MA5616 Deployment Guide (V1.0)

Content

1. Equipment Introduction...............................................................................................................21.1 System Overview21.2 Board Description1.2.1 Control Card 31.2.2 ADSL Service Card1.2.3 VDSL Service Card1.2.4 POTS Service Card1.2.5 P2P FE card 51.3 Cabinet Installation1.3.1 Scenario 61.3.2 Case Study 81.3.2 Important Notes1.3 Management Configuration1.3.1 N2000 & U20001.3.2 Environment Monitor in F01S100 cabinet1.3.3 Environment Monitor in F01S300 cabinet1.3.3 Service General design1.3.4 Security Design221.3.5 ADSL Service Configuration1.3.6 VDSL Service Configuration1.3.7 VOIP POTS Service Configuration1.3.8 FE Service Configuration1.3 Feature Description1.3.1 Anti-Macspofing1.3.2 Ring Check 541.3.3 Security Anti-dos1.3.5 Security Mac-filter

1. Equipment Introduction

1.1 System Overview

Abbreviated Name Full Name

CCUC Centralized control unit board, 2GE/2GPON

ASPB 64-port narrowband subscriber board

ADLE 32-port ADSL2+ service board

VDSE 24-port VDSL2 over POTS service board

EIUA 16 Fe Electric Port

EIUD 4 Fe (fiber)+ 4 Ge(Combo)

PAIA AC power board

PAIB AC +DC power board

PDIA DC power board

FCBA Fan control board

1.2 Board Description

1.2.1 Control Card

1.2.2 ADSL Service Card

1.2.3 VDSL Service Card

1.2.4 POTS Service Card

Daughter Board

Port Function

UP2A Two multi-mode adaptive optical ports

Transmits broadband services upstream or cascades equipment, and supports stratum-4 clock synchronization.

UP2C Two multi-mode adaptive optical ports

Transmits broadband services upstream or cascades equipment, and supports stratum-3 clock synchronization.

ASDA/ASDM - Provides a built-in DSP chip, processes voice frequency, and converts digital signals into VoIP packets. ASDM supports better call capability than ASDA.

1.2.5 P2P FE card

1.2.6 Power card

Note:1. For PAIB card, it support AC and DC at the same time, but DC is the backup for AC, by nature,

DC does not work. Only when the AC power on first and suddenly down, system will drive DC

to work.2. For PAIB card, the DC connection is designed to connect to Battery and charge the battery by

DSLAM himself. It is not recommendatory to connect the DC connection to other kind of DC power, otherwise it is likely to destroy the power card of DSLAM.

1.3 Cabinet Installation

1.3.1 Scenario

1.3.2 Case Study

Waterproof Cap is used to keep from the water, so please install it back after using Mounting Bracket.

Make sure the Sealing The Cabinet well

Mounting Installation Part not be too tight

Routing the Fiber well.

Routing the user cable.

Off the two power Switch before connect the AC power.

Grounding Condition

Making the MDF for P2P FE access

Protective Unit

Environment Monitor for F01S100 cabinet

Environment Monitor for F01S300 cabinet

1.3.2 Important Notes

1. Choose the right location for Cabinet, for example if the area easily to be covered by raining water, it is suggested to install at Pole or Wall.

2. Face the cabinet door towards south or both if possible, ensures that the cabinet receives the minimum solar radiation from Sun.

3. The maximum weight of the fully loaded cabinet is 84Kg, so for safety, the bearing capacity of the steel cable for carrying the cabinet should be larger than 252 kg (triple of the maximum weight of the fully loaded cabinet.

4. If installed at the Pole, the diameter of the pole is required to be between 250mm and 350mm.

5. If installed on the ground, after the cabinet or battery compartments is installed on the base, use the waterproof glue (such as Huawei TSE382-C) to seal the installation hole around three expanding bolts.

6. Before routing the battery power cable, ensure that the batter switch is set to be off; The connection between two batteries, or the connection between batteries and equipment must be firm and correctly; Follow exactly the installation procedure to install the batteries, any short circuit may hurt personnel and damage the equipment.

7. Before routing the PGND cables, make the label for the cable to facilitate the onsite engineering and the subsequent maintenance; Route the PGND cable properly to ensure the cabinet is protected from the lighting and other interfaces. The diameter of the PGND cable should not be smaller than 16mm.

8. Before routing the AC power cable, make sure the label for the cable to facilitate the

onsite engineering and the subsequent maintenance; Before routing the AC power cable, ensure that the switch of the AC PDU is set to be OFF.

9. Before routing the user cables, make the label for the cable and when the service is enabled in the future the cable side terminal block must be installed with the protective unit.

10. When deploy the Optical cable and Optical Fiber: Make label; Only the qualified personnel are allowed to splice the optical fiber; When handling optical fibers do not stand close to or look into the optical fiber outlet with unproteced eyes; The optical fiber in the cabinet should be protected with a spiral rube; The bending radius of the optical fiber should be more than 20 times the cable diameter, in generally the bending radius of the optical fiber is greater than or equal to 40mm.

11. Check the cabinet carefully according with the "Check list " of the installation guide. 12. Power on the service device only when the input AC voltage is in the normal range:

100V to 240V.

13. If the cabling apertures at the bottom of the cabinet or battery compartment are the sleeves, cover the sealing material(such as sealing mud) onto the cabling apertures at the bottom of the cabinet; and if the cabling apertures at the bottom of cabinet are the PG connectors, fasten the PG connectors properly.

1.3 Management Configuration

1.3.1 N2000 & U2000

MA5616(config)#interface vlanif 3988MA5616 (config-if-vlanif3988)# ip address 172.24.32.10 20MA5616 (config-if-vlanif3988)#quitMA5616(config)# ip route-static 172.30.30.10 255.255.255.255 172.24.32.1MA5616(config)# snmp-agent community read public MA5616(config)# snmp-agent community write private MA5616(config)# snmp-agent target-host trap-hostname U2000 address 172.30.30.10 udp-port 162 trap-paramsname U2000 MA5616(config)# snmp-agent target-host trap-paramsname U2000 v1 securityname private MA5616(config)# snmp-agent trap enable standard MA5616(config)# sysman source trap vlanif 3988

Note:IP address of N2000&U2000: 172.30.30.10Management VLAN: 3988

IP address of DSLAM: 172.24.32.10Gateway of DSLAM: 172.24.32.1SNMP Communication Word: Read (public) and Write (private).

1.3.2 Environment Monitor in F01S100 cabinet

1.3.2.1 Power Module &Sensor

MA5616(config)#display emu

EMU parameter

----------------------------------------------------------------------------

ID Type State | ID Type State

----------------------------------------------------------------------------

0 FAN Normal | 1 H831VESC Normal

2 H831PMU Normal | 3 - -

4 - - | 5 - -

6 - - | 7 - -

8 - - | 9 - -

10 - - | 11 - -

12 - - | 13 - -

14 - - | 15 - -

----------------------------------------------------------------------------

MA5616(config)#interface emu 1

MA5616(config-if-h831vesc-1)# esc digital 0 available-level low-level name hightemp

MA5616(config-if-h831vesc-1)# esc digital 1 available-level low-level name door

MA5616(config-if-h831vesc-1)# esc digital 2 available-level low-level name arrester

MA5616(config-if-h831vesc-1)# display esc alarm

EMU ID: 1 ESC alarm information

----------------------------------------------------------------------------

DigitalID Name State | DigitalID Name State

0 hightemp Normal | 1 Door Alarm

2 arrester Normal | 3 Wiring Normal

----------------------------------------------------------------------------

1.3.3 Environment Monitor in F01S300 cabinet

1.3.3.1 Power Module &Sensor

(config)#display emu EMU parameter ---------------------------------------------------------------------------- ID Type State | ID Type State ---------------------------------------------------------------------------- 0 FAN normal | 1 - - 2 - - | 3 - - 4 - - | 5 - - 6 - - | 7 - - 8 - - | 9 - - 10 - - | 11 - - 12 - - | 13 - - 14 - - | 15 - - 16 - - | 17 - - 18 - - | 19 - - 20 - - | 21 - - 22 - - | 23 - - 24 - - | 25 - - 26 - - | 27 - - 28 - - | 29 - - 30 - - | 31 - - 32 - - | 33 - - (config)#emu add 1 Power4830L 0 0(config-if-power4830l-1)#power outside-digital 3 available-level low-level name Arrester(config-if-power4830l-1)#power outside-digital 4 available-level high-level name smoke (config-if-power4830l-1)#power outside-digital 5 available-level low-level name fan

(config-if-power4830l-1)# power outside-digital 6 available-level low-level name mdfdoor (config-if-power4830l-2)# power battery parameter 0.15 60 1 110 (config-if-power4830l-2)# power battery temperature 80 -20 80(config-if-power4830l-2)# power battery temperature 80 -20 80(config-if-power4830l-2)# power environment temperature 68 -5 80 -20(config-if-power4830l-2)# power temperature-off load-off-temperature 70(config-if-power4830l-1)# display power alarm

1.3.3 Service General design

Because in the DSLAM there is the “Service-port index” idea, that every service-port have one ID, so how to manage and use this “ID” well is important.

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

Note: Here suppose the max density of board is 64 ports.

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38

FE (uservlan) 35 36 37 38

Suppose the MA5616 Demo site configured as

Slot0 CCUCControlCa

rd

Slot1 VDSE VDSL

Slot2 ADLE ADSL

Slot3 EIUA FE

Slot4 ASPB POTS

Slot5 PAIB Power card

Note: It is not recommendatory to deploy the ADSL and VDSL at the same DSLAM, because there is crossing talking between VDSL and ADSL signal. And if there must configure ADSL and VDSL at the same time, please set the ADSL and VDSL cards far, for example, ADSL slot1 and VDSL slot4, and also the Copper line cable between ADSL and VDSL better to be isolated.

1.3.4 Security Design

1.3.4.1 PPPOE

MA5616(config)#vlan service-profile profile-id 1 profile-name PPPOE• MA5616(config-vlan-srvprof-1)# pitp enable• MA5616(config-vlan-srvprof-1)# dhcp option82 disable• MA5616(config-vlan-srvprof-1)# Anti-macspoofing enable• MA5616(config-vlan-srvprof-1)# commit• MA5616(config-vlan-srvprof-1)# quit

a. The PPPOE format for MINI DSLAM in future is:a

n

i

d

a

t

m

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

v

p

i

.

v

c

i

(

9

p

a

r

a

m

e

t

e

r

)

anid eth

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

a

x

c

i

.

V

L

A

N

-

I

D

(

9

p

a

r

a

m

e

t

e

r

)

And now the current PPPOE format for DSLAM is:a

n

i

d

a

t

m

r

a

c

k

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

v

p

i

.

v

c

i

(

7

p

a

r

a

m

e

t

e

r

)

We can use the command the following command to customize the PPPOE message format:huawei(config)#raio-mode user-defined pitp-pmodehuawei(config)#raio-format pitp-pmode cid anid atm frame/frame/frame/frame/slot/port:vpi.vcihuawei(config)#raio-format pitp-pmode cid anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID

or huawei(config)#raio-mode user-defined pitp-pmodehuawei(config)#raio-format pitp-pmode anid atm rack/frame/slot/port:vpi.vci

1.3.4.2 IPTV

• MA5616(config)#vlan service profile profile-id 2 profile-name IPTV

• MA5616(config-vlan-srvprof-2)# Anti-macspoofing enable• MA5616(config-vlan-srvprof-2)# pitp disable• MA5616(config-vlan-srvprof-2)# dhcp option82 disable• MA5616(config-vlan-srvprof-2)# commit• MA5616(config-vlan-srvprof-2)# quit

Note: Because now VASC not require DHCP option82 feature on DSLAM, so here we disable “dhcp option82” at DSLAM.

1.3.4.3 VOIP

• MA5616(config)#vlan service-profile profile-id 3 profile-name VOIP• MA5616(config-vlan-srvprof-3)# Anti-macspoofing enable• MA5616(config-vlan-srvprof-3)# pitp disable• MA5616(config-vlan-srvprof-3)# dhcp option82 enable• MA5616(config-vlan-srvprof-3)# commit• MA5616(config-vlan-srvprof-3)# quit

a. The DHCP format for VOIP not yet defined by VTN yet, here we just list for example:a

n

i

d

a

t

m

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

v

p

i

.

v

c

i

(

9

p

a

r

a

m

e

t

e

r

)

anid eth

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

a

x

c

i

.

V

L

A

N

-

I

D

(

9

p

a

r

a

m

e

t

e

r

)

ora

n

i

d

a

t

m

r

a

c

k

/

f

r

a

m

e

/

s

l

o

t

/

p

o

r

t

:

v

p

i

.

v

c

i

(

7

p

a

r

a

m

e

t

e

r

)

We can use the command the following command to customize the dhcp-option82 message format:huawei(config)#raio-mode user-defined dhcp-option82huawei(config)#raio-format dhcp-option82 cid anid atm frame/frame/frame/frame/slot/port:vpi.vcihuawei(config)#raio-format dhcp-option82 cid anid eth frame/frame/frame/frame/slot/port: axci.VLAN-ID

or huawei(config)#raio-mode user-defined dhcp-option82huawei(config)#raio-format dhcp-option82 anid atm rack/frame/slot/port:vpi.vci

1.3.4.4 IPOE

• MA5616(config)#vlan service-profile profile-id 4 profile-name IPOE• MA5616(config-vlan-srvprof-4)# Anti-macspoofing disable• MA5616(config-vlan-srvprof-4)# pitp disable• MA5616(config-vlan-srvprof-4)# dhcp option82 disable• MA5616(config-vlan-srvprof-4)# commit• MA5616(config-vlan-srvprof-4)# quit

Note: For IPOE service, we can not enable “Anti-Macspoofing” feature at IPOE VLAN, otherwise all of the static IPOE service will be down.

1.3.4.5 Unicast & Broadcast Traffic-suppress at uplink port

We can choose depend on the requirement from VNPT, currently we deploy Level3 for MA5600.

MA5616(config)#interface eth 0/0 MA5616(config-eth-0/0)# Traffic-suppress all unicast value 3. MA5616(config-eth-0/0)# Traffic-suppress all broadcast value 6.

1.3.4.6 Power Management Mode

In short, if VNPT require to protect the POTS card, and let Broad-band cards down after AC down, please enable such feature, otherwise please undo this feature.

1.3.4.7 Global Security

• MA5616(config)# security anti-macspoofing enable• MA5616(config)# pitp pmode enable• MA5616(config)# dhcp option82 enable• MA5616(config)# security anti-dos enable • MA5616(config)#ring check enable• MA5616(config)# security mac-filter 1010-1010-3020

Note: The “Security mac-filter” is used to protect the BARS or some Server mac address, after that system will prohibit the user side simulate the Server mac-address. And in the command, the mac “1010-1010-3020” is one Server Mac, and DSLAM support configure 4 Mac at most.

1.3.4.8 QOS profile example

The above is designed for DSL access, ADSL & VDSL, and the following is for FE access:

1.3.4.7 Special Case Application

Case1: If MA5616 cascading under MA5600, MA5616 should set the DSLAM IGMP version to be as IGMP V2, because the current MA5600 work as IGMP V2.MA5616(config)#multicast-vlan 99MA5616(config-mvlan99)# igmp version v2And MA5600 should configure the GE port who connect with the MA5616 to be IPTV cascading port: MA5600(config)#igmp cascade-port frameid/slotid/portid quickleave disable

Case2: If MA5616 connect to UPE or LSW, but UPE or LSW run the IGMP V2. In this case, MA5616 also need set the IGMP version to be IGMP V2.

Note: MA5616 work as IGMP V3 by default.

1.3.5 ADSL Service Configuration

1.3.5.1 Line Profile Example

1.3.5.2 PPPOE configuration example

• Setp1 :Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2 MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 11

• Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 600 smart MA5616(config)#port vlan 600 0/0 0

• Setp3: Create the service port to the VLAN MA5616(config)#service-port 64 vlan 600 ADSL 0/2/0 vpi 8 vci 35 rx-cttr

11 tx-cttr 11 Service-port ID: 64

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV 256- 256-319 320-383 384-447 448-511

511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

PVC : 8/35

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Traffic Table: 11

• Setp4: Configure the Security for PPPOE serviceM

A5616(config)#vlan bind service-profile 600 profile-name PPPOE

1.3.5.3 IPTV configuration example


• Setp2: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 1100 smart MA5616(config)#port vlan 1100 0/0 0 MA5616(config)#vlan 99 smart MA5616(config)#port vlan 99 0/0 0

• Setp3: Create the service port to the VLAN MA5616(config)#service-port 320 vlan 1100 ADSL 0/2/0 vpi 8 vci 36 rx-

cttr 12 tx-cttr 12 Note: Here the ID of “service-port” is “320”, every service-port have

one id, later it will be used add the IPTV user.

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Traffic Table 12 as following:

S

etp4:Configure the security for IPTV service• MA5616(config)#vlan bind service-profile 1100 profile-name IPTV

• Setp5: Configure the “BTV” at DSLAM• MA5616(config)#multicast-vlan 99• MA5616(config-mvlan99)# igmp mode proxy• MA5616(config-mvlan99)# igmp uplink-port 0/0/0• MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253

priority 4• MA5616(config-mvlan99)#btv • MA5616(config-btv)#igmp proxy router gen-query-interval 30 • MA5616(config-btv)#igmp proxy router robustness 1• MA5616(config-btv)#igmp user add service-port 320 no-auth• MA5616(config-btv)#multicast-vlan 99• MA5616(config-mvlan99)#igmp multicast-vlan member service-port 320

Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN.

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

1.3.5.4 VOIP configuration example

Note: Here is the VOIP is based on the CPE, DSLAM just provide the channel to transparent the packets.



• Setp3: Create the service port to the VLAN MA5616(config)#service-port 578 vlan 88 ADSL 0/2/0 vpi 8 vci 37 rx-cttr

13 tx-cttr 13 Note: Here the ID of “service-port” is “578”, every service-port have


　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38



• Setp4: Configure the Security for VOIP service.• MA5616(config)#vlan bind service-profile 88 profile-name VOIP

1.3.5.5 IPOE configuration example

• Setp1 : Activate the ADSL2+ port. MA5616(config)# interface ADSL 0/2

MA5616(config-if-ADSL-0/2)#deactivate 0 MA5616(config-if-ADSL-0/2)#activate 0 profile-index 11


• Setp3: Create the service port to the VLAN MA5616(config)#service-port 768 vlan 666 ADSL 0/2/0 vpi 8 vci 38 rx-

cttr 14 tx-cttr 14

Service-port ID as following:

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE76

8~999　　　　

PVC 8/38 as following:

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38



• Setp4: Configure the Security for IPOE serviceMA5616(config)#vlan bind service-profile 666 profile-name IPOE

1.3.6 VDSL Service Configuration

1.3.6.1 Line Profile Example

MA5616(config)#display vdsl line-profile 10

------------------------------------------------------------------------------

Profile index: 10 Name: 17A_B8-11_(SNR6-slow-INP2)

Transmission mode: All (G992.1~5,T1.413,G993.2)

Bit swap downstream : Enable

Bit swap upstream : Enable

Form of transmit rate adaptation downstream : AdaptAtStartup

Form of transmit rate adaptation upstream : AdaptAtStartup

Target SNR margin downstream(0.1dB) : 60

Minimum SNR margin downstream(0.1dB) : 0

Maximum SNR margin downstream(0.1dB) : 300

Target SNR margin upstream(0.1dB) : 60

Minimum SNR margin upstream(0.1dB) : 0

Maximum SNR margin upstream(0.1dB) : 300

UPBO US1 band reference PSD parameters[a, b] : 1650,1020




UPBO Boost Mode : Enable

UPBO US1 band reference electrical length : 0




UPBO use of electrical length to compute UPBO : Auto

Allow transition to idle : not allowed

Allow transition to low power : not allowed

L0 time(second) : 255



Maximum aggregate transmit power reduction(dB) : 3

Total maximum aggregate transmit power reduction

(dB) : 9

<defmode>

G.993.2 profile : Profile17a

VDSL2 PSD class mask : AnnexB998ADE17-M2x-A(B8-11)

VDSL2 link use of U0 : Unused

Maximum nominal aggregate transmit power

downstream(0.1dBm) : 145

Maximum nominal aggregate transmit power

upstream(0.1dBm) : 145

Upstream PSD mask selection : ADLU-32/EU-32

Virtual noise mode downstream : Disable

Virtual noise mode upstream : Disable

Network timing reference clock mode : FreeRun

INM inter arrival time offset downstream(symbol): 3

INM inter arrival time step downstream : 0

INM cluster continuation value downstream

(symbol) : 0

INM equivalent INP mode downstream : 0

INM inter arrival time offset upstream(symbol) : 3

INM inter arrival time step upstream : 0

INM cluster continuation value upstream(symbol) : 0

INM equivalent INP mode upstream : 0

SOS time Window downstream(64ms) : 0

Minimum percentage of degraded tones downstream : 0

Minimum number of normalized CRC anomalies

downstream(0.02) : 65535

Maximum number of SOS downstream : 0

SNR margin offset of ROC downstream(0.1dB) : 0

Minimum impulse noise protection of ROC

downstream : 0

SOS time Window upstream(64ms) : 0

Minimum percentage of degraded tones upstream : 0

Minimum number of normalized CRC anomalies

upstream(0.02) : 65535

Maximum number of SOS upstream : 0

SNR margin offset of ROC upstream(0.1dB) : 0

Minimum impulse noise protection of ROC

upstream : 0

------------------------------------------------------------------------------

MA5616(config)#display vdsl channel-profile 33

------------------------------------------------------------------------------

Profile index: 33 Name: 33M/10M(Down/Up)

Data path mode : Both

Minimum impulse noise protection downstream : TwoSymbols

Minimum impulse noise protection upstream : TwoSymbols

Maximum interleaving delay downstream(ms) : 16

Maximum interleaving delay upstream(ms) : 16

Minimum transmit rate downstream(Kbps) : 64

Minimum reserved transmit rate downstream(Kbps) : 64

Maximum transmit rate downstream(Kbps) : 34837

Minimum transmit rate upstream(Kbps) : 64

Minimum reserved transmit rate upstream(Kbps) : 64

Maximum transmit rate upstream(Kbps) : 10557

Rate threshold downshift downstream(Kbps) : 0

Rate threshold upshift downstream(Kbps) : 0

Rate threshold downshift upstream(Kbps) : 0

Rate threshold upshift upstream(Kbps) : 0

Retransmission control in downstream : Disable

Retransmission control in upstream : Disable

Erasure decoding switch : Disable

Minimum SOS bit rate downstream(8Kbps) : 8

Minimum SOS bit rate upstream(8Kbps) : 8

------------------------------------------------------------------------------

MA5616(config)#display vdsl line-template 33

------------------------------------------------------------------------------

Template index: 33 Name:33M/10M

Line profile index : 10

Channel1 profile index : 33

Channel1 rate adaptation ratio downstream : 100

Channel1 rate adaptation ratio upstream : 100

------------------------------------------------------------------------------

VDSL

(PTM)

Overhead =

INT((L+4)/64)+4+MOD((L+4),64)/64

Packet

size(L)

Overhea

dtotal size PTM efficiency

64 5.0625 69.0625 92.67%

128 6.0625 134.0625 95.48%

256 8.0625 264.0625 96.95%

512 12.0625 524.0625 97.70%

1024 20.0625 1044.0625 98.08%

1500 27.5 1527.5 98.20%

Down Line Speed= SLA 33M / 0.97 = 34837Up line Speed = SLA 10M / 0.97 = 10557

In short, the Line Speed = SLA/0.97, it is recommendatory to use the PTM mode but not ATM mode, otherwise the Line Speed = SLA x 1.2, the same with ADSL port.

And if we need change the Line Speed, we can create the different Channel-Profile to define the speed but can reuse the same line-profile(10), for example, now we need create the 40M Down and 10M up, so we can define one more channel-profile who define the 40M/10M speed and reuse the old Line-profile(ID:10).

MA5616(config)#display vdsl channel-profile 40

------------------------------------------------------------------------------

Profile index: 40 Name: 40M/10M(Down/Up)

Data path mode : Both

Minimum impulse noise protection downstream : TwoSymbols

Minimum impulse noise protection upstream : TwoSymbols

Maximum interleaving delay downstream(ms) : 16

Maximum interleaving delay upstream(ms) : 16

Minimum transmit rate downstream(Kbps) : 64

Minimum reserved transmit rate downstream(Kbps) : 64

Maximum transmit rate downstream(Kbps) : 40960

Minimum transmit rate upstream(Kbps) : 64

Minimum reserved transmit rate upstream(Kbps) : 64

Maximum transmit rate upstream(Kbps) : 10240

Rate threshold downshift downstream(Kbps) : 0

Rate threshold upshift downstream(Kbps) : 0

Rate threshold downshift upstream(Kbps) : 0

Rate threshold upshift upstream(Kbps) : 0

Retransmission control in downstream : Disable

Retransmission control in upstream : Disable

Erasure decoding switch : Disable

Minimum SOS bit rate downstream(8Kbps) : 8

Minimum SOS bit rate upstream(8Kbps) : 8

------------------------------------------------------------------------------

MA5616(config)#display vdsl line-template 40

------------------------------------------------------------------------------

Template index: 40 Name:40M/10M

Line profile index : 10

Channel1 profile index : 40

Channel1 rate adaptation ratio downstream : 100

Channel1 rate adaptation ratio upstream : 100

------------------------------------------------------------------------------

How to configure the VDSL line-profile:MA5616(config)#vdsl line-profile add

{ <cr>|profile-index<U><2,1024> }:10

Command:

vdsl line-profile add 10

Start adding profile

Press 'Q' to quit the current configuration and new configuration will be

neglected

> Do you want to name the profile (y/n) [n]:y

> Please input profile name:17a

> Transmission mode:

> 0: Custom

> 1: All (G.992.1~5,T1.413,G.993.2)

> 2: Full rate(G.992.1/3/5,T1.413,G.993.2)

> 3: G.DMT (G.992.1/3/5,G.993.2)

> 4: G.HS (G.992.1~5,G.993.2)

> 5: ADSL (G.992.1~5,T1.413)

> 6: VDSL (G.993.2)

> Please select (0~6) [1]:1

> Bit swap downstream 1-disable 2-enable (1~2) [2]:

> Bit swap upstream 1-disable 2-enable (1~2) [2]:

> Please select the form of transmit rate adaptation downstream:

> 1-fixed, 2-adaptAtStartup, 3-adaptAtRuntime (1~3) [2]:

> Please select the form of transmit rate adaptation upstream:

> 1-fixed, 2-adaptAtStartup, 3-adaptAtRuntime (1~3) [2]:

> Will you set SNR margin parameters? (y/n) [n]:n

> Will you set DPBO parameters? (y/n)[n]:

> Will you set UPBO parameters? (y/n)[n]:

> Will you set power management parameters? (y/n) [n]:

> Will you set RFI notch configuration parameter? (y/n) [n]:

> Will you set ADSL tone blackout configuration parameter? (y/n) [n]:

> Will you set VDSL tone blackout configuration parameter? (y/n) [n]:

> Will you set mode-specific parameters? (y/n) [n]:y

> Current configured modes:

> 1-defmode

> Please select 1-Add 2-Modify 3-Save and quit [3]:2

> 1-defmode > Please select [1]:

> G.993.2 profile:

> 1-Profile8a 2-Profile8b 3-Profile8c 4-Profile8d

> 5-Profile12a 6-Profile12b 7-Profile17a 8-Profile30a


> VDSL2 PSD class mask:

> 1-AnnexA998-D-32 2-AnnexA998-D-64

> 3-AnnexBHPE17-M1(B7-7) 4-AnnexB997E17-M2x-A(B7-9)

> 5-AnnexB998E17-M2x-NUS0(B8-8) 6-AnnexB998E17-M2x-NUS0-M(B8-9)

> 7-AnnexB998ADE17-M2x-NUS0-M(B8-10) 8-AnnexB998ADE17-M2x-B(B8-

12)

> 9-AnnexB998ADE17-M2x-A(B8-11) 10-AnnexA998-D-48

> 11-AnnexA998-D-128


> VDSL2 link use of U0 1-unused, 2-used (1~2) [1]:

> Maximum nominal aggregate transmit power downstream

> (0~145 0.1dBm) [145]:

> Maximum nominal aggregate transmit power upstream

> (0~145 0.1dBm) [145]:

> Will you set PSD mask value downstream parameter? (y/n) [n]:

> Will you set PSD mask value upstream parameter? (y/n) [n]:

> Will you set Upstream PSD mask selection parameter? (y/n) [n]:

> Will you set transmitter referred virtual noise parameters? (y/n)[n]:

> Current configured modes:

> 1-defmode

> Please select 1-Add 2-Modify 3-Save and quit [3]:

> Will you set network timing reference? (y/n) [n]:

> Will you set INM parameter? (y/n) [n]:

> Will you set SOS downstream parameter? (y/n) [n]:

> Will you set SOS upstream parameter? (y/n) [n]:

Add profile 10 successfully

How to configure the VDSL Channel-profile:MA5616(config)#vdsl line-channel-profile add 100

{ <cr>|profile-index<U><2,1024> }:100

Command:

vdsl channel-profile add 100

Start adding profile


neglected

> Do you want to name the profile (y/n) [n]:y

> Please input profile name: 100M

> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:3

> Will you set the minimum impulse noise protection? (y/n) [n]:y

> Minimum impulse noise protection downstream:

> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols

> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols

> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-

fourteenSymbols

> 17-fifteenSymbols 18-sixteenSymbols


> Minimum impulse noise protection upstream:

> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols

> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols

> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols

> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-

fourteenSymbols

> 17-fifteenSymbols 18-sixteenSymbols


> Will you set interleaving delay parameters? (y/n) [n]:

> Will you set parameters for rate? (y/n) [n]:y

> Minimum transmit rate downstream (32~200000 Kbps) [32]:

> Minimum reserved transmit rate downstream (32~200000 Kbps) [32]:

> Maximum transmit rate downstream (32~200000 Kbps) [200000]:100000

> Minimum transmit rate upstream (32~200000 Kbps) [32]:

> Minimum reserved transmit rate upstream (32~200000 Kbps) [32]:

> Maximum transmit rate upstream (32~200000 Kbps) [200000]:100000

> Will you set rate thresholds? (y/n) [n]:

> Will you set retransmission function (y/n) [n]:

> Will you set erasure decoding? (y/n) [n]:

> Will you set SOS bit rate (y/n) [n]:

Add profile 100 successfully

How to configure the VDSL Line-Template:Note: Later we just use the VDSL line-template to activate one VDSL port, or we can say the VDSL line-profile and VDSL channel-profile is one part of the VDSL Template file.

MA5616(config)# dsl line-template add 100

Start adding template


neglected

> Do you want to name the template (y/n) [n]:y

> Please input template name:100M

> Please set the line-profile index (1~1024) [1]:10

> Will you set channel configuration parameters? (y/n) [n]:y

> Please set the channel number (1~2) [1]:

> Channel1 configuration parameters:

> Please set the channel-profile index (1~1024) [1]:100

Add template 100 successfully


• Setp1 :Activate the VDSL2 port. MA5616(config)# interface vdsl 0/1 MA5616(config-if-vdsl-0/1)#deactivate 0 MA5616(config-if-vdsl-0/1)#activate 0 template-index 33

Note: Here we choose the 33M/10M line profile.

• Setp2 : Check the VDSL port active mode, ATM or PTM, if not PTM, please check the Modem setting, it should be set to be PTM mode.

• Setp3: Create a VLAN and add an upstream port to the VLAN MA5616(config)#vlan 600 smart

MA5616(config)#port vlan 600 0/0 0 • Setp4: Create the service port to the VLAN

MA5616(config)#service-port 0 vlan 600 vdsl mode ptm 0/1/0 multi-service user-vlan 35 rx-cttr 11 tx-cttr 11

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38



Setp5: Configure the security for PPPOE service.

MA5616(config)#vlan bind service-profile 600 profile-name PPPOE


• Setp1 :Activate the VDSL port. MA5616(config)# interface VDSL 0/1 MA5616(config-if-VDSL-0/1)#deactivate 0 MA5616(config-if-VDSL-0/1)#activate 0 template-index 33


• Setp3: Create the service port to the VLAN MA5616(config)#service-port 256 vlan 1100 VDSL mode ptm 0/1/0

multi-service user-vlan 36 rx-cttr 12 tx-cttr 12 Note: Here the ID of “service-port” is “256”, every service-port have



　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

User Vlan: 36 should be set at VDSL CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 36.

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


• Setp4: Configure the “Security” for IPTV service• MA5616(config)#vlan bind service-profile 1100 profile-name IPTV • Setp5: Configure the “BTV” at DSLAM• MA5616(config)#multicast-vlan 99• MA5616(config-mvlan99)# igmp mode proxy• MA5616(config-mvlan99)# igmp uplink-port 0/0/0• MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253

priority 4• MA5616(config-mvlan99)#btv • MA5616(config-btv)#igmp proxy router gen-query-interval 30 • MA5616(config-btv)#igmp proxy router robustness 1• MA5616(config-btv)#igmp user add service-port 256 no-auth• MA5616(config-btv)#multicast-vlan 99• MA5616(config-mvlan99)#igmp multicast-vlan member service-port 256• Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN.

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　



• Setp1 :Activate the VDSL port. MA5616(config)# interface VDSL 0/1 MA5616(config-if-VDSL-0/1)#deactivate 0 MA5616(config-if-VDSL-0/1)#activate 0 template-index 33


• Setp3: Create the service port to the VLAN MA5616(config)#service-port 512 vlan 88 VDSL mode ptm 0/1/0 multi-

service user-vlan 37 rx-cttr 13 tx-cttr 13 Note: Here the ID of “service-port” is “512”, every service-port have



Service-port index: 512

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　


　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


• Setp4: Configure the “Security” for VOIP service• MA5616(config)#vlan bind service-profile 88 profile-name VOIP


• Setp1 :Activate the VDSL2 port. MA5616(config)# interface vdsl 0/1 MA5616(config-if-vdsl-0/1)#deactivate 0 MA5616(config-if-vdsl-0/1)#activate 0 template-index 33

Note: Here we choose the 33M/10M line profile.

• Setp2 : Check the VDSL port active mode, ATM or PTM, if not PTM, please check the Modem setting, it should be set to be PTM mode.


• Setp4: Create the service port to the VLAN MA5616(config)#service-port 768 vlan 666 vdsl mode ptm 0/1/0 multi-

service user-vlan 38 rx-cttr 14 tx-cttr 14

　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Setp5: Configure the security for IPOE service.MA5616(config)#vlan bind service-profile 666 profile-name IPOE

1.3.7 VOIP POTS Service Configuration

1.3.7.1 SIP

IMS IP: 113.171.225.6 (UDP port: 5060) //The “UDP port” is defined by IMS,DSLAM must follow IMS.DSLAM IP: 10.99.16.2 (UDP port: 5060)Gateway: 10.99.16.1Home-Domain: ims.vnpt.vn //The “home-domain”—“ims.vnpt.vn” is defined by IMS.PhoneID/UserName/Password: +84432000201/84432000201/84432000201

MA5616(config)# vlan 88 smartMA5616(config)# port vlan 88 0/0 0MA5616(config)# interface vlanif 88MA5616(config-vlanif88)# ip address 10.99.16.2 24MA5616(config-vlanif88)#quit

MA5616(config)# ip route-static 113.171.225.6 255.255.255.255 vlanif 88 10.99.16.1

MA5616(config)# ping 10.99.16.1

MA5616(config)# ping 113.171.225.6Note: Make sure that DSLAM can ping Gateway and IMS, otherwise please check the Routing from DSLAM to Gateway and IMS.

MA5616(config)#voipMA5616(config-voip)#ip address media 10.99.16.2 10.99.16.1MA5616(config-voip)#ip address signaling 10.99.16.2MA5616(config-voip)#quit

MA5616(config)#display protocol support System support SIP protocolNote: DSLAM support 2 mode, if the current mode is H248, we should use command “protocol support sip” to set the DSLAM mode to be “SIP” and restart the DSLAM.

MA5616(config)#interface sip 0MA5616(config-sip0)#if-sip attribute basic media-ip 10.99.16.2 signal-ip 10.99.16.2 signal-port 5060 home-domain ims.vnpt.vnMA5616(config-sip0)#if-sip attribute basic primary-proxy-ip1 113.171.225.6 primary-proxy-port 5060

MA5616(config-sip0)#reset

//After a while, check the SIP interface status, if normal it should be “Up”, otherwise please help contact VTN expert for support.MA5616(config-sip0)#display if-sip attribute running 0MA5616(config-sip0)#quit

MA5616(config)# esl userMA5616(config-esl user)# sippstnuser add 0/4/1 0 telno +84432000201MA5616(config-esl user)#sippstnuser auth set 0/4/1 telno +84432000201 auth-username 84432000201 password-mode password 84432000201MA5616(config-esl user)#quit

//After a while, please check phone status, if can not be normal after 5 mins, please help capture the SIP packets between DSLAM and IMS with wireshark or ethereal software and send to VTN expert for trouble shooting.

1.3.8 FE Service Configuration


• Setp1: Create a VLAN and add an upstream port to the VLAN

MA5616(config)#vlan 600 smart MA5616(config)#port vlan 600 0/0 0

• Setp2: Create the service port to the VLAN (30M up/down) MA5616(config)#service-port 128 vlan 600 eth 0/3/0 multi-service user-

vlan 35 rx-cttr 30 tx-cttr 30

　 Range Service-Slot1Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Setp3: Configure the security for PPPOE service.MA5616(config)#vlan bind service-profile 600 profile-name PPPOE



• Setp3: Create the service port to the VLAN MA5616(config)#service-port 384 vlan 1100 eth 0/3/0 multi-service

user-vlan 36 rx-cttr 101 tx-cttr 111 Note: Here the ID of “service-port” is “384”, every service-port have


　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE768~9

99　　　　


　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


• Setp4: Configure the “Security” for IPTV service• MA5616(config)#vlan bind service-profile 1100 profile-name IPTV •

• Setp5: Configure the “BTV” at DSLAM• MA5616(config)#multicast-vlan 99• MA5616(config-mvlan99)# igmp mode proxy• MA5616(config-mvlan99)# igmp uplink-port 0/0/0• MA5616(config-mvlan99)# igmp program add batch ip 232.84.1.1 to-ip 232.84.1.253

priority 4• MA5616(config-mvlan99)#btv • MA5616(config-btv)#igmp proxy router gen-query-interval 30 • MA5616(config-btv)#igmp proxy router robustness 1• MA5616(config-btv)#igmp user add service-port 384 no-auth• MA5616(config-btv)#multicast-vlan 99• MA5616(config-mvlan99)#igmp multicast-vlan member service-port 384• Note: The BTV user under “BTV” mode can join the channel at differnet MVLAN.




• Setp2: Create the service port to the VLAN MA5616(config)#service-port 640 vlan 88 eth 0/3/0 multi-service user-

vlan 37 rx-cttr 120 tx-cttr 120 Note: Here the ID of “service-port” is “640”, every service-port have


　 RangeService-

Slot1

Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP 512- 512-577 578-639 640-703 704-767

767

IPOE768~9

99　　　　

User Vlan: 37 should be set at FE CPE, on the IPTV bridge channel, for all of the CPE can be set to be the same mode, for example, every CPE set the IPTV Bridge channel to be uservlan 37.

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Traffic-Table: 120

• Setp3: Configure the “Security” for VOIP serviceMA5616(config)#vlan bind service-profile 88 profile-name VOIP



• Setp2: Create the service port to the VLAN (30M up/down) MA5616(config)#service-port 768 vlan 660 eth 0/3/0 multi-service user-

vlan 38 rx-cttr 80 tx-cttr 80

　 Range Service-Slot1Service-

Slot2

Service-

Slot3

Service-

Slot4

PPPOE 0-255 0-63 64-127 128-171 172-255

IPTV256-

511256-319 320-383 384-447 448-511

VOIP512-

767512-577 578-639 640-703 704-767

IPOE76

8~999　　　　

　PPPO

E

IPT

V

VOI

P

IPO

E

ADSL (pvc) 8/35 8/36 8/37 8/38

VDSL

(uservlan)35 36 37 38


Traffic Table: 80

Setp3: Configure the security for IPOE service.MA5616(config)#vlan bind service-profile 660 profile-name IPOE

1.4 Feature Description

1.4.1 Anti-Macspofing

MAC spoofing means that the malicious users forge the MAC addresses and attack the

network by transmitting packets. Malicious users can forge the MAC addresses of common

users to damage the services of these users. Malicious users can also transmit a large

number of forged packets that contain different MAC addresses to the system, which affects

the normal operation of the system or even causes the system to be down.

The anti MAC spoofing feature refers to the feature that the system prevents users from

attacking the system by forging MAC addresses.

PC1 and PC2 use the PPPoE service.

PC1 uses the MAC address of the BRAS server as its source MAC address to send

packets.

The forwarding entries on the access device are changed. As a result, the PPPoE

service packets of PC2 are sent to PC1 instead of to the BRAS server.

Normal services of PC2 fail.

Note: 1. This feature is just for PPPOE and DHCP service, can not be used for IPOE service, otherwise

the IPOE service will be down.2. After use the feature at PPPOE and DHCP vlan, please use another command to check the

MAC address for this 2 Vlan: display security bind mac

1.4.2 Ring Check

• If there is one user port have too much protocol packet, system can detect and discard all of the protocol packets of that port but the common data packet can be transfer still.

• And if this port recovers, system will release this port and begin to deal with the protocol packet of that port again.

• MA5616(config)#ring check { enable | disable }• By default, the ring check function is disabled.

•

• When the Ring Check feature is enabled in the device, the device sends 16 Ring Check packets (proprietary BPDU packets) to the subscriber port per second. The device sends the Ring Check packets to only the traffic stream that is in the Up state.

• Ring check mechanism:• If the MA5616 receives the private ring check packet from a user port, it blocks the user

port and sends the matched alarm.• If the device receives Ring Check packet from a user port, it determines whether the

root bridge in the packet is the same as that in the device. If they are the same, the device blocks the user port and sends the matched alarm.

• If the device received the private Ring Check packet from the upstream port, it determines whether the packet is sent from the root bridge. If the packet is sent from the root bridge, the device blocks the user port and sends the matched alarm.

1.4.3 Security Anti-dos

• MA5616(config)#security anti-dos { enable | disable }• Prevent the end-user attack the Server/BRAS with the same MAC address of Server,

otherwise the whole Internet service of that VLAN will be affected.

1.4.5 Security Mac-filter

• huawei(config)#security mac-filter • { mac_addr<P><XXXX-XXXX-XXXX> }:1010-1010-3020 • Command: • security mac-filter 1010-1010-3020 • Note: System can configure 4 different “Security MAC-Filter” in total.

1.4.6 PPPOE Simulation

Note: In this way, DSLAM can check the port status, it can work or not, before deploy the real service.

1.4.7 VOIP Simulation

The callee can hear the test tone from the phone, and can feedback the

quality by press button “*” to report to DSLAM good quality and other button

not good.

Note: In this way, DSLAM can check the port status, it can work or not, before deploy the real service.

Documents

MA5616 Deployment Guide (V1.0)