habilitar acesso externo
ssh server enable
line telnet server enable
Criar usuário
conf t
system-user
user-name USERAQUI
password SENHAAQUI
bind authentication-template 1
bind authorization-template 1
exit
exit
aaa-authentication-template 2001
aaa-authentication-type local
exit
aaa-authorization-template 2001
aaa-authorization-type local
exit
system-user
authentication-template 1
bind aaa-authentication-template 2001
exit
authorization-template 1
bind aaa-authorization-template 2001
local-privilege-level 15
exit
habilitar portas pon
interface gpon_olt-1/3/1
no shutdown
exit
interface gpon_olt-1/3/2
no shutdown
exit
interface gpon_olt-1/3/3
no shutdown
exit
interface gpon_olt-1/3/4
no shutdown
exit
interface gpon_olt-1/3/5
no shutdown
exit
interface gpon_olt-1/3/6
no shutdown
exit
interface gpon_olt-1/3/7
no shutdown
exit
interface gpon_olt-1/3/8
no shutdown
exit
interface gpon_olt-1/3/9
no shutdown
exit
interface gpon_olt-1/3/10
no shutdown
exit
interface gpon_olt-1/3/11
no shutdown
exit
interface gpon_olt-1/3/12
no shutdown
exit
interface gpon_olt-1/3/13
no shutdown
exit
interface gpon_olt-1/3/14
no shutdown
exit
interface gpon_olt-1/3/15
no shutdown
exit
interface gpon_olt-1/3/16
no shutdown
exit
3º - CRIANDO VLANS
---------------------------------------------------------------------
vlan <ID>
name <NOME>
gpon:
onu profile vlan 110 tag-mode tag cvlan 110
onu profile vlan 1020 tag-mode tag cvlan 1020
onu profile vlan 1021 tag-mode tag cvlan 1021
---------------------------------------------------------------------
4º - PASSAR AS VLANS NA UPLINK (PPPOE E GERENCIA)
---------------------------------------------------------------------
show interface brief - verifica status das portas
interface xgei_1/1/1
switchport vlan 110 tag
switchport vlan 1020 tag
---------------------------------------------------------------------
5º - CONFIGURAR IP Gerencia OUT-OF-BAND / IN BAND
---------------------------------------------------------------------
OUT-OF-BAND
interface mgmt
ip address 172.17.100.49 255.255.255.252 - IP OLT
exit
//! Rota default *
ip route 0.0.0.0 0.0.0.0 172.17.100.50 - IP MIKROTIK
---------------------------------------------------------------------
IN-BAND
interface vlan 110
ip address 10.10.20.18/30 255.255.255.252 - IP DA OLT
exit
//! Rota default *
ip route 0.0.0.0 0.0.0.0 10.10.20.17/30 - IP MIKROTIK
---------------------------------------------------------------------
6° - CRIAR PERFIL TCONT
---------------------------------------------------------------------
ENTRA NA PON
gpon
profile tcont 1G type 4 maximum 1024000
---------------------------------------------------------------------
7° - AUTORIZAR ONU
---------------------------------------------------------------------
SHOW PON ONU UNCFG/ SHOW PON ONU UNC - VERIFICA QUAIS ONU NÃO FORAM AUTORIZADAS
interface gpon-olt_x/x/x
onu 5 type ZTE_F601 sn ZTEGC4D3D0DE
---------------------------------------------------------------------
8° - CRIAR PERFIL DA ONU - (N) VLAN DE SERVIÇO
---------------------------------------------------------------------
interface gpon_onu-1/3/1:12
name TESTE1
sn-bind enable sn
tcont 4 profile 1G
gemport 1 tcont 4
exit
interface vport-1/3/1.1:1
service-port 1 user-vlan 1001 vlan 1001
---------------------------------------------------------------------
9° - HABILITAR PPPOE
---------------------------------------------------------------------
COLETA USER/PASS COM O CLIENTE
gpon
onu profile vlan 200 tag-mode tag cvlan 200
pon-onu-mng gpon-onu_1/1/1:1
service 1 gemport 1 vlan 1001
wan-ip ipv4 mode pppoe username adw1 password adw@123 vlan-profile 1001 host 1
CONFIGURAÇÃO SEGURANÇA
---------------------------------------------------------------------
security-mgmt 1 state enable mode forward ingress-type iphost 1 protocol web
firewall disable
---------------------------------------------------------------------
10° - HABILITAR DHCP
---------------------------------------------------------------------
pon-onu-mng gpon-onu_x/x/x:x
wan-ip mode dhcp vlan-profile 15 host 1
---------------------------------------------------------------------
11° - HABILITAR BRIDGE
---------------------------------------------------------------------
pon-onu-mng gpon-onu_1/2/2:13
service 1 gemport 1 vlan 1001
vlan port eth_0/1 mode tag vlan 1001
