Professional Documents
Culture Documents
01-Access - Volume-EPON-OLT Configuration PDF
01-Access - Volume-EPON-OLT Configuration PDF
ii
1 EPON Configuration
EPON Architecture
A typical EPON system consists of three components: optical line terminal (OLT), optical network unit
(ONU), and optical distribution network (ODN), as shown in Figure 1-1.
Figure 1-1 A typical EPON architecture
ODN
ONU1
ONU2
OLT POS
ONUn
OLT
An OLT, generally an Ethernet switch, router, or multimedia conversion platform, is located at the central
office (CO) as a core device of the whole EPON system to provide core data and video-to-telephone
network interfaces for EPON and the service provider.
ONU
ONUs are used to connect the customer premise equipment, such as PCs, set-top boxes (STBs), and
switches. Generally placed at customer's home, corridors, or roadsides, ONUs are mainly responsible
for forwarding uplink data sent by customer premise equipment (from ONU to OLT) and selectively
receiving downlink broadcasts forwarded by OLTs (from OLT to ONU).
ODN
An ODN consists of optical fibers, one or more passive optical splitters (POSs), and other passive
optical components. ODNs provide optical signal transmission paths between OLTs and ONUs.
A POS can couple uplink data into a single piece of fiber and distribute downlink data to respective
ONUs.
1-1
Benefits of the EPON Technology
Compared with a traditional Ethernet broadband access network, an EPON network greatly lowers the
operation and maintenance costs. This is because, as passive equipment in an EPON system, POSs
are energy-saving (requiring no power supply), highly reliable (not affected in case of a power outage),
and easy to install, and save optical fiber resources.
Compared with an Ethernet broadband access network, an EPON system provides a longer access
transmission distance (up to 20 km, or 12.43 miles) and higher bandwidth (1 Gbps) that can adapt to the
service status of the ONUs in real time. Each ONU enjoys dedicated line quality similar to Time Division
Multiplexing (TDM) with dedicated uplink bandwidth in the grant cycle assigned to it.
Based on where ONUs are deployed, EPON application mode can be Fiber To The Curb (FFTC), Fiber
To The Building (FTTB), and Fiber To The Home (FTTH).
FTTC
In an FTTC system, ONUs are deployed at roadside or beside the junction boxes of telegraph poles.
Usually, twisted-pair copper wires are used to connect the ONUs to each user, and coaxial cables are
used to transmit broadband graphic services. One of the main benefits of the FTTC technology is that it
allows the existing copper wire infrastructure to continue to be used between the ONUs and customer
premises, thus postponing the investments on optical fibers to the home. Currently, the FTTC
technology is the most practical and economical Optical Access Network (OAN) solution for providing
narrowband services below 2 Mbps. For services integrating narrowband and broadband services,
however, FTTC is not the ideal solution.
FTTB
In an FTTB system, ONUs are deployed within buildings, with the optical fibers led into user homes
through ADSL lines, cables, or LANs. Compared with FTTC, FTTB has a higher usage of optical fiber
and therefore is more suitable for user communities that are dense or need narrowband/broadband
integrated services.
FTTH
In an FTTH system, ONUs are deployed in user offices or homes to implement a fully transparent
optical network, with the ONUs independent of the transmission mode, bandwidth, wavelength, and
transmission technology. Therefore, FTTH is ideal for the long term development of optical access
networks.
1-2
As shown in Figure 1-2, before an EPON system transmits data, ONU registration (See ONU
Registration), extended OAM connection establishment (See Extended OAM Connection
Establishment), and bandwidth allocation (See Bandwidth Allocation) are required.
Figure 1-2 Data transmission in an EPON system
ONU Registration
Four types of Multipoint Control Protocol (MPCP) messages are used in ONU registration: GATE,
REGISTER_REQ, REGISTER, and REGISTER_ACK. Each of these messages contains a time stamp
field that records the local clock at the time of packet transmission. There are two types of GATE
messages:
z General GATE messages, which allocate bandwidths in unicast mode.
z Discovery GATE messages, which discover ONUs in broadcast mode.
An ONU registration process is as follows:
1) An OLT broadcasts a discovery GATE message to notify the start time and length of the discovery
timeslot to all the ONUs.
2) An unregistered ONU responds to the discovery GATE message and modifies its local clock to be
consistent with the time stamp contained in the GATE message. When the local clock of the ONU
reaches the start time of the discovery timeslot, the ONU waits a random period of delay before
sending a REGISTER_REQ message, which contains the MAC address of the ONU and the local
time stamp of the ONU when the REGISTER_REQ message is sent.
3) Upon receiving the REGISTER_REQ message from the unregistered ONU, the OLT obtains the
ONU's MAC address and ONU-OLT round trip time (RTT) (For the RTT measurement, see
Configuring the maximum ONU-OLT RTT. The ONU-OLT RTT is mainly used for the time
synchronization between an OLT and ONUs.
4) The OLT parses the received REGISTER_REQ message, and uses the MAC address contained in
the message to unicast a REGISTER message to the unregistered ONU. The REGISTER
message contains a Logical Link ID (LLID) assigned to the ONU as the unique identifier of the
ONU.
5) Right after sending a REGISTER message, the OLT sends a general GATE message to the same
ONU.
6) After receiving the REGISTER message and general GATE message, the ONU sends a
REGISTER_ACK message in the timeslot assigned in the GATE message to notify the OLT that
the REGISTER message is parsed successfully.
7) The ONU registration is complete.
The EPON cards of the S7500E series Ethernet switches support the Operation, Administration and
Maintenance (OAM) functions and extended OAM functions. This enables OLTs to remotely operate,
manage, and maintain ONUs.
Extended OAM connection establishment includes OAM capability discovery and exchange of
additional information. It is the capability acknowledgement process required before completing other
1-3
extended OAM functions. Data transmission begins only after the extended OAM connection is
established. The process of extended OAM connection establishment is as follows:
1) Standard OAM discovery establishment is complete.
2) The ONU reports the supported Organizationally Unique Identifier (OUI) and extended OAM
version number to the OLT.
3) The OLT checks whether the reported OUI and extended OAM version number are in the list of
OUIs and extended OAM version numbers supported by the OLT:
z If yes, the extended OAM connection for the ONU is established successfully;
z Otherwise, the extended OAM connection for the ONU cannot be established.
For detailed OAM and extended OAM descriptions, refer to the "Ethernet OAM" module of this manual.
Bandwidth Allocation
Once the extended OAM connection is established, downlink data transmission can begin. Uplink data
transmission can begin only after uplink bandwidth is allocated.
In bandwidth allocation, mainly two types of MPCP messages: GATE and REPORT, are used:
z A GATE message is sent by an OLT to assign a transmission timeslot to an ONU.
z A REPORT message is sent by an ONU to feed back the local status information, such as buffer
occupancy, to the OLT, helping the OLT assign timeslots intelligently.
An OLT allocates bandwidth to an ONU as follows:
1) The OLT sends a GATE message to notify the ONU of the timeslot for sending a REPORT
message.
2) The ONU sends a REPORT message within the assigned timeslot to report its local status
information to the OLT.
3) Upon receiving the REPORT message from the ONU, the OLT, based on the current bandwidth of
the system, assigns the ONU a data transmission timeslot, which contains the start time and length
for transmitting data by the ONU.
4) The ONU receives the GATE message and waits for the arrival of the start time contained in the
GATE message. Once the start time is reached, data transmission begins.
5) The bandwidth allocation is complete.
Data Transmission
Downlink data is broadcast to the ONUs, with each ONU receiving only the packets destined to it and
discarding other packets, as shown in Figure 1-3.
1-4
Figure 1-3 Downlink data transmission in an EPON system
As shown in Figure 1-4, each ONU buffers the data frames received from users and sends the buffered
data frames at the full wire-speed (1000 Mbps) once the timeslot for the ONU arrives.
Figure 1-4 Uplink data transmission in an EPON system
The Time Division Multiple Access (TDMA) technology is used to transmit uplink data. This ensures that
one optical fiber between the OLT and the POS can transmit data signals from multiple ONUs to the
OLT without signal interference.
1-5
Upon sending a key update request message, the OLT starts the encryption response timer:
z If the OLT receives a correct new key notification message from an ONU before the timer expires,
the OLT enables the new key and cancels the timer.
z If the OLT receives no new key notification message before the timer expires, the OLT considers
the key update process has failed, resets the timer, and sends another key update request
message. Before the key update succeeds, an ONU keeps using the original key and the OLT
reports the key update failure information to the network management system.
z If the OLT receives no new key notification message within the encryption response timer duration
after sending three new key request messages consecutively, the OLT sends an alarm to the
network management system and the old key continues to be used for downlink data. In this case,
you are recommended to adjust the value of the encryption response timer.
With an EPON card installed, an S7500E switch can work as an OLT device in an EPON system. In
such a case, the S7500E switch has the following features:
z Compliance with EPON interoperation standards: Interoperable with other vendors' ONUs that
support China Telecom Technical Requirements for EPON Devices.
z Integrating access and convergence: Each EPON card in an S7500E switch has multiple physical
OLT ports, and each OLT port has 64 logical ports, namely, ONU ports, each of which can
correspond with an ONU. Thus, one EPON card can work as multiple OLT devices. This reduces
users' equipment purchase costs, and the management costs and fault ratio caused by
interconnection between multiple device ports.
1-6
z Powerful ONU remote management capabilities: You can centrally manage and configure different
services on ONUs and ONU UNI (User Network Interface) ports through OLTs. This greatly lowers
subsequent maintenance costs.
z Excellent security protection: OLTs can protect network devices in terms of control, management,
and forwarding against illegal access or abnormal traffic.
z Powerful access control list (ACL) and QoS functions: OLTs support standard and extended ACLs,
and support traffic policing, traffic shaping, packet priority, multiple queue scheduling mechanisms,
multiple congestion avoidance mechanisms, and other QoS assurance functions.
When an S7500E switch works as an OLT device in an EPON system, the EPON system has three port
types: OLT, ONU, and UNI, as shown in Figure 1-6.
Figure 1-6 An EPON system
OLT port
Each PON port on an EPON card in an S7500E switch is an independent OLT device. For an S7500E
switch, a PON port is an OLT port. An OLT port number is in the format EPON card slot
number/sub-card slot number/OLT port number, such as OLT 3/0/1, as shown in Figure 1-6.
ONU port
Each OLT port of an S7500E switch has 64 logical ONU ports. An ONU port becomes a physical port
only after an ONU device is bound with it. The configurations performed in ONU port view take effect on
the corresponding ONU device. An ONU port number is in the format EPON card slot number/sub-card
slot number/OLT port number: ONU port number, such as ONU 3/0/1:1, as shown in Figure 1-6.
UNI Port
A UNI port is an ONU device port connected to a user. The UNI port number supported by an S7500E
switch is in the range 1 to 80. The actual numbers vary with ONU devices. For example, when the ONU
device corresponding to ONU 3/0/1:1 in an EPON system is S3100-16C-EPON-EI, the UNI port number
is in the range 1 to 16.
1-7
Based on the three port types (OLT, ONU, and UNI) shown in Figure 1-6, this document details the
functions of an S7500E Ethernet switch working as an OLT device and the configurations for the
functions.
Complete the following tasks to configure OLT on an S7500E switch:
Task Remarks
z EPON system parameter description and configuration
OLT Configuration z Description and configuration of the functions of an
S7500E switch working as an OLT device
ONU Remote Management Description and configuration procedure of ONU remote
Configuration management through OLT
z UNI port introduction
UNI Port Configuration z Configuration procedure of UNI remote management
through OLT
Alarm Configuration Configurations of all the alarms in an EPON system
Supported Switch Features and Switch features supported by OLTs and ONUs, related
Restrictions manuals, and cautions
1-8
2 OLT Configuration
z When working as an OLT device, an S7500E switch supports abundant features. This chapter
describes only the functions of an S7500E switch working as an OLT device. For other functions,
see OLT Port Features and Restrictions.
z If the OLT configurations in this manual take effect only when the OLT is used together with ONUs
manufactured by H3C (hereinafter referred to as H3C ONUs), related descriptions will be given in
the configuration task list in each chapter; if no such description is given, the OLT configurations
will take effect on all the ONUs compliant with China's EPON standards.
OLT Configuration
OLT Configuration Task List
Task Remarks
Configuring OUI and extended OAM version number
Optional
list
During ONU registration, an OLT obtains the Round Trip Time (RTT) value of an ONU through the
exchange of discovery GATE messages and REGISTER_REQ messages between the OLT and the
2-1
ONU. By configuring a maximum RTT at the OLT side, you can set the coverage range of the EPON
system. An ONU whose RTT is greater than the RTT configured on the OLT cannot be registered.
Setting a short RTT prevents ONUs too far away from the OLT from being registered with the EPON
system (a far-away ONU suffers high optical power attenuation). Setting a long RTT can expand the
coverage range of the EPON system, allowing as many ONUs as possible to be registered successfully.
The process of RTT measurement is as follows:
1) The OLT sends an ONU a discovery GATE message containing the OLT local time T0, namely, the
time stamp in the discovery GATE message is T0.
2) Upon receiving the discovery GATE message, the ONU modifies its local time to be the time stamp
T0 in the message and sends a REGISTER_REQ message to the OLT at T1 after a delay (the time
stamp of the REGISTER_REQ message is T1).
3) The OLT receives the REGISTER_REQ message at T2.
4) The OLT calculates the ONU RTT by using the formula: RTT=(T2-T0)-(T1-T0)=T2-T1.
5) If the OLT becomes idle at T3 and remains idle for a period of ∆T, the timeslot assigned to the ONU
is { T3-RTT, ∆T }. That is, the ONU will start sending data at T3-RTT and send data for a period of
∆T.
Follow these steps to configure EPON system parameters:
Required
epon-parameter ouilist { oui
Configure OUI and By default, the OUI and extended
oui-value oam-version
extended OAM version OAM version number must be
version-value } &<1-9> slot
number list configured as 111111 and 1
slot-number
respectively.
2-2
z When the OUI and OAM version number list on an EPON service board changes due to addition or
removal of user-defined list entry, all ONUs under the board will re-register.
z It is recommended that you configure the maximum ONU-OLT RTT only when necessary. The
relationship between the RTT and the distance (in meters) from the OLT to the ONU can be roughly
expressed by the formula: RTT = (Distance + 157)/1.6393.
z The max-rtt command is applicable to unregistered ONUs only.
z The encryption reply timeout time must be less than or equal to the key update time.
Dynamic bandwidth allocation (DBA) is used by an OLT to adjust the uplink bandwidth of individual
ONUs in real time according to the traffic status of the ONUs.
BA is implemented through a request-response mechanism:
An OLT obtains the traffic information of ONUs from the bandwidth requests (REPORT messages)
received from ONUs, uses a suitable bandwidth allocation algorithm to calculate the bandwidth to be
allocated for this cycle within the specified uplink ONU bandwidth range, and notifies the results to the
ONUs through bandwidth authorization (GATE messages). This ensures that uplink data sent by ONUs
will not conflict with each other.
Compared with static (fixed) bandwidth allocation, DBA is more suitable for bursty IP/Ethernet services.
DBA reduces bandwidth wastes and allows for more efficient uplink bandwidth utilization. With DBA
adopted, the order and the time for ONUs to send uplink frames are controlled by the OLT.
There are two types of DBA algorithms: internal DBA algorithm and external DBA algorithm.
z The internal DBA algorithm is implemented internally by a chip.
z The external DBA algorithm is implemented through loading an external DBA algorithm file.
Follow these steps to configure dynamic bandwidth allocation and related parameters
2-3
To do... Use the command... Remarks
Optional
dba-parameters By default, the
Configure the related { discovery-frequency value | discovery-frequency value
parameters of ONU discovery discovery-length value | is 50, the discovery-length
cycle-length value } * value is 41500 TQ, and the
cycle-length value is 65535
TQ.
Return to system view quit —
Enter ONU port view interface onu interface-number —
Required
upstream-sla By default, the minimum
Set the ONU's uplink bandwidth
{ minimum-bandwidth value1 | bandwidth of an ONU is 2048
limits and the delay mode of
maximum-bandwidth value2 | kbps, the maximum
packet forwarding.
delay { low | high } } * bandwidth is 23552 kbps, and
low delay is adopted.
Configure the Optional
Configure number of queue
the dba-report queue-set-number By default, ONU Report
sets supported by
administrati queue-set-number messages support two queue
ONU Report
on sets. The default thresholds
frames
attributes of of queue 4 and queue 5 are
DBA Configure the dba-report queue-id queue-id 65535, while the default
negotiation threshold for a { active | inactive } threshold thresholds of other queues
queue threshold-value are 0.
z 1 time quantum (TQ) is equal to 16 ns, which is the time it takes to transmit two bytes of data at 1
Gbps.
z You can manually load an external DBA algorithm file by using the dba-algorithm update
command as needed.
z DBA-related configuration is only recommended for administrators. Improper DBA configuration
may terminate all the services.
z H3C ONU Report frames support up to two queue sets.
z The sum of the minimum uplink bandwidths configured for all created ONU ports under an OLT port
cannot exceeds 921600 kbps, namely, 900 Mbps.
In an EPON system, uplink transmission adopts the TDMA technology. An OLT assigns each ONU a
time slot and each ONU can only send data in its own time slot in sequence. Therefore, the OLT
implements strict time synchronization. Within the specified time, the OLT can only receive the packets
from the specified ONU. If the time synchronization of an ONU is inaccurate, however, the packets that
the OLT receives within a specified time period may be from another ONU. In that case, if grant filtering
is enabled on the OLT port, the OLT does not allow the received packets to pass through.
Follow these steps to configure other OLT functions:
2-4
To do... Use the command... Remarks
Enter system view system-view —
Enter OLT port view interface olt interface-number —
You can configure an OLT port as a hybrid port, and assign it to the specified VLANs in tagged mode or
untagged mode.
Follow these steps to configure the link type of an OLT port:
The VLAN(s) that you assign an OLT port to must already exist.
2-5
To do... Use the command... Remarks
In fiber
group member interface-type
backup
interface-number
group view
quit
z Up to two OLT ports can be added to one backup group. An OLT port can be added to only one
backup group at a time. The port added to the backup group earlier will be the master port, while
the other port will be the standby port.
z Only one of the two OLT ports in a fiber backup group can be in the forwarding state.
z After the second OLT port is added to a backup group, you need to manually synchronize the
configurations of the first OLT port and all the ONUs under it to the second OLT port. This ensures
normal service operation after a master/standby switchover.
2-6
Displaying and Maintaining OLT Configuration
To do... Use the command... Remarks
Available in
Display related information of EPON display epon-parameter slot
FTTH view
parameters slot-number
only
Display the information about all the display onuinfo { interface
ONUs under an OLT port, ONU port, or interface-type interface-number | slot
the EPON board in the specified slot slot-number }
Display the information about the legal display onuinfo mac-address
ONU with the specified MAC address mac-address
Display the information about all the
display onuinfo silent { interface
silent ONUs connected to the specified
interface-type interface-number | slot
OLT port or to the EPON card seated in
slot-number }
the specified slot
Display the optical parameter display optics-parameters interface
information of an OLT port interface-type interface-number
display epon-version interface
Display port version information
interface-type interface-number
display epon-capability interface
Display port capability information
interface-type interface-number Available in
any view
display epon-workmode interface
Display the current work mode of a port
interface-type interface-number
display epon statistics interface
Display the statistics on a port
interface-type interface-number
Display the OAM information about an display epon-oam interface
ONU interface-type interface-number
Display the master/standby port display fiber-backup group { all |
information of a backup group group-number }
Display the registration and display onu-event interface
deregistration information of an ONU interface-type interface-number
z To display the information about an ONU, make sure the ONU is online. You can use the display
onuinfo command to check whether an ONU is online.
z Port statistics data includes average error rate of data bits and data frames transmitted between an
OLT and the ONUs. For detailed information, refer to the command manual.
2-7
OLT Configuration Examples
OLT Port Isolation Configuration Example
Network requirements
Network diagram
Configuration procedure
2-8
Fiber Backup Configuration Example
Network requirements
z Add two OLT ports of the same EPON board to a fiber backup group one after the other.
z Perform a manual switchover between the two OLT ports. When the master port is shut down, the
slave port becomes the new master port.
Network diagram
ONU1
2:N
OLT3/0/1
ONU2
OLT3/0/2
OLT POS
ONUn
Configuration procedure
# Add port OLT 3/0/1 and then OLT 3/0/2 to fiber backup group 1. Thus, OLT 3/0/1 works as the master
port and OLT 3/0/2 the slave port.
[Sysname-fiber-group1] group member olt3/0/1
[Sysname-fiber-group1] group member olt3/0/2
[Sysname-fiber-group1] display fiber-backup group 1
fiber backup group 1 information:
Member Role State
-----------------------------------------
Olt3/0/1 MASTER ACTIVE
Olt3/0/2 SLAVE READY
2-9
# Shut down OLT 3/0/2. You can see that OLT 3/0/1 becomes the new master port.
[Sysname-fiber-group1] quit
[Sysname] interface olt3/0/2
[Sysname-Olt3/0/2] shutdown
[Sysname-Olt3/0/2] display fiber-backup group 1
fiber backup group 1 information:
Member Role State
-----------------------------------------
Olt3/0/1 MASTER ACTIVE
Olt3/0/2 SLAVE DOWN
2-10
3 ONU Remote Management Configuration
When an S7500E switch is working as an OLT device, you can configure a variety of functions on its
ONU ports so that you can manage the connected ONUs remotely. This chapter describes only the
functions and commands developed specially for ONU ports on such an S7500E switch. Other function
configurations of ONU ports are basically the same as those of the Ethernet ports on an S7500E switch.
For details, see ONU Port Features and Restrictions.
ONU Configuration
Currently, the H3C ONUs for the S7500E series switches fall into three types:
z ET704 series ONUs (For details, see H3C ET704 Series EPON ONUs User Manual.)
z S3100 series ONUs (For details, see H3C S3100 Series Ethernet Switches Quick Start.)
z EC series ONUs (For details, see H3C EC1001 Video Encoder User Manual.)
Support for OLT remote management commands varies with ONUs. For details, see the sections
describing the supported configuration functions in ONU device user manuals. The following table lists
the ONU remote management functions supported by an S7500E switch working as an OLT device.
Task Remarks
Creating an ONU Port Required
Binding an ONU with an ONU Port Required
Optional
Configuring the Management VLAN of the ONU
For H3C ONUs only
Optional
Enabling Related Protocols on an ONU
For H3C ONUs only
3-1
Task Remarks
Enabling FEC Optional
Configuring an ONU to Report Information to
Optional
Other ONU the OLT
configurations Configuring Traffic Encryption Optional
Testing the Link Between an ONU and the
Optional
OLT
Deregistering an ONU Optional
An OLT supports ONU authentication based on ONU MAC address and denies illegal ONU access to
the system. ONU authentication can be implemented by binding the ONU to an ONU port. During the
ONU registration:
z The OLT broadcasts a discovery GATE message. After receiving the discovery GATE message,
an unregistered ONU sends a REGISTER_REQ message, whose source MAC address is that of
the ONU, at the time granted by the GATE message.
z Upon receiving the REGISTER_REQ message, the OLT checks whether the source MAC address
contained in the message is bound with the ONU port of the local end. If yes, the ONU passes the
authentication and the OLT replies with a REGISTER message; otherwise, the ONU cannot pass
the authentication and therefore cannot be registered.
After passing the authentication, the ONU port goes up; that is, the ONU is online.
Before binding an ONU to an ONU port, make sure you have obtained the MAC address of the ONU.
Follow these steps to bind an ONU port to an ONU:
3-2
To do... Use the command... Remarks
Enter ONU port view interface onu interface-number —
Bind the current ONU port
bind onuid onuid Required
to an ONU
z An ONU port can only be bound with one ONU MAC address. Conversely, an ONU MAC address
can only be bound to one ONU port under one OLT port.
z In fiber backup, an ONU can be bound with two ONU ports under two OLT ports acting as backups
for each other.
To manage an ONU through Telnet, make sure the ONU is assigned an IP address. Only the VLAN
interface corresponding to the management VLAN can be assigned an IP address. You can designate
the management VLAN through the command line.
The management VLAN interface of an ONU can obtain an IP address in one of the following two ways:
z Through manual configuration of IP addresses
z Through DHCP (with the ONU as a DHCP client)
Follow these steps to configure the management VLAN of the ONU
3-3
To do... Use the command... Remarks
Manual Either is required.
Config ip address ip-address mask
configurati Required, use either one of the two
ure IP gateway gateway
on methods.
addres
ses Automatic By default, the management VLAN
ip address dhcp-alloc
allocation interface has no IP address.
You can use an OLT to remotely enable RSTP, DHCP snooping, DHCP snooping Option82, and
PPPoE+ on an ONU through extended OAM packets.
RSTP
Enabling RSTP on an ONU can eliminate the loops between the UNIs or in the user networks by
blocking redundant links.
DHCP Snooping
After DHCP snooping is enabled on an ONU, a DHCP snooping table will be generated on the ONU to
record the IP address and user MAC address information that the DHCP client obtains from the DHCP
server, with each record being an entry in the DHCP snooping table.
PPPoE+
The Point-to-Point Protocol over Ethernet (PPPoE) technology interconnects large numbers of hosts
through Ethernet, allowing the hosts to access the Internet through a far-end access device, and
implementing control and accounting functions on each connected host. Operating in the client/server
mode, PPPoE encapsulates PPP packets into Ethernet frames, and provides PPP connection over
Ethernet.
PPPoE+, also known as PPPoE Intermediate Agent, is designed for broadband users using PPPoE
mode authentication. PPPoE+ allows for user port identification by adding user port information into the
PPPoE packets.
After PPPoE+ is enabled on an ONU, when a PPPoE client sends a request packet:
z If the request packet contains no PPPoE tag, the ONU adds the tag (containing the UNI port
information) to the request packet and forwards the packet to the OLT side.
z If the request packet contains a PPPoE tag, the ONU directly forwards the request packet to the
OLT side without adding any tag.
Follow these steps to enable related protocol(s) on an ONU:
3-4
To do... Use the command... Remarks
Enter system view system-view —
interface onu
Enter ONU port view —
interface-number
Optional
onu-protocol { stp |
By default:
Enable related dhcp-snooping |
protocol(s) on the dhcp-snooping z RSTP is enabled on the ONU.
ONU information | pppoe } z DHCP snooping, DHCP snooping
enable Option82, and PPPoE+ are disabled on
the ONU.
z When STP is enabled globally on the S7500E switch, you should enable STP on all ONUs.
Additionally, configure STP correctly to ensure that no ONU can be selected as the STP root bridge;
otherwise, anomaly may occur on the network.
z STP runs normally only when all attached ONUs are H3C ONUs.
Through extended OAM, an OLT can be used to remotely configure the multicast mode of an ONU as
either IGMP snooping mode or multicast control mode.
The configuration of a multicast IP address-to-multicast VLAN correspondence is used to add multicast
address(es) to a multicast VLAN. Upon receiving an IGMP report message, the OLT determines
whether the multicast IP address contained in the message belongs to the multicast VLAN. If yes, the
OLT generates a multicast forwarding entry in the multicast VLAN of the multicast IP address; otherwise,
the OLT directly discards the message. A multicast IP address can belong to only one multicast VLAN.
Follow these steps to complete the prerequisites for multicast mode configuration:
Required
Enable IGMP snooping igmp-snooping enable
Disabled by default
3-5
To do... Use the command... Remarks
igmp-snooping
Drop unknown multicast traffic Optional
drop-unknown
In the IGMP snooping mode, the OLT and ONUs mainly use IGMP report, leave, and query messages
to manage dynamic multicast group membership. The OLT can implement simple user multicast access
control through the multicast VLAN configuration on UNI ports of the ONU. More complex service
access control is realized through the IPTV service platform.
z You can use the OLT to remotely configure the aging timer of the ONU router port, the aging timer
of multicast group member ports, and the query response timer.
Sends an IGMP
Aging timer for Aging time of the group-specific query
IGMP host report
multicast group multicast group message to the
message
member port member port multicast member
port
Removes the port
Maximum
from the member
Query response timer response-to-query IGMP report message
port list of the
time
multicast group
interface onu
Enter ONU port view —
interface-number
Optional
Configure the multicast mode multicast-mode
of the ONU as IGMP snooping igmp-snooping By default, the multicast mode
of the ONU is IGMP Snooping.
3-6
To do... Use the command... Remarks
Add a UNI to the specified uni uni-number multicast vlan
Required
multicast VLAN(s) { vlan-id } & <1-50>
Optional
Configure the number of uni uni-number By default, the users connected
multicast channels on the multicast-group-number to a UNI can access 64
specified UNI number multicast channels at the same
time.
Optional
Remove the VLAN tag of the
uni uni-number By default, a UNI does not
downlink multicast flow on the
multicast-strip-tag enable remove the VLAN tag of the
UNI port
downlink multicast flow.
The max-response-time keyword in the onu-protocol igmp-snooping command sets the maximum
response time of the group-specific queries. If the device receives no response at the first timeout of the
maximum response time, it re-sends group-specific queries. If the device still receives no response
within the maximum response time, the multicast group on the corresponding ONU is deleted.
1) OLT-side functions
z The OLT side maintains a user multicast service access control table to centrally manage user
multicast service access rights.
z The OLT identifies users through user LLIDs and the VLAN tags (consistent with UNI port numbers)
carried in uplink IGMP report messages, and determines whether a user has the right to access
the requested multicast service and, if yes, the related parameters.
z The OLT uses extended multicast control OAM packets to send the ONU the user's access right to
the multicast channel, allowing the ONU to forward or shut off the multicast traffic for the user. The
network management system at the OLT side centrally manages the multicast access control. The
OLT governs, while an ONU executes, multicast right management. Meanwhile, the OLT supports
3-7
the cooperation between IGMP proxy and upper-layer multicast routers to dynamically request and
deliver multicast traffic.
2) ONU-side functions
z The ONU side maintains a table for multicast address filtering and multicast forwarding. It performs
flow control only for the current multicast service on the ONU.
z The ONU adds VLAN tags (A UNI port number is used as the VLAN tag. For example, the packets
received on UNI 1 are tagged with VLAN 1.) to the IGMP report messages without VLAN tags to
identify users, and transparently sends the messages to the OLT. Then the ONU adds or deletes
the group address filtering and multicast forwarding entries on the ONU based on the multicast
control OAM packets (containing a series of multicast control entries) delivered by the OLT, and
forwards or shuts off the multicast traffic accordingly.
Follow these steps to configure multicast in multicast control mode:
uni uni-number
multicast-control
multicast-address
{ multicast-address [ to
multicast-address ] } &<1-10>
[ source-ip ip-address [ to
Configure the access to
ip-address ] ] rule { deny |
multicast channels on the Required
permit [ channel-limit
specified UNI
channel-number ] | preview
time-slice preview-time
[ preview-interval interval-time
| preview-times preview-times
[ reset-interval
reset-interval-time ] ]* }
Optional
Remove the VLAN tag of the
uni uni-number By default, a UNI does not
downlink multicast flow on the
multicast-strip-tag enable remove the VLAN tag of the
UNI port
downlink multicast flow.
3-8
Different from Ethernet ports describe in VLAN Operation, ONU ports process uplink/downlink packets
as described in Table 3-2.
Table 3-2 The link type of an ONU port and how it processes packets
For how to configure the link type of an ONU port, refer to Setting the link type of an ONU port to access
and Setting the link type of an ONU port to trunk. Note that:
z The access ports described in Table 3-2 do not include ports in the default state, namely, the
access ports in VLAN 1.
z The link type of the ONU ports under the same OLT port must be the same (access or trunk). Thus,
when an ONU port under an OLT port is configured as an access port in a VLAN other than VLAN
1, you can only configure the other ONU ports under the same OLT port as access ports or leave
them in the default state (that is, access ports in VLAN 1); when the ONU port is configured as a
trunk port, you can configure the other ONU ports as trunk ports or leave them in the default state.
z The ONU ports in the default state only allow untagged packets to pass through in the uplink
direction and tag these packets with VLAN 1 tag. In the downlink direction, they only allow the
packets with the VLAN 1 tag to pass through. Such ONU ports remove the VLAN tag of the
downlink packets if the other ONU ports under the same OLT are configured as access ports, and
do not remove the tag of the downlink packets if the other ONU ports under the same OLT port are
configured as trunk ports.
Follow these steps to set the link type of an ONU port to access:
Optional
Set the link type of the ONU port
port link-type access By default, the link type of an
to access
ONU port is access.
Optional
Assign the ONU port to the
port access vlan vlan-id By default, all ONU ports
specified VLAN
belong to only VLAN 1.
3-9
When configuring the ONU ports under the same OLT port as access ports, do not assign them to the
same VLAN (except VLAN 1). For example, after configuring ONU 3/0/1:1 as an access port and
assigning it to VLAN 2, the other ONU ports under the same OLT port, ONU 3/0/1:2 for example, cannot
be assigned to VLAN 2.
Follow these steps to set the link type of an ONU port to trunk:
After an ONU port is configured as a trunk port, the ONU port allows packets of all VLANs to pass
through.
Enabling FEC
Forward Error Correction (FEC) can implement downlink error correction on the OLT and uplink error
correction on the ONU to lower the bit error rate and extend the optical transmission distance. The
packets enabled with FEC carry error correction codes. Therefore, the actual uplink bandwidth of the
ONU will be less than that configured.
Follow these steps to enable FEC:
3-10
Configuring an ONU to Report Information to the OLT
When an ONU attached to an OLT encounters configuration changes or failures or is being debugged,
you can configure the ONU to report the specified types of information to the OLT.
Note that:
Because a large number of ONUs are attached to an OLT, enabling ONUs to report information to the
OLT may generate a large amount of traffic and thus cause congestion. Therefore, you are
recommended to select the reported information type as required.
Follow these steps to configure an ONU to report information to the OLT:
Complete this task to configure the encryption of the downlink traffic transmitted from the OLT to ONUs,
thereby protecting user information against illegal access.
Follow these steps to configure traffic encryption:
Follow these steps to test the optical link between an ONU and the OLT:
3-11
To do... Use the command... Remarks
Required
linktest [ frame-number The following lists the default values of the
Test the optical link value | frame-size value | link test parameters.
between the ONU and delay { on | off } | vlan-tag z Number of test frames: 20
the OLT { on [ vlan-priority value | z Frame size: 1000 bytes
vlan-id value ] | off } ] *
z VLAN tag: not carried in testing frames
z Delay testing state: Off
The link connectivity between an ONU and the OLT can be tested only when the ONU is online.
Deregistering an ONU
Updating ONUs
Updating ONUs means updating ONU software versions remotely through OLTs.
Updating ONU devices requires a large amount of work because, in an EPON system, there are
different types of ONU devices, which use different update files. To improve the ONU update efficiency
and reduce resources consumed by issuing commands to each ONU, the S7500E switches support
batch updating of ONUs by type and OLT port, besides updating of a single ONU. Updating ONUs by
type is recommended because it is efficient and easy-to-use. For the descriptions on the three ONU
update methods, refer to Table 3-3.
3-12
Table 3-3 ONU update methods
z Before the update, make sure you upload the ONU update files to the S7500E master SRPU (you
cannot use the update files on the slave SRPU to complete the software loading). For detailed
upload procedure, refer to the sections discussing software maintenance in H3C S7500E Series
Ethernet Switches Installation Manual.
z If the ONU which needs to go online can be updated automatically, you need to upload the update
files to the master SRPU and slave SRPU. Thus, update files will be available on the original slave
SRPU after the switchover; otherwise, the update will fail.
z Update files used vary with ONUs. If ONUs and update files do not match, the update will fail. For
example, if you specify to update ET704-A ONUs in OLT port view, updating other types of ONUs
attached to the OLT port will fail.
z After the update command is issued, the OLT will wait 15 to 20 seconds before executing the
command. This allows for batch updating and saves system resources.
z Any power failure during the ONU software upgrade may cause update failure.
z Once the update file is transferred to the ONU, the ONU restarts automatically to complete the
update.
z The ONU update commands mentioned in this chapter are all configuration commands, that is,
after such a command is executed, it will be saved in the configuration file of the device. If the ONU
port corresponding to an ONU that goes online is created before the update command is used, the
ONU will be updated directly (if it matches the update files). Otherwise, the ONU will not be
updated. To update only the current ONUs online but not the offline ONUs or subsequently
registered ONUs, execute the corresponding update command, and then use the undo form of the
command after you make sure that all online ONUs have been updated.
z If an ONU is registered successfully and its corresponding port is UP, it can execute the update
operation as soon as you configure ONU update.
z If an ONU is offline or its corresponding port is DOWN, it executes the update operation you
configured after the ONU is registered successfully and its corresponding port is brought up.
3-13
ONU update configuration
Follow these steps to update all the ONUs of the specified type:
z After you configure the updating of all the ONUs of the specified type under the switch, if the ONU
corresponding to a newly created ONU port is of the specified type and goes online, the switch will
update it automatically.
z The update configuration performed in port view takes precedence over that in FTTH view. For
example, assume the ONU corresponding to ONU port ONU 3/0/1:1 is of type A. If you configure
the update file for type-A ONUs as 1.app in FTTH view and configure the update file as 2.app in
ONU 3/0/1:1 port view, 2.app will be used to update the ONU. If you cancel the port-level
configuration, the update by-type configuration is not executed until the ONU is registered
successfully next time and the corresponding port is brought up.
z An OLT can update up to 64 types of ONUs at the same time, that is, you can specify update files
for up to 64 types of ONUs with the update onu onu-type onu-type filename file-url command
multiple times.
Follow these steps to update all the ONUs under the specified OLT port:
3-14
After you configure the updating of the ONUs corresponding to all the created ONU ports under an OLT
port, if the ONU port corresponding to an ONU that goes online is created before the update command
is used, the ONU will be updated directly (if it matches the update files); otherwise, the ONU will not be
updated.
Restarting an ONU
Network requirements
Bind ONU 3/0/1:1 to ONU 1, whose MAC address is 000f-e200-0031, and ONU 3/0/1:2 to ONU 2,
whose MAC address is 000f-e200-3749. ONU 1 and ONU 2 have the same extended OAM version of 2.
3-15
Network diagram
OLT
OLT3/0/1
POS
ONU1 ONU2
Configuration procedure
# Create ONU ports ONU 3/0/1:1 and ONU 3/0/1:2. Bind ONU 3/0/1:1 to the ONU 1 and ONU 3/0/1:2 to
ONU 2.
[Sysname] interface olt 3/0/1
[Sysname-Olt3/0/1] using onu 1 to 2
[Sysname-Olt3/0/1] quit
[Sysname] interface onu 3/0/1:1
[Sysname-Onu3/0/1:1] bind onuid 000f-e200-0031
[Sysname-Onu3/0/1:1] quit
[Sysname] interface onu 3/0/1:2
[Sysname-Onu3/0/1:2] bind onuid 000f-e200-3749
# When the two ONUs are up, display the binding information of the ONUs.
<Sysname> display onuinfo interface Olt 3/0/1
ONU Mac Address LLID Dist(M) Port Board/Ver Sft/Epm State Aging
000f-e200-0031 1 <50 Onu3/0/1:1 ET704-A-L/B 110/100 Up N/A
000f-e200-3749 2 <50 Onu3/0/1:2 ET704-A-L/B 110/100 Up N/A
Network requirements
z A user PC is attached to UNI 1. If UNI 2 and UNI 3 are interconnected by mistake while RSTP is
disabled on the ONU, broadcast storm will occur between UNI 2 and UNI 3 when the user pings an
IP address for which no ARP entry exists on the PC.
3-16
z Enabling RSTP on the ONU can suppress such a problem.
Network diagram
Configuration procedure
# Enable RSTP on the ONU to suppress the broadcast storm between UNI 2 and UNI 3.
<Sysname> system-view
[Sysname] interface onu 3/0/1:1
[Sysname-Onu3/0/1:1] onu-protocol stp enable
Network requirements
z Connect Ethernet 2/0/1 of the switch with a multicast source, and connect port OLT 3/0/1 of the
OLT with an ONU, which is bound to ONU 3/0/1:1, through an optical splitter. Attach two hosts,
User 1 and User 2, to ports UNI 1 and UNI 2 respectively.
z It is required that User 1 has access to channels from 225.1.2.1 to 225.1.2.255, and User 2 has
access to channels from 225.1.3.1 to 225.1.3.255.
Network diagram
Figure 3-3 Network diagram for multicast configuration (in IGMP snooping mode)
Eth2/0/1
OLT
OLT3/0/1
Multicast Source
POS
ONU
UNI1 UNI2
User1 User2
Configuration procedure
3-17
[Sysname-ftth] multicast vlan-id 1002 dest-ip 225.1.2.1 to 225.1.2.255
[Sysname-ftth] multicast vlan-id 1003 dest-ip 225.1.3.1 to 225.1.3.255
[Sysname-ftth] quit
# Assign UNI 1 to multicast VLAN 1002 and UNI 2 to multicast VLAN 1003, and configure the ONU as a
Trunk port (to allow the packets of all the VLANs to pass through the port).
[Sysname-Onu3/0/1:1] uni 1 multicast vlan 1002
[Sysname-Onu3/0/1:1] uni 2 multicast vlan 1003
[Sysname-Onu3/0/1:1] port link-type trunk
# Configure UNI 1 and UNI 2 to remove the multicast VLAN tags from downlink multicast packets.
[Sysname-Onu3/0/1:1] uni 1 multicast-strip-tag enable
[Sysname-Onu3/0/1:1] uni 2 multicast-strip-tag enable
[Sysname-Onu3/0/1:1] quit
# Configure the link type of OLT 3/0/1 as hybrid, allow the packets of VLAN 1002 and VLAN 1003 to
pass through OLT 3/0/1, and add tags to the VLAN 1002 and VLAN 1003 packets sent by OLT 3/0/1.
[Sysname] interface olt 3/0/1
[Sysname-Olt3/0/1] port link-type hybrid
[Sysname-Olt3/0/1] port hybrid vlan 1002 1003 tagged
# Configure Ethernet 2/0/1 as a Trunk port, and permit the packets of VLAN 1002 and VLAN 1003 to
pass.
[Sysname] interface Ethernet2/0/1
[Sysname-Ethernet2/0/1] port link-type trunk
[Sysname-Ethernet2/0/1] port trunk permit vlan 1002 1003
Network requirements
Connect Ethernet 2/0/1 of the switch with a multicast source, and connect port OLT 3/0/1 of the OLT
with an ONU, which is bound to ONU 3/0/1:1, through an optical splitter. Attach two hosts, User 1 and
User 2, to ports UNI 1 and UNI 2 respectively.
It is required that User 1 and User 2 have different access rights to Channel 1 (225.1.1.1) and Channel
1 (225.1.2.1):
z User 1 has full access to Channel 1 and 60-second preview access to Channel 2.
3-18
z User 2 has access to Channel 2 only.
Network diagram
Figure 3-4 Network diagram for multicast configuration (in multicast control mode)
Eth2/0/1
OLT
OLT3/0/1
Multicast Source
POS
ONU
UNI1 UNI2
User1 User2
Configuration procedure
# Configure the multicast mode of the ONU as the multicast control mode.
[Sysname-Onu3/0/1:1] multicast-mode multicast-control
# Configure UNI 1 to allow the user attached to it to access Channel 1 and to preview Channel 2 for only
60 seconds, and configure the port to remove the multicast VLAN tags from downlink multicast packets.
[Sysname-Onu3/0/1:1] uni 1 multicast-control multicast-address 225.1.1.1 rule permit
[Sysname-Onu3/0/1:1] uni 1 multicast-control multicast-address 225.1.2.1 rule preview
time-slice 1
[Sysname-Onu3/0/1:1] uni 1 multicast-strip-tag enable
# Configure UNI 2 to allow the user attached to it to access Channel 2 only, and configure the port to
remove the multicast VLAN tags from downlink multicast packets.
[Sysname-Onu3/0/1:1] uni 2 multicast-control multicast-address 225.1.1.1 rule deny
3-19
[Sysname-Onu3/0/1:1] uni 2 multicast-control multicast-address 225.1.2.1 rule permit
[Sysname-Onu3/0/1:1] uni 2 multicast-strip-tag enable
# Configure the ONU port as a Trunk port (to allow the packets of all the VLANs to pass through the
port).
[Sysname-Onu3/0/1:1] port link-type trunk
# Configure the link type of OLT 3/0/1 as hybrid, allow the packets of VLAN 1002 and VLAN 1003 to
pass through OLT 3/0/1, and add tags to the VLAN 1002 and VLAN 1003 packets sent by OLT 3/0/1.
[Sysname] interface olt 3/0/1
[Sysname-Olt3/0/1] port link-type hybrid
[Sysname-Olt3/0/1] port hybrid vlan 1002 1003 tagged
# Configure Ethernet 2/0/1 as a Trunk port, and permit the packets of VLAN 1002 and VLAN 1003 to
pass through the port.
[Sysname] interface Ethernet2/0/1
[Sysname-Ethernet2/0/1] port link-type trunk
[Sysname-Ethernet2/0/1] port trunk permit vlan 1002 1003
Network requirements
z An S7500E switch at the city TV & broadcasting central office (CO) has 12 OLT ports connected to
150 type-A ONUs.
z The type-A ONU vendor recently released an enhanced software version 110 for type-A ONUs.
This version solves some software bugs found in the previous version 109 and provides some new
functions.
z The city office wants to update all the ONUs. District C branch office (connected to OLT 3/0/1) has
20 type-A ONUs under it. The network administrator believes version 109 can meet the current
requirements and has worked normally. Thus, the network administrator asks to use version 110
on a trial basis in the branch office building (ONU 3/0/1:1 is bound with type-A ONUs for FTTB
access to the building) and use version 109 for other ONUs.
3-20
Network diagram
District C ONU
branch office
ONU
ONU
1 POS
0/
3/
LT
ONU
O
OLT3/0/2
ONU
O
ONU
3/
Office
ONU
POS ONU
ONU
For a simplified network diagram, the figure above shows only three of the OLT ports.
Configuration procedure
# Upload update files a110.app and a109.app to the master SRPU and slave SRPU of the switch. For
the detailed procedure, see the parts discussing software maintenance in H3C S7500E Series Ethernet
Switches Installation Manual.
# Update all the attached type-A ONUs to version 109 in OLT 3/0/1 port view.
[Sysname] interface olt 3/0/1
[Sysname-Olt3/0/1] update onu filename a109.app
Update flash:/ a109.app?[Y/N]:y
Info: Download file to onu may take a long time, please wait...
Please wait while the firmware is being burnt, and check the software version after
re-registration!
[Sysname-Olt3/0/1] quit
# Update the type-A ONUs corresponding to ONU 3/0/1:1 in District C branch office building to version
110.
[Sysname] interface onu 3/0/1:1
[Sysname-Onu3/0/1:1] update onu filename a110.app
3-21
Update flash:/ a110.app?[Y/N]:y
Info: Download file to onu may take a long time, please wait...
Please wait while the firmware is being burnt, and check the software version after
re-registration!
[Sysname-Onu3/0/1:1] quit
# Update all the type-A ONUs attached to the S7500E switch to version 110.
<Sysname> system-view
[Sysname] ftth
[Sysname-ftth] update onu onu-type a filename a110.app
3-22
4 UNI Port Configuration
If an H3C EC1001 inserted with a subcard serves as an ONU, a UNI port here refers to the internal port
connecting the subcard to the EC1001, but not the Ethernet port of the EC1001.
Task Remarks
UNI Port Basic Configuration Optional
Configuring the VLAN Operation Mode for a UNI Optional
z Duplex mode of a UNI: When a UNI works in full duplex mode, it can send and receive packets
simultaneously. When a UNI works in half duplex mode, it can either send or receive packets at a
time. When a UNI works in auto-negotiation mode, the duplex mode of the UNI is determined
through negotiation by both ends.
z Flow control for UNIs: If the flow control function is enabled for both the UNIs and the remote device,
the ONU will send messages to notify the remote device to stop sending packets temporarily when
congestion occurs on the ONU, thus avoiding packet loss.
z MDI mode for UNIs: The MDI mode for UNIs can be crossover or straight-through.
z UNI port rate: You can set the UNI port rate. When the rate of a UNI is set to the auto-negotiation
mode, the operating rate of the UNI is negotiated by the local port and the remote port.
z Auto-negotiation on a UNI: You can configure auto-negotiation on a UNI to enable both ends to
auto-negotiate the duplex mode, cable type, and port rate. After forced auto-negotiation is enabled,
the UNI port will restart the auto-negotiation.
4-1
Table 4-1 UNI Port Basic Configuration
interface onu
Enter ONU port view —
interface-number
Optional
Configure a description for a uni uni-number description
UNI text By default, no description is
configured for a UNI.
Optional
Shut down a UNI uni uni-number shutdown By default, a UNI port is
enabled.
Optional
Configure the duplex mode for uni uni-number duplex { full |
a UNI half | auto } By default, a UNI port is in the
full duplex mode.
Required
Enable flow control for a UNI uni uni-number flow-control By default, flow control is
disabled for a UNI port.
Optional
Configure the MDI mode for a uni uni-number mdi { across |
UNI port auto | normal } Be default, the MDI mode for a
UNI port is auto.
Optional
Configure the port rate for a uni uni-number speed { 10 |
UNI port 100 | auto } By default, the UNI port rate is
100Mbps.
Optional
Enable auto-negotiation for a uni uni-number
UNI port auto-negotiation By default, auto-negotiation is
enabled on a UNI port.
Optional
Force a UNI port to restart uni uni-number restart This command takes effect only
auto-negotiation auto-negotiation when auto-negotiation is
enabled on the UNI port.
When auto-negotiation is enabled on a UNI port, you cannot configure the duplex mode, MDI mode, or
rate of the UNI port.
The VLAN operation modes for the Ethernet packets on a UNI are: transparent, tag, and translation.
Transparent mode
The transparent mode is suitable for situations where the user-end family gateway or switch is provided
and managed by the operator and the VLAN tags generated by the family gateway or switch are trusted.
In transparent mode, an ONU transparently forwards the received uplink Ethernet packets (regardless
4-2
of whether the Ethernet packets contain VLAN tags or not) to the OLT without changing them. Downlink
Ethernet packets are also forwarded transparently. Table 4-2 describes the detailed packet processing
in this mode.
Tag mode
Tag mode is suitable for situations where the VLAN tags generated by the user-end family gateway or
switch are not trusted. To enable the operator to centrally manage and control the VLANs of the service
packets entering the network, network-layer VLAN tags need to be added to the packets. Table 4-2
describes the detailed packet processing in this mode.
Translation mode
In translation mode, an ONU translates the VLAN tag added by the user (The user's VID may not be for
the user only, as some other users in the same EPON system may also use the same VID) into a unique
network-side VLAN tag. Table 4-2 describes the packet processing by an ONU in translation mode.
VLAN
With or without
operation Direction Packet processing
VLAN tag
mode
Tagged
VLAN Uplink
transparent Untagged The UNI port forwards the frame without
transmission Tagged changing it.
mode Downlink
Untagged
Tagged The UNI port drops the frame.
Uplink The UNI port tags the frame with the PVID tag
Untagged
and then forwards it.
VLAN
tagging The ONU forwards the frame to the
mode corresponding UNI port according to the
Tagged
Downlink VLAN ID in the frame’s VLAN tag and then
removes the VLAN tag.
Untagged The UNI port drops the frame.
4-3
VLAN
With or without
operation Direction Packet processing
VLAN tag
mode
z If the VLAN ID in the frame’s VLAN tag
matches a VLAN translation entry
configured on the UNI port, the UNI port
replaces this VLAN ID with the
corresponding VLAN ID in the matched
Tagged VLAN translation entry and then forwards
Uplink the frame.
z If the VLAN ID in the frame’s VLAN tag
does not match any VLAN translation
entry, the UNI port drops the frame.
The UNI port tags the frame with its PVID tag
Untagged
and then forwards it.
VLAN z If the VLAN ID in the frame’s VLAN tag
translation matches a VLAN translation entry
mode configured on the UNI port, the UNI port
replaces this VLAN ID with the
corresponding VLAN ID in the matched
VLAN translation entry and then forwards
the frame.
Tagged
Downlink z If the VLAN ID in the frame’s VLAN tag is
the UNI port’s PVID, the UNI port removes
the frame’s VLAN tag and then forwards
the frame.
z If the VLAN ID in the frame’s VLAN tag
does not match any VLAN translation
entry, the UNI port drops the frame.
Untagged The UNI port drops the frame.
Follow these steps to configure the VLAN operation mode for a UNI:
Transparent
uni uni-number vlan-mode transparent
Configure mode Optional
the VLAN The default
uni uni-number vlan-mode tag vlanid [ priority
operation Tag mode mode is
priority-value ]
mode of a transparent
UNI port Translation uni uni-number vlan-mode translation pvid pvid .
mode [ priority priority ] { oldvid to newvid } &<1-15>
If all ONU ports under an OLT port are access ports, you must set the VLAN operation mode of their
UNI ports to transparent to ensure that the packets received on the ONU ports and the end-user PCs
are untagged packets.
4-4
Configuring Fast-Leave Processing for a UNI
With the fast-leave processing feature enabled, when the ONU receives an IGMP leave message from
a host announcing its leaving a multicast group, the ONU immediately deletes that port from the
outgoing port list of the forwarding table. After that, when receiving IGMP group-specific queries for that
multicast group, the ONU will not forward them to that port.
If only one host is attached to a port on the ONU, fast-leave processing helps improve bandwidth and
resource usage.
Follow these steps to configure fast-leave processing for a UNI:
z Before performing this configuration, make sure the ONU works in IGMP Snooping mode. For
related configurations, refer to Configuring the Multicast Mode of the ONU.
z The fast-leave processing feature is effective for IGMPv2 or IGMPv3 clients only.
z If fast leave processing is enabled for a port to which more than one host is attached, when one
host leaves a multicast group, the other hosts attached to the port and listening to the same
multicast group will fail to receive multicast data.
This task adds UNIs to an isolation group to achieve Layer-2 data isolation (that is, UNIs in an isolation
group cannot forward packets to each other). This improves network security and allows for flexible
networking schemes.
Follow these steps to configure port isolation for a UNI:
4-5
Only one isolation group can be created on an ONU device, and there is no limit on the number of ports
in an isolation group.
4-6
5 Alarm Configuration
Introduction to Alarm
Sampling and Alarms
Sampling means the system retrieves statistics data at the sampling interval
At the alarm monitor interval, the system samples the alarm variables and will trigger an alarm if the
value of a variable exceeds its alarm threshold. Alarm information can be output to the network
management system or alarm buffer by configuring the information center.
The alarms can be global alarms, OLT port alarms, or ONU port alarms.
z When an alarm configuration command is executed in FTTH view, the command takes effect on all
the OLT ports and all the ONUs attached to the OLT ports.
z When an alarm configuration command is executed in OLT port view, the command takes effect on
the current OLT port and all the ONUs attached to the OLT port.
z When an alarm configuration command is executed in ONU port view, the command takes effect
only on the ONU corresponding to the current ONU port.
Task Remarks
Enabling Alarm Monitoring Optional
Configuring Global Alarms Optional
Alarm
Configuring Alarms on an OLT Port Optional
configuration
Configuring Alarms on an ONU Port Optional
Displaying and Maintaining Alarm Configurations Optional
Alarm monitoring function takes effect only when statistics sampling function is enabled. This is
because no alarm information can be generated without the average value of sampled statistics.
Follow these steps to enabling sampling and alarm monitoring function:
5-1
To do... Use the command... Remarks
5-2
To do... Use the command... Remarks
Optional
When the total number of error frames
or the error frame rate of the data
Enable the frame error
alarm frame-error-rate enable transferred between the OLT and
rate alarm function
ONUs exceeds the alarm threshold, a
frame error rate alarm occurs.
By default, this function is enabled.
Optional
Configure the monitor alarm frame-error-rate
direction and threshold { direction { uplink | downlink | By default, the monitor direction is
for frame error rate up-down-link} | threshold up-down-link, and the threshold of
alarms threshold } * frame error rate alarms is 1 (the unit is
-9
10 ).
Optional
The system generates an LLID
Enable the LLID mismatch frame alarm when the time
mismatch frame alarm alarm llid-mismatch enable slots are used in disorder, that is, an
function ONU uses another ONU's time slot to
forward data.
By default, this function is disabled.
Configure the Optional
threshold for LLID alarm llid-mismatch threshold
mismatch frame threshold By default, the threshold of LLID
alarms mismatch alarms is 5000 frames.
Optional
The system generates a local stable
alarm when an ONU misuse occurs in
the system, for example, when an
Enable the local stable OAM 2.0 ONU and an OAM 3.3 ONU
alarm local-stable enable
alarm function are mixed in the same system. (All
ONUs in the same system must adopt
the same OAM version). This alarm is
generated at the OLT side.
By default, this function is enabled.
Optional
Enable the critical alarm oam critical-event The system generates a critical event
event alarm function enable alarm when one of the following critical
events occurs: local link fault and
dying gasp.
Optional
Enable the dying gasp The system generates a dying gasp
alarm oam dying-gasp enable alarm when a system error, a data
alarm function
loading error, or any other
nonreversible errors occur.
Optional
The system generates an error frame
period alarm when the number of error
Enable the error frame alarm oam error-frame-period
frames in a specific period (that is, the
period alarm function enable
window size) exceeds the
corresponding predefined threshold.
By default, this function is enabled.
5-3
To do... Use the command... Remarks
Optional
When the alarm threshold is set to 0, a
lot of alarms are generated
Configure the window immediately. Since alarm events are
alarm oam error-frame-period
size and threshold for carried in the OAM packets, a lot of
{ window window | threshold
error frame period OAM packets are generated. In this
threshold } *
alarms case, OAM packets may be lost.
By default, the window size is 1
second, and the alarm threshold is 20
frames.
Optional
The system generates an error frame
alarm when the number of error
Enable the error frame
alarm oam error-frame enable frames in a specific time period (that
alarm function
is, the window size) exceeds the
corresponding predefined threshold.
By default, this function is enabled.
Optional
When the alarm threshold is set to 0, a
lot of alarms are generated
immediately. Since alarm events are
Configure the window alarm oam error-frame
carried in the OAM packets, a lot of
size and threshold for { window window | threshold
OAM packets are generated. In this
error frame alarms threshold } *
case, OAM packets may be lost.
By default, the window size is 10
seconds, and the alarm threshold is 20
frames.
Optional
The system generates an error frame
seconds summary alarm when the
Enable the error frame alarm oam number of error frame seconds (in an
seconds summary error-frame-seconds-summary error frame second, at least one error
alarm function enable frame occurs) in a specific time period
(for example, 1 minute) exceeds the
corresponding predefined threshold.
By default, this function is enabled.
5-4
To do... Use the command... Remarks
Optional
When both the upper limit and the
lower limit of the alarm threshold are
set to 0, a lot of alarms are generated
immediately. Since alarm events are
alarm oam carried in the OAM packets, a lot of
Configure the window error-symbol-period OAM packets are generated. In this
size and thresholds for { window-high windowhigh | case, OAM packets may be lost.
error symbol period window-low windowlow | The window size and threshold values
alarms threshold-high thresholdhigh | specified in this command comprise
threshold-low thresholdlow } * two parts, the significant part and the
insignificant part, both of which are 16
bits in length.
By default, the window size is 1
second, and the alarm threshold is 20
bytes.
Optional
Enable the local link alarm oam local-link-fault The system generates a local link fault
fault alarm function enable alarm when the inbound direction of
the local data terminal becomes faulty.
Optional
The system generates a registration
Enable the registration
alarm registration-error enable error alarm when an error occurs
error alarm function
during the registration of an ONU.
By default, this function is enabled.
Optional
The system generates a remote stable
alarm when an ONU misuse occurs in
the system, for example, when an
OAM 2.0 ONU and an OAM 3.3 ONU
Enable the remote
alarm remote-stable enable are mixed in the same system. (All
stable alarm function
ONUs in the same system must adopt
the same OAM version). This alarm is
generated at the ONU side and will be
reported to the OLT.
By default, this function is enabled.
Optional
The system generates an ONU over
Enable the ONU over
alarm onu-over-limitation limitation alarm when the total number
limitation alarm
enable of ONUs connected with the OLT
function
exceeds the limit.
By default, this function is enabled.
5-5
To do... Use the command... Remarks
Enter system view system-view —
interface olt
Enter OLT port view —
interface-number
Optional
The system generates a bit error rate alarm
Enable the bit error alarm bit-error-rate when the total number of error bits or bit error
rate alarm function enable rate of the data transferred between the OLT
and ONUs exceeds the alarm threshold.
By default, this function is enabled.
Optional
When both the total number of error bits and
Enable the port bit
alarm port bit-error-rate bit error rate of the data transferred between
error rate alarm
enable the OLT and ONUs exceed the alarm
function
thresholds, a port bit error rate alarm occurs.
By default, this function is enabled.
5-6
To do... Use the command... Remarks
Optional
The system generates a local stable alarm
when an ONU misuse occurs in the system,
for example, when an OAM 2.0 ONU and an
Enable the local stable alarm local-stable
OAM 3.3 ONU are mixed in the same system.
alarm function enable
(All ONUs in the same system must adopt the
same OAM version). A local stable alarm is
generated by the OLT side.
By default, this function is enabled.
Optional
Enable the critical alarm oam The system generates a critical event alarm
event alarm function critical-event enable when one of the following critical events
occurs: local link fault and dying gasp.
Optional
Enable the dying gasp alarm oam dying-gasp The system generates a dying gasp alarm
alarm function enable when a system error, a data loading error or
any other nonreversible error occurs.
Optional
The system generates an error frame period
alarm oam alarm when the number of error frames in a
Enable the error frame
error-frame-period specific period (that is, the window size)
period alarm function
enable exceeds the corresponding predefined
threshold.
By default, this function is enabled.
Optional
When the alarm threshold is set to 0, a lot of
Configure the window alarm oam alarms are generated immediately. Since
size and threshold for error-frame-period alarm events are carried in the OAM packets,
error frame period { window window | a lot of OAM packets are generated. In this
alarms threshold threshold } * case, OAM packets may be lost.
By default, the window size is 1 second, and
the alarm threshold is 20 frames.
Optional
The system generates an error frame alarm
Enable the error frame alarm oam error-frame when the number of error frames in a specific
alarm function enable time period (that is, the window size) exceeds
the corresponding predefined threshold.
By default, this function is enabled.
Optional
When the alarm threshold is set to 0, a lot of
alarms are generated immediately. Since
Configure the window alarm oam error-frame
alarm events are carried in the OAM packets,
size and threshold for { window window |
a lot of OAM packets are generated. In this
error frame alarms threshold threshold } *
case, OAM packets may be lost.
By default, the window size is 10 seconds,
and the alarm threshold is 20 frames.
5-7
To do... Use the command... Remarks
Optional
The system generates an error frame
seconds summary alarm when the number of
Enable the error frame alarm oam error frame seconds (in an error frame
seconds summary error-frame-seconds-su second, at least one error frame occurs) in a
alarm function mmary enable specific time period (for example, 1 minute)
exceeds the corresponding predefined
threshold.
By default, this function is enabled.
alarm oam
Configure the window Optional
error-frame-seconds-su
size and threshold for
mmary { window By default, the window size is 600 (in unit of
error frame seconds
window | threshold 100 ms), and the alarm threshold is 1 second.
summary alarms
threshold } *
Optional
The system generates an error symbol period
Enable the error alarm oam alarm when the number of error frames in a
symbol period alarm error-symbol-period specific period (that is, the window size)
function enable exceeds the corresponding predefined
threshold.
By default, this function is enabled.
Optional
When both the upper limit and the lower limit
alarm oam of the alarm threshold are set to 0, a lot of
error-symbol-period alarms are generated immediately. Since
{ window-high alarm events are carried in the OAM packets,
Configure the window a lot of OAM packets are generated. In this
windowhigh |
size and thresholds for case, OAM packets may be lost.
window-low windowlow |
error symbol period
threshold-high The window size and threshold values
alarms
thresholdhigh | specified in this command comprise two parts,
threshold-low a significant part and an insignificant part,
thresholdlow } * both 16 bits in length.
By default, the window size is 1 second, and
the alarm threshold is 20 bytes.
Optional
Enable the local link alarm oam The system generates a local link fault alarm
fault alarm function local-link-fault enable when the inbound direction of the local data
terminal becomes faulty.
Optional
The system generates a registration error
Enable the registration alarm registration-error
alarm when an error occurs during the
error alarm function enable
registration of an ONU.
By default, this function is enabled.
Optional
The system generates a remote stable alarm
when an ONU misuse occurs in the system,
for example, when an OAM 2.0 ONU and an
Enable the remote alarm remote-stable OAM 3.3 ONU are mixed in the same system.
stable alarm function enable (All ONUs in the same system must adopt the
same OAM version). This alarm is generated
at the ONU side and will be reported to the
OLT.
By default, this function is enabled.
5-8
To do... Use the command... Remarks
Optional
Enable the ONU over alarm The system generates an ONU over limitation
limitation alarm onu-over-limitation alarm when the total number of ONUs
function enable connected with the OLT exceeds the limit.
By default, this function is enabled.
5-9
To do... Use the command... Remarks
Optional
When the alarm threshold is set to 0, a lot of
alarms are generated immediately. Since
Configure the window alarm oam error-frame
alarm events are carried in the OAM packets,
size and threshold for { window window |
a lot of OAM packets are generated. In this
error frame alarms threshold threshold } *
case, OAM packets may be lost.
By default, the window size is 10 second, and
the alarm threshold is 20 frames.
Optional
The system generates an error frame
seconds summary alarm when the number of
Enable the error frame alarm oam error frame seconds (in an error frame
seconds summary error-frame-seconds-s second, at least one error frame occurs) in a
alarm function ummary enable specific time period (for example, 1 minute)
exceeds the corresponding predefined
threshold.
By default, this function is enabled.
alarm oam
Configure the window Optional
error-frame-seconds-s
size and threshold for
ummary { window By default, the window size is 600 (in unit of
error frame seconds
window | threshold 100 ms), and the alarm threshold is 1 second.
summary alarms
threshold } *
Optional
When both the total number of error bits and
the bit error rate of the data transferred
Enable the port bit error alarm port bit-error-rate
between the OLT and ONUs exceed the
rate alarm function enable
alarm threshold, a port bit error rate alarm
occurs.
By default, this function is enabled.
5-10
z Use the display this command to display the configuration in the current view. To display the
alarm configurations in FTTH view, OLT port view, or ONU port view, you need to enter the
corresponding view.
z Table 5-1 shows the relations between the views in which alarms are configured and the views in
which alarm configurations are displayed.
z For details about the display trapbuffer command, see the part discussing information center in
the command manual.
Table 5-1 Relations between the alarm command configuration views and alarm configuration display
views
5-11
6 Supported Switch Features and Restrictions
6-1
Feature Remarks Related section
IP Source Guard
IP Source Guard Configuring IP Source Guard on an OLT port
configuration
Smart Link
Smart Link Enabling receiving Flush packets
configuration
z The priority configured for an OLT port (with the qos priority priority-value command) takes effect
only when QinQ is enabled on the OLT port.
z After MAC authentication is enabled on an OLT port, the port directly discards the unicast packets
that fail to pass the authentication, while the corresponding multicast table entries can be created
on the device for multicast packets regardless of whether the multicast packets pass the
authentication.
6-2
Feature Remarks Reference
z Enabling fast-leaving processing
z Configuring the maximum number of IPv4
multicast groups that can be joined on a port
z Configuring IPv4 multicast group filtering
IGMP Snooping Multicast Protocols
z Configuring a port as a simulated host to join a
multicast group
z Configuring IPv4 multicast group replacement
z Configuring static router/member ports
z Enabling fast-leaving processing
z Configuring the maximum number of IPv6
multicast groups that can be joined on a port
z Configuring IPv6 multicast group filtering
MLD Snooping Multicast Protocols
z Configuring a port as a simulated host to join an
IPv6 multicast group
z Configuring IPv6 multicast group replacement
z Configuring static router/member ports
Port mirroring Configuring local UNI port mirroring Port Mirroring
z Configuring port priority
z Configuring QoS policies
z Configuring congestion management
QoS z Configuring the priority trust mode of a port QoS
z Configuring traffic classification and priority
marking for uplink traffic of a UNI
z Configure traffic policing for uplink/downlink traffic
of a UNI
Feature Restrictions
6-3
Feature Restrictions
z When an ACL rule is referenced in a QoS policy, the action defined in the
ACL rule (deny or permit) does not work. Instead, the action on the
packets that match the ACL rule is determined by the traffic behavior
defined in the QoS policy.
z ONU ports support packet filtering based on source MAC address,
destination MAC address, Ethernet type, VLAN ID, source IP address,
destination IP address, source TCP port, and source UDP port only.
z Source MAC address-based packet filtering on an ONU port works only on
the uplink direction and supports a maximum of 32 ACL rules.
z Destination MAC address-based packet filtering on an ONU port works on
both uplink and downlink directions and supports a maximum of 32 ACL
rules.
QoS z Ethernet type-based packet filtering on an ONU port supports a maximum
of 30 ACL rules in the case of single-direction configuration and a
maximum of 16 ACL rules for each direction when configured for both
uplink and downlink directions.
z VLAN ID-based packet filtering on an ONU port supports a maximum of 6
ACL rules for the uplink direction and a maximum 8 ACL rules for the
downlink direction.
z Source/destination IP address-based packet filtering on an ONU port
supports a maximum of 24 ACL rules in the case of single-direction
configuration and a maximum of 16 ACL rules for each direction when
configured for both uplink and downlink directions.
z Source TCP/UDP port-based packet filtering supports a maximum of 24
ACL rules in the case of single-direction configuration and a maximum of
32 ACL rules when configured for both uplink and downlink directions.
As ONU ports are used for accessing, when the S7500E switch is configured as a DHCP Snooping
device, do not connect a DHCP server to the ONU port.
6-4