA type: SR
ONT distance(m): 99
ONT last distance(m): -
ONT battery state: not support
Huawei Access Certification Training Lab Guide Page 128
Memory occupation: 32%
CPU occupation: 1%
Temperature: 70(C)
Authentic type: SN-auth
SN: 485754434D23C27B (HWTC-4D23C27B)
Management mode: OMCI
Software work mode: normal
Isolation state: normal
ONT IP 0 address/mask: 17.1.1.38/8
Description: ONT_NO_DESCRIPTION
Last down cause: -
Last up time: 2019-02-27 02:52:36+08:00
Last down time: -
Last dying gasp time: -
ONT online duration: 0 day(s), 6 hour(s), 54 minute(s), 14 second(s)
Type C support: Not support
Interoperability-mode: ITU-T
Power reduction status: -
-----------------------------------------------------------------------------
VoIP configure method: Default
-----------------------------------------------------------------------------
Line profile ID: 2
Line profile name: QoS
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
Notes: * indicates Discrete TCONT(TCONT Unbound)
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<T-CONT 1> DBA Profile-ID:11
<Gem Index 1>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 35 - - - - - -
--------------------------------------------------------------------
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
HUAWEI(config)#display dba-profile profile-id 11
-----------------------------------------------------------------
Profile-name: QoS
Profile-ID: 11
type: 2
Bandwidth compensation: No
Huawei Access Certification Training Lab Guide Page 129
Fix-delay: No
Fix(kbps): 0
Assure(kbps): 2048 The value should be 2048.
Max(kbps): 0
Additional-bandwidth: -
Best-effort-priority: -
Best-effort-weight: -
bind-times: 1
-----------------------------------------------------------------
Step 7 Upload files from the PC to the FTP server to test the upload rate.
Result analysis: The average upload rate is 204.44 KB/s, which is about 1651 kbit/s.
The upload rate meets the rate limit.
Step 8 Change the assured bandwidth to 8192 kbit/s in the DBA profile.
HUAWEI(config)#dba-profile modify profile-name QoS
> Start modifying a DBA-profile:
Step 9 > The type of the DBA-profile (1-5) [2]: 2
> The assured bandwidth of the DBA-profile(128-10000000kbps) [2048]: 8192
Step 10 Upload files from the PC to the FTP server to test the upload rate.
Result analysis: The average upload rate is 496.90 KB/s, which is about 3975 kbit/s. The upload
rate meets the rate limit.
Huawei Access Certification Training Lab Guide Page 130
9 Configuring Anti-DoS Attack
9.1 Experiment Introduction
9.1.1 About This Experiment
This section describes how to configure anti-DoS attack.
9.1.2 Objectives
Describe the purpose of OLT anti-DoS attack.
Use the anti-DoS attack function of the OLT.
To verify the function of anti-DoS attack of the OLT.
9.1.3 Experiment Networking
Figure 9-1 Networking diagram of anti-DoS attack
9.1.4 Experiment Planning
Table 9-1 In the live network, the optical splitter uses the 1:64 optical
splitting ratio. The ONT/ONU is connected to the PON interface board
of the OLT through the optical splitter, and the OLT is connected to
the BRAS. In this experiment, terminal users connected to the OLT are
simulated to send DoS attack packets.
Table 9-2 Experiment Data Planning
Equipment Port Parameter
GIU 0/10/0
OLT
GPON 0/6/0
ONT ETH1 VLAN:11
Huawei Access Certification Training Lab Guide Page 131
PC Network port Automatic IP address obtaining
9.2 Experiment Task Configuration
9.2.1 Configuration Roadmap
1. The OLT is connected to the IP network through the upstream port, the data
configuration is complete, and the OLT works in the normal state.
2. PC1 can access the network normally.
3. PC1 simulates an unauthorized user to send a large number of protocol control
packets.
9.2.2 Configuration Procedure
Step 1 Check the CPU usage of the control board or service board.
DoS attacks may cause high CPU usage. In normal cases, the CPU usage of the control
board and service board does not exceed 20%. The CPU usage is high only when the
board is saving data or writing data to the flash memory. This process does not last for
more than 2s. Run the command to check the CPU usage of the control board or the
service board.
# Query the CPU usage of the main control board in slot 0/9.
Huawei_OLT(config)#display cpu
{frameid/slotid<S><Length 1-15>}:0/9
Command:
display cpu 0/9
CPU occupancy: 12%
# Display the CPU usage of the control board in slot 0/10.
Huawei_OLT(config)#display cpu 0/10
Send message for inquiring board cpu occupancy successfully, board executing...
CPU occupancy: 7%
# Display the CPU usage of the service board in slot 0/2.
Huawei_OLT(config)#display cpu 0/2
Send message for inquiring board cpu occupancy successfully, board executing...
CPU occupancy: 5%
Huawei Access Certification Training Lab Guide Page 132
Step 2 Enable anti-DoS attack on the device.
Run the command to enable the anti-DoS attack function of the device. Then, the device
monitors the control packets sent from each port. When the rate of the control packets
sent to the CPU exceeds the preset threshold, the system considers that a DoS attack
occurs, adds the user port to the blacklist, and discards the control packets that exceed
the limit.
Huawei_OLT(config)#security anti-dos
{control-packet<K>|disable<K>|enable<K>}:enable
Command:
security anti-dos enable
Step 3 Configuring a Packet Processing Policy
Run the command to set the policy for processing protocol packets when a DoS attack
occurs. The system does not check the status of the anti-DoS attack function when the
policy command is executed. If the anti-DoS attack function is disabled, the system does
not detect DoS attacks and sends protocol packets to the CPU for processing. If the anti-
DoS attack function is enabled, the system processes protocol packets according to the
preset processing policy.
Huawei_OLT(config)#security anti-dos control-packet policy
{deny<K>|permit<K>}:permit
Command:
security anti-dos control-packet policy permit
Step 4 In step 4, the rate threshold for sending protocol packets to the CPU must be set to
permit. Otherwise, step 4 is meaningless.
When the anti-DoS attack function is enabled and the protocol packets can be sent to
the CPU for processing, if the rate exceeds the preset value, the system reports the DoS
attack alarm and discards the excess packets.
# Run the following command on the GPON port:
Huawei_OLT(config)#security anti-dos control-packet rate
{frameid/slotid/portid<S><Length 1-15>}:0/5/0
{default<K>|ont<K>|value<U><0,63>}:ont 1
{default<K>|gemport<K>|value<U><0,254>}:gemport
{gemindex<U><0,1023>}:1
{default<K>|value<U><0,254>}:60
Command:
security anti-dos control-packet rate 0/5/0 ont 1 gemport 1 60
default Default threshold for the rate of sending protocol packets to the CPU. By default, the rate
threshold for sending protocol packets to the CPU is 63 pps.
Huawei Access Certification Training Lab Guide Page 133
Step 5 Use the PC to simulate an unauthorized user to initiate a DoS attack.
Introduction to Common DoS Tools
Restriction
No. Test Tool Advantages
1. The performance of a
1. 181 types of DDoS attacks are single node is 30,000 pps.
provided and will be added in later In delay mode, the
versions. performance can reach
Seal attacker 2. Simple configuration 100,000+ pps (depending
1 (V1.0.19) 3. Attacker is a self-developed tool. on the performance of the
You can submit a requirement and executor).
accept new attacks after the 2. A free license is
requirement is approved. required.
1. Supports DoS attacks, firewall tests, 1. Non-sift mode. In-depth
port scanning, idle scanning, file research tools are required
Hping3 transfer, and Trojan horses. to construct various attack
2
2. The Linux tool facilitates concurrent packets.
and distributed deployment.
1. Non-sift mode. In-depth
research tools are required
1. Send almost all possible and to construct various attack
impossible packets. packets.
mz
3 2. The Linux tool facilitates concurrent 2. Non-professionals tend
and distributed deployment. to crash their own
networks.
1. Excellent performance, with a peak 1. Non-sift mode. In-depth
value of 500,000 packets per second research tools are required
pser 2. Load simulation to construct various attack
4
3. The Linux tool facilitates concurrent packets.
and distributed deployment.
How to Use the Attacker Tool
Huawei-developed anti-DDoS tool is developed for 2012 Laboratories - R D capability
improvement - Networking Security Competence Center.
Advantage: The USG6000V series provides 181 types of DDoS attacks. 90 types of flood
packets, 75 types of malformed packets, and 16 other types of packets.
Restrictions: The attack rate of Windows-based applications is limited. The maximum
attack rate is 3000 pps. Distributed deployment can be used to improve the concurrent
attack bandwidth.
Note: When deploying the test network, you need to set up at least two network planes,
one for the management plane and the other for the actual attack network plane. In
Attacker, set DeviceIP to the management plane IP address and AttackPort1 to the device
corresponding to the private network to prevent impact on the lab network.
Huawei Access Certification Training Lab Guide Page 134
Other Precautions
Search for seal on rTools and download and install it.
For the license of the SEAL version, send the version number and ESN to the wuhaiting
WX37700/chenchao WX337836. For details about how to obtain the ESN, see
FAQ(HYPERLINK
"http://3ms.huawei.com/hi/group/6349/thread_4551973.html?mapId=4262337"
http://3ms.huawei.com/hi/group/6349/thread_4551973.html?mapId=4262337).
Huawei Access Certification Training Lab Guide Page 135
9.3 Verification
9.3.1 Check whether an alarm is generated on the OLT.
# PC1 sends a large number of protocol packets. The anti-DoS attack function is enabled
in the system. When the rate threshold for sending protocol packets to the CPU is set,
the system reports a DoS attack alarm. Event ID: 0x29000008, indicating that a DoS
attack occurs on the corresponding port.
9.4 Reference.
9.4.1 OLT Configuration
Huawei_OLT(config)#display current-configuration
{<cr>|include-default<K>|interface<K>|ont<K>|port<K>|section<K>|service-port<K>||<K>}:
Command:
display current-configuration
[Active: H901MPLB; Standby: H901MPLB]
[Patch Info: SPC201]
[MA5800V100R017:5800]
#
[pre-config]
<pre-config>
board add 0/6 H901GPHF
traffic table ip index 10 name "ip-traffic-table_10" cir 4096 cbs 133072 pir 8064 pbs 260048 color-
mode color-blind priority user-cos 5 priority-policy local-setting
dba-profile add profile-id 77 profile-name "shaf3y" type2 assure 2048
ont-srvprofile gpon profile-id 31 profile-name "mona"
ont-port pots adaptive 32 eth adaptive 8
port vlan eth 1 translation 11 user-vlan 11
commit
ont-lineprofile gpon profile-id 31 profile-name "ali"
tcont 2 dba-profile-id 77
gem add 2 eth tcont 2
gem mapping 2 0 vlan 11
commit
quit
#
[vlan-config]
<vlan-config>
vlan 3030 smart
vlan 4000 smart
vlan attrib 3030 q-in-q
port vlan 3030 0/10 0
port vlan 4000 0/10 0
#
Huawei Access Certification Training Lab Guide Page 136
<gpon-0/6>
interface gpon 0/6
port 0 ont-auto-find enable
ont add 0 1 sn-auth "48574453B6595B7B" omci ont-lineprofile-id 31 ont-srvprofile-id 31 desc
"ONT_NO_DESCRIPTION"
ont port native-vlan 0 1 eth 1 vlan 11 priority 0
ont port native-vlan 0 1 iphost vlan 34 priority 0
#
[bbs-config]
<bbs-config>
service-port 30 vlan 3030 gpon 0/6/0 ont 1 gemport 2 multi-service user-vlan 11 tag-transform
default inbound traffic-table index 10 outbound traffic-table index 10
#
[security-config]
<security-config>
security anti-dos enable
security anti-dos control-packet rate 0/6/0 ont 1 gemport 2 60
#
<Vlanif4000>
interface Vlanif4000
ip address 10.175.202.57 255.255.254.0
#
<MEth0>
interface MEth0
ip address 10.11.104.2 255.255.255.0
#
9.5 Questions
Stop the DoS attack initiated by the PC and check what happens on the OLT.
Recovery event: 0x29000009 The DoS attack on the user port disappears.
Huawei Access Certification Training Lab Guide Page 137
10 Configuring Anti-ICMP/IP Attack
10.1 Experiment Introduction
10.1.1 About This Experiment
Configure the anti-ICMP/IP attack function to meet system security requirements. In an
ICMP/IP attack, a malicious user sends ICMP or IP packets whose destination IP address
is the system IP address. If the malicious user sends a large number of ICMP packets
(such as ping packets) and IP packets to the access system in a short period of time, the
access system is overloaded and cannot process valid tasks. The anti-ICMP/IP attack
feature means that the system discards the ICMP and IP packets sent from the user side
to the device.
10.1.2 Objectives
Describe the ICMP/IP attack principle.
Huawei anti-ICMP/IP attack configuration is complete.
To verify the function of anti-ICMP/IP attack.
10.1.3 Experiment Networking
Figure 10-1 Networking diagram of anti-ICMP/IP attack
10.1.4 Experiment Planning
In the live network, the optical splitter uses the 1:64 optical splitting ratio. The
ONT/ONU is connected to the PON interface board of the OLT through the optical
splitter, and the OLT is connected to the BRAS. In this experiment, terminal users
connected to the OLT are simulated to send DoS attack packets.
Table 10-1 Experiment Data Planning
Equipment Port Parameter
Huawei Access Certification Training Lab Guide Page 138
GIU 0/10/0
OLT
GPON 0/6/0
ONT ETH4 VLAN:4000
PC Network port Automatic IP address obtaining
10.2 Experiment Task Configuration
10.2.1 Configuration Roadmap
The following uses a PC as an example to simulate an unauthorized user to access the
network:
(1) The OLT is connected to the IP network through the upstream port. The data
configuration is complete. The VLAN interface IP address is configured on the OLT. The
OLT works in the normal state.
The PC is connected to the ONT, and the ONT is connected to the GPBD board through
optical splitter.
(3) The PC simulates an unauthorized user to send a large number of ICMP packets to
the VLANIF interface.
10.2.2 Configuration Procedure
Step 1 The data service of the terminal is added on the OLT according to the data plan.
Step 2 Create a VLAN with the VLAN ID of 4000 and the IP address of the L3 interface of
10.175.202.57/23. Query VLANIF information.
Huawei_OLT#display interface vlanif 4000
{<cr>||<K>}:
Command:
display interface vlanif 4000
Vlanif4000 current state: UP (ifindex: 8392608)
Line protocol current state: UP
Description: HUAWEI, SmartAX Series, Vlanif4000 Interface
The Maximum Transmit Unit is 1500 bytes
Forward plane MTU: -
Internet Address is 10.175.202.57/23
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 487b-6b7d-ab37
VLAN Encap-mode: single-tag
Step 3 Create a virtual service channel for unauthorized users, add the ONT port to VLAN
4000, and configure a virtual port for maintenance services. In this way, the ONT
can ping the interface address of VLAN 4000. For details about data configuration,
see the FTTx Service Provisioning Configuration Guide. The following information is
displayed:
# Query the line profile.
Huawei Access Certification Training Lab Guide Page 139
Huawei_OLT(config)#display ont-lineprofile gpon profile-id 31
{<cr>||<K>}:
Command:
display ont-lineprofile gpon profile-id 31
-----------------------------------------------------------------------------
Profile-ID :31
Profile-name :ali
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<T-CONT 1> DBA Profile-ID:77
<Gem Index 1>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 4000 - - - - - -
--------------------------------------------------------------------
<T-CONT 2> DBA Profile-ID:77
<Gem Index 2>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 11 - - - - - -
--------------------------------------------------------------------
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Binding times :1
-----------------------------------------------------------------------------
# Query a service template.
Huawei_OLT(config)#display ont-lineprofile gpon profile-id 31
{<cr>||<K>}:
Command:
display ont-lineprofile gpon profile-id 31
Huawei Access Certification Training Lab Guide Page 140
-----------------------------------------------------------------------------
Profile-ID :31
Profile-name :ali
Access-type :GPON
-----------------------------------------------------------------------------
FEC upstream switch :Disable
OMCC encrypt switch :Off
Qos mode :PQ
Mapping mode :VLAN
TR069 management :Disable
TR069 IP index :0
-----------------------------------------------------------------------------
<T-CONT 0> DBA Profile-ID:1
<T-CONT 1> DBA Profile-ID:77
<Gem Index 1>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 4000 - - - - - -
--------------------------------------------------------------------
<T-CONT 2> DBA Profile-ID:77
<Gem Index 2>
--------------------------------------------------------------------
|Serv-Type:ETH |Encrypt:off |Cascade:off |GEM-CAR:- |
|Upstream-priority-queue:0 |Downstream-priority-queue:- |
--------------------------------------------------------------------
Mapping VLAN Priority Port Port Bundle Flow Transparent
index type ID ID CAR
--------------------------------------------------------------------
0 11 - - - - - -
--------------------------------------------------------------------
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Binding times :1
-----------------------------------------------------------------------------
Huawei_OLT(config)#
Huawei_OLT(config)#
Huawei_OLT(config)#display ont-srvprofile gpon profile-id 31
{<cr>||<K>}:
Command:
display ont-srvprofile gpon profile-id 31
-----------------------------------------------------------------------------
Profile-ID: 31
Profile-name: mona
Access-type: GPON
Huawei Access Certification Training Lab Guide Page 141
-----------------------------------------------------------------------------
Port-type Port-number Max-adaptive-number
-----------------------------------------------------------------------------
POTS adaptive 32
ETH adaptive 8
VDSL 0 -
TDM 0 -
MOCA 0 -
CATV 0 -
-----------------------------------------------------------------------------
TDM port type: E1
TDM service type: TDMoGem
MAC learning function switch: Enable
ONT transparent function switch: Disable
Ring check switch: Disable
Ring port auto-shutdown: Enable
Ring detect frequency: 8 (pps)
Ring resume interval: 300 (s)
Multicast forward mode: Unconcern
Multicast forward VLAN: -
Multicast mode: Unconcern
Upstream IGMP packet forward mode: Unconcern
Upstream IGMP packet forward VLAN: -
Upstream IGMP packet priority: -
Native VLAN option: Concern
Upstream PQ color policy: -
Downstream PQ color policy: -
-----------------------------------------------------------------------------
Port-type Port-ID QinQmode PriorityPolicy Inbound Outbound
-----------------------------------------------------------------------------
ETH 1 unconcern unconcern unconcern unconcern
ETH 2 unconcern unconcern unconcern unconcern
ETH 3 unconcern unconcern unconcern unconcern
ETH 4 unconcern unconcern unconcern unconcern
ETH 5 unconcern unconcern unconcern unconcern
ETH 6 unconcern unconcern unconcern unconcern
ETH 7 unconcern unconcern unconcern unconcern
ETH 8 unconcern unconcern unconcern unconcern
-----------------------------------------------------------------------------
Notes: Run the display traffic table ip command to query
traffic table configuration
-----------------------------------------------------------------------------
Port-type Port-ID DownstreamMode MismatchPolicy
-----------------------------------------------------------------------------
ETH 1 operation discard
ETH 2 operation discard
ETH 3 operation discard
ETH 4 operation discard
ETH 5 operation discard
ETH 6 operation discard
ETH 7 operation discard
ETH 8 operation discard
-----------------------------------------------------------------------------
Port-type Port-ID Dscp-mapping-table-index
-----------------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 142
ETH 1 0
ETH 2 0
ETH 3 0
ETH 4 0
ETH 5 0
ETH 6 0
ETH 7 0
ETH 8 0
IPHOST 1 0
-----------------------------------------------------------------------------
Port Port Service-type Index S-VLAN S-PRI C-VLAN C-PRI ENCAP S-PRI
type ID POLICY
-----------------------------------------------------------------------------
ETH 1 Translation 1 11 - 11 - - -
ETH 4 Translation 1 4000 - 4000 - - -
-----------------------------------------------------------------------------
Notes: * indicates transparent attribute of the vlan
-----------------------------------------------------------------------------
Port-type Port-ID IGMP-mode IGMP-VLAN IGMP-PRI Max-MAC-Count
-----------------------------------------------------------------------------
ETH 1 - - - Unlimited
ETH 2 - - - Unlimited
ETH 3 - - - Unlimited
ETH 4 - - - Unlimited
ETH 5 - - - Unlimited
ETH 6 - - - Unlimited
ETH 7 - - - Unlimited
ETH 8 - - - Unlimited
-----------------------------------------------------------------------------
Binding times: 1
-----------------------------------------------------------------------------
# Modify the ONT native VLAN.
HUAWEI(config-if-gpon-0/6)#ont port native-vlan 0 1
{eth<K>|iphost<K>|moca<K>}:eth
{ont-portid<U><1,8>}:4
{priority<K>|vlan<K>}:vlan 4000
{<cr>|priority<K>}:
Command:
ont port native-vlan 0 1 eth 4 vlan 4000
# Create a service virtual tunnel.
Huawei_OLT(config)#service-port vlan 4000 gpon 0/6/0 ont 1 gemport 1 multi-service user-vlan
4000
Step 4 Run the command to query the status of the security function.
Huawei_OLT(config)#display security config
{<cr>||<K>}:
Huawei Access Certification Training Lab Guide Page 143
Command:
display security config
Anti-ipspoofing function: disable
Anti-dos function: enable
Anti-macspoofing function: disable
Anti-ipattack function: disable
Anti-icmpattack function: disable
Source-route filter function: disable
Anti-macduplicate function: disable
PPPoE overall aging time(sec): 360
PPPoE aging period(sec): 90
ARP detect mode: dummy
Anti-dos control-packet policy: deny
Packet unaffected by anti-ipspoofing: --
NS-reply function: disable
NS-reply unknown-policy: forward
ARP-reply function: disable
ARP-reply unknown-policy: forward
Anti-ipv6spoofing function: disable
IPv6 DAD proxy function: disable
IPv6 bind route and ND: disable
Packet unaffected by anti-macspoofing: IGMP
DHCP client identifier: chaddr
Packet ignored by anti-macspoofing: --
Anti-illegal-arp function: enable
Anti-illegal-nd function: enable
User delete delay(sec): 0
Anti-macduplicate alarm function: disable
Anti-ipv6attack function: disable
Anti-icmpv6attack function: disable
Anti-ipconflict refresh function: disable
Step 5 Ping the IP address of VLAN 4000 on the OLT from the ONU PC.
Step 6 Run the security anti-ipattack enable command to enable the anti-IP attack
function.
Huawei_OLT(config)#security anti-ipattack enable
Step 7 Run the security anti-icmpattack enable command to enable the anti-ICMP attack
function.
Huawei_OLT(config)#security anti-icmpattack enable
Huawei_OLT(config)#display security config
{<cr>||<K>}:
Command:
display security config
Anti-ipspoofing function: disable
Anti-dos function: enable
Anti-macspoofing function: disable
Anti-ipattack function: enable
Anti-icmpattack function: enable
Source-route filter function: disable
Anti-macduplicate function: disable
Huawei Access Certification Training Lab Guide Page 144
PPPoE overall aging time(sec): 360
PPPoE aging period(sec): 90
ARP detect mode: dummy
Anti-dos control-packet policy: deny
Packet unaffected by anti-ipspoofing: --
NS-reply function: disable
NS-reply unknown-policy: forward
ARP-reply function: disable
ARP-reply unknown-policy: forward
Anti-ipv6spoofing function: disable
IPv6 DAD proxy function: disable
IPv6 bind route and ND: disable
Packet unaffected by anti-macspoofing: IGMP
DHCP client identifier: chaddr
Packet ignored by anti-macspoofing: --
Anti-illegal-arp function: enable
Anti-illegal-nd function: enable
User delete delay(sec): 0
Anti-macduplicate alarm function: disable
Anti-ipv6attack function: disable
Anti-icmpv6attack function: disable
Anti-ipconflict refresh function: disable
Step 8 Ping the IP address of VLAN 4000 on the OLT from the ONU PC again. To verify the
function of anti-ICMP/IP attack.
10.3 Verification
10.3.1 Check whether the PC can ping the OLT.
# When the anti-ICMP/IP attack function is enabled, the IP address of VLAN 4000 on
the OLT cannot be pinged from the PC. When the anti-ICMP/IP attack function is
disabled, the IP address can be pinged from the PC.
Huawei Access Certification Training Lab Guide Page 145
11 Configuring MAC Address Filterin
g
11.1 Experiment Introduction
11.1.1 About This Experiment
This chapter describes MAC address filtering to prevent malicious users from forging
MAC addresses of network devices to attack the carrier network.
11.1.2 Objectives
Describe the MAC address learning mechanism of Huawei devices.
Use the MAC address filtering function of Huawei devices.
The MAC address filtering function is configured on Huawei devices.
11.1.3 Experiment Networking
Figure 11-1 Networking diagram of anti-ICMP/IP attack
11.1.4 Experiment Planning
Table 11-1 Experiment Data Planning
Equipment Port Parameter
GIU 0/10/0
OLT
GPON 0/6/0
ONT ETH1 VLAN:11
PC Network port Automatic IP address obtaining
Huawei Access Certification Training Lab Guide Page 146
11.2 Experiment Task Configuration
11.2.1 Configuration Roadmap
In this experiment, PC1 connected to the OLT sends data packets. The source MAC
address of the packets is the same as the system MAC address of the OLT.
(1) The OLT is connected to the IP network through the upstream port, the data
configuration is complete, and the OLT works in the normal state.
PC1 is connected to the ONT through the voice phone, and the ONT is connected to the
GPBD board through optical splitter.
(3) Change the MAC address of PC1 to be the same as the MAC address of the system,
and simulate an unauthorized user to send packets to the device.
11.2.2 Configuration Procedure
Step 1 The data service of the terminal is added on the OLT according to the data plan.
Step 2 Check the MAC address of the OLT.
Huawei_OLT#display sysman
{centralized-mgmt<K>|console<K>|firewall<K>|ip-access<K>|ip-refuse<K>|mac-
address<K>|protocol-type<E><telnet,ssh,snmp>|service<K>|source<K>|vpn-instance<K>}: mac-
address
{<cr>||<K>}:
Command:
display sysman mac-address
Current MAC address of active control board: 487b-6b7d-ab36
Default MAC address of active control board: 487b-6b7d-ab36
Step 3 Check the MAC address of the network adapter that connects PC1 to the ONT port.
# On the PC, choose Start > Run. In the Run dialog box, enter cmd. In the displayed DOS
window, enter ipconfig/all under the cursor, as shown in the following figure.
Huawei Access Certification Training Lab Guide Page 147
Step 4 Change the MAC address of PC1 to be the same as the MAC address of the system.
# On the LAN or high-speed Ethernet card, choose Local Area Connection > Properties >
Network Card > Configuration > Advanced > Properties > Local Management Address >
Enter the MAC address to be modified. Enter the system MAC address. Record the
original MAC address of the network adapter before modification because the original
MAC address needs to be changed back after result verification.
Huawei Access Certification Training Lab Guide Page 148
Huawei Access Certification Training Lab Guide Page 149
Step 5 Change the MAC address of the network adapter on PC1 as follows: The MAC
address is the same as the system MAC address of the OLT.
Step 6 Disable the anti-ICMP/IP attack function and ping the VLAN interface address of
the OLT from PC1.
Step 7 Run the command to enable anti-MAC address filtering.
The Huawei_OLT(config)#security mac-filter source 487b-6b7d-ab36 command is repeated.
# Query anti-MAC address filtering.
Huawei Access Certification Training Lab Guide Page 150
Huawei_OLT(config)#display security mac-filter
{<cr>|destination<K>|dynamic<K>|source<K>||<K>}:
Command:
display security mac-filter
-------------------------------------------------------------------------
Index MAC-Address Type Filter-Mode VLAN
-------------------------------------------------------------------------
0 487B-6B7D-AB36 static source -
-------------------------------------------------------------------------
Total: 1
Step 8 Disables the anti-MAC address filtering function.
Huawei_OLT(config)#undo security mac-filter source 487B-6B7D-AB36
11.3 Verification
Before the anti-MAC address filtering function is enabled, the ping operation is
successful. After the anti-MAC address filtering function is enabled, the ping operation
fails. After the anti-MAC address filtering function is disabled, the ping operation is
successful.
Huawei Access Certification Training Lab Guide Page 151
12 Configuring Access/DOA Address
Segments
12.1 Experiment Introduction
12.1.1 About This Experiment
This chapter describes how to configure access or denial of access (DOA) address
segments for a firewall to prevent users on unauthorized address segments from
logging in to the system and therefore ensure system security.
12.1.2 Objectives
Describe the function of the permitted/rejected address segment of Huawei devices.
Use the function of allowing or denying access to the address segment on the
Huawei device.
This section describes how to maintain the firewall access control function of
Huawei devices.
12.1.3 Experiment Networking
Figure 12-1 Networking for the device to access the firewall
12.1.4 Experiment Planning
Table 12-1 Experiment Data Planning
Equipment Port Parameter
OLT GIU 0/19/0
Huawei Access Certification Training Lab Guide Page 152
Meth 0 IP address:192.168.41.130/25
PC2 IP address:192.168.41.20/25
12.2 Experiment Task Configuration
12.2.1 Configuration Procedure
Step 1 Run the firewall enable command to enable the firewall function. When you need
to prevent unauthorized users from intruding into the system, run this command to
enable the firewall function to filter out the packets from untrusted users. The
packet filtering firewall can be configured for a specified port only after the
firewall function is enabled.
Huawei_OLT(config)#firewall enable
Step 2 Add an ACL to allow the terminals in the 192.168.41.0/25 network segment to
access the device. The IP address of the device for outband maintenance is
192.168.41.130/25.
Huawei_OLT(config)#acl 3000
HUAWEI(config-acl-adv-3000)#rule 5
{deny<K>|permit<K>}:permit
{<0-255>|gre<K>|icmp<K>|ip<K>|ipinip<K>|tcp<K>|udp<K>}:ip
{<cr>|destination<K>|dscp<K>|fragment<K>|precedence<K>|source<K>|time-
range<K>|tos<K>}:source
{any<K>|ip_addr<I><X.X.X.X>}:192.168.41.0
{0<K>|ip_addr<I><X.X.X.X>}:0.0.0.127
{<cr>|destination<K>|dscp<K>|fragment<K>|precedence<K>|time-range<K>|tos<K>}:destination
{any<K>|ip_addr<I><X.X.X.X>}:192.168.41.130
{0<K>|ip_addr<I><X.X.X.X>}:0.0.0.0
{<cr>|dscp<K>|fragment<K>|precedence<K>|time-range<K>|tos<K>}:
Command:
rule 5 permit ip source 192.168.41.0 0.0.0.127 destination
192.168.41.130 0.0.0.0
Step 3 Prevent other IP addresses from accessing the device.
HUAWEI(config-acl-adv-3000)#rule
{deny<K>|integer<U><0,4294967294>|permit<K>}:10
{deny<K>|permit<K>}:deny
{<0-255>|gre<K>|icmp<K>|ip<K>|ipinip<K>|tcp<K>|udp<K>}:ip
{<cr>|destination<K>|dscp<K>|fragment<K>|precedence<K>|source<K>|time-
range<K>|tos<K>}:destination
{any<K>|ip_addr<I><X.X.X.X>}:192.168.41.130
{0<K>|ip_addr<I><X.X.X.X>}:0
{<cr>|dscp<K>|fragment<K>|precedence<K>|source<K>|time-range<K>|tos<K>}:
Command:
rule 10 deny ip destination 192.168.41.130 0
Huawei Access Certification Training Lab Guide Page 153
Step 4 Enable the ACL on the outband interface.
Huawei_OLT(config)#interface meth 0
HUAWEI(config-if-meth0)#firewall
{packet-filter<K>}:packet-filter
{INTEGER<2000-2999>|INTEGER<3000-3999>}:3000
{inbound<K>|outbound<K>}:inbound
Command:
firewall packet-filter 3000 inbound
ACL applied successfully
12.3 Verification
12.3.1 Check whether the PC can log in to the OLT.
Before the access control list (ACL) is enabled, terminals in different network segments
from the maintenance network can access the OLT. After the ACL is enabled, only the
IP addresses that are allowed to access the OLT can be used to access the OLT.
Huawei Access Certification Training Lab Guide Page 154
13 802.1X authentication
13.1 Experiment Introduction
13.1.1 About This Experiment
This topic describes how to configure 802.1X authentication for the ONT to improve
user access security and system security.
13.1.2 Objectives
Describe the application scenarios of 802.1X authentication.
Understand how to configure OLT 802.1x.
13.1.3 Experiment Networking
Figure 13-1 Networking diagram of 802.1x authentication
13.1.4 Experiment Planning
Table 13-1 Experiment Data Planning
Equipment Port Parameter
GIU 0/19/0
OLT
Authentication IP
Radius
address: 10.10.66.66
Huawei Access Certification Training Lab Guide Page 155
13.2 Experiment Task Configuration
13.2.1 Configuration Roadmap
The core switch functions as the 802.1X authentication device, and 802.1X protocol
packet transparent transmission is configured on the OLT.
13.2.2 Configuration Procedure
Step 1 The ONU/OLT goes online normally and is in the normal state. By default, the ONU
transparently transmits EAPOL and BPDU packets.
Step 2 Configure the OLT to transparently transmit EAPoL packets.
Huawei_OLT(config)#protocol permit-forwarding eapol enable
Step 3 Configure the OLT to transparently transmit BPDU packets.
Huawei_OLT(config)#vlan service-profile profile-id 10
huawei(config-vlan-srvprof-10)#bpdu tunnel enable
huawei(config-vlan-srvprof-10)#commit
huawei(config-vlan-srvprof-10)#quit
Huawei_OLT(config)#vlan bind service-profile 11 profile-id 10
13.3 Verification
After the configuration is complete, 802.1X-related protocol packets are transparently transmitted
to the core switch for 802.1X authentication. Check whether the PC can obtain an IP address.
Huawei Access Certification Training Lab Guide Page 156
14 PON Networking Protection
Configuration
14.1 Experiment Introduction
14.1.1 About This Experiment
This document describes how to configure and verify GPON downstream and upstream
network protection, including GPON type B protection, GPON type C protection,
Ethernet link aggregation, and Ethernet port protection groups.
14.1.2 Objectives
Describe the application scenarios of the GPON Type B/Type C protection
switching solution.
Complete the configuration of the GPON type B/type C protection switching
solution.
To verify the GPON Type B/Type C protection switching
Learn how to configure Ethernet link aggregation protection.
Master the working configuration of the Ethernet port protection group.
Huawei Access Certification Training Lab Guide Page 157
14.1.3 Configuring Type B Single-Homing Automatic Protection
Switching
14.1.3.1 Experiment Networking
14.1.3.2 Experiment Planning
Item Data
OLT upstream port Upstream port: 0/19/0
Active and standby Master port:0/5/0 Slaver port:0/6/0
PON ports on the OLT
14.1.3.3 Configuration Procedure
After the type B protection is configured, the service configuration of the ONU is the
same as that before the protection. That is, the service configuration is still applied to
only the active GPON port.
Huawei Access Certification Training Lab Guide Page 158
For details about the steps in orange, see the Configuration Guide to the
GPON Data and Voice Multicast Service.
Step 1 You have logged in to the system as an administrator.
Step 2 Configure a protection group.
Huawei_OLT(config)#protect-group
{pgid<U><0,511>|protect-target<K>}:0
{<cr>|protect-target<K>}:protect-target
{as-mainboard-lag<K>|as-mainboard-port<K>|as-mainboard<K>|epon-uni-
ont<K>|epon-uni-port<K>|eth-nni-lag-member<K>|eth-nni-port<K>|gpon-uni-
ont<K>|gpon-uni-port<K>|service-process-board<K>|stm-nni-port<K>}:gpon-uni-port
{workmode<K>}:workmode
{timedelay<K>}:timedelay
Command:
protect-group 0 protect-target gpon-uni-port workmode timedelay
Step 3 Configure the active and standby members in the protection group.
huawei(protect-group-0)#protect-group member
Huawei Access Certification Training Lab Guide Page 159
{board<K>|port<K>}:port 0/5/0
{ont<K>|role<K>}:role
{member-role<E><work,protect>}:work
Command:
protect-group member port 0/5/0 role work huawei(protect-group-0)#protect-group
member port 0/6/0 role protect
Step 4 Enable a protection group.
huawei(protect-group-0)#protect-group enable
huawei(protect-group-0)#quit
Step 5 Adding templates
Step 6 Add a terminal to PON port 0/5/0 and bind a profile to the terminal.
Step 7 Verify that data, voice, and FTP services are normal.
Step 8 To query the initial status of a protection group
Huawei_OLT(config)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work none active none
0/6/0 protect none standby none
-----------------------------------------------------------------------
Step 9 Simulate the removal of the optical fiber from the active PON port 0/5/0. The
system switches to the standby PON port 0/6/0 instantly.
Check the protection group status.
huawei(protect-group-0)#display protect-group 0
Huawei Access Certification Training Lab Guide Page 160
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work auto switch src standby 0/5/0
0/6/0 protect auto switch dst active 0/6/0
-----------------------------------------------------------------------
Step 10 Restore the optical fiber of PON port 0/5/0, and then remove the optical fiber of
the active PON port 0/6/0. The system switches to PON port 0/5/0 instantly.
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 161
0/5/0 work none active none
0/6/0 protect none standby none
-----------------------------------------------------------------------
Step 11 The system supports forced switching. For example, to forcibly switch services from
the active PON port 0/5/0 to 0/6/0, check the status of the protection group.
huawei(protect-group-0)# force-switch port 0/5/0 to 0/6/0
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work force switch src standby 0/6/0
0/6/0 protect force switch dst active 0/5/0
-----------------------------------------------------------------------
Step 12 After a forced switchover, the automatic switchover fails and services are
interrupted if the optical fiber connected to the active PON port 0/6/0 is removed.
Check the protection group status.
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Huawei Access Certification Training Lab Guide Page 162
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work force switch src standby 0/6/0
0/6/0 protect force switch dst active 0/5/0
-----------------------------------------------------------------------
Step 13 Cancel Forced Switching
huawei(protect-group-0)# undo force-switch port 0/5/0 to 0/7/0
Step 14 Check the status change of the protection group when all ONTs connected to the
PON port go offline. The initial configuration is as follows:
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work none active none
0/6/0 protect none standby none
-----------------------------------------------------------------------
Step 15 Shut down all the ONTs connected to the PON port or remove the optical fibers
connected to all the ONTs. Then, the system automatically performs the
switchover.
Huawei Access Certification Training Lab Guide Page 163
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: Port of GPON uni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
PPPoE Single MAC: Unbind
Standard type B: no
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work auto switch src standby 0/6/0
0/6/0 protect auto switch dst active 0/5/0
-----------------------------------------------------------------------
Step 16 Deleting a PON Protection Pair
Huawei_OLT(config)#protect-group 0
huawei(protect-group-0)#protect-group disable
huawei(protect-group-0)#undo protect-group member port 0/6/0
huawei(protect-group-0)#undo protect-group member port 0/5/0
huawei(protect-group-0)#quit
Huawei_OLT(config)#undo protect-group 0
To delete a protect group, disable the protect group, delete the member port (standby
port), and then delete the protect group.
Huawei Access Certification Training Lab Guide Page 164
14.1.4 Configuring Type B Dual-Homing Automatic Switching
Protection
14.1.4.1 Experiment Networking
14.1.4.2 Experiment Planning
Item Data
IP addresses of the IP address of the active OLT: 10.175.192.35/22
active and standby Standby OLT IP address: 10.175.192.36/22
OLTs
Active and standby 0/5/0
OLT PON ports
14.1.4.3 Configuration Procedure
Huawei Access Certification Training Lab Guide Page 165
Step 1 You have logged in to the system as an administrator.
Step 2 Configure IP interworking between the active and standby OLTs.
Step 3 Configure type B dual-homing protection on the active OLT huawei.
Huawei_OLT(config)#dual-parenting local-node ip-address 10.175.192.35 port 6076 key
work_4234
Huawei_OLT(config)#dual-parenting peer-node standby ip-address 10.175.192.36 port
6076 key protect_4234
Huawei_OLT(config)#dual-parenting sync enable
Huawei_OLT(config)#protect-group 1 protect-target gpon-uni-port workmode dual-
parenting
huawei(protect-group-1)#protect-group member port 0/5/0 role work
huawei(protect-group-1)#peer-group-member peer-node standby peer-port 0/5/0
huawei(protect-group-1)#uplink-monitor port 0/9/1
huawei(protect-group-1)#quit:
Step 4 Configure type B dual-homing protection on the standby OLT huawei.
Huawei Access Certification Training Lab Guide Page 166
Huawei_OLT(config)#dual-parenting local-node ip-address 10.175.192.36 port 6076 key
protect_4234
Huawei_OLT(config)#dual-parenting peer-node active ip-address 10.175.192.35 port
6076 key work_4234
Huawei_OLT(config)#dual-parenting sync enable
Huawei_OLT(config)#protect-group 1 protect-target gpon-uni-port workmode dual-
parenting
huawei(protect-group-1)#protect-group member port 0/5/0 role protect
huawei(protect-group-1)#peer-group-member peer-node active peer-port 0/5/0
huawei(protect-group-1)#protect-group enable
huawei(protect-group-1)#uplink-monitor port 0/9/1
huawei(protect-group-1)#quit
Step 5 To query the information about the working OLT protection group
Huawei_OLT(config)#display protect-group 1
{<cr>||<K>}:
Command:
display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of GPON uni
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
Monitor uplink: port 0/9/0
Uplink status: normal
Standard type B: no
Peer node name: standby
Peer port: 0/5/0
Handshake state: normal
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work none active none
Huawei Access Certification Training Lab Guide Page 167
-----------------------------------------------------------------------
Standby Member Status: ready
Step 6 Query the information about the dual-homing peer node.
huawei#display dual-parenting peer-node
{<cr>|node-name<S><Length 1-15>}:
Command:
display dual-parenting peer-node
-----------------------------------------------------------------------
Node name IP address TCP port State
-----------------------------------------------------------------------
standy 10.175.192.36 6076 normal
-----------------------------------------------------------------------
Step 7 Disconnect the backbone optical fiber of the working OLT and query the protection
group information of the working OLT.
Huawei_OLT(config)#display protect-group 1
{<cr>||<K>}:
Command:
display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of GPON uni
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
Monitor uplink: port 0/9/0
Uplink status: normal
Standard type B: no
Peer node name: standby
Peer port: 0/5/0
Handshake state: normal
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 168
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work auto switch src standby none
-----------------------------------------------------------------------
Standby Member Status: ready
Step 8 Query information about the protection group on the standby OLT.
Huawei_OLT(config)#display protect-group 1
{<cr>||<K>}:
Command:
display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of GPON uni
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
Monitor uplink: port 0/9/0
Uplink status: normal
Standard type B: no
Peer node name: active
Peer port: 0/5/0
Handshake state: normal
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 protect auto switch src active none
-----------------------------------------------------------------------
Standby Member Status: ready
Step 9 Restore the fiber connection of the working OLT, disconnect the fiber connection of
the protection OLT, restore the working status of the working OLT, disconnect the
upstream port 0/9/1 of the OLT, and check the status of the protection group on
the working OLT.
Huawei Access Certification Training Lab Guide Page 169
Huawei_OLT(config)#display protect-group 1
{<cr>||<K>}:
Command:
display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of GPON uni
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Anti-jitter Time(s): 720
Monitor uplink: port 0/9/1
Uplink status: fault
Standard type B: no
Peer node name: standby
Peer port: 0/5/0
Handshake state: normal
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0 work auto switch src standby none
-----------------------------------------------------------------------
Standby Member Status: ready
Step 10 Delete a protection group.
huawei(protect-group-1)#undo protect-group member port 0/5/0
huawei(protect-group-1)#undo peer-group-member
Huawei_OLT(config)#undo protect-group 1
Huawei_OLT(config)#dual-parenting sync disable
Huawei_OLT(config)#undo dual-parenting local-node
Huawei_OLT(config)#undo dual-parenting peer-node standby
Huawei Access Certification Training Lab Guide Page 170
14.1.5 Configuring Type C Single-Homing Automatic Protection
Switching
14.1.5.1 Experiment Networking
14.1.5.2 Experiment Planning
Item Data
OLT upstream port Upstream port: 0/19/0
OLT PON port Master port:0/5/0 Slaver port:0/5/1
14.1.5.3 Configuration Procedure
After GPON type C single-homing protection is configured, service configurations for
ONU access are the same as those before the protection. That is, service configurations
are still applied only to the active PON port of the OLT and the active PON upstream
port of the ONU.
Huawei Access Certification Training Lab Guide Page 171
For details about the steps in orange, see the Configuration Guide to the
GPON Data and Voice Multicast Service.
Step 1 You have logged in to the system as an administrator.
Step 2 Add a working ONU.
huawei(config-if-gpon-0/5)#ont add 0 1 sn-auth 48575443F4400D04 snmp ont-
lineprofile-id 23
Huawei Access Certification Training Lab Guide Page 172
{<cr>|desc<K>}:
Command:
ont add 0 1 sn-auth 48575443F4400D04 snmp ont-lineprofile-id 23
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :1
Step 3 Adding a Protection-Side ONU
huawei(config-if-gpon-0/5)#ont add 1 1 protect-side
Number of ONTs that can be added: 1, success: 1
PortID :1, ONTID :1
Step 4 Add a GPON type C protection group, add working members to the protection
group, and enable the protection group.
Huawei_OLT(config)#protect-group protect-target gpon-uni-ont workmode portstate
huawei(protect-group-0)#protect-group member port 0/5/0 ont 1 role work
huawei(protect-group-0)#protect-group member port 0/5/1 ont 1 role protect
huawei(protect-group-0)#protect-group enable
Step 5 Configure the ONU service and verify the data. It is found that the voice service is
normal.
Step 6 To query the initial status of a protection group
Huawei_OLT(config)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: ONT of GPON
Work Mode: portstate
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work none active none
0/5/1/1 protect none standby none
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 173
Step 7 Ping the management IP address of the ONU. During this process, remove the
optical fiber of the active PON port 0/5/0. The ONU switches to the standby PON
port and goes online immediately. The ping test is not interrupted.
Huawei_OLT(config)#ping -c 100 10.175.192.41
PING 10.175.192.41:56 data bytes, press CTRL_C to break
Reply from 10.175.192.41: bytes=56 Sequence=1 ttl=255 time=10 ms
Reply from 10.175.192.41: bytes=56 Sequence=2 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=3 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=4 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=5 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=6 ttl=255 time=6 ms
Reply from 10.175.192.41: bytes=56 Sequence=7 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=8 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=9 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=10 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=11 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=12 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=13 ttl=255 time=18 ms
Reply from 10.175.192.41: bytes=56 Sequence=14 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=15 ttl=255 time=7 ms
Reply from 10.175.192.41: bytes=56 Sequence=16 ttl=255 time=13 ms
Reply from 10.175.192.41: bytes=56 Sequence=17 ttl=255 time=7 ms
Step 8 To query the status of a protection group
Huawei_OLT(config)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: ONT of GPON
Work Mode: portstate
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work auto switch src standby 0/5/1/1
Huawei Access Certification Training Lab Guide Page 174
0/5/1/1 protect auto switch dst active 0/5/0/1
-----------------------------------------------------------------------
Step 9 Reconnect the optical fiber to port 0/5/0, and then disconnect the optical fiber from
the active PON port 0/5/1. The ONU switches to PON port 0/5/0 and goes online.
Query the protection group status.
Huawei_OLT(config)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: ONT of GPON
Work Mode: portstate
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work none active none
0/5/1/1 protect none standby none
-----------------------------------------------------------------------
Step 10 The system supports the forced switching. For example, the ONU is forcibly
switched from the active PON port 0/5/0 to 0/5/1. Query the protection group
status.
huawei(protect-group-0)#force-switch port 0/5/0 ont 1 to 0/5/1 ont 1
huawei(protect-group-0)#display protect-group 0
-----------------------------------------------------------------------
Group ID: 0
Protect Target: ONT of GPON
Work Mode: portstate
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
Huawei Access Certification Training Lab Guide Page 175
-----------------------------------------------------------------------
0/5/0/1 work force switch src standby 0/5/1/1
0/5/1/1 protect force switch dst active 0/5/0/1
-----------------------------------------------------------------------
Step 11 After a forced switchover, the optical fiber connected to the active PON port 0/5/1
cannot be automatically switched, and services are interrupted. Query the status of
the 0/5/1 port and the protection group.
huawei(config-if-gpon-0/5)#display port state 1
----------------------------------------------------------------------------
F/S/P 0/5/1
Optical Module status Online
Port state Offline
Port energy-saving flag No
xPON MAC chipset state Normal
Last down cause LOS
Last up time 2018-07-10 13:57:15+08:00
Last down time 2018-07-10 14:18:39+08:00
Laser state Normal
Available bandwidth(Kbps) 1241088
Temperature(C) 44
TX Bias current(mA) 40
Supply Voltage(V) 3.39
TX power(dBm) 3.90
Illegal rogue ONT Inexistent
Max rate(Kbps) 2500000
Max Distance(Km) 20
Wave length(nm) 1490
Fiber type Single Mode
Signal detect Failed
TX fault Normal
Identifier SFP
Ext.Identifier GBIC/SFP function is defined by serial ID only
Connector SC
Encoding NRZ
Length(9μm)(km) 20.0
......
Huawei_OLT(config)#display protect-group 0
Huawei Access Certification Training Lab Guide Page 176
-----------------------------------------------------------------------
Group ID: 0
Protect Target: ONT of GPON
Work Mode: portstate
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work force switch src standby 0/5/1/1
0/5/1/1 protect force switch dst active 0/5/0/1
-----------------------------------------------------------------------
Step 12 Cancel the forced switching and query the protection group status.
huawei(protect-group-0)#undo force-switch port 0/5/0 ont 1 to 0/5/1 ont 1
Step 13 Deleting a PON Protection Pair
huawei(protect-group-0)#protect-group disable
huawei(protect-group-0)#undo protect-group member port 0/5/1 ont 1
huawei(protect-group-0)#undo protect-group member port 0/5/0 ont 1
huawei(protect-group-0)#quit
Huawei_OLT(config)#undo protect-group 0
Huawei Access Certification Training Lab Guide Page 177
14.1.6 Configuring Type C Dual-Homing Automatic Switching
Protection
14.1.6.1 Experiment Networking
14.1.6.2 Experiment Planning
Item Data
IP addresses of the IP address of the active OLT: 10.175.192.35/22
active and standby Standby OLT IP address: 10.175.192.36/22
OLTs
Active and standby 0/5/0
OLT PON ports
14.1.6.3 Configuration Procedure
Huawei Access Certification Training Lab Guide Page 178
Step 1 You have logged in to the system as an administrator.
Step 2 Configure GPON type C dual-homing protection on the active OLT.
huawei(config-if-gpon-0/5)#ont add 0 1 sn-auth 48575443F4400D04 snmp ont-
lineprofile-id 23
{<cr>|desc<K>}:
Command:
ont add 0 1 sn-auth 48575443F4400D04 snmp ont-lineprofile-id 23
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :1
Huawei_OLT(config)#protect-group 1 protect-target gpon-uni-ont workmode dual-
parenting
huawei(protect-group-1)#protect-group member port 0/5/0 ont 1 role work
After a working member is added to a dual-homing protection group, the protection
group is automatically enabled.
Huawei Access Certification Training Lab Guide Page 179
Step 3 Configure GPON type C dual-homing protection on the standby OLT.
huawei(config-if-gpon-0/5)#ont add 0 1 sn-auth 48575443F4400D04 snmp ont-
lineprofile-id 23
{<cr>|desc<K>}:
Command:
ont add 0 1 sn-auth 48575443F4400D04 snmp ont-lineprofile-id 23
Number of ONTs that can be added: 1, success: 1
PortID :0, ONTID :1
Huawei_OLT(config)#protect-group 1 protect-target gpon-uni-ont workmode dual-
parenting
huawei(protect-group-1)#protect-group member port 0/5/0 ont 1 role protect
huawei(protect-group-1)#protect-group enable
All profiles (such as the DBA profile and line profile) of the active and standby ONUs
must be the same.
Step 4 Configure the ONU service and verify the data. It is found that the voice service is
normal.
Step 5 Query the initial status of the protection group on the active OLT.
Huawei_OLT(config)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: ONT of GPON
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Monitor uplink: -
Uplink status: -
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work none active none
-----------------------------------------------------------------------
Step 6 The standby OLT is queried as follows:
Huawei_OLT(config)#display protect-group 1
Huawei Access Certification Training Lab Guide Page 180
-----------------------------------------------------------------------
Group ID: 1
Protect Target: ONT of GPON
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Monitor uplink: -
Uplink status: -
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 protect none standby none
-----------------------------------------------------------------------
Step 7 Remove the optical fiber from PON port 0/5/0 of the active OLT. The ONU switches
to the standby OLT immediately. Check the status of the protection group on the
active OLT after the switchover. The following figure shows the query result on the
active OLT.
Huawei_OLT(config)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: ONT of GPON
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Monitor uplink: -
Uplink status: -
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 work auto switch src standby none
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 181
Step 8 The standby OLT is queried as follows:
Huawei_OLT(config)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: ONT of GPON
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Monitor uplink: -
Uplink status: -
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/5/0/1 protect auto switch dst active none
-----------------------------------------------------------------------
Step 9 Reconnect the optical fiber of the active OLT 0/5/0, and then remove the optical
fiber of the active PON port on the standby OLT 0/5/0. The ONU switches to the
active OLT and goes online immediately. Query the protection group status of the
standby OLT.
Huawei_OLT(config)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: ONT of GPON
Work Mode: dual-parenting
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
Monitor uplink: -
Uplink status: -
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 182
0/5/0/1 protect auto switch src standby none
-----------------------------------------------------------------------
Step 10 Delete the active and standby OLT type C protection configurations.
Active OLT:
huawei(protect-group-1)#undo protect-group member port 0/5/0 ont 1
Huawei_OLT(config)#undo protect-group 1
Standby OLT:
huawei(protect-group-1)# protect-group disable
huawei(protect-group-1)#undo protect-group member port 0/5/0 ont 1
Huawei_OLT(config)#undo protect-group 1
14.1.7 Configuring Ethernet Link Aggregation
14.1.7.1 Networking Topology
Huawei Access Certification Training Lab Guide Page 183
14.1.7.2 Experiment Planning
OLT upstream port L3 Switch Interface VLAN Planning
0/19/0 0/0/3 Data: 2000
Voice: 172
0/20/0 0/0/4 Video: 200
14.1.7.3 Configuration Procedure
Step 1 Create an inter-board Ethernet aggregation group. The OLT uses the GIU board for
upstream transmission. Upstream ports 0/19/0 and 0/20/0 on the active and
standby GIU boards are configured as an inter-board aggregation group. Each
member port in the aggregation group distributes packets based on the source and
destination MAC addresses and works in LACP static aggregation mode.
huawei (config)#link-aggregation 0/19 0 0/20 0 egress-ingress workmode lacp-static
Step 2 Query the configuration.
Huawei_OLT(config)#display link-aggregation all
-------------------------------------------------------------------------
Master port Link aggregation mode Port NUM Work mode Max link number
-------------------------------------------------------------------------
0/19/0 egress-ingress 2 lacp-static -
-------------------------------------------------------------------------
Total: 1 link aggregation(s)
Step 3 Queries the configuration of an LACP static aggregation group.
Huawei_OLT(config)#display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 2 0 YES NO 0 /19/0
--------------------------------------------------------------------
Huawei_OLT(config)#display lacp link-aggregation verbose
{INTERGER<1-512>}:1
Huawei Access Certification Training Lab Guide Page 184
Command:
display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Step 4 Connects to the L3 switch. The following uses Huawei S3300 as an example to
describe how to configure data.
//Add VLANs that are allowed to pass the LAG to the LAG.
//<Quidway>system-view
//[Quidway]vlan 2000 172 200
//[Quidway]interface Eth-Trunk 1
//[Quidway-Eth-Trunk1]port link-type trunk
//[Quidway-Eth-Trunk1]port trunk allow-pass vlan 2000 172 200
//Add Eth-trunk interfaces GE0/0/3 and GE0/0/4.
//[Quidway]interface eth-trunk 1
//[Quidway-Eth-Trunk1]bpdu enable
//[Quidway-Eth-Trunk1]mode lacp-static
//[Quidway]interface GigabitEthernet 0/0/3
//[Quidway-GigabitEthernet0/0/3]eth-trunk 1
//[Quidway-GigabitEthernet0/0/3]quit
//[Quidway]interface GigabitEthernet 0/0/4
//[Quidway-GigabitEthernet0/0/4]eth-trunk 1
//[Quidway-GigabitEthernet0/0/4]quit
Huawei Access Certification Training Lab Guide Page 185
//Configure a trunk interface on the upstream Layer 3 interface to transparently
transmit the VLAN tags and send the VLAN tags to the upper-layer network.
//Add GE0/0/1 to Eth-trunk 1.
//[Quidway-GigabitEthernet0/0/1]eth-trunk 1 0
Step 5 Queries the configuration of an LACP static aggregation group.
Huawei_OLT(config)# display lacp link-aggregation port 0/19/0
Port Number: 1
Selected AggID: 1
System ID: 32768, 707b-e800-304d
Received LACPDU: 301
Illegal LACPDU: 0
Sent LACPDU: 38
Actor
Port-priority: 16384
Oper-key: 1
Flag: 3F
Type: Master port
Role: SELECTED
Status: C&D
Partner
System ID: 32768, 0819-a6ec-c4ed
Port Number: 3
Port-priority: 32768
Oper-key: 305
Flag: 3D
huawei (config)# display lacp link-aggregation port 0/20/0
Port Number: 2
Selected AggID: 1
System ID: 32768, 707b-e800-304d
Received LACPDU: 312
Illegal LACPDU: 0
Sent LACPDU: 17
Actor
Port-priority: 16384
Huawei Access Certification Training Lab Guide Page 186
Oper-key: 1
Flag: 3F
Type: Sub port
Role: SELECTED
Status: C&D
Partner
System ID: 32768, 0819-a6ec-c4ed
Port Number: 4
Port-priority: 32768
Oper-key: 305
Flag: 3D
Step 6 To add an upstream port to a VLAN, you only need to add a member port to the
aggregation group. Example:
Huawei_OLT(config)#vlan 200
{<cr>|to<K>|vlantype<E><mux,standard,smart,super>}:smart
command:
vlan 200 smart
MA5600T(config)#port vlan 200 0/19 0
The port list includes link aggregation or protect group port(s),
so the other link aggregation or protect group port(s)
not being included by the port list will be processed
Query VLAN 20.
MA5600T(config)#display vlan 20
{<cr>|to<K>}:
Command:
display vlan 200
VLAN ID: 200
VLAN type: smart
VLAN attribute: common
VLAN description:
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
Huawei Access Certification Training Lab Guide Page 187
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
------------------------------
F/S /P Native VLAN State
------------------------------
0/19/0 1 up
0/20/0 1 up
------------------------------
Standard port number: 2
Service virtual port number: 0
Step 7 Port mirroring is used to capture LACP packets. Mirror the traffic on port 0/19/0 to
port 0/19/1.
Huawei_OLT(config)#interface giu 0/19
MA5600T(config-if-giu-0/19)#mirror port
{src-portid<U><0,1>}:0
{dst-portid<U><0,1>}:1
{mirror-direction<E><ingress,egress,all>}:all
Command:
mirror port 0 1 all
MA5600T(config-if-giu-0/19)#display mirror
--------------------------------------------------
Source port Direction Destination port
(F/ S/ P) (F/ S/ P)
--------------------------------------------------
0/19/ 0 all 0/19/ 1
--------------------------------------------------
Format and content of LACPDUs
Destination MAC address: 0x0180-c200-0002,
Source MAC address,
Protocol type: The value is 0x8809, and the subtype value is 0x01, indicating LACP
packets,
Version: The current version is 0x01,
Actor information: carries information about the local system and port, such as the
system ID, port priority, and key,
Huawei Access Certification Training Lab Guide Page 188
Partner information: includes the information about the peer system that is currently
stored in the local system. Other information is reserved.
The captured packets are as follows:
Step 8 Run the link-aggregation add-member command to add upstream port 0/20/1 to
the existing aggregation group to further improve the bandwidth or reliability of
the existing aggregation group. After a port is added to an aggregation group, the
bandwidth of the aggregation group is increased and the link reliability is
improved.
MA5600T(config)#link-aggregation add-member
Shelf/slot/port of the master port in the {frame/slot/port<S><Length 5-7>}:0/19/0 //
aggregation group
{frame/slot<S><Length 3-4>}:0/20 //: subrack ID and slot ID of the port to be added to
the aggregation group
{port-list<S><Length 1-255>}:1
{<cr>|frame/slot<S><Length 3-4>}:
Command:
link-aggregation add-member 0/19/0 0/20 1
Query the status of the added port 0/20/1.
MA5600T(config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Huawei Access Certification Training Lab Guide Page 189
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Run the following command to delete a member port:
Huawei_OLT(config)#link-aggregation delete-member 0/19/0 0/20 1
Step 9 Run the link-aggregation max-link-number command to configure the maximum
number of links in an Ethernet port aggregation group. The maximum number of
links in an aggregation group is the maximum number of ports that can forward
packets in the aggregation group. This implements the active/standby protection of
the links in the LAG. If the port for forwarding packets in the aggregation group is
faulty, the standby port is selected to forward packets.
Huawei_OLT(config)#link-aggregation max-link-number
{frame/slot/port<S><Length 5-7>}:0/19/0
{link-number<U><1,8>}:2
Command:
link-aggregation max-link-number 0/19/0 2
Query the status of the aggregation group.
MA5600T(config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Huawei Access Certification Training Lab Guide Page 190
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: STANDBY Port Status: Non-C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
To query the summary of LACP static aggregation, run the following command:
Huawei_OLT(config)#display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 2 1 YES NO 0 /19/0
--------------------------------------------------------------------
Run the undo link-aggregation max-link-number command to restore the maximum
number of links in an aggregation group to the default value. That is, all the ports in
the aggregation group can forward packets for protection. The active/standby
protection function of the links in the aggregation group is disabled.
Step 10 Working principle of LACP:
The OLT and Layer 3 switch send protocol packets to each other.
The devices at both ends determine the Actor based on the system priority.
Finally, the active interfaces on both ends are determined according to the upper
threshold of active interfaces and the maximum number of active interfaces on the
Actor.
If an active link fails, the Actor selects the link with the highest priority from the N
backup links to take over the services.
Step 11 Determine the active end, active interface, and standby interface between the OLT
and the interconnected Layer 3 device based on the LACP working principle.
Step 12 Verify the LAG function based on step 8.
Huawei Access Certification Training Lab Guide Page 191
Remove the network cable from network port 0/19/0 and check the LAG status.
huawei (config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 0
Port Role: STANDBY Port Status: Non-C&D
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Huawei_OLT(config)# display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 2 1 YES NO 0 /19/0
--------------------------------------------------------------------
Step 13 Reconnect the network cable to network port 0/19/0 and check the LAG status.
Remove the network cable from network port 0/20/0 and check the LAG status.
Huawei_OLT(config)#display lacp link-aggregation verbose 1
System Priority: 32768
Huawei Access Certification Training Lab Guide Page 192
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 0
Port Role: STANDBY Port Status: Non-C&D
Huawei_OLT(config)#display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 2 1 YES NO 0 /19/0
--------------------------------------------------------------------
Step 14 Reconnect the network cable to network port 0/20/0 and check the LAG status.
Remove the network cable from network port 0/20/1 and check the LAG status.
Huawei_OLT(config)#display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
Huawei Access Certification Training Lab Guide Page 193
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 2 1 YES NO 0 /19/0
--------------------------------------------------------------------
Huawei_OLT(config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 1
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 0
Port Role: STANDBY Port Status: Non-C&D
Step 15 Reconnect the network cable to network port 0/20/1 and check the LAG status.
Remove the network cables from any two network ports on 0/19/0 0/20/0 0/20/1,
and check the status.
Huawei_OLT(config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address: 707b-e800-304d
Protect Mode: Non-BackupProtect
Master Port: 0/19/0
Actor Port Priority: 16384 Oper-key: 1
Huawei Access Certification Training Lab Guide Page 194
Port Role: SELECTED Port Status: C&D
Partner System Priority: 32768 MAC Address: 0819-a6ec-c4ed
Port Priority: 32768 Oper-key: 305
Sub Port: 0/20/0
Actor Port Priority: 16384 Oper-key: 0
Port Role: STANDBY Port Status: Non-C&D
Sub Port: 0/20/1
Actor Port Priority: 16384 Oper-key: 0
Port Role: STANDBY Port Status: Non-C&D
Huawei_OLT(config)#display lacp link-aggregation summary
Actor
Priority: 32768 MAC Address: 707b-e800-304d
Short Period: 1 s Long Period: 30 s
Priority Preemption: Disable
--------------------------------------------------------------------
Agg Partner Partner Select Standby Load Backup Master
ID Pri MAC Ports Ports Sharing Protect Port
--------------------------------------------------------------------
1 32768 0819-a6ec-c4ed 1 2 YES NO 0 /19/0
--------------------------------------------------------------------
Step 16 To verify the impact on services when the network cable is removed from a
network port in a LAG.
Perform the following operations in sequence:
Remove the network cable from port 0/19/0 and then connect the network cable to
port 0/19/0.
Remove the network cable from port 0/20/0.
Remove the network cable from port 0/21/0.
Remove the network cables 0/20/0 and 0/21/0 at the same time, and then the fault is
rectified.
Remove the network cables from ports 0/19/0 and 0/20/0 at the same time.
Perform a ping test to check the impact on services.
Step 17 Create an Ethernet aggregation group - inter-board aggregation. Example:
The MA5600T/MA5603T uses the GIU board for upstream transmission. Upstream ports
0/19/0 and 0/20/0 on the active and standby GIU boards are configured as an inter-
board aggregation group. Each member port in the aggregation group distributes
Huawei Access Certification Training Lab Guide Page 195
packets based on the source and destination MAC addresses and works in LACP static
aggregation mode.
huawei (config)#link-aggregation 0/19 0 0/20 0 egress-ingress workmode lacp-static
Step 18 Create an aggregation group (with the control board and upstream board). For
example:
When the MA5600T/MA5603T is configured with only one SCUN control board, the
control board and the GIU slot are configured as an inter-board aggregation group. The
member ports in the aggregation group distribute packets according to the source MAC
address and work in LACP static aggregation mode.
Huawei_OLT(config)#link-aggregation 0/9 0-3 0/20 0-1 ingress workmode lacp-static
----End
Verification
(1) Because the LAG works in load sharing mode, the link is set up in egress-ingress
mode according to the packet distribution mode of the LAG in step 1. The member ports
in the LAG select a link to distribute packets according to the source MAC address,
destination MAC address, and internal algorithm of the system. Therefore, the link
selection is unique. If there are N active links in a LAG, the impact of link interruption
on services is 1/N. In this case, some data flows forwarded on the link may be lost.
(2) Services are not interrupted when any link is removed during a voice service call,
but the service quality is not affected. If the data service is not obviously perceived,
perform the ping test and obtain the packet header on the port for analysis.
Ping test result: Each time the network cable is removed and inserted, packet loss may
occur.
14.1.8 Configuring an Ethernet Port Protection Group
14.1.8.1 Experiment Networking
Networking structure description: When the active uplink works normally, the connects
to the active PE, and the standby uplink is shut down. When the uplink of the interface
connected to the active PE is faulty, the standby uplink is enabled immediately and
services are switched to the standby uplink. This ensures the backup of the uplink. In
the experiment, the dual GIU upstream networking is used to describe the upstream
protection group function.
Huawei Access Certification Training Lab Guide Page 196
14.1.8.2 Experiment Planning
OLT upstream port L3 Switch Interface VLAN Planning
0/19/0 0/0/3 Data: 2000
Voice: 172
0/20/0 0/0/4 Video: 200
14.1.8.3 Configuration Procedure
Step 1 Add a terminal to the OLT according to the data plan, and enable the voice and
data services.
Step 2 The service ports of the active and standby switches transparently transmit service
VLANs and management VLANs.
Step 3 Create a protection group and select the protection between upstream Ethernet
ports.
Huawei_OLT(config)#protect-group
{pgid<U><0,63>|protect-target<K>}:1
{<cr>|protect-target<K>}:protect-target
{as-mainboard-lag<K>|as-mainboard-port<K>|as-mainboard<K>|epon-uni-
ont<K>|epon-uni-port<K>|eth-nni-lag-member<K>|eth-nni-port<K>|gpon-uni-
port<K>|service-process-board<K>|stm-nni-port<K>}:eth-nni-port
{workmode<K>}:workmode
{smart-link<K>|timedelay<K>}:timedelay
Huawei Access Certification Training Lab Guide Page 197
Command:
protect-group 1 protect-target eth-nni-port workmode timedelay
Step 4 Add member ports to the protection group. The OLT uses the GICG board for
upstream transmission. Configure upstream ports 0/19/0 and 0/20/0 on the active
and standby GIU boards as a protection group.
huawei(protect-group-1)#protect-group member
{board<K>|port<K>}:port
{frameid/slotid/portid<S><Length 1-15>}:0/19/0
{ont<K>|role<K>}:role
{member-role<E><work,protect>}:work
command:
protect-group member port 0/19/0 role work
huawei(protect-group-1)#protect-group member port 0/20/0
{ont<K>|role<K>}:role
{member-role<E><work,protect>}:protect
commmand:
protect-group member port 0/20/0 role protect
Step 5 Enable a protection group. After a protection group is created, you need to make
the protection group take effect. After this command is run, the protection
switching function can be implemented for the members in the protection group.
huawei(protect-group-1)#protect-group enable
Step 6 The two links between the directly connected switches are configured as trunk
links to transparently transmit packets of all VLANs.
Step 7 Check the protection group status.
huawei(protect-group-1)#display protect-group 1
{<cr>|pgid<U><0,63>}:1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of Ethernet nni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Huawei Access Certification Training Lab Guide Page 198
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/19/0 work none active none
0/20/0 protect none standby none
-----------------------------------------------------------------------
Step 8 Query the VLAN status. After the protection group is created, the VLAN is added to
the member port of the protection group.
Huawei_OLT(config)#display vlan 2000
{<cr>|to<K>}:
Command:
display vlan 2000
VLAN ID: 2000
VLAN type: smart
VLAN attribute: QinQ
VLAN description:
VLAN forwarding mode: VLAN-MAC
VLAN broadcast packet forwarding policy: forward
VLAN unknown multicast packet forwarding policy: forward
VLAN unknown unicast packet forwarding policy: forward
VLAN bind service profile ID: -
VLAN bind RAIO profile index: -
VLAN priority: -
------------------------------
F/S /P Native VLAN State
------------------------------
0/19/0 1 up
0/20/0 1 down
------------------------------
Standard port number: 2
--------------------------------------------------------
INDEX TYPE STATE F/ S/ P VPI VCI FLOWTYPE FLOWPARA
--------------------------------------------------------
0 gpon up 0/ 5/ 0 1 1 vlan 2
Huawei Access Certification Training Lab Guide Page 199
--------------------------------------------------------
Service virtual port number: 1
Note: F--Frame, S--Slot, P--Port,
VPI indicates ONT ID for PON, VCI indicates GEM index for GPON,
v/e--vlan/encap, pri-tag--priority-tagged
Step 9 Remove the network cable from the active member port 0/19/0 and check the
status of the protection group.
huawei(protect-group-1)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of Ethernet nni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/19/0 work auto switch src standby 0/20/0
0/20/0 protect auto switch dst active 0/19/0
-----------------------------------------------------------------------
Step 10 Reconnect the network cable to member port 0/19/0 and check the status of the
protection group.
huawei(protect-group-1)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of Ethernet nni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Huawei Access Certification Training Lab Guide Page 200
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/19/0 work auto switch src standby 0/20/0
0/20/0 protect auto switch dst active 0/19/0
-----------------------------------------------------------------------
Step 11 Remove the network cable from member port 0/20/0 and check the protection
group status.
huawei(protect-group-1)#display protect-group 1
-----------------------------------------------------------------------
Group ID: 1
Protect Target: Port of Ethernet nni
Work Mode: timedelay
Description:
Admin State: enable
Operation: none
Reversion: disable
Reversion Time(s): 720
-----------------------------------------------------------------------
Member Role Operation State PeerMember
-----------------------------------------------------------------------
0/19/0 work none active none
0/20/0 protect none standby none
-----------------------------------------------------------------------
----End
Verification
During a voice call, services are not interrupted when the network cable connected to
the active member port is removed, but users are aware of the service interruption. If
the data service is not obviously perceived, perform the ping test and obtain the packet
header on the port for analysis.
Ping test result: Packet loss occurs every time the network cable of the active member
port is removed and inserted.
You might also like
- 04 HCIP-Datacom-NCE Northbound Openness Lab GuideNo ratings yet04 HCIP-Datacom-NCE Northbound Openness Lab Guide57 pages
- 3 GPON FTTH VoIP Service Provisioning (MA5800) - SIPNo ratings yet3 GPON FTTH VoIP Service Provisioning (MA5800) - SIP44 pages
- Huawei Certification HCNP Lab Guide HCNP-IENP v1.6 PDFNo ratings yetHuawei Certification HCNP Lab Guide HCNP-IENP v1.6 PDF164 pages
- Client Software Installation Guide - (V100R002C01 - 06)No ratings yetClient Software Installation Guide - (V100R002C01 - 06)108 pages
- Guide Huawei - Access Controllers (ACs)No ratings yetGuide Huawei - Access Controllers (ACs)16 pages
- Bridging ONT + HGW Network Scenario (GPON/XG-PON/XGS-PON Networking)No ratings yetBridging ONT + HGW Network Scenario (GPON/XG-PON/XGS-PON Networking)30 pages
- Transport Network Product Documentation Bookshelf (V1.45) - ENNo ratings yetTransport Network Product Documentation Bookshelf (V1.45) - EN170 pages
- Huawei OLT 5800 01-04 EA5800-X15 Service Subrack DescriptionNo ratings yetHuawei OLT 5800 01-04 EA5800-X15 Service Subrack Description8 pages
- MA5800 Security Hardening and Maintenance Guide 06No ratings yetMA5800 Security Hardening and Maintenance Guide 06113 pages
- IMaster NCE Smart LCT V100R021C00 Software Installation and Commissioning Guide (SUSE) 01-CNo ratings yetIMaster NCE Smart LCT V100R021C00 Software Installation and Commissioning Guide (SUSE) 01-C53 pages
- Huawei OLT 5800 01-05 EA5800-X7 Service Subrack DescriptionNo ratings yetHuawei OLT 5800 01-05 EA5800-X7 Service Subrack Description8 pages
- Huawei OptiX Imanager T2000 Operation Guide100% (3)Huawei OptiX Imanager T2000 Operation Guide547 pages
- Huawei SmartAX MA5600T Series OLT Brochure PDFNo ratings yetHuawei SmartAX MA5600T Series OLT Brochure PDF4 pages
- Huawei OLT MA5680T/MA5683T Super Control Unit Board H801SCUH Hardware DescriptionNo ratings yetHuawei OLT MA5680T/MA5683T Super Control Unit Board H801SCUH Hardware Description7 pages
- Huawei OLT MA5608T Power Board H801MPWD Hardware DescriptionNo ratings yetHuawei OLT MA5608T Power Board H801MPWD Hardware Description7 pages
- NE9000 V800R022C00 Configuration Guide 04 Interface and Data LinkNo ratings yetNE9000 V800R022C00 Configuration Guide 04 Interface and Data Link122 pages
- HCNP-IERS Lab Guide V2.0July 212017 PDFNo ratings yetHCNP-IERS Lab Guide V2.0July 212017 PDF506 pages
- HCIP-Routing & Switching-IENP V2.5 Lab GuideNo ratings yetHCIP-Routing & Switching-IENP V2.5 Lab Guide240 pages
- Smartax Ma5620 and Smartax Ma5626: AppearanceNo ratings yetSmartax Ma5620 and Smartax Ma5626: Appearance2 pages
- MA5600&MA5603 V300R003C05 Configuration Guide 09No ratings yetMA5600&MA5603 V300R003C05 Configuration Guide 09384 pages
- Huawei Basic Configuration Guide For Routers100% (1)Huawei Basic Configuration Guide For Routers235 pages
- Smartax Ma5800-X7 Quick Installation Guide: Issue: 04 Date: 2016-08-24No ratings yetSmartax Ma5800-X7 Quick Installation Guide: Issue: 04 Date: 2016-08-2422 pages
- Omada Controller Software 3.0.2 - UG PDFNo ratings yetOmada Controller Software 3.0.2 - UG PDF146 pages
- Unit - Ii Cloud Computing Architecture: Architecture and Event-Driven ArchitectureNo ratings yetUnit - Ii Cloud Computing Architecture: Architecture and Event-Driven Architecture30 pages
- SJ-20160119164028-015-ZXR10 5960 Series (V3.02.20) All 10-Gigabit Data Center Switch Configuration Guide (IDC)No ratings yetSJ-20160119164028-015-ZXR10 5960 Series (V3.02.20) All 10-Gigabit Data Center Switch Configuration Guide (IDC)127 pages
- Huawei HiSecEngine USG12000 AI FirewallsNo ratings yetHuawei HiSecEngine USG12000 AI Firewalls4 pages
- Copec Online Configuration for CD JuárezNo ratings yetCopec Online Configuration for CD Juárez10 pages
- Understanding Load Balancing in ClustersNo ratings yetUnderstanding Load Balancing in Clusters7 pages
- (Studies in big data 30) Ashour, Amira_ Bhatt, Chintan_ Dey, Nilanjan_ Hassanien, Aboul Ella_ Satapathy, Suresh Chandra - Internet of things and big data analytics toward next-generation intelligence-.pdf100% (1)(Studies in big data 30) Ashour, Amira_ Bhatt, Chintan_ Dey, Nilanjan_ Hassanien, Aboul Ella_ Satapathy, Suresh Chandra - Internet of things and big data analytics toward next-generation intelligence-.pdf545 pages
- CCNA 2 Months Industrial Training ReportNo ratings yetCCNA 2 Months Industrial Training Report47 pages
- Datasheet 2MP PTZ Network Camera DH-SD6AEA230FN-HNI v001 004No ratings yetDatasheet 2MP PTZ Network Camera DH-SD6AEA230FN-HNI v001 0044 pages
