ZXA10 C220 (V1.2.1) XPON Optical Access Convergence Equipment Configuration Manual (CLI)

ZXA10 C220
xPON Optical Access Convergence Equipment

Configuration Manual (CLI)
Version: V1.2.1
ZTE CORPORATION
NO. 55, Hi-tech Road South, ShenZhen, P.R.China
Postcode: 518057
Tel: +86-755-26771900
Fax: +86-755-26770801
URL: http://ensupport.zte.com.cn
E-mail: [email protected]
LEGAL INFORMATION
Copyright © 2011 ZTE CORPORATION.
The contents of this document are protected by copyright laws and international treaties. Any reproduction or
distribution of this document or any portion of this document, in any form by any means, without the prior written
consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by
contractual confidentiality obligations.
All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE
CORPORATION or of their respective owners.
This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions
are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose,
title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the
use of or reliance on the information contained herein.
ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications
covering the subject matter of this document. Except as expressly provided in any written license between ZTE
CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter
herein.
ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice.
Users may visit ZTE technical support website http://ensupport.zte.com.cn to inquire related information.
The ultimate right to interpret this product resides in ZTE CORPORATION.
Revision History
Revision No. Revision Date Revision Reason
R1.0 2010-10-30 First Edition
R1.1 2010-12-30 Update information about GCSA, GCSAS and EIGMP cards
Serial Number: SJ-20101126132257-006
Publishing Date: 2010-12-30(R1.1)

Contents
About This Manual ......................................................................................... I
Declaration of RoHS Compliance ................................................................. I
Chapter 1 Basic Configuration.................................................................. 1-1
1.1 Access Methods................................................................................................. 1-1
1.1.1 Logging in Through HyperTerminal ............................................................ 1-1
1.1.2 Logging in Through Telnet......................................................................... 1-3
1.1.3 Logging in Through NetNumen N31 Unified Management System............... 1-5
1.2 NM Configuration ............................................................................................... 1-5
1.2.1 Configuring the In-Band NM...................................................................... 1-5
1.2.2 Configuring the Out-Of-Band NM............................................................... 1-9
1.3 Physical Configuration ...................................................................................... 1-13
1.3.1 Adding a Rack ....................................................................................... 1-13
1.3.2 Adding a Shelf ....................................................................................... 1-14
1.3.3 Adding a Card........................................................................................ 1-15
1.3.4 Showing the Card Information ................................................................. 1-16
1.3.5 Deleting a Card ...................................................................................... 1-17
1.3.6 Resetting a Card .................................................................................... 1-18
1.3.7 Swapping the Control and Switching Cards.............................................. 1-19
1.4 Clock Configuration .......................................................................................... 1-19
1.4.1 Overview ............................................................................................... 1-20
1.4.2 Configuring System Clock....................................................................... 1-21
1.4.3 Configuring External Input Clock ............................................................. 1-23
1.4.4 Configuring External Output Clock........................................................... 1-24
Chapter 2 EPON Data Service Configuration........................................... 2-1

2.1 EPON Data Service Configuration ....................................................................... 2-1
2.1.1 Overview ................................................................................................. 2-1
2.1.2 Configuring the EPON Data Service .......................................................... 2-2
2.1.3 Configuring the ONU Type Profile.............................................................. 2-6
2.1.4 Authenticating an ONU ............................................................................. 2-7
2.1.5 Configuring the ONU Bandwidth................................................................ 2-9
2.1.6 Configuring the Bandwidth Profile.............................................................2-11
2.1.7 Configuring the ONU In-Band IP Address ................................................ 2-14
2.1.8 ONU Data Service Configuration ............................................................. 2-16
I
2.1.9 Managing the ONU Remotely.................................................................. 2-23
2.1.10 Configuring the OLT Port ...................................................................... 2-27
2.2 10G EPON Data Service Configuration.............................................................. 2-30
2.2.1 Overview ............................................................................................... 2-30
2.2.2 Configuring the 10G EPON Data Service ................................................. 2-30
Chapter 3 GPON Data Service Configuration .......................................... 3-1

3.1 Overview ........................................................................................................... 3-1
3.2 Configuring the GPON Data Service.................................................................... 3-1
3.3 Configuring the ONU Type Profile........................................................................ 3-6
3.4 Authenticating an ONU ....................................................................................... 3-7
3.5 Configuring the T-CONT Profile........................................................................... 3-9
3.6 Configuring the Traffic Profile .............................................................................3-11
3.7 Configuring the Service Connection................................................................... 3-12
3.8 Configuring ONU Flow VLAN Parameters .......................................................... 3-15
3.9 Configuring ONU UNI VLAN Parameters ........................................................... 3-16
3.10 Configuring the ONU In-Band IP Address......................................................... 3-17
3.11 Configuring the OLT Port................................................................................. 3-20
Chapter 4 Multicast Service Configuration .............................................. 4-1

4.1 Overview ........................................................................................................... 4-1
4.2 Configuring the EPON IGMP Snooping Multicast Service ..................................... 4-2
4.3 Configuring the GPON IGMP Snooping Multicast Service ..................................... 4-7
4.4 Configuring the IGMP Proxy Multicast Service.................................................... 4-13
4.5 Configuring the MVLAN Parameters .................................................................. 4-14
4.6 Configuring the IGMP Global Parameters .......................................................... 4-17
4.7 Configuring the IGMP Port Parameters .............................................................. 4-21
4.8 Configuring the IPTV Package .......................................................................... 4-23
4.9 Configuring the CAC......................................................................................... 4-25
4.10 Configuring the CDR....................................................................................... 4-26
Chapter 5 VoIP Service Configuration...................................................... 5-1

5.1 Overview ........................................................................................................... 5-1
5.2 Configuring the EPON VoIP Service (SIP)............................................................ 5-1
5.3 Configuring the EPON VoIP Service (H.248) ........................................................ 5-6
5.4 Configuring the GPON VoIP Service (SIP) ..........................................................5-11
5.5 Configuring the GPON VoIP Service (H.248)...................................................... 5-16
5.6 Configuring the EPON VoIP IP Profile................................................................ 5-22
5.7 Configuring the EPON VoIP VLAN Profile .......................................................... 5-23
5.8 Configuring the EPON VoIP Protocol Profile....................................................... 5-25
II
Chapter 6 CES Service Configuration ...................................................... 6-1
6.1 Overview ........................................................................................................... 6-1
6.2 Configuring the EPON E1/T1 Uplink CES Service (MEF8) .................................... 6-2
6.3 Configuring the EPON E1/T1 Uplink CES Service (PWE3).................................... 6-9
6.4 Configuring the EPON STM-1/OC3 Uplink CES Service ..................................... 6-16
6.5 Configuring the GPON E1/T1 Uplink CES Service (MEF8) .................................. 6-23
6.6 Configuring the GPON STM-1/OC3 Uplink CES Service ..................................... 6-31
6.7 Configuring the CES TDM Profile ...................................................................... 6-38
6.8 Configuring the CES TDM Interface................................................................... 6-40
Chapter 7 VLAN Configuration.................................................................. 7-1

7.1 Overview ........................................................................................................... 7-1
7.2 Configuring the TLS VLAN .................................................................................. 7-2
7.3 Configuring the VLAN Smart QinQ ...................................................................... 7-3
7.4 Configuring the 1:1 VLAN ................................................................................... 7-6
7.5 Configuring the Service Port VLAN...................................................................... 7-9
Chapter 8 STP Configuration .................................................................... 8-1

8.1 Overview ........................................................................................................... 8-1
8.1.1 SSTP Mode ............................................................................................. 8-1
8.1.2 RSTP Mode ............................................................................................. 8-1
8.1.3 MSTP Mode............................................................................................. 8-2
8.2 Configuring the MSTP ........................................................................................ 8-2
Chapter 9 DHCP Configuration ................................................................. 9-1

9.1 Overview ........................................................................................................... 9-1
9.2 Configuring the DHCP Snooping ......................................................................... 9-2
9.3 Configuring the DHCP Server ............................................................................. 9-3
9.4 Configuring the DHCP Relay............................................................................... 9-5
Chapter 10 ACL Configuration ................................................................ 10-1

10.1 Overview ....................................................................................................... 10-1
10.2 Configuring the Standard ACL......................................................................... 10-1
10.3 Configuring the Extended ACL ........................................................................ 10-3
10.4 Configuring the Layer-2 ACL ........................................................................... 10-4
10.5 Configuring the Hybrid ACL............................................................................. 10-6
Chapter 11 PON Port Protection Configuration..................................... 11-1

11.1 Overview.........................................................................................................11-1
11.2 Configuring the EPON PON Port Protection ......................................................11-1
11.3 Configuring the GPON PON Port Protection ......................................................11-6
III
Chapter 12 Uplink Protection Configuration.......................................... 12-1
12.1 Overview ....................................................................................................... 12-1
12.2 Configuring the UAPS..................................................................................... 12-1
12.3 Configuring the CL1A 1+1 Protection ............................................................... 12-4
12.4 Configuring the Link Aggregation..................................................................... 12-7
12.5 Configuring the ZTE Ethernet Switch Ring ....................................................... 12-9
Chapter 13 QoS Configuration ................................................................ 13-1

13.1 Overview ....................................................................................................... 13-1
13.2 Traffic Management Based On ACL Rules ....................................................... 13-1
13.2.1 Configuring the Traffic Limit................................................................... 13-2
13.2.2 Configuring the Priority Mark ................................................................. 13-3
13.2.3 Configuring the Traffic Mirroring............................................................. 13-5
13.2.4 Configuring Redirection ........................................................................ 13-6
13.2.5 Configuring the Traffic Statistics ............................................................ 13-7
13.3 Configuring the Traffic Shaping........................................................................ 13-8
13.4 Queue Scheduling Configuration ..................................................................... 13-9
13.4.1 Configuring the Queue Scheduling .......................................................13-10
13.4.2 Configuring the Mapping Between Queues and 802.1p Priorities ............13-12
13.5 Configuring the Mapping Between CoS and DSCP ..........................................13-15
13.6 Configuring the Bridge Port QoS ....................................................................13-17
Chapter 14 User Security Configuration ................................................ 14-1

14.1 Overview ....................................................................................................... 14-1
14.2 Port Location Configuration ............................................................................. 14-1
14.2.1 Overview ............................................................................................. 14-1
14.2.2 Configuring the DHCP Option 82 ........................................................... 14-1
14.2.3 Configuring the PPPoE+ ....................................................................... 14-4
14.3 Configuring the ARP Anti-Spoofing .................................................................. 14-6
14.4 Configuring the ARP Agent ............................................................................. 14-7
14.5 Configuring the PON Port Loopback Detection ................................................. 14-8
14.6 Configuring the Dual-Layer VLAN Interconnection ........................................... 14-9
Chapter 15 System Security Configuration ........................................... 15-1

15.1 Overview ....................................................................................................... 15-1
15.2 Configuring the SSH ....................................................................................... 15-1
15.3 Configuring the TACACS+............................................................................... 15-3
15.4 Configuring the RADIUS ................................................................................. 15-5
15.5 Configuring the Management ACL ................................................................... 15-6
15.6 Configuring the Anti-DoS Attack ...................................................................... 15-7
IV
15.7 Configuring the Ethernet OAM......................................................................... 15-9
Figures............................................................................................................. I
Tables ............................................................................................................ III
Index ...............................................................................................................V
Glossary .......................................................................................................VII
V
VI
About This Manual
Purpose
The ZXA10 C220 xPON Optical Access Convergence Equipment (ZXA10 C220 for short)
is a full-service optical access platform. It supports the video, data, voice, TDM, and CATV
services. The ZXA10 C220 can be connected with ONUs of medium or larger capacity
through various networking technologies.
The ZXA10 C220 device consists of the main control and switching card, xPON subscriber
cards, CES uplink card, and Ethernet uplink card. It provides large-capacity controllable
multicast and high QoS control.
This manual provides detailed information about configurations (CLI) on the ZXA10 C220
xPON Optical Access Convergence Equipment.
Intended Audience
This document is intended for:
l Installation and debugging engineer
l System maintenance engineer
l Data configuration engineer
Prerequisite Skill and Knowledge

To use this document effectively, users should have a general understanding of network
technology. Familiarity with the following is helpful:
l The ZXA10 C220 system and its various components
l Maintenance procedures
l Local operating procedures
What Is in This Manual

This manual contains the following chapters:
Chapter Summary
Chapter 1, Basic Configuration Describes access methods, NM configuration, physical

configuration and clock configuration.
Chapter 2, EPON Service Describes EPON data service configuration and 10G EPON data
Configuration service configuration.
I
Chapter Summary
Chapter 3, GPON Service Describes GPON data service configuration, ONU type profile
Configuration configuration, ONU authentication, T-CONT profile configuration,
traffic profile configuration, service channel configuration, flow
VLAN parameters configuration, ONU UNI VLAN parameters
configuration, ONU in-band IP address configuration, and OLT
port configuration.
Chapter 4, Multicast Service Describes IGMP snooping multicast configuration, IGMP

Configuration proxy multicast service configuration, IGMP global parameters
configuration, IGMP port parameters configuration, MVLAN
configuration, IPTV package configuration ,CAC configuration,
and CDR configuration.
Chapter 5, VoIP Service Describes EPON VoIP service configuration, and GPON VoIP
Configuration service configuration.
Chapter 6, CES Service Describes EPON CES service configuration, GPON CES service
Configuration configuration, CES TDM profile configuration, and CES TDM
interface configuration.
Chapter 7, VLAN Configuration Describes basic VLAN configuration, TLS VLAN configuration,
VLAN smart QinQ configuration, 1:1 VLAN configuration, and
service port VLAN configuration.
Chapter 8, STP Configuration Describes STP mode and MSTP configuration.
Chapter 9, DHCP Configuration Describes DHCP snooping configuration, DHCP server

configuration, and DHCP relay configuration.
Chapter 10, ACL Configuration Describes standard ACL configuration, extended ACL
configuration, Layer-2 ACL configuration, and hybrid ACL
configuration.
Chapter 11, PON Protection Describes EPON PON port protection configuration and GPON
Configuration PON port protection configuration.
Chapter 12, Uplink Protection Describes UAPS configuration, CL1A 1+1 protection configuration,
Configuration link aggregation configuration, and ZTE Ethernet Switch Ring
configuration.
Chapter 13, QoS Configuration Describes traffic limit configuration based on ACL rules, traffic
shaping configuration, queue scheduling configuration, CoS and
DSCP mapping configuration, and bridge port QoS configuration.
II
Chapter Summary
Chapter 14, User Security Describes port location configuration, ARP anti-spoofing
Configuration configuration, ARP agent configuration, PON port loopback
detection configuration, and dual-layer VLAN interconnection
configuration.
Chapter 15, System Security Describes SSH configuration, TACACS+ configuration, RADIUS
Configuration configuration management ACL configuration, anti-DoS attack
configuration, and Ethernet OAM configuration.
Related Documentation
The following documentation is related to this manual:
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Documentation
Guide
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Feature Guide
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Product De-
scription
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Hardware
Description
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Cabinet
Installation Guide
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Configuration
Manual (NetNumen) Volume I
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Configuration
Manual (NetNumen) Volume II
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Maintenance
Manual
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Alarm and
Notification Message Reference
l ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Command
Reference (Volume I)
Reference (Volume II)
Reference (Volume III)
Reference (Volume IV)
Reference (Volume V)
Conventions
ZTE documents employ the following typographical conventions.
III
Typeface Meaning
Italics References to other Manuals and documents.
“Quotes” Links on screens.
Bold Menus, menu options, function names, input fields, radio button names, check
boxes, drop-down lists, dialog box names, window names.
CAPS Keys on the keyboard and buttons on screens and company name.
Note: Provides additional information about a certain topic.
Checkpoint: Indicates that a particular step needs to be checked before

proceeding further.
Tip: Indicates a suggestion or hint to make things easier or more productive

for the reader.
Mouse operation conventions are listed as follows:
Typeface Meaning
Click Refers to clicking the primary mouse button (usually the left mouse button) once.
Double-click Refers to quickly clicking the primary mouse button (usually the left mouse button)
twice.
Right-click Refers to clicking the secondary mouse button (usually the right mouse button)
once.
IV
Declaration of RoHS
Compliance
To minimize the environmental impact and take more responsibility to the earth we live,
this document shall serve as formal declaration that the ZXA10 C220 manufactured by
ZTE CORPORATION is in compliance with the Directive 2002/95/EC of the European
Parliament - RoHS (Restriction of Hazardous Substances) with respect to the following
substances:
l Lead (Pb)
l Mercury (Hg)
l Cadmium (Cd)
l Hexavalent Chromium (Cr (VI))
l PolyBrominated Biphenyls (PBB’s)
l PolyBrominated Diphenyl Ethers (PBDE’s)
The ZXA10 C220 manufactured by ZTE CORPORATION meets the requirements of EU 2002/95/EC;
however, some assemblies are customized to client specifications. Addition of specialized,
customer-specified materials or processes which do not meet the requirements of EU 2002/95/EC
may negate RoHS compliance of the assembly. To guarantee compliance of the assembly, the
need for compliant product must be communicated to ZTE CORPORATION in written form. This
declaration is issued based on our current level of knowledge. Since conditions of use are outside
our control, ZTE CORPORATION makes no warranties, express or implied, and assumes no liability
in connection with the use of this information.
I
II
Chapter 1
Basic Configuration
Table of Contents
Access Methods.........................................................................................................1-1
NM Configuration .......................................................................................................1-5
Physical Configuration..............................................................................................1-13
Clock Configuration ..................................................................................................1-19
1.1 Access Methods

The ZXA10 C220 supports the following access methods:
l HyperTerminal
l Telnet
l NetNumen N31 unified management system
This manual describes configuration in the CLI after logging in to the ZXA10 C220
through HyperTerminal or Telnet. Refer to the ZXA10 C220 (V1.2.1) xPON Optical Access
Convergence Equipment Configuration Manual (NetNumen) for NetNumen configuration.
1.1.1 Logging in Through HyperTerminal

Short Description
Perform this procedure to log in to the ZXA10 C220 through HyperTerminal.
Prerequisites
Before this operation, make sure that:
l Device installation is complete.
l The serial port of the maintenance console computer is connected to the CLI port of
the ZXA10 C220 control and switching card through a serial port cable.
l The operation system supports HyperTerminal.
l The ZXA10 C220 device is powered on.
Context
This topic takes the Windows XP operating system as an example.
To log in to the ZXA10 C220 through HyperTerminal, perform the following steps:
1-1
SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

ZXA10 C220 Configuration Manual (CLI)
Steps
1. In Windows XP, choose Start > All Programs > Accessories > Communications
> HyperTerminal. The Connection Description dialog box appears, as shown in
Figure 1-1.
Figure 1-1 Connection Description Dialog Box
2. Enter Name and click OK. The Connect To dialog box appears, as shown in Figure
1-2.
Figure 1-2 Connect To Dialog box
3. Select COM1 or COM2, and then click OK. The COM1 Properties dialog box appears,
as shown in Figure 1-3.
Select 9600 for Bits per second, 8 for Data bits, None for Parity, 1 for Stop bits,
and None for Flow control. Or click Restore Defaults. Click OK.
1-2

Chapter 1 Basic Configuration
Figure 1-3 Com1 Properties Dialog Box
4. If the system runs properly, the HyperTerminal windows appears. The system enters
the operator mode (ZXAN>). Carry out the enable command and enter the enable
password zxr10 to enter the administrator mode (ZXAN#), as shown in Figure 1-4.
Figure 1-4 HyperTerminal
– End of Steps –
Result
The user successfully logs in to the ZXA10 C220 through HyperTerminal.
1.1.2 Logging in Through Telnet

Short Description
Perform this procedure to log in to the ZXA10 C220 through Telnet.
1-3

Prerequisites
l The in-band or out-of-band NM IP address is configured.
l The Telnet computer can ping the in-band or out-of-band NM IP address.
Context
To log in to the ZXA10 C220 through Telnet, perform the following steps:
Steps
1. In the Windows operating system, choose Start > Run to open the Run dialog box.
2. In the dialog box, enter Telnet x.x.x.x. where, x.x.x.x is the NE IP address,
as shown in Figure 1-5, and then click OK to start the Telnet client.
Figure 1-5 Run Dialog Box
3. If the connection is proper, the login window pops up. Enter the user name and
password zte to enter the administrator mode (ZXAN#), as shown in Figure 1-6.
Figure 1-6 Telnet Window
Result
The user successfully logs in to the ZXA10 C220 through Telnet.
1-4

1.1.3 Logging in Through NetNumen N31 Unified Management

System
Before managing the ZXA10 C220 through NetNumen N31 unified management system,
install the SQL Server database, and the NetNumen N31 NMS software.
To manage NEs through the NMS, start the SQL Server database, NMS server, and NMS
client.
If NetNumen N31 unified management system is started successfully, the NetNumenN31
Unified Management System window appears, as shown in Figure 1-7.
Figure 1-7 NetNumenN31 Unified Management System
1.2 NM Configuration
The ZXA10 C220 supports both in-band NM and out-of-band NM.
l In-band NM is implemented through the uplink port. It is usually used in practical
engineering.
l Out-of-band NM is implemented through the Q port on the control and switching card.
It uses the non-service channel to transmit the management information so that the
management channel and the service channel are separated. It is usually used in
local management and maintenance.
1.2.1 Configuring the In-Band NM

Short Description
Perform this procedure to configure the in-band NM.
1-5

Prerequisites
l The network devices and lines are proper.
l The shelf, rack, and cards are added.
l The user has logged in to the ZXA10 C220 through HyperTerminal.
Context
In the in-band NM mode, the NMS information is transmitted through the service channel
of the ZXA10 C220. It is flexible in networking without any auxiliary devices, and low in
cost. But it is hard to maintain the ZXA10 C220 when the service is down.
Networking Diagram
Figure 1-8 shows the in-band NM networking diagram.
Figure 1-8 In-Band NM Networking Diagram
Configuration Data
Table 1-1 lists the in-band NM configuration data.
Table 1-1 In-Band NM Configuration Data
Item Data
In-band NM interface l VLAN ID: 1000

l IP address: 10.67.1.10/24
Router interface IP address: 10.67.1.254/24
SNMP server IP address: 10.63.10.105/24

Version: V2C
Community name: public
Alarm level: NOTIFICATIONS
1-6

Configuration Flow
Figure 1-9 shows the in-band NM configuration flow.
Figure 1-9 In-Band NM Configuration Flow
Note:
This section describes the configuration on the ZXA10 C220. The corresponding data must be config-
ured on the router as well.
To configure the in-band NM, perform the following steps:
Steps
1. Configure the in-band NM VLAN.
a. Enter the global configuration mode.
ZXAN#configure terminal
Enter configuration commands, one per line. End with CTRL/Z.
ZXAN(config)#
b. Enter the uplink interface configuration mode.

ZXAN(config)#interface gei_0/14/1
ZXAN(config-if)#
1-7

c. Add the uplink port to the NM VLAN in tag mode.

ZXAN(config-if)#switchport vlan 1000 tag
ZXAN(config-if)#exit
ZXAN(config)#
Note:
When you use the switchport vlan command to configure a port VLAN, the system add the
VLAN automatically.
The out-of-band and in-band NM IP addresses cannot be in the same network segment.
2. Configure the IP address of the in-band NM interface.
a. Enter the VLAN interface configuration mode.

ZXAN(config)#interface vlan 1000
ZXAN(config-if)#
b. Configure the IP address of the in-band NM interface.

ZXAN(config-if)#ip address 10.67.1.10 255.255.255.0
ZXAN(config)#
3. Configure the in-band NM route.

ZXAN(config)#ip route 10.63.10.0 255.255.255.0 10.67.1.254
4. (Optional) Configure the SNMP community.

The system has a default public community. Use the snmp-server community
command to configure the community if necessary. For detailed information, refer to
the ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Command
Manual.
ZXAN(config)#show snmp config
snmp-server location No.889 BiBo Rd.
PuDong District, ShangHai, China
snmp-server contact +86-021-68895000
snmp-server packetSize 3000
snmp-server engine-id 80000f3e0300005858588888
snmp-server community public view allview rw
snmp-server view allview internet included
snmp-server view DefaultQuery system included
snmp-server enable trap SNMP
snmp-server enable trap VPN
snmp-server enable trap BGP
snmp-server enable trap OSPF
snmp-server enable trap RMON
snmp-server enable trap STALARM
1-8

5. Configure the IP address of the SNMP server (trap server).

ZXAN(config)#snmp-server host 10.63.10.105 trap version 2c public enable
NOTIFICATIONS server-index 1 udp-port 162
Note:
Besides the ZTE NetNumen NMS, the network may contain a third-party NMS that receives traps.
Multiple SNMP server hosts can be configured.
6. (Optional) Configure the trap types that can be sent.

The ZXA10 C220 supports six types of traps: SNMP, BGP, OSPF, RMON, STALARM,
and VPN. All traps are enabled by default and do not need to be configured. To
configure the trap type, use the snmp-server enable trap command. For detailed
information, refer to the ZXA10 C220 (V1.2.1) xPON Optical Access Convergence
Equipment Command Manual.
ZXAN(config)#snmp-server enable trap
ZXAN(config)#exit
ZXAN#
7. Save the configuration data.

ZXAN#write
Building configuration...
...[OK]
Result
The ZXA10 C220 can be managed through the in-band NM IP address.
1.2.2 Configuring the Out-Of-Band NM

Short Description
Perform this procedure to configure the out-of-band NM.
Prerequisites
l The shelf, rack, and cards are added.
l The user has logged in to the ZXA10 C220 through HyperTerminal.
Context
In the out-of-band NM mode, the NMS information is transmitted through the non-service
channel. The management channel is independent from the service channel. Thus,
out-of-band NM is more reliable compared with in-band NM.
1-9

Networking Diagram
Figure 1-10 shows the out-of-band NM networking diagram.
Figure 1-10 Out-Of-Band NM Networking Diagram
Configuration Data
Table 1-2 lists the out-of-band NM configuration data.
Table 1-2 Out-Of-Band NM Configuration Data
Items Data
Out-of-band NM interface (Q interface) IP address: 136.1.1.10/24
Router interface IP address: 136.1.1.254/24
SNMP server l IP address: 10.63.10.105/24

l Version: V2C
l Community: private
l Alarm: NOTIFICATIONS
Configuration Flow
Figure 1-11 shows the out-of-band NM configuration flow.
1-10

Figure 1-11 Out-of-Band NM Configuration Flow
Note:
This section describes the configuration on the ZXA10 C220. The corresponding data must be config-
ured on the router as well.
To configure out-of-band NM, perform the following steps:
Steps
1. Configure the IP address of the out-of-band NM interface.
a. Enter the global configuration mode.
ZXAN(config)#
b. Enter the management interface configuration mode.

ZXAN(config)#interface mng1
ZXAN(config-if)#
c. Configure the IP address of the out-of-band NM interface.

ZXAN(config)#
1-11

Note:
The out-of-band and in-band NM IP addresses cannot be in the same network segment.
2. Configure the out-of-band NM route.

ZXAN(config)#ip route 10.63.10.0 255.255.255.0 136.1.1.254
3. (Optional) Configure the SNMP community.

The system has a default public community. Use the snmp-server community
command to configure the community if necessary. For detailed information, refer to
the ZXA10 C220 (V1.2.1) xPON Optical Access Convergence Equipment Command
Manual.
ZXAN(config)#show snmp config

snmp-server location No.889 BiBo Rd.
PuDong District, ShangHai, China
snmp-server contact +86-021-68895000
snmp-server packetSize 3000
snmp-server engine-id 80000f3e0300005858588888
snmp-server community public view allview rw
snmp-server view allview internet included
snmp-server view DefaultQuery system included
snmp-server enable trap SNMP
snmp-server enable trap VPN
snmp-server enable trap BGP
snmp-server enable trap OSPF
snmp-server enable trap RMON
snmp-server enable trap STALARM
4. Configure the IP address of the SNMP server (trap server).

ZXAN(config)#snmp-server host 10.63.10.105 trap version 2c public enable
NOTIFICATIONS server-index 1 udp-port 162
Note:
Besides the ZTE NetNumen NMS, the network may contain a third-party NMS that receives traps.
Multiple SNMP server hosts can be configured.
5. (Optional) Configure the trap types that can be sent.
The ZXA10 C220 supports six types of traps: SNMP, BGP, OSPF, RMON, STALARM,
and VPN. All traps are enabled by default and do not need to be configured. To
configure the trap type, use the snmp-server enable trap command. For detailed
information, refer to the ZXA10 C220 (V1.2.1) xPON Optical Access Convergence
Equipment Command Manual.
1-12

ZXAN(config)#snmp-server enable trap

ZXAN(config)#exit
ZXAN#

ZXAN#write
...[OK]
Result
The ZXA10 C220 can be managed through the out-of-band NM IP address.
1.3 Physical Configuration

This section includes the following:
l Adding a Rack
l Adding a Shelf
l Adding a Card
l Deleting a Card
l Showing Card Information
l Resetting a Card
l Swapping the Main Control Cards
1.3.1 Adding a Rack

Short Description
Perform this procedure to add a rack.
Prerequisites
l The network devices work properly.
l The user has logged in to the ZXA10 C220 through HyperTerminal or Telnet.
Context
To add a rack, perform the following steps:
Steps
1. Use the configure terminal command to enter the global configuration mode.
2. Use the add-rack command to add the rack.
1-13

ZXAN(config)#add-rack rackno 1 racktype ETSI21
Note:
The ZXA10 C220 supports only one rack at present, and thus rackno can only be 0.
Result
The rack is added successfully.
1.3.2 Adding a Shelf

Short Description
Perform this procedure to add a shelf to the rack.
Prerequisites
l The rack is successfully added.
Context
The ZXA10 C220 supports two types of shelves:
l ZXA10C220-A: ZXA10 C220 shelf of type A, front outlet shelf
l ZXA10C220-B: ZXA10 C220 shelf of type B, back outlet shelf
To add a shelf, perform the following steps:
Steps
1. Enter the global configuration mode.
2. Use the add-shelf command to add the shelf.

ZXAN(config)#add-shelf shelfno 0 shelftype ZXA10C220-B
Note:
The ZXA10 C220 supports only one shelf at present, and the shelfno can only be 0.
3. Use the show shelf command to check whether the shelf is successfully added.
1-14

ZXAN(config)#show shelf
Rack Shelf ShelfType HwNo CleiCode
--------------------------------------------------------------------------
0 0 ZXA10C220-B 0 ZXA10C220-B_CleiCode
Result
l The shelf is added successfully.
l After the shelf is added, the system automatically adds two main control cards. Use
the show card command to view the information on the main control cards.
ZXAN(config)#show card
Rack Shelf Slot CfgType RealType Port HardVer SoftVer Status
-------------------------------------------------------------------------
0 0 7 GCSD GCSD 0 V1.6 V1.2.1 INSERVICE
0 0 8 GCSD GCSD 0 V1.7 V1.2.1 STANDBY
1.3.3 Adding a Card

Short Description
Perform this procedure to add a card.
Prerequisites
l The rack is added successfully.
l The shelf is added successfully.
Context
The card can be added in the following ways:
l Enable card auto-configuration.
After this function is enabled, the system automatically identifies the card in each slot
and you do not need to add the cards manually.
l Add a card to each slot manually.
According to the actual configuration, use the add-card command to add a card to
each slot.
To add a card, perform the following steps:
Steps
1-15

Enter configuration commands，one per line. End with CTRL/Z.
2. Add cards.
a. Enable card auto-configuration.
ZXAN(config)#set-pnp enable
ZXAN(config)#show pnp
pnp function is enable.
b. Use the add-card command to add a subscriber card or uplink card according to
the slot number and card type.
To add the XUTQ card in slot 21:
ZXAN(config)#add-card slotno 21 XUTQ
3. Use the show card command to check whether the card is successfully added.
--------------------------------------------------------------
0 0 6 EIGM EIGM 4 V0.0 V1.2.1 INSERVICE
0 0 7 GCSD GCSD 0 V1 V1.2.1 INSERVICE
0 0 8 GCSD GCSD 0 V1 V1.2.1 STANDBY
0 0 10 GPFA GPFAE 4 V1.19 V1.2.1 INSERVICE
0 0 11 GPFA GPFAC 4 V0 V1.2.1 INSERVICE
0 0 12 GPFA GPFAB 4 V0 V1.2.1 INSERVICE
0 0 14 GPFA GPFAB 4 V0 V1.2.1 INSERVICEE
Result
The cards is added successfully.
1.3.4 Showing the Card Information

Short Description
Perform this procedure to show the card information.
Context
The ZXA10 C220 supports the following card states:
l DISABLE: The card is added and is online, but the system fails to receive the card
information.
l INSERVICE: The card is working properly.
l STANDBY: The card is in standby state.
l OFFLINE: The card is added but is offline.
l CONFIGING: The card is being configured.
1-16

l CONFIGFAILED: The card configuration fails.

l TYPEMISMATCH: The card type is different from the configured type.
l HWONLINE: The card type is not added in the system or the main control card does
not identify the card type.
To show cards, perform the following steps:
Steps
1. Use the show card command to show the configuration and status of all the cards in
the ZXA10 C220 system.
--------------------------------------------------------------
0 0 7 GCSD GCSD 0 V1 V1.2.1 INSERVICE
0 0 8 GCSD GCSD 0 V1 V1.2.1 STANDBY
0 0 10 GPFA GPFAE 4 V1.19 V1.2.1 INSERVICE
Result
The system displays the shelf, rack, and slot numbers of the main control cards and
subscriber cards, as well as the card configured type, actual type, hardware version,
software version, and card states.
1.3.5 Deleting a Card

Short Description
Perform this procedure to delete a card.
Prerequisites
Context
When the card in a slot needs to be changed, it needs to be deleted first. The main control
card cannot be deleted.
To delete a card, perform the following steps:
Steps
1-17

2. Use the del-card command to delete the card.

To delete the card in slot 5:
ZXAN(config)#del-card slotno 5
Confirm to delete card? [yes/no]:y
Result
The card is deleted successfully.
1.3.6 Resetting a Card

Short Description
Perform this procedure to reset a card.
Prerequisites
Context
When a card is faulty, it needs to be reset.
To reset a card, perform the following steps:
Steps
1. Enter the privilege mode.
ZXAN(config)#exit
ZXAN#
2. Use the reset-card command to reset the card.

To reset the card in slot 5:
ZXAN#reset-card slotno 5
Confirm to reset card? [yes/no]:y
Result
The card is reset successfully.
1-18

1.3.7 Swapping the Control and Switching Cards

Short Description
Perform this procedure to swap the active control and switching card with the standby
control and switching card.
Prerequisites

l The standby main control card works properly.
Context
When the active control and switching card is faulty, swap it to the standby control and
switching card.
To swap the active control and switching card with the standby control and switching card,
perform the following steps:
Steps
1. Enter the privilege mode.
ZXAN(config)#exit
ZXAN#
2. Use the swap command to swap the active main control card to the standby main
control card.
ZXAN#swap
Confirm to master swap? [yes/no]:y
Result
The active control and switching card is swapped with the standby control and switching
card.
1.4 Clock Configuration

l Overview
l Configuring System Clock
l Configuring External Input Clock
l Configuring External Output Clock
1-19

1.4.1 Overview
Principle
The ZXA10 C220 provides the solution to carry TDM service on PSN.
All the devices in the TDM network must synchronize with the unified clock to ensure that
the data is transmitted correctly.
There are two solutions for data synchronization in the digital network: pseudo-
synchronization and master/subordinate synchronization. Table 1-3 describes the clock
synchronization methods.
Table 1-3 Clock Synchronization Methods
Method Description
Pseudo-synchronization The digital exchanges in the digital service network are

independent. The clock in each digital exchange is of high
accuracy and stability. Cesium atomic clock is used in most
cases. Because of the accuracy, although the clocks in the digital
exchanges of the network are not exactly the same (frequency
and phrase), their errors are so small that it is close to the
synchronization. Therefore it is called pseudo-synchronization.
Pseudo-synchronization is mainly used among the international
digital networks, that is, the digital networks in different countries
use pseudo-synchronization.
Master/subordinate There is one clock master office in the network, and this master
synchronization office is equipped with the clock of high accuracy. The other offices
in this network are subject to the clock master office (That is, they
follow the master office clock, and use the master office clock as
the timing reference.) and control the devices of lower levels until
the NEs in the terminal exchanges.
Service Specifications
The ZXA10 C220 master/subordinate synchronization is used to synchronize the devices
in the network. There are three clocks: internal clock (in three levels), external clock,
and line clock. The line clock extracts the clock signals from the line. These signals are
processed by the related cards and sent to the main control card through the backplane.
The procedures for the system clock synchronization are as follows:
1. The system selects the best one based on the priority and clock quality of the clock
sources. The clock chip of the main control card locates that clock source and
synchronizes the output clock with this clock source.
2. The clock signal processed by the main control card is sent to the related service cards
and the output port of the external clock.
1-20

1.4.2 Configuring System Clock

Short Description
Perform this procedure to configure the system clock.
Networking Diagram
Figure 1-12 shows the networking diagram of configuring the system clock.
The ZXA10 C220 is connected to the TDM network through the E1 uplink port of the CE1B
card. The CE1B card obtains the clock signals with higher priority from the TDM device
of the upper level network. The CE1B card processes the clock signals and sends them
to the main control card through the backplane. The main control card sends the clock
signals to each service card, from which the TDM terminal device of the ONU obtains the
clock signals.
Figure 1-12 System Clock Configuration Networking Diagram
Configuration Data
Table 1-4 describes the system clock configuration data.
1-21

Table 1-4 System Clock Configuration Configuration Data
Item Data
Reference clock source port 0/13/1
Clock type E1
Priority 1
To configure the system clock, perform the following steps:
Steps
1. Use the clock command to enter the global clock configuration mode.
ZXAN(config)#clock
ZXAN(config-clock)#
2. Use the show source active command to query the active clock source.
ZXAN(config-clock)#show source active
Interface Type InS1 OutS1 Status
..........................................................
0/8/0 internal 11 11 FREE_RUN
nitially, the clock status is ‘internal clock free oscillation’ and the priority is ‘251’.
3. Use the source command to create the E1 clock source.
ZXAN(config-clock)#source 0/13/1 type e1 priority 1
Note:
If various clock sources are configured, the system selects the best one based on the priority and
actual quality of each clock source. The selection criteria is as follows: the one with normal clock
status, the highest priority, and the best quality. If these options are the same, select the clock
which is configured earlier.
Priority ranges from 1 to 255. Priority 1 is the highest priority.
4. (Optional) Use the no source priority command to delete the configured clock source.
ZXAN(config-clock)#no source id 0/13/1
Note:
The default internal clock with the priority 251 cannot be deleted.
5. Use the show clock config command to query the system reference clock source
configuration.
ZXAN(config-clock)#show clock config
Shelf/card/slot Type Priority CfgSSM Mode Species
1-22

..........................................................
0/13/1 e1 1 - - Source
clock source count: 1
6. (Optional) Use the show source alarm command to query the configured clock source
alarms.
ZXAN(config-clock)#show source alarm
Interface Type Priority Alarm
..........................................................
0/13/1 e1 1 LOS/LOF
Result
The system clock is configured successfully.
1.4.3 Configuring External Input Clock

Prerequisites

l All cards work normally.
l The reference external clock source is proper.
Context
Table 1-5 describes the external input clock parameters.
Table 1-5 External Input Clock Parameters
Parameter Description
external-input mode l bits: bits mode

l hz: hz mode
external-input quality Configure the external input clock quality and display the
clock frequency and phrase accuracy. The clock ranges
are Level_2, Level_4, Level_8, and Level_11.
l primary: Level_2, primary clock (G.811)
l enhanced2: Level_4, enhanced 2 clock (G.812)
l enhanced3: Level_8, enhanced 3 clock (G.812)
l sec: Level_11, SEC clock (G.813)
To configure the external input clock, perform the following steps:
Steps
1-23

2. Use the external-input command to configure the external input clock quality and
mode.
Result
The external input clock is configured successfully.
Example
Set the ZXA10 C220 external input clock to bits mode, and the clock quality to Level_11.
ZXAN(config)#clock
ZXAN(config-clock)#external-input 0/20/1 quality sec mode bits
1.4.4 Configuring External Output Clock

Short Description
Perform this procedure to configure the external output clock.
Prerequisites

l All cards work normally.
l The reference external clock source is proper.
Context
Table 1-6 describes the external output clock parameters.
Table 1-6 External Output Clock Parameters
external-output mode l bits: bits mode

l hz: hz mode
external-output ssmThreshold The synchronization status message is used to

transmit the quality level of the timing signals in the
timing link.
l enhanced2: enhanced 2 clock (G.812)
l enhanced3: enhanced 3 clock (G.812)
l primary: primary clock (G.811)
l sec: SEC clock (G.813)
To configure the external output clock, perform the following steps:
1-24

Steps
2. Use the external-output mode command to configure the external output clock mode.
3. Use the external-output ssmThreshold command to configure the external output clock
SSM threshold.
Result
The external output clock is configured successfully.
Example
Set the ZXA10 C220 external output clock to bits mode and SSM threshold to SEC clock.
ZXAN(config)#clock
ZXAN(config-clock)#external-output mode bits ssmThreshold sec
1-25

This page intentionally left blank.
1-26

Chapter 2
EPON Data Service
Configuration
Table of Contents
EPON Data Service Configuration..............................................................................2-1
10G EPON Data Service Configuration ....................................................................2-30
2.1 EPON Data Service Configuration

l Overview
l Configuring EPON Data Service
l Configuring the ONU Type Profile
l Authenticating an ONU
l Configuring the ONU Bandwidth
l Configuring the Bandwidth Profile
l Configuring the ONU In-Band IP Address
l ONU Configuration
l Managing the ONU Remotely
l Configuring the OLT Port
2.1.1 Overview
Service Description
EPON access is a flexible access technology that provides super bandwidth access in
both broadband and narrowband service environment. It supports multiple rate modes
and uses a single optical fiber to provide user with data, voice, and video services.
The ZXA10 C220 provides EPON access through the EPFC/EPFCB card.
Each EPFC/EPFCB card provides four EPON interfaces, supports the splitting ratio of 1:64
at the maximum, and provides up to 2560 ports for ONU access.
2-1

2.1.2 Configuring the EPON Data Service

Short Description
Perform this procedure to configure the EPON data service.
Prerequisites
l The VLAN of the upper-layer device interface corresponds to the VLAN configured on
the uplink interface.
l The EPON service card status is proper.
Context
The EPON data service can be applied in the following scenarios: FTTH, FTTB, and FTTC.
The basic configuration steps are the same for different scenarios. This instance takes the
Internet service in FTTB application as an example.
Networking Diagram
Figure 2-1 shows the networking diagram of the EPON data service.
Figure 2-1 EPON Data Service Networking Diagram
In the networking, the user computer is connected to the ONU FE port. User data frames
are added with the VLAN tag on the ONU FE port. User data is distributed to each
2-2

Chapter 2 EPON Data Service Configuration
service channel according to the user-side VLAN. The ZXA10 C220 completes VLAN tag
translation (from user-side VLAN to uplink VLAN) and sends data out through the uplink
port.
Configuration Data
Table 2-1 lists the EPON data service data scheme.
Table 2-1 Configuration Data of EPON Data Service
Item Data Remarks
VLAN VLAN ID: 100 –
Uplink port 0/6/1 –
OLT port 0/5/4 –
ONU information l Type: F820 –

l MAC address:
0019.c600.0011
l ONU ID: 1
l User port: eth_0/1
ONU bandwidth l Upstream: 5 Mbps –

l Downstream: 10 Mbps
Requirements for upstream l Ethernet Switch: configure For detailed ES and BRAS
devices the same VLAN as the device configuration, refer to the
ZXA10 C220 service VLAN relevant operation manual.
(transparently transmits the
ZXA10 C220 services).
l BRAS: configure
parameters according
practical application.
Configuration Flow
Figure 2-2 shows the configuration flow of the EPON data service.
2-3

Figure 2-2 EPON Data Service Configuration Flow
To configure EPON data service, perform the following steps:
Steps
1. Create the service VLAN (optional).
ZXAN(config)#vlan 100
ZXAN(config-vlan)#exit
ZXAN(config)#
Note:
You can use the show vlan summary command to display the created VLAN information.
2. Configure the VLAN of the OLT uplink port.

ZXAN(config-if)#switchport mode trunk
Note:
When you use the switchport vlan command to configure a port VLAN, the system adds the VLAN
automatically.
2-4

3. Query the unauthenticated ONU information on the port.

ZXAN(config-if)#show onu unauthentication epon-olt_0/5/4
Onu interface : epon-onu_0/5/4:1

MAC address : 0019.c600.0011
SN :
AuthState State : deny
OnTime : 2009/08/19 11:12:29
ZXAN(config)#
4. Enter the EPON-OLT interface mode and authenticate the ONU by the MAC address.
ZXAN(config)#interface epon-olt_0/5/4
ZXAN(config-if)#onu 1 type ZTE-F820 mac 0019.c600.0011
5. Enter the EPON-ONU interface mode and enable the interface authentication protocol.
ZXAN(config)#interface epon-onu_0/5/4:1
ZXAN(config-if)#admin enable
Note:
You can use the show onu detail-info command to display the detailed information of the ONU.
6. Set the ONU upstream and downstream bandwidth.

ZXAN(config-if)#sla upstream maximum 5120
ZXAN(config-if)#sla downstream maximum 10240
7. Configure the VLAN of the PON-ONU interface.

8. Enter the ONU remote management mode, and configure the VLAN of the ONU
Ethernet port.
ZXAN(config)#pon-onu-mng epon-onu_0/5/4:1
ZXAN(epon-onu-mng)#vlan port eth_0/1 mode tag vlan 100 priority 0
ZXAN(epon-onu-mng)#exit
Note:
The F820 supports maximum 24 FE interfaces (eth_0/1 to eth_0/24).
9. Save the data.

ZXAN(config)#exit
ZXAN#write
2-5

..[OK]
Result
The EPON data service is configured successfully.
2.1.3 Configuring the ONU Type Profile

Short Description
Perform this procedure to configure the ONU type profile.
Prerequisites
l The in-band or out-of-band NM is configured.
Context
When the new ONU type does not exist in the system, perform this procedure.
Users can use the show onu-type epon command to query the default ONU types in the
system.
To configure the ONU type profile, perform the following steps:
Steps
2. Use the pon command to enter the PON configuration mode.
3. Use the onu-type command to add an ONU type profile.
Note:
In the ZXA10 C220 system, the ONU type name must be unique in EPON and GPON service.
4. Use the onu-type-if command to configure the user port of the new ONU type.
5. Use the EPON command to enter the EPON configuration mode.

6. Use the auto-dispatch-set command to enable or disable auto-dispatch function for the
new ONU type.
2-6

Note:
After the auto-dispatch function is enabled, when the ONU gets online, the OLT automatically
dispatches the configuration, and the ONU local configuration data is overwrited.
7. Use the show onu-type epon command to view the properties of the new ONU type.
Result
The ONU type profile is configured successfully.
Example
Add a 10G EPON ONU with the type name of ZTE-F822A, supporting 24 Ethernet ports
and 24 POTS ports. Disable ZTE-F822A auto-dispatch funciton.
ZXAN(config)#pon
ZXAN(config-pon)#onu-type ZTE-F822A epon description 24FE,
24POTS speed 10g-asymmetric
ZXAN(config-pon)#onu-type-if ZTE-F822A eth_0/1-24
ZXAN(config-pon)#onu-type-if ZTE-F822A pots_0/1-24
ZXAN(config-pon)#exit
ZXAN(config)#epon
ZXAN(config-epon)#auto-dispatch-set ZTE-F822A disable
ZXAN(config-epon)#show onu-type epon ZTE-F822A
Onu type name : ZTE-F822A
Pon type : epon
Description : 24FE,24POTS
Protect type: none
Speed: 10g-asymmetric
2.1.4 Authenticating an ONU

Short Description
Perform this procedure to authenticate an ONU.
Prerequisites

2-7

Context
The ZXA10 C220 supports the following ONU authentication modes:
l MAC address authentication: using the ONU PON MAC address for authentication.
By default, this mode is used.
l Logical ID authentication: using the ONU logical ID for authentication.
l SN authentication: using the ONU SN for authentication.
l Hybrid authentication: using any of the MAC address, logical ID, or SN for
authentication.
l SN+MAC authentication: using the ONU SN for authentication when the ONU enters
the network for the first time, and using the PON MAC address for authentication when
the ONU gets online for the second time.
In EPON configuration mode, the user can use the onu-authentication-mode service
command to change the ONU authentication mode. For example, to change the
authentication mode of the ONU in slot 0/5 to SN, carry out the following commands:
ZXAN(config)#epon
ZXAN(config-epon)#onu-authentication-mode service 0/5 sn
ZXAN(config-epon)#exit
To authenticate an ONU, perform the following steps:
Steps
1. Use the show onu unauthentication command to query the unauthenticated ONU
information.
3. Use the interface command to enter the OLT interface configuration mode.
4. Use the onu command to authenticate the ONU.
5. User the show onu authentication command to query the authenticated ONU
information.
6. Use the interface command to enter the ONU interface configuration mode.
7. Use the admin enable command to enable the ONU interface authentication protocol.
Result
ONU authentication is complete.
Example
Query the unauthenticated ONU information on port epon-olt_0/6/4 and authenticate the
ONU.
2-8

ZXAN(config-if)#show onu unauthentication epon-olt_0/6/4
MAC address : 0019.c600.0011
SN :
OnTime : 2009/08/19 11:12:29
ZXAN(config-if)#onu 1 type ZTE-F820 mac 0019.c600.0011
ZXAN(config)#show onu authentication epon-olt_0/6/4
Onu type : ZTE-F820
MAC address : 0019.c600.0011
SN :
LOID :
Active status : active
State : Online
LastAuthTime : 2009/08/19 11:12:29
2.1.5 Configuring the ONU Bandwidth

Short Description
Perform this procedure to configure the ONU bandwidth.
Prerequisites

l The ONU is authenticated.
Context
The ZXA10 C220 supports the following ONU bandwidth configuration methods:
l Configure the bandwidth for a single ONU.
l Create a bandwidth profile.
This topic describes how to configure the bandwidth for a single ONU.
Table 2-2 lists the parameters for configuring the ONU bandwidth.
2-9

Table 2-2 Parameters for Configuring the ONU Bandwidth
Assured bandwidth The assured upstream bandwidth that the system allocates to the ONU
when the ONU sends the request message
Maximum bandwidth The maximum upstream/downstream bandwidth that the system can
allocate to the ONU in the idle period
Maximum burst size The maximum burst upstream/downstream traffic on the ONU
Priority The ONU priority compared with other ONUs on extra bandwidth
allocation (except the assured bandwidth)
By default, all the ONUs have the same priority. The default value is
recommended.
Fixed bandwidth The bandwidth that the OLT allocates to the ONU after the ONU is
enabled, regardless whether the ONU has the upstream traffic
Fixed packet length The fixed length of a packet reported by the ONU
To configure the ONU bandwidth, perform the following steps:
Steps
3. Use the sla upstream command to configure the ONU upstream bandwidth.
4. Use the sla downstream command to configure the ONU downstream bandwidth.
5. Use the show onu sla upstream command to query the ONU upstream bandwidth.
6. Use the show onu sla downstream command to query the ONU downstream bandwidth.
Result
The ONU bandwidth is configured successfully.
Example
Configure the bandwidth of ONU 1 under epon-olt_0/5/4 and query the configuration
information. Table 2-3 lists the configuration information.
Table 2-3 ONU Bandwidth Configuration Data
Item Data
Upstream Assured bandwidth 10000 Kbps
Maximum bandwidth 100000 Kbps
Downstream Maximum bandwidth 10240 Kbps
2-10

ZXAN(config-if)#sla upstream assured 10000 maximum 10000
ZXAN(config-if)#show onu sla upstream epon-onu_0/5/4:1
ID MaxBw MinBw FixBw FixPkt MaxBurst Pri ProfileName

(Kbps) (Kbps) (Kbps) (Bytes) (Bytes)
------------------------------------------------------------
1 10000 10000 0 64 45000 0 N/A
ZXAN(config-if)#show onu sla downstream epon-onu_0/5/4:1
ID MaxBw(Kbps) MaxBurstSize(Bytes) ProfileName
---------------------------------------------------------------
1 10240 208600 N/A
2.1.6 Configuring the Bandwidth Profile

Short Description
Perform this procedure to configure the ONU bandwidth profile.
Prerequisites

Context
The ZXA10 C220 supports the following ONU bandwidth configuration methods:
l Configure the bandwidth for a single ONU.
l Create a bandwidth profile.
The bandwidth profile is used in batch configuration of ONU bandwidth.
The system default profile is default. Table 2-4 lists its parameters.
2-11

Table 2-4 Default Bandwidth Profile Parameters
Direction Parameter Default Value
Upstream Maximum bandwidth 2000 Kbps
Minimum bandwidth 1000 Kbps
Fixed bandwidth 0
Fixed packet size 64 byte
Maximum burst size 45000 byte
Priority 0
Maximum burst size 45000 byte
To configure the ONU bandwidth profile, perform the following steps:
Steps
2. Use the epon command to enter the EPON configuration mode.
3. Use the onu-sla-profile profile-name create command to create a bandwidth profile.
4. Use the onu-sla-profile profile-set command to configure the downstream and
upstream parameters of the bandwidth profile.
Note:
In the upstream bandwidth configuration, the assured bandwidth and maximum bandwidth param-
eters are mandatory. The default values are recommended for other parameters.
In the downstream bandwidth configuration, the maximum bandwidth parameter is mandatory.

The system automatically calculates and sets the maximum burst size parameter according to the
maximum bandwidth.
5. Use the show epon onu-sla-profile command to query the bandwidth profile.
6. Use the exit command to exit the EPON configuration mode.
8. Use the sla-profile command to apply the bandwidth profile to the ONU.
9. Use the show onu sla command to query the ONU bandwidth configuration.
Result
The bandwidth profile is configured successfully.
2-12

Example
Configure the bandwidth profile and apply it to ONU 1 under epon-olt_0/5/4. Table 2-5 lists
the configuration information.
Table 2-5 ONU Bandwidth Profile Configuration Data
Item Data
Upstream Fixed bandwidth 2000 Kbps
Maximum bandwidth 5000 Kbps
ZXAN(config)#epon
ZXAN(config-epon)#onu-sla-profile profile-name create zte
ZXAN(config-epon)#onu-sla-profile profile-set zte upstream assured 2000
maximum 5000
ZXAN(config-epon)#onu-sla-profile profile-set zte downstream maximum 10000
ZXAN(config-epon)#show epon onu-sla-profile zte
ProfileName :zte
UpStream MaxBw MinBw FixBw FixPktSize MaxBurstSize Priority
-----------------------------------------------------------------------
5000 2000 0 64 45000 0
Downstream MaxBw(Kbps) MaxBurstSize(Bytes)
------------------------------------------------------------------
10000 205000
Onu reference:
ZXAN(config-if)#sla-profile zte
ZXAN(config-if)#show onu sla upstream epon-onu_0/5/4:1
ID MaxBw MinBw FixBw FixPkt MaxBurst Pri ProfileName
------------------------------------------------------------
1 5000 2000 0 64 45000 0 zte
ZXAN(config-if)#show onu sla downstream epon-onu_0/5/4:1
ID MaxBw(Kbps) MaxBurstSize(Bytes) ProfileName
---------------------------------------------------------------
1 10000 205000 zte
2-13

2.1.7 Configuring the ONU In-Band IP Address

Short Description
Perform this procedure to configure the ONU in-band IP address on the OLT to manage
the ONU remotely.
Prerequisites
Context
The ZXA10 C220 manages configuration on EPON ONUs in the following ways:
l In-band configuration
Create an ONU in-band NM channel, and then log in to the ONU to implement
configuration.
In this mode, data is configured and saved on the ONU. You can access the ONU
through its in-band NM IP address from the ZXA10 C220 uplink port. The ONU can
be configured and upgraded through this IP address.
l Extended OAM configuration
The EPON technology provides the OAM channel for remote configuration.
In this mode, in-band NM does not need to be configured. This configuration can be
implemented only when the ONU is successfully registered and authenticated. The
configuration data is saved on the OLT and delivered to the ONU to take effect through
the OAM channel.
Note:
In practical applications, there is no need to configure the in-band NM IP addresses for all the ONUs.
The configuration is required for ONUs that only supports local VoIP services configuration or upgrade,
such as ZTE-F820 and ZTE-F822.
It is recommended to configure the ONU in-band NM IP address in the same management VLAN and
network segment as the ZXA10 C220, so that the NMS server can connect the ONU when it connects
the OLT.
To configure the ONU in-band IP address, perform the following steps:
Steps
2-14

2. Use the vlan command to create the ONU in-band NM VLAN.

4. Use the switchport mode command to change the PON-ONU interface mode.
5. Use the switchport vlan command to add the PON-ONU interface to the NM VLAN in
tagged mode.
6. Use the interface command to enter the OLT uplink port configuration mode.
7. Use the switchport mode command to configure the OLT uplink port mode.
8. Use the switchport vlan command to add the OLT uplink port to the NM VLAN in tagged
mode.
9. Use the pon-onu-mng command to enter the ONU remote management mode.
10. Use the mgmt-ip command to set the ONU in-band NM IP address.
Result
The ONU in-band IP address is configured successfully.
Example
Set the in-band NM VLAN of No.1 ONU F820 under interface 4 of slot 5 to 2600 and the
in-band IP address to 198.2.128.5/24.
ZXAN(config-if)#switchport mode hybrid
ZXAN(epon-onu-mng)#mgmt-ip 192.2.128.5 255.255.255.0 vlan 2600 priority 7 route
192.2.128.0 255.255.255.0 192.2.128.1 status enable
ZXAN(epon-onu-mng)#end
ZXAN#
Follow-Up Action
Carry out the ping command on the OLT to check whether the ONU in-band IP address is
successfully configured.
ZXAN#ping 198.2.128.5
2-15

sending 5,100-byte ICMP echos to 10.1.1.2,timeout is 2 seconds.

!!!!!
Success rate is 100 percent(5/5),round-trip min/avg/max= 0/8/40 ms.
//The ONU in-band IP address is successfully configured.
2.1.8 ONU Data Service Configuration

In EPON service configuration, the configuration procedures for D series and F series are
the same. The configuration procedure for ZXDSL 9806H is different.
This topic includes the following:

l Configuring the D-Series/F-Series ONU Data Service
l Configuring the 9806H ADSL Data Service
2.1.8.1 Configuring the D-Series/F-Series ONU Data Service
Short Description
Perform this procedure to configure the D-series/F-series ONU data service.
Prerequisites

l The EPON data service configuration is completed.
l The ONU device runs properly.
Context
The ONU port supports six VLAN modes, as listed in Table 2-6.
Table 2-6 VLAN Modes
Mode Direction Handling
Transparent Upstream The system does not change the tagged frame (reserving
the old VLAN tag) and forwards the frame.
The system does not change the untagged frame and
forwards the frame.
Downstream The system does not change the tagged frame (reserving
the old VLAN tag) and forwards the frame.
The system does not change the untagged frame and
forwards the frame.
2-16

Tag Upstream The system discards the tagged frame.

The system adds a new VLAN tag to the untagged frame
according to the VID parameter and forwards the frame.
Downstream If the VLAN ID of the downstream tagged frame is the

same as the configured VID, the system forwards the
frame to the corresponding UNI port according to the VID.
If the VLAN ID of the downstream tagged frame is different
from the configured VID, the system discards the frame.
The system discards the untagged frame.
Translation Upstream If the original VID of the tagged frame has a corresponding
entry (input VID) in the VLAN translation list of the related
port, the system transfers the VID to the output VID
according to the entry, and then forwards the frame. If the
VID has no corresponding entry in the VLAN translation
list of the related port, the system discards the frame.
The system adds the default VLAN ID to the untagged
frame and forwards the frame.
Downstream If the original VID of the tagged frame has a corresponding

entry (input VID) in the VLAN translation list of the related
port, the system transfers the VID to the output VID
according to the entry, and then forwards the frame. If the
original VID is the default VID, the system strips the tag
and forwards the frame. If the VID has no corresponding
entry in the VLAN translation list of the related port, the
system discards the frame.
Aggregation Upstream If the VLAN ID of the frame is the same as an aggregated

VLAN in the VLAN aggregation table entries, the system
transfers the frame VID to the corresponding VLAN to
be aggregated, records the source MAC address of the
service traffic, and then forwards the frame. If the VLAN
ID of the frame is different from any aggregated VLAN in
the VLAN aggregation table entries, the system discards
the frame.
Downstream If the VLAN ID of the frame is the same as a VLAN to

be aggregated in the VLAN aggregation table entries,
the system transfers the frame VID to the corresponding
aggregated VLAN, and then forwards the frame. If the
original VID is the default VID, the system strips the tag
and forwards the frame. If the VLAN ID of the frame is
2-17

different from VLAN to be aggregated or default VLAN ID,

the system discards the frame.
Trunk Upstream If the VLAN ID of the tagged frame is permitted by the

port, the system forwards the frame to the upper-layer
device. If the VLAN ID of the tagged frame is denied by
the port, the system discards the frame.
The system handles the untagged frames in two ways:
l If the ONU does not support the CTC2.1 standard,
the system discards the frame.
l If the ONU supports the CTC2.1 standard, the system
adds the default VLAN ID to the frame and forwards it.
Downstream The system handles the tagged frames in two ways:

l If the ONU does not support the CTC2.1 standard
and the VLAN ID of the frame is permitted by the
port, the system forwards the frame to the lower-layer
device. If the VLAN ID of the frame is denied by the
port, the system discards the frame.
l If the ONU supports the CTC2.1 standard and the
VLAN ID of the frame is permitted by the port, the
system forwards the frame to the lower-layer device.
If the VLAN ID of the frame is the default VLAN, the
system strips the tag and forwards the frame to the
lower-layer device. If the VLAN ID of the frame is
denied by the port, the system discards the frame.
Hybrid (for the Upstream If the VLAN ID of the tagged frame is permitted by the
ONUs that do port, the system forwards the frame to the upper-layer
not support the device. If the VLAN ID of the tagged frame is denied by
CTC2.1 standard) the port, the system discards the frame.
Downstream If the VLAN ID of the tagged frame is permitted by the

port, the system forwards the frame to the lower-layer
device. If the VLAN ID of the frame is the default VLAN,
the system strips the tag and forwards the frame to the
lower-layer device. If the VLAN ID of the tagged frame is
denied by the port, the system discards the frame.
To configure the D-series/F-series ONU data service, perform the following steps:
2-18

Steps
3. Use the vlan port command to configure the ONU Ethernet port VLAN.
4. Use the show remote onu vlan to query the ONU VLAN configuration information.
Result
The ONU data service is configured successfully.
Example
Add VLAN tag 100 and priority 1 to the upstream Ethernet frames on port eth_0/1 of an
F822.
ZXAN(epon-onu-mng)#show remote onu vlan epon-onu_0/5/4:1
Ethport : Eth_0/1
Mode : tag
vlan : 100
priority : 1
Ethport : Eth_0/2
Mode : tag
vlan : 4092
priority : 0
Ethport : Eth_0/3
Mode : tag
vlan : 4092
priority : 0
……
2.1.8.2 Configuring the 9806H ADSL Data Service
Short Description
Perform this procedure to configure the 9806H ADSL data service.
2-19

Prerequisites
l The EPON data service configuration is completed.
l The 9806H device runs properly.
Context
To configure the 9806H ADSL data service, perform the following steps:
Steps
1. Authenticate the ONU.
2. Use the vlan command to create a service VLAN.
3. Use the interface command to enter the OLT uplink port and EPON-ONU interface
configuration mode respectively.
4. Use the switchport mode command to configure the OLT uplink port and EPON-ONU
interface mode respectively.
5. Use the switchport vlan command to configure the VLAN properties for the OLT uplink
port and the EPON-ONU interface respectively.
6. Log in to the 9806H device (user name/password: admin). Use the enable command
to enter the administrator mode (password: admin).
7. Use the configure command to enter the global configuration mode.
8. Configure the in-band NM service VLAN.
a. Use the add-vlan command to configure the in-band NM service VLAN.
b. Use the vlan command to configure the VLAN uplink port.
9. Configure the in-band NM IP address and route.
a. Use the ip subnet command to configure the in-band NM IP address.
b. Use the ip route command to configure the in-band NM route.
10. Configure the broadband service VLAN.
a. Use the add-vlan command to configure the broadband service VLAN.
b. Use the vlan command to configure the VLAN uplink port and service port.
11. Use the adsl-profile command to configure the line profile.
12. Use the adsl-alarm-profile command to configure the alarm profile.
13. Configure the service port properties.
a. Use the pvid command to configure the port PVID.
b. Use the atm pvc command to configure the port PVC.
c. Use the adsl profile command to apply the line profile to the port.
2-20

d. Use the adsl alarm-profile command to apply the alarm profile to the port.
e. Use the adsl trans-mode command to configure the line transmission mode.
Result
The 9806H ADSL data service is configured successfully.
Example
The 9806H device is connected to ONU 1 under port 2 of slot 3. Table 2-7 shows the
9806H ADSL data service configuration data.
Table 2-7 Configuration Data of 9806H ADSL Data Service
Item Data
Data service VLAN VLAN ID: 100
OLT uplink port 0/14/1
OLT PON port 0/3/2
9806H uplink port 5/1
9806H service port 2/1–24
In-band NM l VLAN ID: 1000

l IP: 172.16.234.10
l Gateway: 172.16.234.254
Line configuration profile l Name: zte2m

l Downstream bandwidth: 2 Mbps
l Others: default
MODEM PVC 8:81
The configuration on the ZXA10 C220 is as follows:

ZXAN(config-if)#onu 1 type ZTE-9806 mac 0001.1300.0012
2-21

The configuration on the ZXDSL 9806H is as follows:

Login:admin
Password:
9806>en
Please input password:
9806# configure
9806(config)# add-vlan 1000
9806(config)# vlan 1000 5/1 tag
9806(config)# ip subnet 172.16.234.10 255.255.255.0 1000
9806(config)# ip route 0.0.0.0 0.0.0.0 172.16.234.254
9806(config)# add-vlan 100
9806(config)# vlan 100 5/1 tag
9806(config)# vlan 100 2/1-24 untag pvc 1
9806(config)# adsl-profile zte2m.prf
9806(config)# adsl-profile zte2m.prf
AtucConfRateMode(1-fixed,2-adaptAtStartup,3-adaptAtRuntime):[2]
AtucConfRateChanRatio(0..100):[0]
AtucConfTargetSnrMgn(0..310(0.1dB)):[80]
AtucConfMaxSnrMgn(80..310(0.1dB)):[310]
AtucConfMinSnrMgn(0..80(0.1dB)):[0]
AtucConfDownshiftSnrMgn(0..310):[0]
AtucConfUpshiftSnrMgn(0..310):[0]
AtucConfMinUpshiftTime(0..16383):[0]
AtucConfMinDownshiftTime(0..16383):[0]
ConfProfileLineType(1-fast-only,2-interleaved-only):[2]
AtucChanConfFastMaxTxRate(0..102400kbps):[1024]2048
// Maximum rate of the downstream fast channel
AtucChanConfFastMinTxRate(0..2048kbps):[32]
AtucChanConfInterleaveMaxTxRate(0..102400kbps):[1024]2048
// Maximum rate of the downstream interleave channel
AtucChanConfInterleaveMinTxRate(0..2048kbps):[32]
AtucChanConfMaxInterleaveDelay(0..255ms):[16]
AturConfRateMode(1-fixed,2-adaptAtStartup,3-adaptAtRuntime):[2]
AturConfRateChanRatio(0..100):[0]
AturConfTargetSnrMgn(0..310(0.1dB)):[80]
AturConfMaxSnrMgn(80..310(0.1dB)):[310]
AturConfMinSnrMgn(0..80(0.1dB)):[0]
AturConfDownshiftSnrMgn(0..310(0.1dB)):[0]
AturConfUpshiftSnrMgn(0..310(0.1dB)):[0]
AturConfMinUpshiftTime(0..16383):[0]
2-22

AturConfMinDownshiftTime(0..16383):[0]
AturChanConfFastMaxTxRate(0..10240kbps):[512]
AturChanConfFastMinTxRate(0..512kbps):[32]
AturChanConfInterleaveMaxTxRate(0..10240kbps):[512]
AturChanConfInterleaveMinTxRate(0..512kbps):[32]
AturChanConfMaxInterleaveDelay(0..255ms):[16]
AtucDMTConfFreqBinsOperType(1-open,2-cancel):[2]
AturDMTConfFreqBinsOperType(1-open,2-cancel):[2]
LineDMTConfEOC(1-byte ,2-streaming ):[1]
LineDMTConfTrellis(1-on,2-off):[1]
AtucConfMaxBitsPerBin(0..15):[15]
AtucConfTxStartBin(6..511):[32]
AtucConfTxEndBin(32..511):[511]
AtucConfRxStartBin(6..63):[6]
AtucConfRxEndBin(6..63):[31]
AtucConfUseCustomBins(1-on,2-off):[2]
AtucConfDnBitSwap(1-on,2-off):[2]
AtucConfUpBitSwap(1-on,2-off):[2]
AtucConfREADSL2Enable(1-on,2-off):[2]
AtucConfPsdMaskType(1-DMT_PSD_MSK,2-ADSL2_PSD_MSK,3-ADSL2_READSL_WIDE_PSD_MSK,4-
ADSL2_READSL_NARROW_PSD_MSK):[3]
AtucConfPMMode(1-DISABLE,2-L2_ENABLE,3-L3_ENABLE,4-L3_ENABLE | L2_ENABLE):[1]
AtucConfPML0Time(0..255s):[240]
AtucConfPML2Time(0..255s):[120]
AtucConfPML2ATPR(0..31db):[3]
AtucConfPML2Rate(512..1024kbps):[512]
Press M or m key to modify, or the other key to complete?[C]
9806(config)# interface range adsl 2/1-24
9806(cfg-if-range-adsl)# pvid 100 pvc 1
9806(cfg-if-range-adsl)# adsl profile zte2m.prf
9806(cfg-if-range-adsl)# atm pvc 1 vpi 8 vci 81
9806(cfg-if-range-adsl)# end
9806# save
2.1.9 Managing the ONU Remotely

Short Description
Perform this procedure to manage the ONU remotely.
Prerequisites

2-23

Context
To manage the ONU remotely, perform the following steps:
Steps
3. Use the active pon-if command to enable the primary or secondary uplink EPON port
of the ONU.
4. Use the alarm command to enable or disable the ONU alarm reporting function. The
ZXA10 C220 supports enabling or disabling the alarm function on the ONU, user port,
and uplink EPON port.
a. Use the alarm enable/disable command to enable or disable the global alarm
function.
b. Use the alarm onu command to enable or disable the alarm function at the ONU
level, for example, the ONU temperature alarm and ONU power supply alarm.
c. Use the alarm interface command to enable or disable the alarm function on the
ONU user port, including the Ethernet port, VoIP port, and E1 port.
d. Use the alarm pon-if command to enable or disable the alarm function on the
uplink EPON port of the ONU, including the optical output power alarm and optical
input power alarm.
5. Use the alarm-threshold command to set the alarm report threshold and clearance
threshold on the ONU or uplink EPON port.
6. Use the auto-config command to enable or disable ONU configuration auto-dispatch
by the OLT. If this function is enabled, when the ONU gets online or is restarted after
power-off, the OLT automatically delivers the configuration, covering the ONU local
configuration data.
7. Use the auto-config voip command to enable or disable ONU VoIP service
auto-dispatch by the OLT.
8. Use the classification command to configure the upstream classification rule and
mapping control rule on the ONU Ethernet port.
a. Use the classification rule-profile command to add the mapping rule between the
user port queue and the 802.1p priority.
b. Use the classification condition-profile command to add the classification profile of

the user port service stream.
c. Use the classification port command to configure the upstream classification
rule and the mapping rule on the ONU Ethernet port. That means, according
2-24

to the classification profile, map service stream to the specified queue with the
corresponding 802.1p priority.
9. Use the mac command to configure the MAC address information on the user port. Set
the maximum MAC addresses supported by the port. Add or delete three types of MAC
address information: filtered the MAC address/VLAN, bound MAC address/VLAN, and
static MAC address/VLAN.
a. Use the mac aging-time command to set the aging time of the ONU MAC address.
b. Use the mac add command to add the user port MAC address information,
including the filtered the MAC address/VLAN, bound MAC address/VLAN, and
c. Use the mac delete command to delete the user port MAC address information,
d. Use the mac clear command to clear all the user port MAC address information,
e. Use the mac limit-num command to set the maximum MAC addresses that the
user port can learn.
10. Use the dba command to set the DBA queue parameter of the ONU.
a. Use the dba queue-set command to set the threshold of Queue Set in the Report
frame sent by the ONU.
b. Use the dba queue-set active command to activate the DBA queue parameter of
the ONU.
11. Use the holdover command to set the ONU state holding function. This function
protects the ONU from offline. To enable the state holding function, set the state
holding time.
12. Use the interface command to set the ONU user port properties.
a. Use the interface eth eth_slot/portId auto-neg command to set the auto-negotiation
function on the ONU Ethernet port.
Note:
It is recommended to enable the auto-negotiation function on the ONU Ethernet port.
b. Use the interface eth eth_slot/portId flow-control command to set traffic control on
the ONU Ethernet port.
c. Use the interface eth eth_slot/portId mode command to configure the ONU Ethernet
port mode.
d. Use the interface eth eth_slot/portId phy-state command to enable or disable the
Ethernet port.
2-25

e. Use the interface eth eth_slot/portId policing command to set the upstream and
downstream traffic control parameters on the ONU Ethernet port, including CIR,
CBS, and EBS.
f. Use the interface eth eth_slot/portId policing-profile command to set the bandwidth
profile on the ONU Ethernet port.
Note:
Before carrying out this command, you can create a bandwidth profile on the ONU user port
by using the following commands:
ZXAN(config)#epon
ZXAN(config-epon)#onu-uni-profile profile-name create zte
ZXAN(config-epon)#onu-uni-profile profile-set
zte downstream cir 2000 cbs 1522 ebs 1522
ZXAN(config-epon)#onu-uni-profile
profile-set zte upstream cir 2000
g. Use the interface voip command to enable or disable the ONU POTS port.
h. Use the interface e1 command to enable or disable the ONU E1 port.
13. Use the interface-loopdetect command to set the loopback detection function on the
ONU port.
14. Use the isolation command to enable or disable ONU port isolation.
15. Use the llid-queue command to set the binding relations between the LLIDs and
queues on the ONU when multiple LLIDs exist.
16. Use the mng-snmp command to set the ONU SNMP parameters, such as the SNMP
version, trap host IP address, read community name, and write community name.
17. Use the onu-queue command to use the ONU queue scheduling profile.
Note:
Before carrying out this command, you can create an ONU queue scheduling profile by using the
following commands:
ZXAN(config)#epon
ZXAN(config-epon)#onu-queue-profile zte queue1 64 0 20 25 4
18. Use the pon-buffer command to set the upstream and downstream buffer capacity of
the ONU.
2-26

Note:
The total upstream and downstream buffer capacity of each SFU cannot be less than 256 KB.
The MDU/MTU buffer capacity cannot be less than 64 KB × user ports.
19. Use the pon-downstream-shaping command to set the traffic shaping parameter on the
ONU user port.
20. Use the reboot command to restart the ONU.
21. Use the reset-card command to restart the ONU card.
22. Use the transceiver command to set the threshold detection function of the ONU optical
module performance.
a. Use the transceiver enable command to enable the detection function.
b. Use the transceiver disable command to disable the detection function.
c. Use the transceiver alarm command to set the threshold detection alarm of the
ONU optical module performance.
23. Use the save command to save the configuration data of the ONU.
Result
ONU remote management is complete.
Example
Limit the downstream rate on Ethernet port 1 of the ONU F820 (epon-onu_0/5/4:1) to 3
Mbps.
ZXAN(epon-onu-mng)#interface eth eth_0/1 flow-control enable
ZXAN(epon-onu-mng)#interface eth eth_0/1 policing downstream enable cir
3000 cbs 10000 ebs 1522
2.1.10 Configuring the OLT Port

Short Description
Perform this procedure to configure the OLT port.
Prerequisites
2-27


Context
To configure the OLT port, perform the following steps:
Steps
3. Use the onu-authentication-mode command to configure the ONU authentication
mode. All the ONUs on the same EPON service card must use the same
authentication mode.
l Use the onu-authentication-mode register command to set the ONU authentication
mode to hardware authentication.
l Use the onu-authentication-mode service command to set the ONU authentication
mode to software authentication. The software authentication includes five
modes: LOID, SN, MAC, Hybrid, and SN+MAC.
4. Use the encrypt algorithm command to configure the OLT encryption algorithm. The
encryption algorithm includes AES and Triple-churning.
6. Use the ip-pool command to configure the OLT IP address pool.
7. Use the ip-pool-bind command to select the IP address pool name on the OLT port.
This address pool is used to configure the ONU in-band IP address.
9. Use the alarm command to configure the alarm function on the OLT port.
10. Use the als command to set the auto-control of the laser on the OLT port. After the
auto-control is enabled, the system turns off the laser when there is no ONU online on
the OLT port. That provides low power cost and safety.
11. Use the linktrap command to configure the alarm report mode when a link break occurs
on the OLT port.
12. Use the maxrtt command to set the maximum ONU distance.
Note:
The relation between maxrtt and distance is as follows:
Distance (fiber length) = maxrtt/2 × fiber optical speed (1.64E8 approximately)
13. Use the multi-llid command to set multi-LLID function and the maximum LLID number.
This command is applicable for the ONU that support multiple LLIDs.
2-28

14. Use the dba-priority command to set the rolling rates for different DBA priorities. To
allocate bandwidth to the services with higher priorities first, set shorter rolling period
and higher authority frequency for these priorities.
15. Use the fec command to enable or disable the FEC function on the PON port.
16. Use the high-priority-frame command to set the downstream frame with the specified
priority to high-priority frame.
17. Use the priority-queue-map command to set mapping relations between the priorities
of the upstream/downstream frame on the OLT port and the queues.
a. Use the priority-queue-map downstream command to set mapping relations
between the priorities of the downstream frame on the OLT port and the queues.
b. Use the priority-queue-map upstream command to set mapping relations between
the priorities of the upstream frame on the OLT port and the queues.
18. Use the performance start command to start the performance statistic function on the
OLT port.
19. Use the loopback phy system command to set OLT port loopback.
20. Use the loopback-detection command to enable or disable loopback detection on the
OLT port.
21. Use the rx-hec command to set whether the HEC receiving mode at the OLT side is
compatible with the HEC mode defined in the 802.3AH standard draft. This affects the
registration of the interworking ONU and uninterworking ONU on the OLT.
22. Use the reset command to reset the OLT port.
23. Use the reset counter command to reset the performance statistic counter of the OLT
port.
24. Use the security packet-limit command to limit the forwarding rate of the broadcast
packets, multicast packets, and unknown packets on the OLT port. The unit is pps.
25. Use the shutdown command to shutdown the OLT port.
26. Use the speed command to configure the bandwidth capability on the OLT port. That
is, the total bandwidth of all the ONUs on the OLT port cannot exceed the bandwidth
configured by this command.
Result
The OLT port is configured successfully.
Example
Set the EPON card in slot 3 to SN authentication mode, enabling the tribple-churning
encryption algorithm.
2-29

ZXAN(config)#epon
ZXAN(config-epon)#onu-authentication-mode service 0/3 sn
ZXAN(config-epon)#encrypt algorithm 0/3 triple-churning
Note:
0/3 in the commands means shelf/slot.
2.2 10G EPON Data Service Configuration

l Overview
l Configuring the 10G EPON Data Service
2.2.1 Overview
Service Description
The principle of the 10G EPON service is similar with that of the EPON service. 10G EPON
can provide 10 Gbps bandwidth for subscribers.
The ZXA10 C220 provides the 10G EPON access through the EPXS service card. Each
card provides one 10G EPON ports. A 10G EPON port can reach up to 1.25 Gbps
upstream rate and 10.3125 Gbps downstream rate. A single port supports up to 128
ONUs and a single shelf supports up to 1280 ONUs.
2.2.2 Configuring the 10G EPON Data Service

Short Description
Perform this procedure to configure the 10G EPON data service.
Prerequisites
l The interface VLAN of the upper-layer device is consistent with the VLAN configured
on the uplink port.
l The 10G EPON service card status is proper.
2-30

Context
The EPON data service can be applied in the following scenarios: FTTH, FTTB, and FTTC.
Internet service in FTTB application as an example.
Networking Diagram
Figure 2-3 shows the networking diagram of the 10G EPON data service.
Figure 2-3 10G EPON Data Service Networking Diagram
The user computer is connected to the FE port of the ONU, on which the user data frames
are tagged with the user-side VLAN IDs. The user data is dispatched to the corresponding
service channels according to the user-side VLAN IDs. ZXA10 C220 transfers the
user-side VLAN to the uplink VLAN, and sends data out through the uplink port.
Configuration Data
Table 2-8 lists the configuration data for the 10G EPON data service.
Table 2-8 Configuration Data of 10G EPON Data Service
Item Data Remarks
VLAN VLAN ID: 100 –
Uplink port 0/2/1 –
OLT port 0/5/1 –
2-31

Item Data Remarks
ONU information l Type: F822 –

l MAC address:
001e.7391.5f36
l ONU ID: 1
ONU bandwidth Upstream: 100 Mbps –

Downstream: 1 Gbps
Requirements on the uplink l Ethernet Switch: configure For detailed ES and BRAS
device the same VLAN as the device configuration, refer to the
ZXA10 C220 service VLAN relevant operation manual.
(transparently transmits the
ZXA10 C220 services).
l BRAS: configure
parameters according
practical application.
Configuration Flow
Figure 2-4 shows the configuration flow of the 10G EPON data service.
Figure 2-4 Configuration Flow of 10G EPON Data Service
To configure the 10G EPON data service, perform the following steps:
2-32

Steps
ZXAN(config)#
Note:

ZXAN(config)#interface xgei_0/2/1
Note:
automatically.

ZXAN(config)#show onu unauthentication epon-olt_0/5/1

MAC address : 001e.7391.5f36
SN :
OnTime : 2008/01/01 22:34:29
ZXAN(config)#
4. Configure the ONU type profile.
The speed of the default ZTE-F822 ONU type profile is 1 Gbps. The speed can be
configured accordingly.
ZXAN(config)#show onu-type epon ZTE-F822
Onu type name : ZTE-F822
Pon type : epon
Description : 24FE
Protect type: none
Speed: 1g
2-33

Create an ONU type profile ZTE-F822A, which supports 24 FE ports and 24 POTS
ports. The rate is 10 Gbps asymmetrically, that is, the ONU upstream rate is 1 Gbps
and downstream rate is 10 Gbps. Disable the auto-dispatch function of ZTE-F822A.
ZXAN(config)#pon
ZXAN(config)#epon
Pon type : epon
Protect type: none
5. Enter the EPON-OLT interface mode. Authenticate the ONU through the MAC
address.
ZXAN(config-if)#onu 1 type ZTE-F822A mac 001e.7391.5f36
6. Enter the EPON-ONU interface mode. Enable the interface authentication protocol.
Note:
You can use the show onu detail-info command to display the detailed information of the current
ONU.
7. Set the upstream and downstream bandwidth of the ONU.

8. Configure the VLAN service port.

9. Enter the ONU remote management mode. Configure the ONU Ethernet port VLAN.
2-34


ZXAN(config)#exit
ZXAN#write
..[OK]
Result
The 10G EPON data service is configured successfully.
2-35

2-36

Chapter 3
GPON Data Service
Configuration
Table of Contents
Overview ....................................................................................................................3-1
Configuring the GPON Data Service ..........................................................................3-1
Configuring the ONU Type Profile...............................................................................3-6
Authenticating an ONU...............................................................................................3-7
Configuring the T-CONT Profile ..................................................................................3-9
Configuring the Traffic Profile ...................................................................................3-11
Configuring the Service Connection .........................................................................3-12
Configuring ONU Flow VLAN Parameters ................................................................3-15
Configuring ONU UNI VLAN Parameters..................................................................3-16
Configuring the ONU In-Band IP Address.................................................................3-17
Configuring the OLT Port..........................................................................................3-20
3.1 Overview
Service Description
GPON access is a flexible access technology that provides super bandwidth access in
both broadband and narrowband service environment. It supports multiple rate modes
and uses a single optical fiber to provide user with voice, data, and video services.
The ZXA10 C220 provides GPON access through the GPFAB/GPFAC/GPFAE card.
Each GPFAB/GPFAC/GPFAE card provides four GPON interfaces, supports the splitting
ratio of 1:128 at the maximum. A single shelf supports up to 5120 ONUs.
3.2 Configuring the GPON Data Service

Short Description
Perform this procedure to configure the GPON data service.
3-1

Prerequisites
l The GPON service card status is proper.
Context
The GPON data service can be applied in the following scenarios: FTTH, FTTB, and FTTC.
Internet service in FTTH application as an example.
Networking Diagram
Figure 3-1 shows the networking diagram of the GPON data service.
Figure 3-1 GPON Data Service Networking Diagram
In the networking, the user computer is connected to the ONU FE port. The user data
frame is added with the VLAN tag on the ONU FE port. The user data is distributed to
each service channel according to the user-side VLAN. The ZXA10 C220 completes the
mapping from GEM port to Ethernet frame and sends data out through the upstream port.
3-2

Chapter 3 GPON Data Service Configuration
Configuration Flow
Figure 3-2 shows the configuration flow of the GPON data service.
Figure 3-2 GPON Data Service Configuration Flow
Configuration Data
Table 3-1 lists the GPON data service configuration data.
Table 3-1 Configuration Data of GPON Data Service
Item Data
Service VLAN VLAN ID: 100
Service priority 0
Uplink port 0/2/1
GPON port 0/10/1
T-CONT bandwidth profile Profile name: T1-100M
Bandwidth type: Fixed
Bandwidth: 100 Mbit/s
ONU information l ONU ID: 1

l ONU authentication mode: SN authentication
l ONU SN: ZTEG–00000002
l ONU type: ZTE-F621
3-3

Item Data
T-CONT l T-CONT INDEX: 2

l T-CONT name: Tcont100M
l Bandwidth profile: T1-100M
l Alloc ID: Auto-allocate
GEM Port l T-CONT INDEX: 2

l GEM Port INDEX: 1
l GEM Port name: Gemport1
l Port ID: Auto-allocate
ONU service channel l Service connection name: dataservice

l User port VLAN mode: Tag (add PVID to
untagged frames)
To configure the GPON data service, perform the following steps:
Steps
ZXAN(config)#
Note:

Note:
automatically.

ZXAN(config)#show gpon onu uncfg gpon-olt_0/10/1
OnuIndex Sn State
3-4

-------------------------------------------------------------
gpon-onu_0/10/1:1 ZTEG00000002 unknown
4. Enter the GPON-OLT interface mode and authenticate the ONU by the SN.
ZXAN(config)#interface gpon-olt_0/10/1
ZXAN(config-if)#onu 1 type ZTE-F621 sn ZTEG00000002
ZXAN(config)#show gpon onu state gpon-olt_0/10/1
OnuIndex Admin State Omcc State O7 State Phase State
-----------------------------------------------------------------
gpon-onu_0/10/1:1 enable enable operation working
5. Configure the T-CONT bandwidth profile.

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont T1-100M type 1 fixed 100000
ZXAN(config-gpon)#exit
6. Create a T-CONT.
ZXAN(config)#interface gpon-onu_0/10/1:1
ZXAN(config-if)#tcont 2 name Tcont100M profile T1-100M
7. Create a GEM port.

ZXAN(config-if)#gemport 1 name Gemport1 unicast tcont 2
8. Configure the port VLAN on the PON-ONU interface.

ZXAN(config-if)#switchport mode trunk vport 1
ZXAN(config-if)#switchport vlan 100 tag vport 1
ZXAN(config)#
Note:
By default, one V-port corresponds to one GEM port.
9. Configure the ONU service channel.

a. Configure the service connection.
ZXAN(config)#pon-onu-mng gpon-onu_0/10/1:1
ZXAN(gpon-onu-mng)#service dataservice type internet gemport 1 cos 0 vlan 100
b. Configure user port (UNI) VLAN.

ZXAN(gpon-onu-mng)#vlan port eth_0/1 mode tag vlan 100 priority 0

ZXAN#write
..[OK]
ZXAN#
3-5

Result
The GPON data service is configured successfully.
3.3 Configuring the ONU Type Profile

Short Description
Perform this procedure to configure the ONU type profile.
Prerequisites
l The in-band or out-of-band NM is configured.
Context
When the new ONU type does not exist in the system, perform this procedure.
Users can use the show onu-type gpon command to query the default ONU types on the
ZXA10 C220.
To configure the ONU type profile, perform the following steps:
Steps
3. Use the onu-type command to add an ONU type profile.
Note:
In the ZXA10 C220, the ONU type name must be unique in EPON and GPON service.
4. Use the onu-type-if command to configure the user port of the new ONU type.
5. Use the onu-type-attr command to configure attributes of the new ONU type.
Result
The ONU type profile is configured successfully.
Example
Create a GPON ONU type ZTE-F820, which supports 24 Ethernet ports.
3-6


ZXAN(config)#pon
ZXAN(config-pon)#onu-type ZTEG-F820 gpon description 24FE max-tcont 7
max-gemport 32 max-switch-perslot 1 max-flow-perswitch 32
ZXAN(config-pon)#onu-type-if ZTEG-F820 eth_0/1-24
ZXAN(config-pon)#show onu-type gpon ZTEG-F820
Onu type name : ZTEG-F820

Pon type : gpon
Description : 24FE
Max tcont : 7
Max gemport : 32
Max switch per slot : 1
Max flow per switch : 32
Max iphost : 1
Service ability N:1 : support
Service ability 1:M : support
Service ability 1:P : support
3.4 Authenticating an ONU

Short Description
Perform this procedure to authenticate an ONU.
Prerequisites

Context
The ZXA10 C220 supports two types of ONU SN authentication mode:
l Learn
When the system discovers an ONU, the ONU is registered to the configuration list
automatically.
l Provision
When the system discovers an ONU, if the ONU is configured, the configuration takes
effect. If the ONU is not configured, it is displayed in the list of unregistered ONU.
When the authentication mode is learn, users do not need to configure the unauthenticated
ONU manually, but the OLT cannot recognize the ONU type. Therefore, it is recommended
to use the default SN authentication mode provison.
3-7

In OLT interface configuration mode, use the auto-learning enable command to enable the
ONU SN auto-learning authentication mode. By default, it is disabled.
To authenticate an ONU, perform the following steps:
Steps
1. Use the show gpon onu uncfg command to query the unauthenticated ONU information.
4. Use the onu command to authenticate the ONU.
5. User the show gpon onu state command to query the authenticated ONU information.
Table 3-2 lists the ONU phase states.
Table 3-2 ONU Phase State
Value Description
offline The OLT does not find the ONU. The ONU is offline.
logging The OLT is ranging the ONU.
syncMib The system is synchronizing the data.
working The OLT and ONU are working normally.
LOS The fiber link between the OLT and ONU is faulty.
DyingGasp The ONU is powered off.
Result
The ONU authentication is completed.
Example
Query the unauthenticated ONU information on port gpon-olt_0/10/1 and authenticate the
ONU.
OnuIndex Sn State
---------------------------------------------------------------------
3-8


------------------------------------------------------------------
3.5 Configuring the T-CONT Profile

Short Description
Perform this procedure to configure the T-CONT profile.
Prerequisites

Context
The T-CONT profile describes T-CONT traffic parameters. The ZXA10 C220 supports 512
T-CONT profiles.
There are five upstream bandwidth types:
l Fixed
The bandwidth that the OLT assigns to the T-CONT after the T-CONT is enabled
whether it has traffic or not
l Assured
The bandwidth that the OLT must assign to the T-CONT when the T-CONT has a
request for bandwidth
If the requested bandwidth is less than the assured bandwidth, the redundant
bandwidth can be used by other T-CONTs.
l Non-assured
The bandwidth that the OLT does not assign to the T-CONT when the T-CONT has a
request for bandwidth
The non-assured bandwidth is not assigned until all fixed and assured bandwidth are
assigned.
l Best Effort
The bandwidth of which the priority is the lowest

The best effort bandwidth is not assigned until the fixed, assured, and non-assured
bandwidth are assigned and there is still redundant bandwidth available.
l Maximum
3-9

The bandwidth which is the summary of the fixed, assured, non-assured, and best
effort bandwidth
No matter what the actual upstream traffic of T-CONT is, the assigned bandwidth
cannot exceed the maximum bandwidth.
There are five T-CONT bandwidth types:
l Fixed
This bandwidth type has certain bandwidth and time slot. Fixed bandwidth is suitable
for services which are sensitive to time slot, jittering, and services which have fixed
traffic rate, such as voice service.
l Assured
Assured bandwidth type has certain bandwidth but its time slot is uncertain. Assured
bandwidth is suitable for services which are not sensitive to time slots, jittering and
services for which the traffic rate is limited, such as VoD service.
l Assured and Non-assured
It assures the minimum bandwidth and shares redundant bandwidth dynamically.
Assured and non-assured bandwidth is suitable for services which require quality of
service and have burst of traffic, such as signed downloading service.
l Best Effort
This is the best effort bandwidth. After the fixed bandwidth, assured bandwidth, adn
non-assured bandwidth are assigned, the rest bandwidth is used through competition.
Best effort bandwidth is suitable for services which is not sensitive to time slot or
jittering, such as web browsing service.
l All
This bandwidth type is a combination of other types and is suitable for most services.
Table 3-3 lists the relationship between upstream bandwidth and T-CONT bandwidth.
Table 3-3 RELATIONSHIP BETWEEN UPSTREAM BANDWIDTH AND T-CONT

BANDWIDTH
Fixed Assured Assured and Best Effort All

Nonassured
Fixed RF RF 0 0 0 RF
Assured RA 0 RA RA 0 RA
Maximum RM RM=RF RM=RA RM>RA RM RM>=RA+RF
RM-RF-RA NONE NONE Non-assured Best Effort ANY
To configure the T-CONT profile, perform the following steps:
Steps
3-10

2. Use the gpon command to enter the GPON configuration mode.

3. Use the profile tcont command to create a T-CONT bandwidth profile.
4. Use the show gpon profile tcont command to query the T-CONT bandwidth profile.
6. Use the tcont command to apply the T-CONT profile.
Result
The T-CONT bandwidth profile is configured successfully.
Example
Configure the T-CONT bandwidth profile T1–100M. The fixed bandwidth is 100 Mbit/s. On
the gpon-onu_0/10/1:1 ONU interface, create T-CONT 1 and apply the bandwidth profile
T1–100M.
ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont T1-100M type 1 fixed 100000
ZXAN(config-gpon)#show gpon profile tcont T1-100M
Name :T1-100M
Type FBW(kbps) ABW(kbps) MBW(kbps)
1 100000 0 0
ZXAN(config-if)#tcont 1 name Tcont100M profile T1-100M
3.6 Configuring the Traffic Profile

Short Description
Perform this procedure to configure the traffic profile.
Prerequisites
l The GPON service is configured.
3-11

Context
The ZXA10 C220 does not support the traffic limit to GEM Port directly. By default, one
GEM port corresponds to one V-port. Therefore, limiting the V-port rate implements the
traffic control on the GEM port.
The ZXA10 C220 supports 512 traffic profiles.
To configure the traffic profile, perform the following steps:
Steps
1. Use the configure terminal command to enter global configuration mode.
2. Use the traffic-profile command to configure the traffic profile.
4. Use the traffic-profile command to configure the upstream and downstream rates.
Result
The traffic profile is configured successfully.
Example
Configure a traffic profile. The upstream name is UP-10M. The downstream name is
DOWN-10M. The assured and peak rates are 10 Mbit/s. On the gpon-onu_0/10/1:1 ONU
interface, configure the upstream/downstream limit of the VPORT 1.
ZXAN(config)#traffic-profile DOWN-10M ip cir 10000 cbs 100 pir 10000 pbs 100
ZXAN(config)#traffic-profile UP-10M ip cir 10000 cbs 100 pir 10000 pbs 100
ZXAN(config-if)#traffic-profile DOWN-10M vport 1 direction egress
//Configure the downstream limit of VPORT 1
ZXAN(config-if)#traffic-profile UP-10M vport 1 direction ingress
//Configure the upstream limit of VPORT 1
3.7 Configuring the Service Connection

Short Description
Perform this procedure to configure the service connection between Ethernet frames and
GEM port.
Prerequisites
3-12


l The T-CONT and GEM Port are configured.
Context
The ZXA10 C220 supports service connection based on the three types of mapping.
l 802.1p
The upstream frames arriving on the UNI of an ONU are mapped to a GEM port
according to UNI and 802.1p priority. Through the traffic shaping or priority queue, it
is sent to the relevant T-CONT, and then to the OLT.
l Bridge
according to VLAN ID. Meanwhile, the VLAN tag can be processed according VLAN
filter rules. Through the traffic shaping or priority queue, it is sent to the relevant
T-CONT, and then to the OLT.
l 802.1p + bridge
according to VLAN ID and 802.1p priority. Meanwhile, the VLAN tag can be processed
according VLAN filter rules. Through the traffic shaping or priority queue, it is sent to
the relevant T-CONT, and then to the OLT.
To configure a service connection based on 80.21p mapping, you can only use the
traditional method (flow and gemport commands).
To configure a service connection based on other two mapping modes, you can use either
the optimized method (service command) or the traditional method.
To configure the service connection between Ethernet frames and GEM port, perform the
following steps:
Steps
3. Configure the service connection.

l Use the service command to configure the service connection (optimized method).
3-13

Note:
You can configure four types of service connection by using the service command.
à VLAN mapping (bridge)
à VLAN + CoS mapping (bridge + 802.1p)
à CoS mapping (bridge + 802.1p)
à Transparent transmission (bridge)
When VLAN ID and CoS priority is no specified, the type of a service connection is transpar-
ent transmission, that is, services are mapped to a GEM port.
One ONU supports only one type of service connection at the same time. The connection
that is configured first takes effect.
After you use the service command to configure a service connection, the commands for
traditional configuration, which includes service connection, flow VLAN parameters, and UNI
VLAN parameters, are invalid.
l Use the to flow and gemport commands configure the service connection
(traditional method).
l Configure the bridge service connection.
a. Use the flow command to configure the service flow. The flow type is switching
unit.
Note:
Flow 1 is the default flow 1 on the ZXA10 C220. By default, flow 1 is bound to the bridge
switch_0/1.
To delete flow 1, you can use the no flow 1 command.
b. Use the gemport command to configure the service connection between a

flow and a GEM port.
c. Use the switchport-bind command to configure the bind a UNI interface to a
bridge (switch port).
Note:
By default, all UNI interfaces are bound to the bridge switch_0/1. You can use the no
switchport-bind command to delete the binding.
3-14

Result
The service connection is configured successfully.
Example
On the gpon-onu_0/10/1:1 interface, configure the connection between the Ethernet frame
and the GEM Port: the service connection type is 802.1p + bridge, GEM Port ID is 1, and
the priority is 0.
l Use the service command to configure the service connection.
ZXAN(gpon-onu-mng)#service dataservice type internet gemport 1 cos 0
l Use the gemport command to configure the service connection.

ZXAN(gpon-onu-mng)#gemport 1 flow 1 dot1p-list 0
3.8 Configuring ONU Flow VLAN Parameters

Short Description
Perform this procedure to configure flow VLAN parameters on an ONU.
Prerequisites
Context
After you configure a service connection with flow and gemport commands, you need to
configure the flow VLAN parameters.
To configure the flow VLAN parameters, perform the following steps:
Steps
2. Use the pon-onu-mng command to enter ONU remote management mode.
3. Use the flow command to configure VLAN ID and priority of the flow.
3-15

4. Use the flow mode command to configure VLAN filter mode of the flow.
Example
On the gpon-onu_0/10/1:1 interface, configure VLAN parameters of the default flow 1.
ZXAN(gpon-onu-mng)#flow 1 vid 100
ZXAN(gpon-onu-mng)#flow mode 1 tag-filter vid-filter untag-filter discard
3.9 Configuring ONU UNI VLAN Parameters

Short Description
Perform this procedure to configure UNI VLAN parameters on an ONU.
Prerequisites
Context
ZXA10 C220 supports the following VLAN modes on UNI.
l Transparent transmission: transparent transmit tagged frames and untagged frames.
l Tag: add PVID to untagged frames, and discard tagged frames.
l Trunk: permit tagged frames that match the port VID, and discard other tagged frames
and all untagged frames.
l Hybrid: add PVID to untagged frames, permit tagged frames that match the port VID,
and discard other tagged frames.
l VLAN translate: in trunk or hybrid mode
To configure the UNI VLAN parameters, perform the following steps:
Steps
2. Use the pon-onu-mng command to enter ONU remote management mode.
3. Configure UNI VLAN parameters.

l Use the optimized method to configure UNI VLAN parameters.
3-16

a. Use the vlan port mode command to configure UNI VLAN mode.
b. Use the vlan port vlan command to configure UNI VLAN ID.
c. Use the vlan port vlan translate command to configure UNI VLAN translation
entry.
l Use the traditional method to configure UNI VLAN parameters.
a. Use the vlan ethuni command to configure UNI VLAN tag process mode.
b. Use the vlan-filter-mode command to configure UNI VLAN filter mode.
c. Use the vlan-filter ethuni command to configure UNI VLAN filter entry.
Example
On the gpon-onu_0/10/1:1 interface, configure VLAN parameters of eth_0/1: add VLAN
tag 101 and priority 1 to untagged frames.
l Use the optimized method to configure UNI VLAN parameters.
ZXAN(gpon-onu-mng)#vlan port eth_0/1 mode tag vlan 101 priority 1
l Use the traditional method to configure UNI VLAN parameters.

ZXAN(gpon-onu-mng)#vlan ethuni eth_0/1 down-mode untag up-mode add up-prio 1
ZXAN(gpon-onu-mng)#vlan-filter-mode ethuni eth_0/1 tag-filter vid-filter
untag-filter discard
ZXAN(gpon-onu-mng)#vlan-filter ethuni eth_0/1 priority 0 vid 101
3.10 Configuring the ONU In-Band IP Address

Short Description
Perform this procedure to configure the ONU in-band IP address on the OLT to manage
the ONU remotely.
Prerequisites
3-17

Context
The ZXA10 C220 manages configuration on GPON ONUs in the following ways:
l In-band configuration
Create an ONU in-band NM channel, and then log in to the ONU to implement
configuration.
In this mode, data is configured and saved on the ONU. You can access the ONU
through its in-band NM IP address from the ZXA10 C220 uplink port. The ONU can
be configured and upgraded through this IP address.
l OMCI channel configuration
OMCI is a transmission channel defined in GPON standard. OMCI packets are
transmitted between the OLT and the ONU through the GEM Port. OMCI channel is
created after the ONU is successfully registered. The OLT controls the ONU through
OMCI channel.
OMCI supports offline configuration on the ONU. The ONU does not need to save
configurations locally.
Note:
In practical applications, there is no need to configure the in-band NM IP addresses for all the ONUs.
The configuration is required for ONUs that only supports local VoIP services configuration or upgrade,
such as ZTE-F820 and ZTE-F822.
It is recommended to configure the ONU in-band NM IP address in the same management VLAN and
network segment as the ZXA10 C220, so that the NMS server can connect the ONU when it connects
the OLT.
To configure the ONU in-band IP address, perform the following steps:
Steps
2. Use the vlan command to create the ONU in-band NM VLAN.
4. Configure the service connection.
l Use the service command to configure the service connection.
l User the flow and gemport commands to configure the service connection.
a. Use the flow command to configure the service flow, the type of which is
switching unit.
b. Use the gemport gemportid flow flowid command to configure the service
connection, the type of which is bridge.
5. Use the mgmt-ip command to set the ONU in-band NM IP address.
3-18

7. Use the switchport mode command to change the PON-ONU interface mode.
8. Use the switchport vlan command to add the PON-ONU interface to the NM VLAN in
tagged mode.
9. Use the interface command to enter the OLT uplink port configuration mode.
10. Use the switchport mode command to change the OLT uplink port mode.
11. Use the switchport vlan command to add the OLT uplink port to the NM VLAN in tagged
mode.
Result
The ONU in-band IP address is configured successfully.
Example
On the gpon-onu_0/10/1:1 interface, set the in-band NM VLAN of the F822 to 2600, and
the in-band IP address to 198.2.128.5/24.
ZXAN(gpon-onu-mng)#gemport 1 flow 1
ZXAN(gpon-onu-mng)#mgmt-ip 192.2.128.5 255.255.255.0 vlan 2600 priority 0
route 0.0.0.0 0.0.0.0 192.2.128.4
ZXAN(gpon-onu-mng)#exit
ZXAN(config-if)#switchport mode hybrid vport 1
Follow-Up Action
Carry out the ping command on the OLT to check whether the ONU in-band IP address is
successfully configured.
ZXAN#ping 198.2.128.5
sending 5,100-byte ICMP echos to 10.1.1.2,timeout is 2 seconds.
!!!!!
Success rate is 100 percent(5/5),round-trip min/avg/max= 0/8/40 ms.
//The ONU in-band IP address is successfully configured.
3-19

3.11 Configuring the OLT Port

Short Description
Perform this procedure to configure the OLT port.
Prerequisites
Context
To configure the OLT port, perform the following steps:
Steps
3. Use the auto-learning command to enable the ONU SN auto-learning authentication
mode. By default, it is disabled.
4. Use the clear command to clear the configuration data on the OLT port.
5. Use the discover-period command to configure the ONU testing period, including the
new registered ONU and the offline ONU.
6. Use the fec command to enable/disable the PON FEC function.
7. Use the linktrap command to configure the alarm reporting mode when there is a link
break on the OLT port.
8. Use the range-mode command to configure the ONU distance that the OLT supports.
The maximum range between the ONUs of the same PON port cannot exceed 20 km.
9. Use the reset command to reset the OLT port.
10. Use the shutdown command to shut down the OLT port.
Result
The OLT port is configured successfully.
Example
Configure the ONU distance of the gpon-olt_0/10/1 port to the range from 20 km to 40 km.
3-20

ZXAN(config-if)#range-mode 200 400
3-21

3-22

Chapter 4
Multicast Service
Configuration
Table of Contents
Overview ....................................................................................................................4-1
Configuring the EPON IGMP Snooping Multicast Service ..........................................4-2
Configuring the GPON IGMP Snooping Multicast Service ..........................................4-7
Configuring the IGMP Proxy Multicast Service..........................................................4-13
Configuring the MVLAN Parameters.........................................................................4-14
Configuring the IGMP Global Parameters.................................................................4-17
Configuring the IGMP Port Parameters ....................................................................4-21
Configuring the IPTV Package .................................................................................4-23
Configuring the CAC ................................................................................................4-25
Configuring the CDR ................................................................................................4-26
4.1 Overview
Service Description
With the appearance of the multimedia video and data warehouse in the IP network, the
multicast application is becoming a new service requirement. The multicast service is
applied in the areas of stream media, remote education, video conference, IPTV, network
game, data replication, and other point-to-multipoint data transmission applications.
Service Specification
The ZXA10 C220 supports IGMP protocols and controllable multicast service.
The multicast service of ZXA10 C220 supports the following:
l IGMP V1/V2/V3
l IGMP snooping, IGMP proxy, and IGMP router
l 1024 multicast groups
l Channel preview: configuration of preview times, duration, and interval
l Audience rating statistics
l Controllable multicast: including deny, permit, and preview.
l IPTV package management, 1024 packages and 1024 channels at maximum
4-1

4.2 Configuring the EPON IGMP Snooping Multicast

Service
Short Description
Perform this procedure to configure the IGMP snooping multicast service in EPON access
mode.
Prerequisites
l The multicast source exits in the network.
Networking Diagram
Figure 4-1 shows the networking diagram of the IGMP snooping multicast service.
Figure 4-1 IGMP Snooping Multicast Service Networking Diagram (EPON)
Configuration Data
Table 4-1 lists the configuration data for the IGMP snooping multicast service.
Table 4-1 Configuration Data of IGMP Snooping Multicast Service (EPON)
Item Data
Multicast service VLAN (MVLAN) VLAN ID: 500
Uplink port 0/2/1
4-2

Chapter 4 Multicast Service Configuration
Item Data
Service port 0/5/1
Multicast group IP address 224.1.1.1 – 224.1.1.3
ONU information l Type: ZTE-F82210G EPON ONU

l MAC address: 0019.c600.0011
ONU bandwidth l Downstream: 1 Gbps

l Upstream: 100 Mbps
Configuration Flow
Figure 4-2 shows the configuration flow of the IGMP snooping multicast service.
Figure 4-2 IGMP Snooping Multicast Service Configuration Flow (EPON)
To configure the IGMP snooping multicast service, perform the following steps:
Steps
1. Create the service VLAN.
4-3


ZXAN(config)#
Note:
2. Configure the OLT uplink port VLAN.

Note:
automatically.

MAC address : 0019.c600.0011
SN :
OnTime : 2008/01/01 22:34:29
ZXAN(config)#

The speed of the default ZTE-F822 ONU type profile is 1 Gbps. The speed can be
configured accordingly.
ZXAN(config)#show onu-type epon ZTE-F822
Onu type name : ZTE-F822

Pon type : epon
Description : 24FE
Protect type: none
Speed: 1g
Create a new ZTE-F822 type profile ZTE-F822A, including 24 FE ports and 24 POTS
ports. The rate is 10 Gbps asymmetrically, that is, the ONU upstream rate is 1 Gbps
and downstream rate is 10 Gbps. Disable the auto-dispatch of ZTE-F822A.
ZXAN(config)#pon
4-4


ZXAN(config)#epon
Pon type : epon
Protect type: none
ZXAN(config)#
5. Enter the EPON-OLT interface mode. Authenticate the ONU through the MAC
address.
ZXAN(config-if)#onu 1 type ZTE-F822A mac 0019.c600.0011
Note:
ONU.


9. Configure the IGMP global parameters.

Enable the IGMP protocol. The other parameters use the default values.
ZXAN(config)#igmp enable
10. (Optional) Configure the IGMP port parameters.

This instance uses the default values of IGMP port parameters.
4-5

11. Configure the MVLAN.

a. Configure the MVLAN.
ZXAN(config)#igmp mvlan 500
b. Configure the MVLAN IGMP mode.

ZXAN(config)#igmp mvlan 500 work-mode snooping
c. Configure the multicast groups.

ZXAN(config)#igmp mvlan 500 group 224.1.1.1
When the IP addresses of the multicast groups are continuous, they can be
configured in batch.
ZXAN(config)#igmp mvlan 500 group 224.1.1.1 to 224.1.1.3
d. Configure the source port.

ZXAN(config)#igmp mvlan 500 source-port xgei_0/2/1
e. Configure the receiving port.

ZXAN(config)#igmp mvlan 500 receive-port epon-onu_0/5/1:1
12. Configure multicast parameters on the ONU.

a. Configure the multicast protocol.
ZXAN(epon-onu-mng)#multicast switch igmpsnooping
Note:
If the OLT uses the IGMP snooping protocol, the ONU can use the IGMP snooping protocol
and controllable multicast protocol. If the OLT uses the IGMP proxy protocol, the ONU can
use any protocols. This instance uses the IGMP snooping protocol.
b. Configure the ONU fast leaving function.

ZXAN(epon-onu-mng)#multicast fastleave enable
c. Configure the ONU multicast control type.

This command is used to set the forwarding mode of the downstream multicast
packets by the ONU. This instance uses the default value, forwarding based on
the multicast destination MAC address.
ZXAN(epon-onu-mng)#multicast control-type gda-mac
d. Configure the multicast VLAN of the ONU user port.

ZXAN(epon-onu-mng)#multicast vlan port eth_0/1 add vlanlist 500
ZXAN(epon-onu-mng)#multicast vlan tag-strip port eth_0/1 enable
4-6

e. Configure the maximum multicast groups supported by the ONU user port.
ZXAN(epon-onu-mng)#multicast group-max-number eth_0/1 255
13. Save the configuration.

ZXAN#write
..[OK]
Result
The IGMP snooping multicast service is configured successfully. The subscribers can
watch the programs from 224.1.1.1 to 224.1.1.3.
4.3 Configuring the GPON IGMP Snooping Multicast

Service
Short Description
Perform this procedure to configure the IGMP snooping multicast service in GPON access
mode.
Prerequisites
Networking Diagram
Figure 4-3 shows the networking diagram of the IGMP snooping multicast service.
4-7

Figure 4-3 IGMP Snooping Multicast Service Networking Diagram (GPON)
Configuration Data
Table 4-2 lists the configuration data for the IGMP snooping multicast service.
Table 4-2 IGMP Snooping Multicast Service Configuration Data (GPON)
Item Data
Multicast service VLAN (MVLAN) VLAN ID: 500
IPTV priority 5
Uplink port 0/2/1
GPON port 0/10/1
T-CONT bandwidth profile Profile name: iptv-tcont
Bandwidth type: fixed bandwidth
ONU l ONU ID: 1

l ONU SN: ZTEG70002926
T-CONT l T-CONT indexd: 3

l T-CONT name: iptv-tcont
l Bandwidth profile: iptv-tcont
l Allocated ID: auto-allocate
4-8

Item Data
GEM Port l T-CONT index: 3

l GEM Port index: 1
l Port Id: auto-allocate
Multicast group IP address 224.1.1.1 – 224.1.1.3
ONU service channel l Service connection name: iptvservice

l User port VLAN mode: Tag (add PVID to
untagged frames)
Configuration Flow
Figure 4-4 shows the configuration flow of the IGMP snooping multicast service.
Figure 4-4 IGMP Snooping Multicast Service Configuration Flow (GPON)
To configure the IGMP snooping multicast service, perform the following steps:
Steps
4-9

ZXAN(config)#
Note:

Note:
automatically.

OnuIndex Sn State
----------------------------------------------------
---------------------------------------------------------------

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont iptv-tcont type 1 fixed 50000
6. Create a T-CONT.
4-10

ZXAN(config-if)#tcont 3 name iptv-tcont profile iptv-tcont

ZXAN(config-if)#gemport 1 name Gemport1 unicast tcont 3 queue 2
8. Configure the port VLAN on the PON-ONU interface.

ZXAN(config)#
Note:

a. Configure the service connection.
ZXAN(gpon-onu-mng)#service iptvservice type iptv gemport 1 cos 5 vlan 500
b. Configure unicast VLAN on the user port.

ZXAN(gpon-onu-mng)#vlan port eth_0/1 mode tag vlan 500
c. Configure multicast VLAN on the user port.

ZXAN(gpon-onu-mng)#multicast vlan add vlanlist 500
10. Configure the IGMP snooping global parameters.

Enable the IGMP protocol and the IGMP span-VLAN function. The other parameters
use the default values.
a. Enable the IGMP protocol.
b. Enable the IGMP span-VLAN function.

When the unicast VLAN is different from MVLAN, the span-VLAN function must
be enabled.
ZXAN(config)#igmp span-vlan enable
11. Configure the IGMP snooping port parameters.

Configure the maximum groups and enable the ONU fast leaving function. The other
parameters use the default values.
a. Configure the maximum groups that the port supports. In this instance, it is 1024.
ZXAN(config-if)#igmp max-groups 1024 vport 1
b. Enable the ONU fast leaving function.

ZXAN(config-if)#igmp fast-leave enable vport 1
4-11

12. Configure the multicast VLAN.

a. Configure the MVLAN.
b. Configure the MVLAN IGMP mode.

ZXAN(config)#igmp mvlan 500 work-mode snooping
c. Configure the multicast groups.

When the IP addresses of the multicast groups are continuous, they can be
configured in batch.
d. Configure the source port.

ZXAN(config)#igmp mvlan 500 source-port xgei_0/2/1
Note:
Only the uplink ports that are added to MVLAN 500 can be set to the source port.
e. Configure the receiving port.

ZXAN(config)#igmp mvlan 500 receive-port gpon-onu_0/10/1:1 vport 1
13. Configure the multicast parameters on the ONU.

a. Removethe VLAN tag of the downstream packets.
ZXAN(gpon-onu-mng)#mvlan ethuni eth_0/1 strip enable
b. Configure the maximum multicast groups that the ONU user port supports.
ZXAN(gpon-onu-mng)#igmp eth_0/1 max-groups 255
c. Configure the maximum bandwidth of the ONU user port.

ZXAN(gpon-onu-mng)#igmp eth_0/1 max-bandwidth 4096
d. Configure the IGMP bandwidth control function of the ONU user port. By default,
it is disabled.
Bandwidth control is used to reject the user join request when the multicast group
bandwidth exceeds the remaining bandwidth of the current physical channel.
ZXAN(gpon-onu-mng)#igmp eth_0/1 bandwidth-enforce enable
e. Configure the IGMP profile of the ONU user port.

ZXAN(gpon-onu-mng)#igmp eth_0/1 profile zte
ZXAN(gpon-onu-mng)#end
4-12

Note:
Before applying the ONU IGMP profile, you need to create the ONU IGMP profile with the
following commands:
ZXAN(config)#gpon
ZXAN(config-gpon)#onu profile igmp zte fast-leave enable version v3

ZXAN#write
..[OK]
Result
The IGMP snooping multicast service is configured successfully. The subscribers can
watch the programs from 224.1.1.1 to 224.1.1.3.
4.4 Configuring the IGMP Proxy Multicast Service

Introduction
Perform this procedure to configure the IGMP proxy multicast service.
Prerequisites
l The xPON service card status is proper.
Context
To configure the IGMP proxy multicast service, perform the following steps:
Steps
Most of the steps are the same as those of IGMP snooping service configuration. The
following describes only the different steps.
1. Configure the MVLAN working mode.

ZXAN(config)#igmp mvlan 500 work-mode proxy
2. Configure the IP address of the proxy host.
4-13

The IP address of the proxy host is the source IP address of the report/leave packet
sent in proxy mode. By default, the IP address is 0.0.0.0. It can be configured
according to actual situations.
ZXAN(config)#igmp mvlan 500 host-ip 10.1.1.1
3. Configure the IGMP interface parameters, such as fast leaving and proxy IP address.
The proxy IP address is the source IP address of the downstream query packet in
proxy mode. By default, the IP address is 192.168.2.14.
In this instance, other IGMP port parameters use the default values.
ZXAN(config-if)#igmp proxy-ip 192.168.2.14 vport 1
Result
The IGMP proxy multicast service is configured successfully.
4.5 Configuring the MVLAN Parameters

Short Description
Perform this procedure to configure the MVLAN parameters.
Prerequisites

l The xPON service is configured.
Context
To configure the MVLAN parameters, perform the following steps:
Steps
2. Use the igmp mvlan command to create a MVLAN.

3. Configure the MVLAN IGMP protocol.
l Use the igmp mvlan enable command to enable IGMP protocol for the multicast
packets.
l Use the igmp mvlan drop command to discard the IGMP multicast packets.
4. Use the igmp mvlan work-mode command to configure the MVLAN work mode.
4-14

Note:
In IGMP snooping mode, the host, pre-join, active report, and static join functions are invalid.
5. Use the igmp mvlan group command to configure the MVLAN group.
6. Use the igmp mvlan group bandwidth command to configure the multicast bandwidth.
The multicast bandwidth ranges from 100 to 65535. The default bandwidth is 2048.
The unit is Kbps.
7. Use the igmp mvlan group prejoin command to configure the multicast pre-join
function.
Note:
By default, this function is disabled. After it is enabled, the OLT sends the report packet to the
server periodically. The IGMP report is not sent to the pre-joined multicast group.
8. Use the igmp mvlan group static-port command to configure the MVLAN static
receiving port.
9. Use the igmp mvlan group source-address command to configure the IP address of the
multicast client. By default, it is 0.0.0.0.
10. Use the igmp mvlan group-filter command to configure MVLAN group management.
Note:
l When MVLAN group management is enabled, the IGMP join packets must check whether
the group address is configured. The group configured with an address is called the
management group.
l When MVLAN group management is disabled, the IGMP join packets do not check whether
the group address is configured. The learned group is called the dynamic group.
l When span-VLAN is enabled, MVLAN group-filter must be enabled. By default, it is enabled.
11. Use the igmp mvlan max-group command to configure the MVLAN maximum group
number.
12. Use the igmp mvlan source-port command to configure the MVLAN source port.
13. Use the igmp mvlan receive-port command to configure the MVLAN receiving port.
14. Use the igmp mvlan host-ip command to configure the IP address of the proxy host in
IGMP proxy mode.
15. Use the igmp mvlan host-version command to configure the version number of the
IGMP request packet sent by the uplink port.
16. Use the igmp mvlan priority command to configure the IGMP packet priority.
4-15

Note:
Only in IGMP proxy mode, the IGMP packets sent by the ZXA10 C220 to the network side are
processed according to the IGMP packet priority in the multicast VLAN. In IGMP snooping mode,
the IGMP packets sent by the ZXA10 C220 to the network side are processed according to the
priority of the IGMP service traffic.
17. Use the show igmp mvlan group command to query the MVLAN configuration
information.
Result
The MVLAN parameters are configured successfully.
Example
Configure the MVLAN 500. Table 4-3 lists the configuration data.
Table 4-3 MVLAN Configuration Data
Item Data
IGMP protocol Enable
IGMP work mode IGMP Proxy
Multicast group IP addresses 224.1.1.1 to 224.1.1.10
Multicast group management Enable
Maximum multicast group numbers 16
Multicast source port 0/12/1
Multicast receiving port 0/6/4:2
Proxy host IP address 10.63.196.50
ZXAN(config)#igmp mvlan 500 enable
ZXAN(config)#igmp mvlan 500 work-mode proxy
ZXAN(config)#igmp mvlan 500 group-filter enable
ZXAN(config)#igmp mvlan 500 max-group 16
ZXAN(config)#igmp mvlan 500 source-port gei_0/14/1
ZXAN(config)#igmp mvlan 500 receive-port epon-onu_0/6/4:2
ZXAN(config)#igmp mvlan 500 host-ip 10.63.196.50
ZXAN(config)#show igmp mvlan 500
4-16

Protocol packet's priority is 0 (in proxy/router mode).

Source Port
----------------------------
gei_0/14/1
Receive Port
----------------------------
epon-onu_0/6/4:2:1
Group
----------------------------
224.1.1.1 - 224.1.1.10
4.6 Configuring the IGMP Global Parameters

Short Description
Perform this procedure to configure the IGMP global parameters.
Prerequisites

l The ZXA10 C220 device runs properly.
Context
Table 4-4 lists the IGMP global parameters.
Table 4-4 IGMP Global Parameters Description
Parameter Description Value
IGMP protocol To enable or disable the IGMP protocol l Enable

l Disable
Default: enable
IGMP snooping aging time To set the aging time of the IGMP Range: 30 – 3600 seconds
group members, which takes effect Default: 300 seconds
only in IGMP snooping mode
IGMP proxy general query To set the global query interval in IGMP Range: 60 – 300 seconds
interval proxy mode Default: 125 seconds
4-17

IGMP proxy maximum To set the maximum query response Range: 1 – 25 seconds
query response time time in IGMP proxy mode Default: 10 seconds
The maximum query response time
affects the time that the multicast user
responds to the report packet. The
burst response packet traffic can be
reduced by increasing the maximum
query response time.
IGMP proxy last member To set the global query interval of the Range: 0.1 – 25.5 seconds
query interval last member in IGMP proxy mode Default: 1 second
IGMP proxy last member To set the query counts of the last Range: 2 – 5
query counts member in IGMP proxy mode Default: 2
When the configured query counts
are complete, if there is no response
packet during the maximum query
response time, the subscriber is
considered to leave.
IGMP proxy unsolicited re- To set the interval of sending the Range: 1 – 60 seconds
port interval unsolicited report packet in IGMP Default: 10 seconds
proxy mode
Refer to RFC2236 unsolicit report
interval. In IGMP snooping mode,
the multicast active report function is
ineffective.
IGMP proxy robustness To set the IGMP global robustness Range: 2 – 5

factor in IGMP proxy mode Default: 2
The robustness factor is used to
enhance system reliability. If a
subnet is unstable and tends to lose
data, its robustness factor needs
to be increased. This factor affects
the member aging time and packet
sending retry times.
Log function To enable the log function l Enable

l Disable
Default: disable
Host tracking function To set the host tracking function under l Enable
the user port in fast leaving mode l Disable
Default: disable
4-18

Bandwidth control func- To enable or disable IGMP bandwidth l Enable

tion control l Disable
Bandwidth control is used to reject Default: disable
the user join request when the
multicast group bandwidth exceeds
the remaining bandwidth of the current
physical channel.
Span VLAN function To enable or disable the span-VLAN l Enable

function l Disable
Default: enable
Non-matched group To forward or discard the IGMP packets l Forward

process mode of the unmatched multicast group l Drop
Default: forward
Mcm function To enable or disable the multi-copy l Enable

multicast function l Disable
Default: disable
To configure the IGMP global parameters, perform the following steps:
Steps
1. Use the igmp enable command to enable the global IGMP protocol.
2. Use the igmp snooping-aging-time command to set the aging time in IGMP snooping
mode.
3. Use the igmp query-interval command to set the general query interval in IGMP proxy
mode.
4. Use the igmp query-max-resp command to set the maximum query response time in
IGMP proxy mode.
5. Use the igmp last-query-interval command to set the query interval of the last member
in IGMP proxy mode.
6. Use the igmp last-query-count command to set the query counts of the last member in
IGMP proxy mode.
7. Use the igmp unsolicited-report-interval command to set the IGMP unsolicited report
interval.
8. Use the igmp robustness command to set the robustness factor in IGMP proxy mode.
9. Use the igmp log command to enable the log function.
10. Use the igmp host-tracking command to enable the host tracking function.
11. Use the igmp bandwidth-control command to enable the bandwidth control function.
12. Use the igmp span-vlan command to enable the span-VLAN function.
4-19

13. Use the igmp statistics clear command to clear the IGMP packet statistics data.
14. Use the igmp non-match-group command to set the processing mode of the unmatched
multicast group.
15. Use the igmp mcm command to enalbe the multi-copy multicast function.
16. Use the show igmp command to query the global IGMP configuration.
Result
The IGMP global parameters are configured successfully.
Example
Configure and query the global IGMP parameters.
l IGMP proxy general query interval: 100 seconds

l IGMP proxy maximum query response time: 20 seconds
l IGMP proxy last member query interval: 2 seconds
l IGMP proxy last member query times: 4
l IGMP unsolicited report interval: 20 seconds
l IGMP proxy robustness: 3
l Other parameters: default values
ZXAN(config)#igmp query-interval 100
ZXAN(config)#igmp query-max-resp 200
ZXAN(config)#igmp last-query-interval 20
ZXAN(config)#igmp last-query-count 4
ZXAN(config)#igmp unsolicited-report-interval 20
ZXAN(config)#igmp robustness 3
ZXAN(config)#show igmp
IGMP global parameters:
--------------------------------------------
IGMP is globally enable.
IGMP log is disable.
Snooping aging time is 300 seconds.
Span vlan is enable.
Bandwidth control is disable.
Host tracking is disable.
Robustness variable is 3.
General query interval is 100(second).
Query max response time is 200(0.1second).
Last member query interval is 20(0.1second).
Last member query count is 4.
Unsolicited report interval is 20 seconds.
Non match group is forward.
4-20

Intermode status is disable.

Mcm status is disable.
4.7 Configuring the IGMP Port Parameters

Short Description
Perform this procedure to configure the IGMP port parameters.
Prerequisites
Context
Table 4-5 lists the IGMP port parameters.
Table 4-5 IGMP Port Parameters
IGMP protocol To enable or disable the IGMP l Enable

protocol l Disable
Default: enable
IGMP fast-leave To enable or disable fast leaving l Enable

on the ONU interface l Disable
Default: disable
IGMP proxy maximum query re- To set the maximum query Range: 1 – 25 seconds
sponse interval response time on the ONU Default: 10 seconds
interface in IGMP proxy mode
IGMP proxy last member query To set the query interval of Range: 0.1 - 25.5 seconds
interval the last member on the ONU Default: 1 second
IGMP proxy last member query To set the query counts of Range: 2 – 5
counts the last member on the ONU Default: 2
IGMP proxy robustness To set the system robustness Range: 2 – 5

factor on the ONU interface in Default: 2
IGMP proxy mode
IGMP maximum group nubmer To set the maximum multicast Range: 0 – 4094
group number on the ONU Default: 4094
interface
4-21

IGMP version To set the IGMP version V1, V2, V3

General: IGMPv2
IGMP proxy router IP address To set the source IP address of Default: 192.168.2.14
the downstream query packet in
IGMP proxy mode
To configure the IGMP port parameters, perform the following steps:
Steps
2. Use the interface command to enter the interface configuration mode.
3. Use the igmp enable command to enable the port IGMP protocol.
4. Use the igmp drop command to discard the IGMP packets.
5. Use the igmp fast-leave command to set the IGMP fast leaving function.
6. Use the igmp query-max-resp command to set the maximum query response time in
IGMP proxy mode.
7. Use the igmp last-query-interval command to set the query interval of the last member
in IGMP proxy mode.
8. Use the igmp last-query-count command to set the query counts of the last member in
IGMP proxy mode.
9. Use the igmp max-groups command to set the maximum IGMP multicast group
number.
10. Use the igmp version command to set the IGMP version.
11. Use the igmp proxy-ip command to set the IP address of the IGMP proxy router.
12. Use the igmp robustness command to set port robustness in IGMP proxy mode.
13. Use the igmp mcm-cvlan command to enable the user VLAN for multi-copy multicast.
14. Use the show igmp interface command to query the IGMP port configuration.
Result
The IGMP port parameters are configured successfully.
Example
Configure and query the IGMP port parameters.
ZXAN(config)#interfac epon-onu_0/6/4:2
ZXAN(config-if)#igmp enable
ZXAN(config-if)#igmp fast-leave enable
4-22

ZXAN(config-if)#igmp max-groups 32
ZXAN(config-if)#igmp query-max-resp 150
ZXAN(config-if)#igmp last-query-interval 30
ZXAN(config-if)#igmp last-query-count 3
ZXAN(config-if)#igmp proxy-ip 10.63.196.50
ZXAN(config-if)#show igmp interface epon-onu_0/6/4:2
IGMP interface epon-onu_0/6/4:2 vport 1 parameters:
----------------------------------------------------
IGMP status is enable.
IGMP version is v2.
Fast leave is enable.
Max concurrent group num is 32.
Proxy ip is 10.63.196.50.
Robustness variable is 2.
Query max response time is 150(0.1second).
Last membership query interval is 30(0.1second).
Last membership query count is 3.
Mcm cvlan is 0.
4.8 Configuring the IPTV Package

Short Description
Perform this procedure to configure the IPTV package.
Prerequisites

l The MVLAN is configured.
Context
To configure the IPTV package, perform the following steps:
Steps
1. Use the iptv channel mvlan group command to configure the multicast channels.
2. Use the iptv view-profile command to configure the multicast preview profile.
Table 4-6 lists the parameters for multicast preview profile configuration.
4-23

Table 4-6 Multicast Preview Profile Configuration Parameters
Parameter Value
Maximum preview count Range: 1 – 100

Default: 3
Preview duration Range: 1 – 6000 seconds

Default: 120 seconds
Blackout Range: 1 – 7200 seconds

Default: 60 seconds
3. Use the iptv channel view-profile command to apply the preview profile to the channels.
4. Use the iptv packgae name command to create the multicast package.
5. Use the iptv packgae channel command to configure the multicast package channels.
Result
The IPTV package is configured successfully.
Example
Configure an IPTV package.
l Name: stv
l Channel: stv1 – stv10, IP address 224.1.1.1 – 224.1.1.10
l Preview profile
à Name: abc
à Maximum preview count: 3
à Maximum preview duration: 120 seconds
à Preview interval: 60 seconds
l Channel rights
à Preview: stv1 – stv5
à Watch: stv6 – stv9
à Deny: stv10
ZXAN(config)#iptv channel mvlan 10 group 224.1.1.1
to 224.1.1.10 prename stv
ZXAN(config)#iptv view-profile abc count 3 duration 120 blackout 60
ZXAN(config)#iptv channel stv1 view-profile abc
4-24

ZXAN(config)#iptv package name stv

ZXAN(config)#iptv package stv channel stv1 preview
ZXAN(config)#iptv package stv channel stv6 watch
ZXAN(config)#iptv package stv channel stv10 deny
4.9 Configuring the CAC

Short Description
Perform this procedure to configure the CAC.
Prerequisites
l The MVLAN is configured.
l The IPTV package is configured.
Context
The ZXA10 C220 supports the multicast service of two-level control.
l When global CAC is enabled, user port rights take effect. Only the users who order
package can watch the channels in the package.
l When global CAC disabled, user port rights do not take effect. Users can watch the
channels in the MVLAN when they are on the receiving port of the MVLAN.
By default, global CAC is disabled.
To configure the CAC, perform the following steps:
Steps
2. Use the iptv cac command to enable global CAC.
4. Use the iptv right-mode command to set the port right mode to channel access mode
or package control mode.
5. Set the port right.
4-25

l Use the iptv channel command to set the port channel right.
l Use iptv package command to set the port package.
Result
The CAC is configured successfully.
Example
Enable global CAC and set port right mode to package control mode and apply this
package to the port.
ZXAN(config)#iptv cac enable
ZXAN(config-if)#iptv right-mode package
ZXAN(config-if)#iptv package stv
4.10 Configuring the CDR

Short Description
Perform this procedure to configure the CDR.
Prerequisites

l The multicast source exits in the network and the IP address of the multicast source
is configured.
l The IPTV package is configured.
Context
Table 4-7 lists the CDR configuration parameters.
Table 4-7 CDR Configuration Parameters
CDR To enable or disable CDR l Enable

l Disable
Default: disable
4-26

CDR deny-right To enable or disable CDR when l Enable

the right is deny l Disable
Default: disable
CDR prw-right To enable or disable CDR when l Enable

the right is preview l Disable
Default: disable
Max-records Maximum CDRs Range: 500 – 65535

Default: 1000
CDR prw-over-count To enable or disable CDR when l Enable

the preview times exceed the l Disable
threshold Default: disable
CDR create-period CDR generation interval Range: 0 – 1440 minutes

0: no CDR generated
Default: 60
Report-interval CDR reporting interval Range: 1 – 30 minutes

Default: 5
Report-threshold CDR automatic reporting Range: 300 - 65535

threshold, which cannot exceed Default: 300
the maximum CDRs
To configure CDR, perform the following steps:
Steps
1. Use the iptv sms-server command to set the IP address of SMS (the CDR server).
2. Use the iptv cdr enable command to enable the global CDR function.
3. Use the iptv cdr max-records command to set the maximum CDRs.
4. Use the iptv cdr report command to set CDR manual report.
5. Use the iptv cdr report-interval command to set the CDR automatic report interval.
6. Use the iptv cdr report-threshold command to set the CDR automatic report threshold.
7. Use the iptv cdr create-period command to set the CDR generation period when the
user right is permit.
8. Use the iptv cdr deny-right command to enable or disable the CDR function when the
user right is deny.
9. Use the iptv cdr prw-right command to enable or disable the CDR function when the
user right is preview.
10. Use the iptv cdr prw-overcount command to enable or disable the CDR function when
the user preview times exceed the threshold.
11. Use the iptv cdr clear command to clear the CDRs.
4-27

12. Use the show iptv cdr command to query the CDR configuration information.
Result
CDR is configured successfully.
Example
Enable CDR and set the maximum CDRs to 6000, automatic reporting threshold to 300.
ZXAN(config)#iptv sms-server 10.61.97.156
ZXAN(config)#iptv cdr enable
ZXAN(config)#iptv cdr max-records 1000
ZXAN(config)# iptv cdr report-threshold 300
ZXAN(config)#show iptv cdr
CDR : enable
CDR current-state : idle
CDR socket-status : close
CDR deny-right : disable
CDR prw-right : enable
CDR prw-over-count : disable
CDR create-period : 60(minute)
Max-records : 1000
Report-interval : 5(minute)
Report-threshold : 300
Records in cache : 0
4-28

Chapter 5
VoIP Service Configuration
Table of Contents
Overview ....................................................................................................................5-1
Configuring the EPON VoIP Service (SIP) ..................................................................5-1
Configuring the EPON VoIP Service (H.248) ..............................................................5-6
Configuring the GPON VoIP Service (SIP)................................................................5-11
Configuring the GPON VoIP Service (H.248)............................................................5-16
Configuring the EPON VoIP IP Profile ......................................................................5-22
Configuring the EPON VoIP VLAN Profile ................................................................5-23
Configuring the EPON VoIP Protocol Profile.............................................................5-25
5.1 Overview
Service Description
In the VoIP service, voice signals are compressed and packed, and then transmitted on
the IP packet switching network.
The ZXA10 C220 provides the VoIP service access to the IP network through the xPON
service card. The VoIP service is implemented on the ONUs.
5.2 Configuring the EPON VoIP Service (SIP)

Short Description
Perform this procedure to configure the EPON VoIP service based on the SIP protocol.
The data is configured on the OLT and dispatched to the ONU through OAM channel.
Prerequisites
l The communication between the MG and the SS is proper.
l The VoIP user data is configured on the SS.
5-1

Networking Diagram
Figure 5-1 shows the networking diagram of the VoIP service.
Figure 5-1 VoIP Service Networking Diagram
Configuration Data
Table 5-1 lists configuration data of the VoIP service .
Table 5-1 VoIP Service Configuration Data
Item Data
VoIP service VLAN VLAN ID: 200
Uplink port 0/6/1
OLT port 0/5/1
ONU l Type: D422

l MAC address: 0015.eb71.2d5a
l ONU ID: 5
ONU bandwidth l Upstream: 5 Mbps

VoIP IP profile l Profile name: TestProfile

l Relation of VoIP IP address and management
IP address: independent
l VoIP IP address mode: static
l Gateway: 10.63.172.254
5-2

Chapter 5 VoIP Service Configuration
Item Data
VoIP VLAN profile l Profile name: vlan_200

l VLAN tag mode: tag
l VoIP VLAN ID: 200
l Priority: 7
VoIP SIP protocol profile l Profile name: SIP

l Primary proxy server (SS) IP address:
10.63.172.55
l Secondary proxy server IP address:
10.63.172.61
l Other parameters: default
MG l IP address: 10.63.172.190
l Gateway: 10.63.172.254
VoIP user resource l User AOR: 33330051

l User name: 33330051
l Password: 111111
Configuration Flow
Figure 5-2 shows the configuration flow of the VoIP service.
5-3

Figure 5-2 VoIP Service Configuration Flow
To configure the VoIP service, perform the following steps:
Steps
1. Create the VoIP service VLAN.
ZXAN(config)#

Note:
automatically.
5-4

3. Enter the EPON-OLT interface mode and authenticate the ONU.

ZXAN(config-if)#onu 5 type ZTE-D422 mac 0015.eb71.2d5a
4. Enter the EPON-ONU interface mode. Enable the authentication protocol and set the
ONU bandwidth.

6. Enter the EPON configuration mode and configure the VoIP IP profile.
ZXAN(config)#epon
ZXAN(config-epon)#voip-ip profile TestProfile relation independent
mode static gateway 10.63.172.254
7. In the EPON configuration mode, configure the VoIP VLAN profile.

ZXAN(config-epon)#voip-vlan profile vlan_200 tag-mode tag cvlan 200 priority 7
8. In the EPON configuration mode, configure the VoIP protocol profile.

ZXAN(config-epon)#sip-profile SIP register-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP backup-register-server ip 10.63.172.61 port 5060
ZXAN(config-epon)#sip-profile SIP proxy-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP backup-proxy-server ip 10.63.172.61 port 5060
ZXAN(config-epon)#sip-profile SIP outbound-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP heartbeat enable cycle 20 count 3
ZXAN(config-epon)#sip-profile SIP register-interval 3600
ZXAN(config-epon)#sip-profile SIP mg port 5060
9. Enter the PON-ONU management mode and apply the profile to the ONU.
ZXAN(epon-onu-mng)#voip-module global-profile apply ip TestProfile vlan vlan_200
ZXAN(epon-onu-mng)#voip-module protocol-profile apply sip SIP
10. Configure the MG IP address.

ZXAN(epon-onu-mng)#voip ip-address 10.63.172.190 mask 255.255.255.0 slot 1
5-5

Note:
If the IP address mode in the VoIP IP profile is static or PPPoE, you need to configure the VoIP
connection.
l Static: configure IP address and network mask.

l PPPoE: configure user name and password.
11. Configure the SIP users.

If the protocol profile in the profile application configuration is the SIP protocol, it is
necessary to configure the SIP users.
ZXAN(epon-onu-mng)#voip sip-user account 33330051 name 33330051 password 111111
interface pots_1/1

ZXAN#write
..[OK]
Result
The VoIP service is configured successfully. Users can make phone calls.
5.3 Configuring the EPON VoIP Service (H.248)

Short Description
Perform this procedure to configure the EPON VoIP service based on H.248 protocol. The
data is configured on the OLT and dispatched to the ONU through OAM channel.
Prerequisites
l The communication between the MG and the MGC (SS)is proper.
l The VoIP user data is configured on the MGC.
Networking Diagram
5-6

Figure 5-3 VoIP Service Networking Diagram
Configuration Data
Table 5-2 lists configuration data of the VoIP service .
Table 5-2 VoIP Service Configuration Data
Item Data
Uplink port 0/6/1
OLT port 0/5/1
ONU l Type: D422

l MAC address: 0015.eb71.2d5a
l ONU ID: 5

VoIP IP profile l Profile name: TestProfile

l Relation of VoIP IP address and management
IP address: independent
l VoIP IP address mode: static
l Gateway: 10.63.172.254
VoIP VLAN profile l Profile name: vlan_200

l VoIP VLAN ID: 200
l Priority: 7
5-7

Item Data
VoIP H.248 protocol profile l Profile name: H.248

l Primary MGC (SS) IP address: 10.63.172.55
l Secondary MGC IP address: 10.63.172.61
l MG register mode: domain
l Other parameters: default
MG l IP address: 10.63.172.190
l Gateway: 10.63.172.254
l Domain name: iad.zte.com.cn
VoIP user resource l SLC TID: USER01 - USER02

l RTP TID: RTPR01 - RTPR02
VoIP IP profile name TestProfile
VoIP VLAN profile name VLAN_200
MG IP address 10.63.172.190
Gateway 10.63.172.254
Primary SS address 10.63.172.55
Secondary SS address 10.63.172.61
Configuration Flow
5-8

Figure 5-4 VoIP Service Configuration Flow
Steps
1. Create the VoIP service VLAN.
ZXAN(config)#

5-9

Note:
automatically.
3. Enter the EPON-OLT interface mode and authenticate the ONU.

ZXAN(config-if)#onu 5 type ZTE-D422 mac 0015.eb71.2d5a
4. Enter the EPON-ONU interface mode. Enable the authentication protocol and set the
ONU bandwidth.

6. Enter the EPON configuration mode and configure the VoIP IP profile.
ZXAN(config)#epon
7. In the EPON configuration mode, configure the VoIP VLAN profile.

8. In the EPON configuration mode, configure the VoIP protocol profile.

ZXAN(config-epon)#h248-profile H.248 register-server ip 10.63.172.55 port 2944
ZXAN(config-epon)#h248-profile H.248 backup-register-server ip 10.63.172.61 port 2944
ZXAN(config-epon)#h248-profile H.248 mg register-mode domainname port 2944
ZXAN(config-epon)#h248-profile H.248 heartbeat-mode h248ctc rtp-link-test disable
cycle 30 count 3
9. Enter the PON-ONU management mode and apply the profile to the ONU.
ZXAN(epon-onu-mng)#voip-module global-profile apply ip TestProfile vlan vlan_200
ZXAN(epon-onu-mng)#voip-module protocol-profile apply h248 H.248
10. Configure the MG IP address.

ZXAN(epon-onu-mng)#voip ip-address 10.63.172.190 mask 255.255.255.0 slot 1
5-10

Note:
If the IP address mode in the VoIP IP profile is static or PPPoE, you need to configure the VoIP
connection.
l Static: configure IP address and network mask.

l PPPoE: configure user name and password.
11. Configure the MG domain name.

ZXAN(epon-onu-mng)#voip mg-domainname iad.zte.com.cn slot 1
Note:
If the MG register mode in the VoIP H.248/MGCP protocol profile is domain name, you need to
configure the domain name.
12. Configure the SLC TID and RTP TID.

ZXAN(epon-onu-mng)#voip user-tid 1 beginid 1 tid-num 2 prefix USER
begin-digit 0 align enable digit-length 2 slot 1
ZXAN(epon-onu-mng)#voip rtp-tid prefix RTP begin-digit 1 align enable digit-length
2 slot 1
Note:
If the VoIP protocol profile is for H.248 or MGCP protocol, you need to configure SLC TID.

ZXAN#write
..[OK]
Result
5.4 Configuring the GPON VoIP Service (SIP)

Short Description
Perform the following procedure to configure the VoIP service based on the SIP protocol.
Prerequisites
5-11


l The communication between the MG and the SS is proper.
l The VoIP user data is configured on the SS.
Networking Diagram
Figure 5-5 VoIP Service Networking Diagram (SIP)
Configuration Data
Table 5-3 lists configuration data of the VoIP service.
Table 5-3 Configuration Data of VoIP Service
Item Data
Service priority 7
Uplink port 0/2/1
OLT port 0/10/1
T-CONT bandwidth profile Profile name: voip-tcont
Bandwidth: 1 Mbit/s
5-12

Item Data
ONU l ONU ID: 1

l User port: pots_0/1
T-CONT l T-CONT index: 3

l T-CONT name: voip-tcont
l Applied bandwidth profile: voip-tcont
l Alloc Id: auto-allocate

l GEM Port index: 1
l Port Id: Auto-allocate
ONU IP host l IP address: 111.1.67.250

l Mask: 255.255.255.248
l Gateway: 111.1.67.249
VoIP protocol SIP
SIP server (SS) l IP address: 120.193.1.76

l Port number: 5060
VoIP user resource l AOR: 88400011

l User name: 88400011
l Password: 123456
Configuration Flow
Figure 5-6 shows the configuration flow of the VoIP service through the SIP protocol.
5-13

Figure 5-6 Configuration Flow of the VoIP Service (SIP)
Steps
ZXAN(config)#
Note:

5-14

Note:
automatically.

OnuIndex Sn State
-----------------------------------------------------
----------------------------------------------------------------

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont voip-tcont type 1 fixed 1000
6. Create a T-CONT.
ZXAN(config-if)#tcont 3 name voip-tcont profile voip-tcont

8. Configure the port VLAN on the user side.

ZXAN(config)#
Note:
9. Configure the GEM Port service mapping.

ZXAN(gpon-onu-mng)#service voipservice type voip iphost 1 gemport 1 vlan 200
5-15

10. Configure the ONU IP host .

ZXAN(gpon-onu-mng)#ip-host 1 ip 111.1.67.250 mask 255.255.255.248
gateway 111.1.67.249
Note:
The F628 supports only one IP host.
11. Configure the ONU VoIP protocol type.

ZXAN(gpon-onu-mng)#voip protocol sip
12. Configure the SIP server IP address.

ZXAN(gpon-onu-mng)#sip-agent 1 proxy-server 120.193.1.76 primary-dns 0.0.0.0
tcpudp-port 5060 host 1
13. Configure the SIP users.

ZXAN(gpon-onu-mng)#sip-user pots_0/1 sip-agent 1 user-aor 88400011 username
88400011 password 123456
Note:
This configuration must be consistent with that on the SS.

ZXAN#write
..[OK]
ZXAN#
Result
5.5 Configuring the GPON VoIP Service (H.248)

Short Description
Perform the following procedure to configure the VoIP service based on the H.248 protocol.
Prerequisites
5-16

l The communication between the MG and the MGC (SS) is proper.

l The VoIP user data is configured on the MGC.
Networking Diagram
Figure 5-7 VoIP Service Networking Diagram (H.248)
Configuration Data
Table 5-4 lists configuration data of the VoIP service.
Table 5-4 Configuration Data of VoIP Service
Item Data
Service priority 7
Uplink port 0/2/1
OLT port 0/10/1
T-CONT bandwidth profile Profile name: voip-tcont
Bandwidth: 1 Mbit/s
ONU l ONU ID: 1

l User port: pots_0/1
5-17

Item Data
T-CONT l T-CONT index: 3

l T-CONT name: voip-tcont
l Applied bandwidth profile: voip-tcont

l GEM Port index: 1
ONU IP host l IP address: 10.40.110.149

l Mask: 255.255.255.0
l Gateway: 10.40.110.254
VoIP protocol H.248
MGC l IP address: 10.40.123.25

l Port: 2944
VoIP user resource l SLC TID: AG58900

l RTP TID: RTP/00000
Configuration Flow
5-18

Figure 5-8 Configuration Flow of VoIP Service
To configure the VoIP service through the H.248 protocol, perform the following steps:
Steps
ZXAN(config)#
Note:
5-19

Note:
automatically.

The ZTE-F660 ONU type does not exist in the ZXA10 C220 system, you need to
configure it manually. In the ZXA10 C220 system, the ONU type name must be unique
in EPON and GPON service.
XAN(config)#pon
ZXAN(config-pon)#onu-type ZTEG-F660 gpon description 4ETH,
2POTS max-tcont 7 max-gemport 32 max-switch-perslot 1
max-flow-perswitch 32
ZXAN(config-pon)#onu-type-if ZTEG-F660 eth_0/1-4
ZXAN(config-pon)#onu-type-if ZTEG-F660 pots_0/1-2
ZXAN(config)#show onu-type gpon ZTEG-F660
Onu type name : ZTEG-F660

Pon type : gpon
Description : 4ETH,2POTS
Max tcont : 7
Max gemport : 32
Max switch per slot : 1
Max flow per switch : 32
Max iphost : 1
Service ability N:1 : support
Service ability 1:M : support
Service ability 1:P : support

OnuIndex Sn State
--------------------------------------------------------
5. Enter the GPON-OLT interface mode. Authenticate the ONU by the SN.
ZXAN(config-if)#onu 1 type ZTEG-F660 sn ZTEG00000002
5-20


----------------------------------------------------------------

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont voip-tcont type 1 fixed 1000
7. Create a T-CONT.
ZXAN(config-if)#tcont 3 name voip-tcont profile voip-tcont


ZXAN(config)#
Note:

ZXAN(gpon-onu-mng)#service voipservice type voip iphost 1 gemport 1 vlan 200
11. Configure the ONU IP host.

ZXAN(gpon-onu-mng)#ip-host 1 ip 10.40.110.149 mask 255.255.255.0
gateway 10.40.110.254
12. Configure the ONU VoIP protocol type.

ZXAN(gpon-onu-mng)#voip protocol h248
13. Configure the MGC IP address.

ZXAN(gpon-onu-mng)#mgc 1 server1 10.40.123.25
14. Configure the MGC port number.

ZXAN(gpon-onu-mng)#mgc 1 port 2944
15. Configure the SLC TID and RTP TID.
5-21

Note:
The ZXA10 C220 does not support configuring the user circuit TID and VoIP resource TID through
the OMCI channel. If the default settings on the ONU is different from the data on the MGC, you
need to modify the settings on the F660 web page.
On the F660 web page, choose Application > VoIP > H248 Termination.
On the H248 Termination Configuration page, configure the TIDs, as shown in
Figure 5-9.
Figure 5-9 F660 Local Configuration
16. Save the configuration data on the ONU and OLT.
Result
5.6 Configuring the EPON VoIP IP Profile

Short Description
Perform this procedure to configure the EPON VoIP IP profile.
Prerequisites
Context
To configure the EPON VoIP IP profile, perform the following steps:
Steps
5-22

2. Use the epon command to enter EPON configuration mode.

3. Use the voip-ip profile command to configure VoIP IP profile.
Table 5-5 lists parameters description for a VoIP IP profile.
Table 5-5 Parameters Description for VoIP IP Profile
Profile Profile name 1 – 31 characters
Relation Relation of VoIP l independent: ONU management IP

IP address and address is different from the ONU VoIP
management IP IP address (default)
address l shared: ONU management IP address
and VoIP IP address are same
Mode IP address allocation l DHCP

mode l PPPoE
l Static (default)
Gateway Gateway in the static -

mode
Result
The VoIP IP profile is configured successfully.
Example
Configure a VoIP IP profile with the following parameters:
l Profile name: TestProfile
l Relation of VoIP IP address and management IP address: independent
l IP address allocation mode: static
l Gateway: 10.63.172.254
ZXAN(config)#epon
5.7 Configuring the EPON VoIP VLAN Profile

Short Description
Perform this procedure to configure the EPON VoIP VLAN profile.
5-23

Prerequisites
Context
To configure the EPON VoIP VLAN profile, perform the following steps:
Steps
2. Use the epon command to enter EPON configuration mode.
3. Use the voip-vlan profile command to configure VoIP VLAN profile.
Table 5-6 lists parameters description for a VoIP VLAN profile.
Table 5-6 Parameters Description for VoIP VLAN Profile
Profile Profile name 1 - 31 characters, the format VLAN_VID is

recommended, where VID corresponds to
CVLAN ID.
Tag-mode VLAN tag process l Tag: add VLAN tag

mode l Transparent
l VLAN-stacking
Cvlan VoIP VLAN ID 1 - 4094
Priority VoIP service priority 0 - 7, the highest priority 7 is recommended.
Result
The VoIP VLAN profile is configured successfully.
Example
Configure a VoIP VLAN profile with the following parameters:
l Profile name: vlan_200

l VoIP VLAN ID: 200
l Priority: 7
ZXAN(config)#epon
5-24

5.8 Configuring the EPON VoIP Protocol Profile

Short Description
Perform this procedure to configure the EPON VoIP protocol profile.
Prerequisites
Context
ZXA10 C220 supports three types of VoIP protocol profiles:
l H.248 protocol profile
l MGCP protocol profile
l SIP protocol profile
Configuration of H.248 and MGCP protocol profiles are similar. This topic describes
configuration of H.248 and SIP protocol profiles.
To configure the EPON VoIP protocol profile, perform the following steps:
Steps
3. Configure the VoIP protocol profile.
l Configure H.248 protocol profile.
a. Use the h248-profile register-server command to configure H.248 primary
MGC.
b. Use the h248-profile backup-register-server command to configure H.248
secondary MGC.
c. Use the h248-profile mg register-mode command to configure MG registration
mode.
d. Use the h248-profile heartbeat-mode command to configure ONU heart beat

parameters.
Table 5-7 lists parameters description for H.248 protocol profile.
Table 5-7 Parameters Description for H.248 Protocol Profile
profile Profile name 1 - 31 characters, H.248 is recommended.
5-25

register-mode MG register mode à Domain name
à IP address
à Device name
Domain name or IP address is
recommended.
heartbeat-mode Heart beat mode à H248-service-change : Ser-

viceChange message
à H248ctc: Notify messazge

none
H248ctc is recommended.
rtp-link-test RTP link test flag à Disable
à Enable
Disable is recommended.
cycle Heartbeat cycle 10 sec - 120 sec, the default value 30 sec
is recommended.
count Heartbeat count 1 - 3, the default value 3 is recommended.
Note:
The default port number in the H.248 protocol is 2944.
Use the mgcp-profile related commands to configure MGCP protocol profile. For the MGCP
protocol, the default port on an MGC is 2727, and on an MG is 2427.
l Configure SIP protocol profile.
a. Use the sip-profile register-server command to configure IP address of SIP

primary register server. If not configured, it is the same as the proxy server.
b. Use the sip-profile backup-register-server command to configure IP address
of SIP secondary register server. If not configured, it is the same as the proxy
server.
c. Use the sip-profile proxy-server command to configure IP address of SIP

proxy server .
d. Use the sip-profile backup-proxy-server command to configure IP address of
SIP secondary proxy server.
e. Use the sip-profile outbound-server command to configure IP address of SIP

outbound server. If not configured, it is the same as the proxy server.
f. Use the sip-profile heartbeat command to configure ONU heartbeart
parameters.
5-26

g. Use the sip-profile register-interval command to configure registration interval

of SIP server.
h. Use the sip-profile mg port command to configure SIP server port number.
Table 5-8 lists parameters description for SIP protocol profile.
Table 5-8 Parameters Description for SIP Protocol Profile
profile Profile name 1 - 31 characters, SIP is recommended.
heartbeat Heartbeat mode à Disable
à Enable
cycle Heartbeat cycle 0 - 65535 sec, the default value 20 sec is

recommended.
count Heartbeat count 1 - 3, the default value 3 is recommended
register-interval Register interval 0 - 65535 sec, the default value 3600 sec
is recommended.
Note:
The default port number in the SIP protocol is 5060.
Result
The VoIP protocol profile is configured successfully.
Example
l Configure a VoIP H.248 protocol profile with the following parameters:
à Profile name: H.248
à Primary MGC IP address: 10.63.172.55
à Secondary MGC IP address: 10.63.172.61
à MG register mode: domain
à Other parameters: default values
ZXAN(config)#epon
ZXAN(config-epon)#h248-profile H.248 register-server ip 10.63.172.55 port 2944
ZXAN(config-epon)#h248-profile H.248 backup-register-server ip 10.63.172.61 port 2944
ZXAN(config-epon)#h248-profile H.248 mg register-mode domainname port 2944
ZXAN(config-epon)#h248-profile H.248 heartbeat-mode h248ctc rtp-link-test disable
5-27

cycle 30 count 3
l Configure a VoIP MGCP protocol profile with the following parameters:

à Profile name: MGCP
à Primary MGC IP address: 10.63.172.55
à Secondary MGC IP address: 10.63.172.61
à MGC port number: 2727
à MG port number: 2427
à MG register mode: domain
ZXAN(config-epon)#mgcp-profile MGCP register-server ip 10.63.172.55 port 2727

ZXAN(config-epon)#mgcp-profile MGCP backup-register-server ip 10.63.172.61 port 2727
ZXAN(config-epon)#mgcp-profile MGCP mg register-mode domainname port 2427
ZXAN(config-epon)#mgcp-profile MGCP heartbeat mode mgcp cycle 30 count 3
l Configure a VoIP SIP protocol profile with the following parameters:

à Profile name: SIP
à Primary proxy server IP address: 10.63.172.55
à Secondary proxy server IP address: 10.63.172.61
ZXAN(config-epon)#sip-profile SIP register-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP backup-register-server ip 10.63.172.61 port 5060
ZXAN(config-epon)#sip-profile SIP proxy-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP backup-proxy-server ip 10.63.172.61 port 5060
ZXAN(config-epon)#sip-profile SIP outbound-server ip 10.63.172.55 port 5060
ZXAN(config-epon)#sip-profile SIP heartbeat enable cycle 20 count 3
ZXAN(config-epon)#sip-profile SIP register-interval 3600
ZXAN(config-epon)#sip-profile SIP mg port 5060
5-28

Chapter 6
CES Service Configuration
Table of Contents
Overview ....................................................................................................................6-1
Configuring the EPON E1/T1 Uplink CES Service (MEF8) .........................................6-2
Configuring the EPON E1/T1 Uplink CES Service (PWE3).........................................6-9
Configuring the EPON STM-1/OC3 Uplink CES Service...........................................6-16
Configuring the GPON E1/T1 Uplink CES Service (MEF8) .......................................6-23
Configuring the GPON STM-1/OC3 Uplink CES Service ..........................................6-31
Configuring the CES TDM Profile .............................................................................6-38
Configuring the CES TDM Interface .........................................................................6-40
6.1 Overview
Service Description
CES is a technology to transmit TDM services over PSN.
At present, two implementation agreements support CES:
l PWE3 of IETF: Implement circuit emulation over IP network, namely, which is based
on IP address.
l MEF8 of MEF: Implement circuit emulation over Ethernet, namely, which is based on
MAC address.
The ZXA10 C220 implements CES service on CES cards (CE1B/CE1BB/CT1BB/CL1A).
The TDM interface on CES card is connected to the upper-layer device. The xPON
interface connects to the remote ONU.
The ZXA10 C220 supports maximum 63 E1 channels with two uplink modes:
l E1/T1: CE1B/CE1BB/CT1BB card

l STM-1/OC3: CL1A card
6-1

6.2 Configuring the EPON E1/T1 Uplink CES Service

(MEF8)
Short Description
This section describes the configuration of E1/T1 uplink CES service based on Ethernet
(MEF8). This instance takes CE1B card as an example.
Prerequisites
l The in-band NM of the OLT is configured.
l The CES uplink card status is proper.
Networking Diagram
Figure 6-1 shows the CES service networking diagram.
Figure 6-1 EPON CES Service Networking Diagram
The E1 user connects to the ONU E1 port. The ZXA10 C220 connects theTDM network
through the E1 port on CE1B card.
6-2

Chapter 6 CES Service Configuration
Configuration Data
Table 6-1 describes the CES service configuration data.
Table 6-1 Configuration Data of EPON CES Service (MEF8)
Item Data
OLT in-band NM l VLAN ID: 2600

l IP address: 192.2.128.4/24
CES service VLAN VLAN ID: 1000
Priority 7
E1 uplink port 0/13/1
OLT port 0/5/1
ONU l ONU ID: 1

l Type: F429
l MAC address: 00d0.d09a.3a8e
ONU in-band NM l VLAN ID: 2600

l IP address: 192.2.128.5/24

OLT CES profile Default
ONU CES profile Default
Source MAC address (CES MAC address of the 0015.eb72.001a

CE1B card)
Destination MAC address (ONU CES MAC 0015.eb72.000c

address)
PW link l Type: e1Satop

l Transmitting ECID: 0x1102
l Receiving ECID: 0x1102
Clock Adaptive (default)
Configuration Flow
Figure 6-2 shows the CES service configuration flow.
6-3

Figure 6-2 EPON CES Service Configuration Flow (MEF8)
To configure the EPON CES service, perform the following steps:
Steps:
ZXAN(config)#
Note:

ZXAN(config)#interface tdm-gei_0/13/1
6-4

Note:
automatically.


MAC address : 00d0.d09a.3a8e
SN :
OnTime : 2009/08/19 11:12:29
ZXAN(config)#

ZXAN(config-if)#onu 1 type ZTE-F429 mac 00d0.d09a.3a8e
Note:
ONU.

7. Configure the PON-ONU interface VLAN.

8. Configure the OLT CES service.

a. Query CES global property information of the OLT.
ZXAN(config)#show ces global-prop
Slot/Port SourceMAC Source IP
---------------------------------------------------------
13/1 0015.EB72.001A 192.192.192.26
6-5

To modify the CES MAC address, use the following commands.

ZXAN(config)#ces
ZXAN(config-ces)#mac-address 0015.eb72.0017 13/1
ZXAN(config-ces)#exit
b. (Optional) Configure the OLT TDM interface.

This instance uses the default values. To configure the OLT TDM interface, refer
to 6.8 Configuring the CES TDM Interface.
Note:
In practical networking, it is recommended to use the default values for the OLT TDM interface
configuration.
c. (Optional) Configure the CES profile of the OLT.
This instance uses the default CES profile. To configure the CES property profile
of the OLT, refer to 6.7 Configuring the CES TDM Profile.
Note:
There is a default profile on the ZXA10 C220. It is recommended to use the default profile.
d. Create the PW link and configure the TDM property of the PW link.
ZXAN(config)#ces
ZXAN(config-ces)#pw pw_0/13/1
ZXAN(config-ces-pw)#tdm-service type e1Satop rate 32 tdm_0/13/1 tdm-profile-name
default
Note:
l TDM service type of CE1B/CE1BB card is e1Satop.
l TDM service type of CT1BB card is t1Satop.
e. Configure the PSN properties of the PW link.

ZXAN(config-ces-pw)#psn ethernet 0x1102 0x1102 dst-mac 0015.eb72.000c vlan 1000
priority 7
ZXAN(config-ces-pw)#exit
6-6

Note:
When PSN network type is Ethernet, the in-ecid/out-ecid configured on OLT must correspond
to those on ONU. In this instance, the in-ecid/out-ecid value is 0x1102.
The in-ecid and out-ecid of each PW must be different.
The in-ecid and out-ecid of the same PW can be different. For convenience, they are gener-
ally configured same.
f. Query the PW link configuration information.

ZXAN(config)#show ces pw prop detail pw_0/13/1
pw pw_0/13/1
PwType : e1Satop PsnType : ethernet
Admin-status : enable InboundLable :0x1102
OutboundLable :0x1102
Service prop:
Using tdm interface: tdm_0/13/1
TDM-prop profile: default
You can see detail profile info. by using
corresponding 'show' command.
Psn prop:
Destination Mac Address: 0015.EB72.000C
Vlan ID: 1000 priority: 7
Card prop:
Card interface : 13/1
Source Mac Address: 0015.EB72.001A
Source IP Address : 192.192.192.26
9. Configure the in-band IP address of the F429.

The ONU CES service can only be configured on the ONU.
ZXAN(epon-onu-mng)#mgmt-ip 192.2.128.5 255.255.255.0 vlan 2600 priority 7 route
192.2.128.0 255.255.255.0 192.2.128.1 status enable
10. Log in to the F429 and configure the CES service.
a. Create the CES service VLAN.

F429(config)# add-vlan 1000
b. Configure the VLAN service port and the uplink port.

F429(config)# vlan 1000 1/7-8 tag
6-7

c. Query the CES global property information.

F429(config)# show ces ethIfprop 1
EthPort : : 1
MacAddress : 00:15:EB:72:00:0C
IPAddress : 192.192.192.1
AdminStatus : up
OperStatus : up
To modify the CES MAC address, use the following command.

F429(config)# ces ethIfprop 1 macAddr 00:15:eb:72:00:0c adminSts up
d. (Optional) Configure the ONU TDM interface.

This instance uses the default values. To configure the OLT TDM interface, use
the following command.
F429(config)# ces tdmIfprop 1 lineType e1 lineCoding HDB3 TransClkSrc adaptive

adminSts up loopType noLoop
Note:
In practical networking, it is recommended to use the default ONU TDM interface configura-
tion.
e. Configure the CES property profile of the ONU.

F429(config)# pw tdmProp 1 payloadSize 32 reorder enable rtpHdr enable 0 jtrBfr
2000 payloadSuppression disable inSyncPkts 2 outSynch 10 replacePolicy ais
almThreshold 2500 clrAlmThreshold 1000 timeStampMode differential queueSizePower
5 name default create
Note:
The CES property profile parameters of two ends of the same PW must be consistent.
f. Configure PW link service parameters.

F429(config)#pw genProp 1 pwType e1Satop psnType ethernet outboundLable 0x1102
inboundLable 0x1102 pwName PW1 adminSts up creat
g. Configure the PW link Ethernet parameters.

F429(config)#pw ethProp 1 dstMac 00:15:EB:72:00:1a vlan 1000 priority 7 create
h. Configure the binding between the PW link and the TDM interface.
F429(config)#pw relation 1 rate 32 1 1 creat
11. Save the configuration data on the OLT and the ONU.
6-8

Result
The EPON CES service is configured successfully.
6.3 Configuring the EPON E1/T1 Uplink CES Service

(PWE3)
Short Description
This section describes the configuration of E1/T1 uplink CES service based on the IP
network (PWE3). This instance takes CE1B card as an example.
Prerequisites

l The CES uplink card status is nomarl.
Networking Diagram
6-9

The E1 user connects to the ONU E1 port. The ZXA10 C220 connects to theTDM network
Configuration Data
Table 6-2 describes configuration data of the CES service.
Table 6-2 Configuration Data of EPON CES Service (PWE3)
Item Data

l IP address: 192.2.128.4/24
Priority 7
OLT port 0/5/1
ONU l ONU ID: 1

l Type: F429

l IP address: 192.2.128.5/24

Source IP address (IP address of the CE1B card) 192.192.192.26

CE1B card)
Destination IP address (ONU IP address) 192.192.192.1

address)

l Source UDP port: 1101
l Destination UDP port: 1101
Configuration Flow
6-10

Figure 6-4 EPON CES Service Configuration Flow (PWE3)
Steps
To configure the EPON CES service, perform the following steps:
ZXAN(config)#
Note:

6-11

Note:
automatically.


SN :
OnTime : 2009/08/19 11:12:29
ZXAN(config)#

Note:
ONU.



----------------------------------------------------------------
13/1 0015.EB72.001A 192.192.192.26
6-12


ZXAN(config)#ces
ZXAN(config-ces)#ip-address ipv4 192.192.192.25 13/1

Note:
In practical networking, it is recommended to use the default values of the OLT TDM interface.
Note:
There is a default profile in the ZXA10 C220. It is recommended to use the default profile.
d. Create the PW link and configure the TDM properties of the PW link.
ZXAN(config)#ces
default
Note:

ZXAN(config-ces-pw)#psn ip 1101 1101 ipv4 192.192.192.1 dst-mac 0015.eb72.000c
vlan 1000 priority 7
6-13

Note:
The OLT source/destination UDP port number must be consistent with the ONU source/des-
tination UDP port number. For convenience, they are generally configured same.
The source/destination UDP ports of different PW link must be different.

pw pw_0/13/1
PwType : e1Satop PsnType : ip
Admin-status : enable InboundLable :0x44D
OutboundLable :0x44D Destination IP Address 192.192.192.1.
Service prop:
Psn prop:
Card prop:

ZXAN(epon-onu-mng)#mgmt-ip 192.2.128.5 255.255.255.0 vlan 2600 priority 7
route 192.2.128.0 255.255.255.0 192.2.128.1 status enable


6-14


EthPort : : 1
IPAddress : 192.192.192.1
AdminStatus : up
OperStatus : up

F429(config)# ces ethIfprop 1 macAddr 00:15:eb:72:00:0c ipAddr ipv4 10.61.92.57
adminSts up

Note:
tion.

Note:

F429(config)# pw genProp 1 pwType e1Satop psnType ip srcUdpPort 1101 dstUdpPort
1101 pwName PW1 adminSts up creat

F429(config)# pw ethProp 1 dstIp 192.192.192.26 dstMac 00:15:EB:72:00:1a vlan 1000
priority 7 create
6-15

Result
6.4 Configuring the EPON STM-1/OC3 Uplink CES

Service
Short Description
This section describes the configuration of STM-1/OC-3 uplink CES service based on
Ethernet (MEF8). This instance takes CL1A card as an example.
l The CL1A card status is proper.
Context
The CL1A card provides a STM-1/OC3 interface for uplink. The CL1A card performs
multiplex E1 frames to STM-1 frames and sends STM-1 frames to the SDH/SONET
network through the STM-1 optical interface. The multiplexer at the remote end in SDH
network extracts E1 frames.
Networking Diagram
6-16

The E1 user connects to the E1 interface of the ONU. The ZXA10 C220 accesses the
SDH/SONET network through the STM-1 interface on the CL1A card.
Configuration Data
Table 6-3 Configuration Data of EPON CES Service
Item Data

l IP address: 192.2.128.4/24
Priority 7
Uplink port 0/14/1
OLT port 0/5/1
ONU l ONU ID: 1

l Type: F429

l IP address: 192.2.128.5/24
6-17

Item Data

Source MAC address (CES MAC address of the 0015.eb72.001c

CL1A card)

address)

Configuration Flow
Figure 6-6 EPON CES Service Configuration Flow
To configure the CES service, perform the following steps:
6-18

Steps:
ZXAN(config)#
Note:

ZXAN(config)#interface tdm-gei_0/14/1-2
ZXAN(config-if-range)#switchport mode hybrid
ZXAN(config-if-range)#switchport vlan 1000 tag
ZXAN(config-if-range)#exit
Note:
automatically.


SN :
OnTime : 2009/08/19 11:12:29
ZXAN(config)#

6-19

Note:
ONU.



A CL1A card supports 63 E1 channels. The first MAC address corresponds to
the first 32 channels, while the second MAC address corresponds to the other 31
channels.
ZXAN(config)#show ces global-prop 14/1
----------------------------------------------------------------
14/1 0015.EB72.001C 192.192.192.28

----------------------------------------------------------------
14/2 0015.EB72.001D 192.192.192.29

ZXAN(config)#ces

Note:
configuration.
6-20


Note:
ZXAN(config)#ces
ZXAN(config-ces-pw)#tdm-service type e1Satop rate 32 tdm_0/14/1.1/1/1/1/1
tdm-profile-name default
Note:
The CL1A TDM interface format is: tdm_shelf/slot/port.augno/1/tug3/tug2/e1.
l The value of port and augno can only be set to 1.

l The value range of tug-3, tug-2, and e1 is: [1.1.1, 3.7.3].
l There are totally 63 service channels. The parameter of each channel must be different.

priority 7
Note:
When the PSN network type is Ethernet, the in-ecid/out-ecid configured on the OLT must
correspond to those on the ONU. In this instance, the in-ecid/out-ecid value is 0x1102.

pw pw_0/14/1
6-21

Service prop:
Using tdm interface: tdm_0/14/1.1/1/1/1/1
Psn prop:
Card prop:
Source Mac Address: 0015.EB72.001C

ZXAN(epon-onu-mng)#mgmt-ip 192.2.128.5 255.255.255.0 vlan 2600 priority 7
route 192.2.128.0 255.255.255.0 192.2.128.1 status enable



EthPort : : 1
IPAddress : 192.192.192.1
AdminStatus : up
OperStatus : up

F429(config)# ces ethIfprop 1 macAddr 00:15:eb:72:00:0c adminSts up

6-22


Note:
tion.

Note:

F429(config)#pw genProp 1 pwType e1Satop psnType ethernet outboundLable 0x1102
inboundLable 0x1102 pwName PW1
adminSts up creat

F429(config)#pw ethProp 1 dstMac 00:15:EB:72:00:1c vlan 1000 priority 7 create
Result
6.5 Configuring the GPON E1/T1 Uplink CES Service

(MEF8)
Short Description
This section describes the configuration of E1/T1 uplink CES service based on Ethernet
(MEF8). This instance takes CE1B card as an example.
Prerequisites
6-23


l The CES uplink card status is nomarl.
Networking Diagram
Figure 6-7 GPON CES Service Networking Diagram
The E1 user connects to the ONU E1 port. The ZXA10 C220 connects to the TDM network
Configuration Data
Table 6-4 Configuration Data of GPON CES Service (MEF8)
Item Data
CES serviceVLAN VLAN ID: 1000
Priority 7
GPON port 0/10/1
6-24

Item Data
T-CONT bandwidth profile Profile name: ces-tcont
Bandwidth type: fixed
ONU l ONU ID: 1

l ONUtype: ZTE-F621
l User port: ces_0/1

l T-CONT name: ces-tcont
l Applied bandwidth profile: ces-tcont

l GEM Port index: 1

CE1B card)

address)

Configuration Flow
6-25

Figure 6-8 GPON CES Service Configuration Flow
Steps
ZXAN(config)#
Note:

6-26

Note:
automatically.

OnuIndex Sn State
--------------------------------------------------------
------------------------------------------------------------------

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont ces-tcont type 1 fixed 10000
6. Create a T-CONT.
ZXAN(config-if)#tcont 2 name ces-tcont profile ces-tcont


ZXAN(config)#
Note:

6-27


---------------------------------------------------------
13/1 0015.EB72.001A 192.192.192.26

ZXAN(config)#ces

Note:
In the practical networking, it is recommended to use the default values for the OLT TDM
interface configuration.
Note:
ZXAN(config)#ces
default
Note:

ZXAN(config-ces-pw)#psn ethernet 0x1102 0x1102
dst-mac 0015.eb72.000c vlan 1000 priority 7
6-28

Note:
When PSN network type is Ethernet, the in-ecid/out-ecid configured on OLT must correspond
to those on ONU. In this instance, the in-ecid/out-ecid value is 0x1102.

pw pw_0/13/1
Service prop:
Psn prop:
Card prop:
10. Configure the ONU CES service channel.

ZXAN(gpon-onu-mng)#service tdmservice type hybrid gemport 1 cos 7 vlan 1000
11. Configure the ONU CES service.

a. (Optional) Configure the ONU TDM interface.
ZXAN(gpon-onu-mng)#interface ces ces_0/1 state disable
6-29

Note:
tion.
b. Configure the CES property profile of the ONU.

This instance uses the default CES profile. To configure the CES profile, use the
following commands.
ZXAN(config)#gpon
ZXAN(config-gpon)#onu profile tdm zte jtrbfr-desire 24
Note:
There is a default profile in the ZXA10 C220 system. It is recommended to use the default
profile.
c. Configure the PSN properties of the PW link.

ZXAN(gpon-onu-mng)#pw psn ethernet ces_0/1 bridge bridge_0/1 dst-mac 0015.eb72.001a
loop disable tx-payload-ecid 0x1102 tx-signalling-ecid 0x0 expected-payload-ecid
0x1102 expected-signalling-ecid 0x0 tag-policy tag vid 1000 prio 7
d. Configure the TDM properties of the PW link.

ZXAN(gpon-onu-mng)#pw tdm ces_0/1 payloadsize 32 payload-delay 1 timing-mode
adaptive-timing
e. Configure the RTP property of the PW link.

ZXAN(gpon-onu-mng)#pw rtp ces_0/1 payload-ssrc 3 signalling-ssrc 0 payload-ptype 97
signalling-ptype 0 expected-payload-ssrc 3 expected-signalling-ssrc 0

ZXAN#write
..[OK]
Result
The GPON CES MEF8 service is configured successfully.
6-30

6.6 Configuring the GPON STM-1/OC3 Uplink CES

Service
Short Description
This section describes the configuration of STM-1/OC-3 uplink CES service based on
Ethernet (MEF8). This instance takes CL1A card as an example.
l The CL1A card status is proper.
Context
The CL1A card provides a STM-1/OC3 interface for uplink. The CL1A card performs
multiplex E1 frames to STM-1 frames and sends STM-1 frames to the SDH/SONET
network through the STM-1 optical interface. The multiplexer at the remote end in SDH
network extracts E1 frames.
Networking Diagram
Figure 6-9 GPON CES Service Networking Diagram
6-31

The E1 user connects to the E1 interface of the ONU. The ZXA10 C220 accesses the
SDH/SONET network through the STM-1 interface on the CL1A card.
Configuration Data
Table 6-5 Configuration Data of GPON CES Service
Item Data
Priority 7
E1 Uplink port 0/13/1
GPON port 0/10/1
T-CONT bandwidth profile Profile name: ces-tcont
Bandwidth type: fixed
ONU l ONU ID: 1

l ONUtype: ZTE-F621
l User port: ces_0/1

l T-CONT name: ces-tcont
l Applied bandwidth profile: ces-tcont

l GEM Port index: 1
Source MAC address (CES MAC address of the 0015.eb72.001c

CL1A card)

address)

l Sending ECID: 0x1102
6-32

Configuration Flow
Figure 6-10 GPON CES Service Configuration Flow
Steps
ZXAN(config)#
Note:

6-33

Note:
automatically.

OnuIndex Sn State
--------------------------------------------------------
------------------------------------------------------------------

ZXAN(config)#gpon
ZXAN(config-gpon)#profile tcont ces-tcont type 1 fixed 10000
6. Create a T-CONT.
ZXAN(config-if)#tcont 2 name ces-tcont profile ces-tcont


ZXAN(config)#
Note:
6-34

A CL1A card supports 63 E1 channels. The first MAC address is for the first 32
channels, while the second MAC address for the other 31 channels.
-----------------------------------------------------
14/1 0015.EB72.001C 192.192.192.28

-----------------------------------------------------
14/2 0015.EB72.001D 192.192.192.29

ZXAN(config)#ces

Note:
configuration.
c. (Optional) Configure the CES property profile of the OLT.

Note:
ZXAN(config)#ces
ZXAN(config-ces-pw)#tdm-service type e1Satop rate 32 tdm_0/14/1.1/1/1/1/1
tdm-profile-name default
6-35

Note:
The CL1A TDM interface format is: tdm_shelf/slot/port.augno/1/tug3/tug2/e1.
l The value of port and augno can only be set to 1.

l The value range of tug-3, tug-2, and e1 is: [1.1.1, 3.7.3].

priority 7
Note:
When the PSN network type is Ethernet, the in-ecid/out-ecid configured on the OLT must
correspond to those on the ONU. In this instance, the in-ecid/out-ecid value is 0x1102.

pw pw_0/14/1
Service prop:
Using tdm interface: tdm_0/14/1.1/1/1/1/1
Psn prop:
Card prop:
Source Mac Address: 0015.EB72.001C
10. Configure the ONU CES service channel.
6-36

ZXAN(gpon-onu-mng)#service tdmservice type hybrid gemport 1 cos 7 vlan 1000
11. Configure the ONU CES service.

a. (Optional) Configure the ONU TDM interface.
ZXAN(gpon-onu-mng)#interface ces ces_0/1 state disable
Note:
tion.
b. Configure the CES profile of the ONU.

This instance uses the default CES profile. To configure the CES profile, use the
following commands.
ZXAN(config)#gpon
ZXAN(config-gpon)#onu profile tdm zte jtrbfr-desire 24
Note:
There is a default profile in the ZXA10 C220 system. It is recommended to use the default
profile.
c. Configure the PSN properties of the PW link.

ZXAN(gpon-onu-mng)#pw psn ethernet ces_0/1 bridge bridge_0/1 dst-mac 0015.eb72.
001c loop disable tx-payload-ecid 0x1102 tx-signalling-ecid 0x0 expected-payload-
ecid 0x1102 expected-signalling-ecid 0x0 tag-policy tag vid 1000 prio 7
d. Configure the TDM properties of the PW link.

ZXAN(gpon-onu-mng)#pw tdm ces_0/1 payloadsize 32 payload-delay 1 timing-mode
adaptive-timing
e. Configure the RTP properties of the PW link.

ZXAN(gpon-onu-mng)#pw rtp ces_0/1 payload-ssrc 3 signalling-ssrc 0 payload-ptype
97 signalling-ptype 0 expected-payload-ssrc 3 expected-signalling-ssrc 0

ZXAN#write
..[OK]
6-37

Result
The GPON CES dedicated line service is configured successfully.
6.7 Configuring the CES TDM Profile

Short Description
Perform this procedure to configure the CES TDM profile.
Prerequisites
l The CES service card status is proper.
Context
Table 6-6 describes the TDM profile parameters.
Table 6-6 TDM Profile Parameters
profilename Profile name 1 – 63 characters
payloadsize Payload size of each packet l 32

l 64
Default: 32
reorder To enable or disable the l Enable

recorder function l Disable
Default: enable
rtpHdr To enable or disable the RTP l Enable

header l Disable
Default: disable
ssrcval Synchronization source identi-

0
fier
jtrBfr Jitter buffer depth 2000

Unit: μs
payloadSuppression Payload suppression l Enable

l Disable
Default: disable
inSyncPkts Continuously received frames

2
to enter LOP
outSyncPkts Continuously missed frames to

10
exit LOP
6-38

pktReplacePolicy Packet replace policy l AIS

l MplementationSpecific
Default: AIS
almThreshold Alarm report threshold time 2500 ms
clrAlmThreshold Alarm clear threshold time 10000 ms
timestamp-mode Time stamp mode l Differential

l Absolute
l Unknown
l Not applicable
Default: differential
queuesizePower Queue Size, exponent value l Range: 1 – 7, when the recorder

basing 2 function is enabled
l Range: 1 – 10, other situation
Default: 5
To configure the CES TDM profile, perform the following steps:
Steps
2. Use the ces command to enter CES configuration mode.
3. Use the tdm-profile command to configure the TDM profile.
Note:
l Configure this profile before relating it to PW link.
l If a profile is applied to a PW link, it is not allowed to modify or delete this profile.
l The RTP value of each profile related to the same slot must be the same.
4. Use the show ces tdm-profile command to query TDM profile configuration information.
Result
The CES TDM profile is configured successfully.
Example
Configure the TDM profile and view configuration information.
ZXAN(config)#ces
6-39

ZXAN(config-ces)#tdm-profile zte 64 reorder enable rtpHdr

enable 32 jtrBfr 3000 payloadSuppression disable inSyncPkts 2
outSyncPkts 10 pktReplacePolicy ais almThreshold 2500
clrAlmThreshold 10000 timestamp-mode differential 3
ZXAN(config-ces)#show ces tdm-profile zte
Profile name : zte

Payload size(bytes) : 64 Reorder: enable
RtpHdr : used Ssrcval: 32
JtrBfr : 3000 Payload suppression: disable
ConsecPktsInSynch : 2 PktsOutSync : 10
PacketReplacePolicy : AIS AlarmThreshold(ms): 2500
ClearAlarmThreshold(ms):10000 TimeStampMode: differential
QueueSize(bytes): 3
6.8 Configuring the CES TDM Interface

Short Description
Perform this procedure to configure the CES TDM interface.
Prerequisites
Context
In practical networking, it is recommended to us the default values for CES TDM interface
configuration.
To configure the CES TDM interface, perform the following steps:
Steps
2. Use the interface command to enter the TDM interface configuration mode.
3. Use the admin-status command to configure the TDM interface management status.
4. Use the clock-source command to configure the transmission clock source of the TDM
interface.
5. Use the framing command to configure the SONET/SDH interface frame format. Only
SDH is supported now.
6. Use the line-coding command to configure the TDM interface coding type. The default
type is HDB3.
6-40

7. Use the line-type command to configure the TDM interface line type (whether it is
framed and the framing type). The default type is e1.
8. Use the loopback command to configure the TDM interface loopback mode.
9. Configure the T1/E1 line properties of the SDH interface.
a. Enter the line configuration mode.
l Use the au-3 command to enter the au-3 configuration mode.
l Use the au-4 tug-3 command to enter the au-4 tug-3 configuration mode.
b. Use the tug-2 command to configure the T1/E1 line properties.
Result
The CES TDM interface is configured successfully.
Example
Configure the transmission clock source mode of the TDM interface on port 1 slot 13 to
differential.
ZXAN(config)#interface tdm_0/13/1
ZXAN(config-if)#clock-source differential
6-41

6-42

Chapter 7
VLAN Configuration
Table of Contents
Overview ....................................................................................................................7-1
Configuring the TLS VLAN .........................................................................................7-2
Configuring the VLAN Smart QinQ .............................................................................7-3
Configuring the 1:1 VLAN...........................................................................................7-6
Configuring the Service Port VLAN.............................................................................7-9
7.1 Overview
Service Description
A VLAN is a group of hosts that communicate as if they were in the same broadcast domain,
regardless of their physical location. A VLAN has the same attributes as a physical LAN,
but it allows for end stations to be grouped together even if they are not located on the
same network switch. IEEE issued the IEEE 802.1q standard draft in 1999 to standardize
the VLAN implementation plan.
The ZXA10 C220 supports up to 4094 VLANs.
Table 7-1 describes VLAN specifications.
Table 7-1 VLAN Specifications
VLAN Type Description
TLS VLAN Add an outer-layer SVLAN whatever the user access mode is, or whether the
uplink packet has a VLAN tag, or whatever the VLAN tag is.
VLAN smart QinQ Used to extend VLAN.

Add different outer-layer SVLAN for different data streams.
1:1 VLAN Set the special channel for the user port and uplink port. The packets are
exchanged in 1:1 mode according to the VLAN ID.
Service port VLAN Implement VLAN translation at the ONU level.
7-1

7.2 Configuring the TLS VLAN

Short Description
Perform this procedure to configure the TLS VLAN.
Prerequisites
l The uplink port and service port are proper.
Context
When TLS is enabled on a PON-ONU interface, the upstream frames from the user port
are added with the TLS VLAN ID before the four-byte 802.1q. This configuration is used
for VLAN transparent transmission between enterprises.
To configure the TLS VLAN, perform the following steps:
Steps
2. Use the vlan command to add a VLAN.
4. Use the switchport mode command to configure the port VLAN mode.
Note:
When the port mode is access or transparent, the TLS properties cannot be configured.
5. Use the switchport tls enable command to enable port VLAN TLS.
Note:
In trunk or hybrid mode, when the TLS function is disabled, TLS VLAN ID automatically changes
to 0.
6. Use the switchport tls vlan command to configure the port TLS VLAN.
7. Use the show vlan port command to query the port VLAN configuration.
Result
The TLS VLAN is configured successfully.
7-2

Chapter 7 VLAN Configuration
Example
The user frames have a VLAN tag 100. The ZXA10 C220 adds VLAN tag 101 to the
frames.
ZXAN(config-if)#switchport tls enable
ZXAN(config-if)#switchport tls vlan 101
ZXAN(config-if)#show vlan port epon-onu_0/6/4:1
Mode Pvid CPvid Tpid ProtEn PrioEn TLSEn TLSVlan UntagVlan TagVlan
---------------------------------------------------------------------
trunk 1 0 0x8100 disable disable enable 101 1
7.3 Configuring the VLAN Smart QinQ

Short Description
Perform this procedure to configure the VLAN smart QinQ.
Prerequisites
Context
The ZXA10 C220 supports VLAN smart QinQ at two levels:
l ONU-level
Use the service-port command to configure VLAN smart QinQ based on ONUs.
l PON-level
Use the vlan-smart-qinq command to VLAN smart QinQ based on PON ports.
This topic takes PON-level VLAN smart QinQ as an example.
7-3

The xPON OLT is connected by multiple ONUs in the downlink direction. The xPON
OLT connects the DSLAM through the ONU to achieve the function of MAN convergence
switches. The packets are added with different external VLAN tags according to different
data streams to achieve service identification.
The ZXA10 C220 supports the following smart QinQ modes:
l Based on a single CVLAN
l Based on a CVLAN segment
l Based on CoS
l Based on the Ethernet type
l Based on single CVLAN + CoS
l Based on single CVLAN + Ethernet type
When entries on the same port conflict, the item configured earliest takes effect.
Configuration Data
Table 7-2lists the smart QinQ configuration data.
Table 7-2 Smart QinQ Configuration Data
Item Data
IPTV service transparent transmission VLAN VLAN ID: 200 – 500
NM service transparent transmission VLAN VLAN ID: 60
PPPoE service SVLAN VLAN ID: 1024
PPPoE service CVLAN VLAN ID: 1024 – 2047
Dedicated line service SVLAN l VLAN ID: 2048

l CoS priority: 7
Dedicated line service CVLAN l VLAN ID: 2048 – 3071

l CoS priority: 3
OLT port 0/6/4
ONU ID 1
Uplink port 0/14/1
Configuration Flow
Figure 7-1 shows the configuration flow of VLAN smart QinQ.
7-4

Figure 7-1 Smart QinQ Configuration Flow
To configure the VLAN smart QinQ, perform the following steps:
Steps
1. Configure the transparent transmission service VLAN and external SVLAN.
ZXAN#config terminal
ZXAN(config)#vlan database
ZXAN(vlan)#vlan 60,200-500,1024,2048
ZXAN(vlan)#exit
2. Enable global VLAN smart QinQ.

ZXAN(config)#vlan-smart-qinq enable
3. Enable port VLAN smart QinQ.

ZXAN(config-if)#vlan-smart-qinq enable
7-5

Note:
Port VLAN Smart QinQ can be enabled only after global VLAN Smart QinQ is enabled.
4. Configure the VLAN Smart QinQ rules.

ZXAN(config)#vlan-smart-qinq ingress-port epon-olt_0/6/4 cvlan 1024 to 2047
svlan 1024
ZXAN(config)#vlan-smart-qinq ingress-port epon-olt_0/6/4 cvlan 2048 to 3071
cos 3 svlan 2048 newcos 7
5. Configure the service port of the transparent transmission VLAN.

ZXAN(config-if)#switchport vlan 200-500 tag
6. Configure the uplink port of the transparent transmission VLAN and the external
SVLAN.
ZXAN(config-if)#switchport vlan 200-500 tag
ZXAN(config-if)#end

ZXAN#write
..[OK]
Result
The VLAN smart QinQ is configured successfully.
7.4 Configuring the 1:1 VLAN

Short Description
Perform this procedure to configure the 1:1 VLAN exchange.
Prerequisites
7-6

l The xPON basic service is configured.
Context
In the 1:1 VLAN mode, there is only one service port and one uplink in a VLAN, thus frames
are forwarded according to SVLAN ID or CVLAN ID + SVLAN ID, but not MAC address +
VLAN ID.
To configure the 1:1 VLAN, perform the following steps:
Steps
2. Use the vlan command to enter the VLAN configuration mode.
3. Use the xconnect command to configure cross connection in the 1:1 VLAN.
Note:
In a 1:1 VLAN, only when the cross connection is configured, the VLAN configuration on corre-
sponding uplink port and service port are permitted, which includes:
l VLAN bind (port VLAN)

l VLAN translate
l VLAN QinQ
4. Use the vlan-xconnect command to add 1:1 VLAN connection configuration items.
5. Use the interface command to enter the PON-ONU interface configuration mode.
6. Use the switchport vlan command to configure the VLAN properties of the PON-ONU
interface.
Note:
The PON-ONU interface supports multiple VLAN configuration, such as:
l Default VLAN
l 1:1 VLAN
l VLAN translation
l VLAN QinQ
As long as the frames on the PON-ONU interfacet match the SVLAN or CVLAN + SVLAN, the 1:1
VLAN forwarding is implemented.
7. Use the interface command to enter the uplink port configuration mode.
7-7

8. Use the switchport vlan command to configure the VLAN properties of the uplink port.
Note:
The uplink port needs to be added to the SVLAN in tagged mode.
9. Use the show vlan-xconnect summary command to query the configured 1:1 VLAN.
10. Use the show vlan-xconnect detail command to query the detailed configuration rules
of the 1:1 VLAN.
Result
The 1:1 VLAN is configured successfully.
Example
Configure the special channel for service port epon-onu_0/5/2:1 and uplink port gei_0/6/1
in VLAN 600. When the user frames match SVLAN 600, the 1:1 VLAN forwarding is
implemented.
ZXAN(config-vlan)#xconnect enable
ZXAN(config)#vlan-xconnect user-port epon-onu_0/5/1:1 vport 1 uplink-port
gei_0/6/1 svlan 600
ZXAN(config-if)#switchportvlan 600 tag
ZXAN(config)#show vlan-xconnect summary
All xconnect-vlan num: 1
Details are following:
600
ZXAN(config)#show vlan-xconnect detail
xconnect vlan rule num: 1
User-Port Vport Uplink-Port Svlan Cvlan
-------------------------------------------------------
epon-onu_0/5/1:1 vport 1 gei_0/6/1 600 0
vport 1
7-8

7.5 Configuring the Service Port VLAN

Short Description
Perform this procedure to configure the service port VLAN on the xPON ONU interface to
implement the ONU-level VLAN translation.
Prerequisites
Context
The ZXA10 C220 supports the following VLAN translations on service ports.
Frame before VLAN Translation Frame after VLAN Translation
Untagged Single–tag
Untagged Dual–tag
Untagged + Ethernet type Single–tag
Untagged + Ethernet type Dual–tag
Tagged Single–tag
Tagged Dual–tag
Tagged + Ethernet type Single–tag
Tagged + Ethernet type Dual–tag
To configure the service port VLAN, perform the following steps:
Steps
2. Use the interface command to enter the EPON-ONU interface configuration mode.
3. Use the service-port command to create a service port under the EPON ONU port.
Note:
After the ONU is configured with the service port rules, the PON-level VLAN configuration (such
as smart QinQ) on the PON port is ineffective for the ONU and the configured service port rules
take effect.
7-9

4. Use the show service-port command to view the configured service port items.
Result
The service port VLAN is configured successfully.
Example
Configure the service port under epon-onu_0/5/1:1.
ZXAN(config-if)#service-port 1 user-vlan 10 user-etype PPPOE vlan 20 svlan 100
ZXAN(config-if)#service-port 2 user-vlan untagged vlan 21 svlan 31
7-10

Chapter 8
STP Configuration
Table of Contents
Overview ....................................................................................................................8-1
Configuring the MSTP ................................................................................................8-2
8.1 Overview
The STP is used to ensure a loop-free topology in a bridged network. It prevents redundant
paths by using specific algorithms, to prune the network loops by viewing the network
logically as a tree structure. This prevents packet circulation in the network loops.
The STP exchanges BPDUs between all the switches of STP in an expanded LAN. BPDUs
exchange implement the following functions:
l Selecting a root bridge from a stable spanning tree topology
l Selecting a specified switch from each switch network segment
l Preventing loop from the topology network by setting the redundant switch port to
Discard
The ZXA10 C220 supports SSTP, RSTP, and MSTP, which follow the IEEE802.1d,
IEEE802.1w, and IEEE802.1s standards respectively.
8.1.1 SSTP Mode

With the development of WAN, MSTP is widely used. However, MST domain for MSTP
must be configured manually. The network cannot be expanded properly. SSTP makes
up the drawback. By improving MSTP packet format and reducing the frequency of
sending Config/TCN BPDU packets between bridges, SSTP supports faster convergence
capability and provides more redundant paths for data transmission.
SSTP strictly follows the IEEE 802.1d standard. The bridge in SSTP mode can interwork
with the bridge in RSTP and MSTP modes.
8.1.2 RSTP Mode

With more LAN voice and media applications developed, the potential reliability and
performance become very crucial. The availability of each network component is
important. The redundancy needs to be set in the WAN connection, and ISP and routing
network. The redundancy bridge path is also needed. The bridge/switch must locate the
default, and reset it immediately. RSTP meets this requirement.
8-1

RSTP provides faster convergence than SSTP. When the network topology changes, the
port state of the redundant switch port can be quickly changed from Discard to Forward
in a point-to-point connection condition.
RSTP complies with the IEEE 802.1w standard.
8.1.3 MSTP Mode

MSTP is added with the concepts of instance and VLAN mapping. SSTP and RSTP modes
can be considered as a special MSTP instance, in which case, the instance is 0. The
MSTP mode provides fast convergence and load balancing for VLAN.
In SSTP and RSTP modes, each port has only one state, that is, the port has the same
forwarding state in different VLANs. In MSTP mode, multiple spanning-tree instances
can exist, and a port has different forwarding states in different VLANs. Multiple sub-tree
instances can be generated in the MST area to realize load balancing.
MSTP complies with the IEEE802.1s standard.
8.2 Configuring the MSTP

Short Description
Perform this procedure to configure the MSTP.
Prerequisites
Context
The MSTP is applied in the redundancy network. It provides fast convergence, and
enables different VLAN traffics to be dispatched in the corresponding paths, and thus
provides load sharing mechanism for the redundancy links.
The MSTP trims the loopback network to a tree network that has no loops, which prevents
packets from increasing and loop in the network. It also provides multiple redundancy
paths for data forwarding, in which process realizing VLAN data load balance.
The ZXA10 C220 supports the MSTP and is compatible with the STP and RSTP. It also
supports MSTP ring network.
To configure the MSTP, perform the following steps:
Steps
1. Enable the STP protocol.
8-2

Chapter 8 STP Configuration
ZXAN(config)#spanning-tree enable
2. Set the STP type to MSTP.

The ZXA10 C220 supports SSTP, RSTP, and MSTP. After MSTP is enabled, the MSTP
device maintains the spanning tree status of the corresponding VLAN according to
the received configuration information (BPDU message). After MSTP is disabled, the
MSTP device becomes a transparent bridge and does not maintain the spanning tree
status.
By default, the ZXA10 C220 uses the MSTP mode. Any one of the modes is compatible
with the other modes.
ZXAN(config)#spanning-tree mode mstp
3. Set the maximum valid time for the packet of the local bridge.
By default, the maximum valid time for the STP BPDU packet of the specific bridge is
20 seconds.
The device determines whether it times out for the port to receive the configuration
information according to the maximum valid time. If it times out, the snapping tree
instance needs to be recalculated.
If the current device is the root bridge device, it determines the timeout according to
the maximum valid time of the root bridge device. If the current device is a non-root
bridge device, it determines the timeout also according to the maximum valid time of
the root bridge device.
ZXAN(config)#spanning-tree max-age 21
4. Set the time interval for the current bridge to send packets.
By default, the time interval for the specific bridge to send the STP BPDU packets is
2 seconds.
This time interval ensures that the configuration information is sent periodically and
keeps the spanning tree stable. If the device does not receive any configuration
information, it regards the information timing out and recalculates the spanning tree.
If the current device is the root bridge device, it sends packets according to the time
interval of the root bridge device. If the current device is a non-root bridge device, it
sends packets also according to the time interval of the root bridge device.
ZXAN(config)#spanning-tree hello-time 3
5. Set the STP forwarding delay time interval of the current bridge.
To prevent temporary loop, when the port state switches from Discarding to
Forwarding and the requirements on port status fast switching are not met, the
intermediate state Learning is set and the status switching process needs certain
time to keep synchronization with the status switching of the remote switch.
8-3

If the current device is the root bridge device, it uses the forwarding delay time interval
of the root bridge device. If the current device is a non-root bridge device, it also uses
the forwarding delay time interval of the root bridge device.
ZXAN(config)#spanning-tree forward-delay 16
Note:
To ensure MSTP to work normally in the network, the maximum valid time for the packet of the
local bridge, the time interval for the current bridge to send packets, and the STP forwarding delay
time interval of the current bridge should meet the following formula:
2 × (forwarding delay time – 1.0 second) ≥ maximum valid time ≥ 2 × (sending time interval + 1.0
second)
6. Set the transparent transmission mark.

Before enabling or disabling STP transparent transmission, disable the STP switch.
After transparent transmission is enabled, the chip broadcasts the received BPDU
packets in the VLAN rather than sending them to the CPU.
ZXAN(config)#spanning-tree disable
ZXAN(config)#spanning-tree transparent enable
7. Set the version number.
To set the version number in mst_config_id, the STP protocol must be enabled. If the
switches need to be configured in one domain, this parameters is mandatory. Keep
the configuration of all switches consistent. The default value is 0.
ZXAN(config)#spanning-tree mst configuration
ZXAN(config-mstp)#revision 10
8. Set the configuration name in mst_config_id.

By default, it is the management MAC address of the device.
ZXAN(config-mstp)#name zte
9. Set the MST key.
By default, the value of MD5-KEY used to generate mst_config_id is

0x13ac06a62e47fd51f95d2ba243cd0346.
MD5-KEY of the encryption algorithm is configured to ensure device security. The two
devices in the same MST domain fail to communicate with each other if their MD5-KEY
values are different.
When MSTP is implemented by different device providers, the MSTP packet formats
may not follow the IEEE standard strictly. When the ZTE switch interworks with those
of other providers in the same domain, the MD5-KEY value and the DIGEST value are
mandatory.
8-4

Chapter 8 STP Configuration
ZXAN(config)#spanning-tree mst hmd5-key

cisco 0x12345678901234567890123456789012
10. Set MST digest.

The default MST digest value in mst_config_id is
0x00000000000000000000000000000000.
When MSTP is implemented by different device providers, the MSTP packet formats
may not follow the IEEE standard strictly. When the ZTE switch interworks with those
of other providers in the same domain, the KEY value and the DIGEST value are
mandatory.
ZXAN(config)#spanning-tree mst hmd5-digest
cisco 0x12345678901234567890123456789012
11. Set the MSTP instance.

Set the following parameters:
l Instance number: The value range is 0 – 31. Instance 0 exists by default and
cannot be deleted.
l VLAN mapping: Map the specified VLANs to the specified MSTP instances.
By default, all the VLANs are mapped to instance 0, that is, CIST.
One VLAN cannot be mapped to different instances. When a mapped VLAN is
remapped to another instance, the original mapping relationship is cancelled.
ZXAN(config-mstp)#instance 1 vlan 10-20
Note:
In SSTP and RSTP modes, the ZXA10 C220 only has instance 0, that is CIST. In MSTP mode,
instance 0 exists by default and cannot be deleted.
The devices in one domain should meet all the following requirements:
l The MST configuration names are the same.

l The MST configuration version numbers are the same.
l The INS-VLAN mapping tables are the same.
l The devices are connected physically.
12. Set the priority of the local bridge.

The MSTP devices can have different priorities in different STP instances. The
priorities range from 0 to 61440, with the step length of 4096. The default priority is
32768.
The priority determines whether the device can be selected as the root bridge of
the spanning tree. The device with the lowest priority can be the root bridge of the
spanning tree.
8-5

If the priorities of the devices are the same, the device with the smallest MAC address
is the root bridge.
ZXAN(config)#spanning-tree mst instance 1 priority 4096
13. Set the maximum hops of the local bridge BPDU packets.
The maximum hops of the BPDU packets in the MST domain ranges from 1 to 40, and
the default value is 20.
In the MST domain, when a BPDU packet is forwarded from the root device of the
spanning tree to other devices, the hop number decreases by one when the packet
passes a device. The device discards the configuration information with the hop
number of 0 to limit the network scale in the domain.
ZXAN(config)#spanning-tree mst max-hops 40
Result
The MSTP is configured successfully.
8-6

Chapter 9
DHCP Configuration
Table of Contents
Overview ....................................................................................................................9-1
Configuring the DHCP Snooping ................................................................................9-2
Configuring the DHCP Server.....................................................................................9-3
Configuring the DHCP Relay ......................................................................................9-5
9.1 Overview
DHCP enables a host on the network to obtain an IP address that ensures its normal
communication and the relevant configuration information from a DHCP server.
DHCP uses UDP as the transmission protocol. The host sends a message to port 67 of
the DHCP server and the DHCP server returns the message to port 68 of the host. The
DHCP working process is as follows:
1. The host sends a broadcast packet DHCPDiscover including the request of the IP
address and other configuration parameters.
2. The DHCP server returns a unicast packet DHCPOffer including the valid IP address
and configuration.
3. The host selects the server which returns the first DHCPOffer and sends a broadcast
packet DHCPRequest to the server, indicating to accept relevant configuration.
4. The selected DHCP server returns a unicast packet DHCPAck for acknowledgement.
At this point, the host can use the IP address and relevant configuration obtained from the
DHCP server for communication.
The ZXA10 C220 supports the following DHCP applications:
l DHCP snooping
On the ZXA10 C220, monitor the DHCP communication process of the specified ONU
in the specified VLAN to record the user IP/MAC relationship of the specified ONU.
Through DHCP snooping, the administrator can locate the access users by the IP
addresses to implement IP address anti-snooping.
l DHCP server
The ZXA10 C220 works as the DHCP server to allocate IP addresses for users.
l DHCP relay
The ZXA10 C220 works in layer-3 switching state as the DHCP relay. It forwards the
user DHCP request to the specified DHCP server.
9-1

The ZXA10 C220 can either work as the DHCP server or DHCP relay. Both of the
applications, however, cannot be used simultaneously on the same VLAN interface.
The ZXA10 C220 uses DHCP snooping to prevent unauthorized DHCP server from
accessing the network. A trusted port needs to be configured for the proper DHCP server.
9.2 Configuring the DHCP Snooping

Short Description
Perform this procedure to configure DHCP snooping.
Prerequisites
Context
To configure DHCP snooping, perform the following steps:
Steps
1. Use the ip dhcp snooping enable command to enable global DHCP snooping.
2. Use the ip dhcp snooping vlan command to enable DHCP snooping in the VLAN.
3. Use the ip dhcp snooping trust command to set the DHCP server port to the trusted
interface.
4. Use the dhcp-option82 enable command to enable the DHCP Option 82 process
globally.
5. Use the interface command to enter the EPON-ONU interface configuration mode.
6. Use the ip dhcp snooping enable command to enable DHCP snooping in ONU interface
mode.
7. Use the ip dhcp snooping quota command to set the DHCP session count under the
user port.
Result
DHCP snooping is configured successfully.
Example
Configure DHCP snooping function with the following parameters:
l Uplink port : gei_0/14/1 (connects to legal DHCP server)
9-2

Chapter 9 DHCP Configuration
l Uplink port: gei_0/14/2 (connects to illegal DHCP server)

l PON-ONU interface: epon-onu_0/4/1:1
l VLAN ID: 100
ZXAN(config)#ip dhcp snooping enable
ZXAN(config)#ip dhcp snooping vlan 100
ZXAN(config)#ip dhcp snooping trust gei_0/14/1
ZXAN(config)#dhcp-option82 enable
ZXAN(config-if)#ip dhcp snooping enable vport 1
ZXAN(config-if)#ip dhcp snooping quota 200 vport 1
9.3 Configuring the DHCP Server

Short Description
Perform this procedure to configure the DHCP server.
Prerequisites
Context
To configure the DHCP server, perform the following steps:
Steps
1. Use the ip dhcp enable command to enable the global DHCP function.
2. Use the ip local pool command to configure the IP address pool of the DHCP server.
3. Use the ip dhcp server leasetime command to configure the lease time of the DHCP
server IP address.
4. Use the ip dhcp server dns command to configure the DNS address that the DHCP
server returns to the user.
9-3

5. Use the vlan command to add the layer-3 VLAN.

6. Use the interface vlan command to enter the layer-3 VLAN interface mode.
7. Use the ip address command to configure the IP address on the interface that connects
to the client subnet.
8. Use the ip dhcp mode command to configure the layer-3 interface working mode.
9. Use the ip dhcp server gateway command to configure the default gateway IP address
of the DHCP server.
Note:
When the DHCP server is directly connected with the client subnet, the default gateway address
should be set to the IP address of the interface VLAN.
10. Use the peer default ip pool command to configure the IP address pool of the layer-3
interface.
11. Use the show ip dhcp server user vlan command to query the user information on the
DHCP server.
Result
The DHCP server is configured successfully.
Example
The ZXA10 C220 works as the DHCP server and the default gateway. The host obtains
the IP address dynamically through the ZXA10 C220.
l Server interface IP address: 10.10.1.1
l VLAN ID: 10
l IP address pool: 10.10.1.3 – 10.10.1.254
l DNS IP address: 10.10.1.2
l IP address lease period: 90 seconds
ZXAN(config)#ip dhcp enable
ZXAN(config)#ip local pool zte 10.10.1.3 10.10.1.254 255.255.255.0
ZXAN(config)#ip dhcp server dns 10.10.1.2
ZXAN(config)#ip dhcp server leasetime 90
ZXAN(config-if)#ip dhcp mode server
9-4

ZXAN(config-if)#ip dhcp server gateway 10.10.1.1

ZXAN(config-if)#peer default ip pool zte
ZXAN(config-if)#show ip dhcp server user vlan 10
Current online users are 0.
Index MAC addr IP addr State Expiration
9.4 Configuring the DHCP Relay

Short Description
Perform this procedure to configure DHCP relay.
Prerequisites
Context
To configure DHCP relay, perform the following steps:
Steps
1. Use the ip dhcp enable command to enable the global DHCP function.
2. Use the interface vlan command to enter the layer-3 VLAN interface mode.
3. Use the ip address command to configure the IP address of the layer-3 interface.
4. Use the ip dhcp mode command to enable DHCP relay or DHCP proxy on the VLAN
interface.
The DHCP proxy mode is the extension of the DHCP relay mode. The DHCP proxy
mode is used to detect subscriber offline quickly by maintaining different lease periods:
l T1: short-term lease period between the DHCP client and the DHCP relay
l T2: long-term lease period between the DHCP relay and DHCP server
When the subscriber is offline, the DHCP relay detects it during the T1 period, and
then sends a Release packet to the DHCP server to release the server resource.
5. Use the ip dhcp relay agent command to configure the DHCP relay agent address of
the VLAN interface.
Note:
The DHCP relay agent address should be consistent with the IP address configured on the layer-3
interface.
9-5

6. Configure the DHCP relay server.

The DHCP relay server can be configured in the following ways:
l Configure the IP address of the DHCP relay server on the VLAN interface.
a. Use the interface vlan command to enter the layer-3 VLAN interface mode.
b. Use the ip dhcp relay server command to configure the IP address of the
DHCP relay server on the VLAN interface.
l Enable DHCP Option 60. The IP address of the DHCP relay server does not need
to be configured on the VLAN interface. The NE determines which DHCP server
to be used according to the Option field in the user request packet.
a. In global configuration mode, use the ip dhcp relay server vclass-id command
to configure the mapping relations between the DHCP Option 60 character
strings and the DHCP server IP address.
b. Use the interface vlan command to enter the layer-3 VLAN interface mode.
c. Use the ip dhcp helper-address policy vclass-id command to set the DHCP
packets to be forwarded according to the DHCP Option 60 character strings
in DHCP relay and DHCP proxy modes.
7. Use the show ip dhcp relay user vlan command to query the user information on the
DHCP relay.
Result
DHCP relay is configured successfully.
Example
The ZXA10 C220 enables the DHCP relay function. The networking is as shown in Figure
9-1.
9-6

Figure 9-1 DHCP Relay Networking
ZXAN(config)#ip dhcp enable
ZXAN(config-if)#ip dhcp mode relay
ZXAN(config-if)#ip dhcp relay agent 136.136.136.1
ZXAN(config)#ip dhcp relay server vclass-id zte 135.135.135.118 standard
ZXAN(config-if)#ip dhcp helper-address policy vclass-id
9-7

9-8

Chapter 10
ACL Configuration
Table of Contents
Overview ..................................................................................................................10-1
Configuring the Standard ACL..................................................................................10-1
Configuring the Extended ACL .................................................................................10-3
Configuring the Layer-2 ACL ....................................................................................10-4
Configuring the Hybrid ACL ......................................................................................10-6
10.1 Overview
ACL is used to identify and restrict traffic. A series of matching rules are used to identify
and filter the packets. Packets are identified (according to a predefined policy) before
being permitted or denied
The ZXA10 C220 supports four types of ACL.
l Standard ACL
l Extended ACL
l Link layer ACL
l Hybrid ACL
10.2 Configuring the Standard ACL

Short Description
Perform this procedure to configure the standard ACL and apply it to the port.
Prerequisites
l The Ethernet port status is proper.
Context
In a standard ACL, rules are defined according to source IP address only.
To configure the standard ACL, perform the following steps:
Steps
10-1

2. Use the time-range command to configure the ACL time range.

3. Use the acl standard command to enter the standard ACL configuration mode.
Note:
The standard ACL number ranges from 1 to 99. It is applied to the Ethernet port only.
4. Use the rule command to configure the ACL rules.
Note:
l Each standard ACL supports up to 127 rules.
l The time range must be configured before it is applied to a rule. If the time range is not
configured, the rule is always effective.
6. Use the ip access-group command to apply the ACL to the port.

7. Use the show acl to query the ACL rule configuration.
8. Use the show access-list bound command to query the ports bound with the ACL.
Result
The standard ACL is configured successfully.
Example
Configure a standard ACL on port gei_0/14/1 to deny the packets from the source IP
address 168.1.1.1/24 to access the port during 9:00 – 17:00 on week days.
ZXAN(config)#time-range worktime 09:00:00 to 17:00:00 working-day
ZXAN(config)#acl standard number 3
ZXAN(config-std-acl)#rule 1 deny 168.1.1.1 0.0.0.255 time-range worktime
ZXAN(config-std-acl)#rule 2 permit any
ZXAN(config-std-acl)#show acl 3
standard acl 3
rule 1 deny 168.1.1.0 0.0.0.255 time-range worktime
rule 2 permit any
ZXAN(config-std-acl)#exit
ZXAN(config-if)#ip access-group 3 in
10-2

Chapter 10 ACL Configuration
10.3 Configuring the Extended ACL

Short Description
Perform this procedure to configure the extended ACL and apply it to the port.
Prerequisites
l The uplink port status is proper.
Context
In an extended ACL, rules are defined on the basis of the following:
l Source/destination IP address
l IP protocol type
l Source/destination TCP port number
l Source/destination UDP port number
l ICMP
l IGMP
l DSCP
l ToS
l IP precedence
To configure the extended ACL, perform the following steps:
Steps
3. Use the acl extend command to enter the extended ACL configuration mode.
Note:
The extended ACL number ranges from 100 to 199. It can be applied to the Ethernet port and
EPON OLT port.
Note:
l Each extended ACL supports up to 127 rules.
10-3


7. Use the show acl command to query the ACL rule configuration.
Result
The extended ACL is configured successfully.
Example
Configure an extended ACL on port gei_0/14/1 to deny the TCP packets from the source
IP address 192.168.1.0/24 and source port 23 (Telnet).
ZXAN(config)#acl extend number 101
ZXAN(config-ext-acl)#rule 1 deny tcp 192.168.1.0 0.0.0.255 eq telnet any
ZXAN(config-ext-acl)#rule 2 permit tcp any eq telnet any
ZXAN(config-ext-acl)#show acl 101
extended acl 101
rule 1 deny tcp 192.168.1.0 0.0.0.255 eq telnet any
rule 2 permit tcp any eq telnet any
ZXAN(config-ext-acl)#exit
XAN(config)#interface gei_0/14/1
10.4 Configuring the Layer-2 ACL

Short Description
Perform this procedure to configure the layer-2 ACL and apply it to the port.
Prerequisites
Context
In a link layer ACL, rules are defined on the basis of the following:
l Source/destination MAC address
l Source VLAN ID
10-4

l Layer-2 Ethernet protocol type

l 802.1p priority
To configure the layer-2 ACL, perform the following steps:
Steps
3. Use the acl link command to enter the layer-2 ACL configuration mode.
Note:
The layer-2 ACL number ranges from 200 to 299. It can be applied to the Ethernet port and EPON
OLT port.
Note:
l Each layer-2 ACL supports up to 127 rules.

Result
The layer-2 ACL is configured successfully.
Example
Configure a layer-2 ACL on port gei_0/14/1 to deny the packets from the source MAC
address 0000.0000.0001.
ZXAN(config)#acl link number 200
ZXAN(config-link-acl)#rule 1 deny any ingress
0000.0000.0001 0000.0000.0000 egress any
ZXAN(config-link-acl)#rule 2 permit any
ZXAN(config-link-acl)#show acl 200
10-5

link acl 200

rule 1 deny any ingress 0000.0000.0001 0000.0000.0000 egress any
rule 2 permit any ingress any egress any
ZXAN(config-link-acl)#exit
10.5 Configuring the Hybrid ACL

Short Description
Perform this procedure to configure the hybrid ACL and apply it to the port.
Prerequisites
Context
In a hybrid ACL, rules are defined according to criteria mentioned in pervious three ACL
types, which include:
l Source/destination MAC address
l Source VLAN ID
l Source/destination IP address
l Source/destination TCP port number
l Source/destination UDP port number
To configure the hybrid ACL, perform the following steps:
Steps
3. Use the acl hybrid command to enter the hybrid ACL configuration mode.
Note:
The hybrid ACL number ranges from 300 to 399. It can be applied to the Ethernet port, EPON
OLT port, EPON ONU port, and GPON ONU port.
10-6

Note:
l Each hybrid ACL supports up to 127 rules.

Result
The hybrid ACL is configured successfully.
Example
Configure a hybrid ACL on port gei_0/14/1:
l Deny ARP packets.
l Deny IP packets of the destination IP address 192.168.1.0/24 and source MAC
address 0000.0000.0001.
ZXAN(config)#acl hybrid number 300
ZXAN(config-hybd-acl)#rule 1 deny any any any arp
ZXAN(config-hybd-acl)#rule 2 deny any any 192.168.1.0 0.0.0.255
ip ingress 0000.0000.0001 0000.0000.0000 egress any
ZXAN(config-hybd-acl)#rule 3 permit any any any any
ZXAN(config-hybd-acl)#show acl 300
acl hybrid number 300
rule 1 deny any any any arp ingress any egress any
rule 2 deny any any 192.168.1.0 0.0.0.255 ip ingress
0000.0000.0001 0000.0000. 0000 egress any
rule 3 permit any any any any ingress any egress any
ZXAN(config-hybd-acl)#exit
10-7

10-8

Chapter 11
PON Port Protection
Configuration
Table of Contents
Overview ..................................................................................................................11-1
Configuring the EPON PON Port Protection .............................................................11-1
Configuring the GPON PON Port Protection.............................................................11-6
11.1 Overview
Service Description
PON supports PON port protection mechanism, which improves the transmission reliability.
When the optical link between the active PON and ONUs is faulty, services are switched
to the backup PON port.
The ZXA10 C220 provides the protection switchover function in the following ways with
the priorities from high to low:
l Force switchover
l Alarm triggering
l Manual switchover
11.2 Configuring the EPON PON Port Protection

Short Description
Perform this procedure to configure the EPON PON port protection.
Prerequisites
on the uplink port.
l The EPON service is configured.
11-1

Context
The ZXA10 C220 supports four types of PON port protection:
l Type A
Type A is the OLT-side redundancy protection. The two PON ports of the OLT use one
PON MAC chip and are connected to the two optical modules through the 1:2 electrical
switch to achieve protection on the two PON ports. The OLT side of the splitter has
two input ports and multiple output ports, which are applicable for protection between
the PON ports on the same PON card. This type of protection can only recover the
OLT-side service.
l Type B
Type B is the OLT-side redundancy protection. The two PON ports of the OLT use
independent PON MAC chips and optical modules to achieve protection on the two
PON ports. The OLT side of the splitter has two input ports and multiple output ports,
which are applicable for protection between the PON ports on the same PON card
and among different PON cards. This type of protection can only recover the OLT-side
service.
l Type C
Type C is the OLT-side and ONU-side full redundancy protection, also known as full
duplex protection. The two PON ports on the OLT, two optical modules on the ONU,
backbone fiber, splitter, and distribution fiber all use dual-route redundancy. This type
of protection is implemented in the following modes:
à On the same PON MAC chip on the same PON card
à On different PON MAC chips on the same PON card
à Among different PON cards
The ONU uses one PON MAC chip and different optical modules, and the standby
optical module is in cold standby state. In this configuration mode, the system can
switch to the standby device to recover the service at any time.
l Type D
Type D is the OLT-side and ONU-side full redundancy protection, also known as full
duplex protection. The two PON ports on the OLT, two PON ports on the ONU,
à On different PON MAC chips on the same PON card

à Among different PON cards
The ONU uses different PON MAC chips and different optical modules. In this
configuration mode, the system can switch to the standby device to recover the
service at any time.
This topic describes configuration of type B PON port protection.
11-2

Chapter 11 PON Port Protection Configuration
Networking Diagram
Figure 11-1 shows the networking diagram of the EPON PON port protection.
Figure 11-1 EPON PON Port Protection ServiceNetworking Diagram
The ONU connects two EPON ports of the ZXA10 C220 through a splitter to achieve PON
port protection.
Configuration Data
Table 11-1 lists the configuration data for the EPON PON port protection.
Table 11-1 Configuration Data of EPON PON Port Protection
Item Data
Working PON port 0/5/1
Protecting PON port 0/5/2
PON protection group l Group name: zte

l Protection type: Type B
l Protection mode: restorable mode
l Restoring time interval: 120 seconds
Configuration Flow
Figure 11-2 shows the configuration flow of the EPON PON port protection.
11-3

Figure 11-2 EPON PON Port Protection Configuration Flow
To configure the EPON PON port protection, perform the following steps:
Steps
1. Enter the PON configuration mode. Clear configuration on the protecting PON port
(optional).
In PON mode, use the clear command to clear configuration on the protecting PON
port. If there is no configuration on the protecting PON port, you may skip the step.
ZXAN(config)#pon
ZXAN(config-pon)#clear epon-olt_0/5/2
[Successful]
2. Configure the PON PON port protection group.

In PON mode, use the protection group command to create the PON port protection
group.
ZXAN(config-pon)#protection group zte workpon epon-olt_0/5/1 protectpon
epon-olt_0/5/2 typeB
[Successful]
ZXAN(config-pon)#show protection group list
zte
3. Configure the protection group properties.

Use the protection prop command to configure the protection group properties,
including the switchover mode and waiting time interval.
11-4

ZXAN(config-pon)#protection prop group zte mode revertive wtr 120

ZXAN(config-pon)#show protection group information zte
Name : zte
Work channel interface : epon-olt_0/5/1
Protect channel interface: epon-olt_0/5/2
Protection type : typeB
Protection mode: revertive
Time to restore(s): 120
Active channel: work-channel
Alarm request:
Work channel: OLTSF CardOff
Protect channel: OLTSF CardOff
Externel request: no-request
The parameters for the PON protection group properties are as follows:
l Switchover mode: Revertive mode and non-revertive mode. By default, it is

non-revertive mode.
l Time to restore: The time to wait for restoration. When the protection mode is
non-revertive, the time interval is 0. When the mode is revertive, the time interval
is greater than 30 seconds in general.
4. (Optional) Configure the switchover mode between the working port and protecting
port of the protection group.
Use the protection switch-command command to configure the switchover mode
between the working port and protecting port of the protection group. This instance
uses the default mode (no switchover mode). To configure the mode, use the
following command:
ZXAN(config-pon)#protection switch-command group zte force p2w
The switchover modes include the following:

l Force: Work on this port regardless the status. You can switch over between the
protecting port and working port by force.
l Manual: Switch over to a port manually. You can switch over between the
protecting port and working port manually.
l Lockoutprotect: Disable protection.
Use the no protection switch-command command to clear all the external switchover
commands, that is, to delete the force command, manual command, or lock command.
11-5

Note:
The priorities from high to low are as follows:
l Clear all
l Lock protection
l Switch over the working port to protecting port by force
l Switch over the protecting port to working port by force
l Switch over the working port to protecting port manually
l Switch over the protecting port to working port manually
If a lower priority is configured after a higher priority is configured, the lower one does not take
effect. It is necessary to clear the previous mode and then configure the lower priority.

ZXAN(config-pon)#end
ZXAN#write
..[OK]
Result
The EPON PON port protection is configured successfully.
11.3 Configuring the GPON PON Port Protection

Short Description
Perform this procedure to configure the GPON PON port protection.
Prerequisites
on the uplink port.
l The GPON service is configured.
Context
The ZXA10 C220 supports two types of PON port protection:
l Type B
Type B is the OLT-side redundancy protection. The two PON ports of the OLT use
independent PON MAC chips and optical modules to achieve protection on the two
PON ports. The OLT side of the splitter has two input ports and multiple output ports,
11-6

which are applicable for protection between the PON ports on the same PON card
and among different PON cards. This type of protection can only recover the OLT-side
service.
l Type C
Type C is the OLT-side and ONU-side full redundancy protection, also known as full
duplex protection. The two PON ports on the OLT, two optical modules on the ONU,
This topic describes configuration of type B PON port protection.
Networking Diagram
Figure 11-3 shows the networking diagram of the GPON PON port protection.
Figure 11-3 GPON PON Port Protection Networking Diagram
The ONU connects two GPON ports of the ZXA10 C220 through a splitter to achieve PON
port protection.
Configuration Data
Table 11-2 lists the data scheme for the GPON PON port protection.
11-7

Table 11-2 Configuration Data of GPON PON Port Protection
Item Data
Working PON port 0/10/1
Protecting PON port 0/10/2
PON protection group l Group name: zte

l Protection type: type B
l Protection mode: restorable mode
l Restoring time interval: 120 seconds
Configuration Flow
Figure 11-4 shows the configuration flow of the GPON PON port protection.
Figure 11-4 GPON PON Port Protection Configuration Flow
To configure the GPON protection, perform the following steps:
Steps
1. Enter the PON configuration mode. Clear configuration on the protecting PON port
(optional).
In PON mode, use the clear command to clear configuration on the protecting PON
port. If there is no configuration on the protecting PON port, you may skip the step.
ZXAN(config)#pon
ZXAN(config-pon)#clear gpon-olt_0/10/2
11-8

[Successful]
2. Enter the PON mode and configure the PON protection group.
In PON mode, use the protection group command to create the PON protection group.
ZXAN(config)#pon
ZXAN(config-pon)#protection group zte workpon gpon-olt_0/10/1 protectpon
gpon-olt_0/10/2 typeB
.[Successful]
ZXAN(config-pon)#show protection group list
zte
3. Configure the protection group properties.

Use the protection prop command to configure the protection group properties,
including the switchover mode and waiting time interval.
ZXAN(config-pon)#protection prop group zte mode revertive wtr 120
ZXAN(config-pon)#show protection group information zte
Name : zte
Work channel interface : gpon-olt_0/10/1
Protect channel interface: gpon-olt_0/10/2
Protection type : typeB
Protection mode: revertive
Time to restore(s): 120
Active channel: work-channel
Alarm request:
Work channel: No alarm request!
Protect channel: OLTSF
Externel request: no-request
The parameters for the PON protection group properties are as follows:
l Switchover mode: Revertive mode and non-revertive mode. By default, it is
non-revertive mode.
l Time to restore: The time to wait for restoration. When the protection mode is
non-revertive, the time interval is 0. When the mode is revertive, the time interval
is greater than 30 seconds in general.
4. (Optional) Configure the switchover mode between the working port and protecting
port of the protection group.
Use the protection switch-command command to configure the switchover mode
between the working port and protecting port of the protection group. This instance
uses the default mode (no switchover mode). To configure the mode, use the
following command:
ZXAN(config-pon)#protection switch-command group zte force p2w
The switchover modes include the following:
11-9

l Force: Work on this port regardless the status. You can switch over between the
protecting port and working port by force.
l Manual: Switch over to a port manually. You can switch over between the pro-
tecting port and working port manually.
l Lockoutprotect: Disable protection.
Use the no protection switch-command command to clear all the external switchover
commands, that is, to delete the force command, manual command, or lock command.
Note:
The priorities from high to low are as follows:
l Clear all
l Lock protection
l Switch over the working port to protecting port by force
l Switch over the protecting port to working port by force
l Switch over the working port to protecting port manually
l Switch over the protecting port to working port manually
If a lower priority is configured after a higher priority is configured, the lower one does not take
effect. It is necessary to clear the previous mode and then configure the lower priority.

ZXAN(config-pon)#end
ZXAN#write
..[OK]
Result
The GPON PON port protection is configured successfully.
11-10

Chapter 12
Uplink Protection
Configuration
Table of Contents
Overview ..................................................................................................................12-1
Configuring the UAPS ..............................................................................................12-1
Configuring the CL1A 1+1 Protection .......................................................................12-4
Configuring the Link Aggregation..............................................................................12-7
Configuring the ZTE Ethernet Switch Ring................................................................12-9
12.1 Overview
The ZXA10 C220 provides uplink port service protection to enhance the service
transmission stability.
The ZXA10 C220 supports the following uplink protection features:
l UAPS
l CTLA 1+1
l Link aggregation
l ZTE Ethernet Switch Ring
12.2 Configuring the UAPS

Short Description
Perform this procedure to configure the UAPS.
Prerequisites
Context
The ZXA10 C220 supports the UAPS. The system periodically checks the working status
of the uplink port. When the system detects that the working port state is link down or the
link is disconnected, it switches the services to the standby port automatically and without
12-1

interrupting the services. Then, the original working port is switched to the standby port
and the original standby port is switched to the working port.
The working port transmits data while the standby port does not.
To configure the UAPS, perform the following steps:
Steps
2. Use the uaps-group command to configure the UAPS group.

3. Use the revertive command to enable active/standby auto-switch for the UAPS group.
When this function is enabled and the active uplink port is recovered, the system
automatically switches back to the active port.
4. Use the port master-port portlist slave-port portlist command to configure the active
and standby ports for the UAPS group.
5. Use the protect-time command to configure the UAPS group protection time.
If the UAPS group implements switchover once, it does not implement it again during
the protection time to avoid frequent switchover and ensuring the link quality.
6. Use the switch-type command to configure the UAPS group properties.
l common-port: common port switchover
l trunking-port: link aggregation mode
In this mode, the active and standby ports of the UAPS group are in the
aggregation mode. Only when all the active ports are down, the services are
switched over to the standby port. This mode is used when the active and
standby ports are added to two trunk groups and the trunk groups have only the
UAPS group ports.
7. Use the next-hop command to configure the next-hop IP address for link detection.
To modify the next-hop IP address, carry out this command again. To delete the
next-hop IP address, use the no command or set the next-hop parameter to 0.
8. Use the retry-link-detect command to configure the UAPS retry times for link detection.
9. Use the interval-link-detect command to configure the interval for link detection.
The detection period takes effect only when the next-hop IP address is configured.
10. Use the port-optical-tx-control command to enable/disable the optical function on the
standby port by force.
12-2

Chapter 12 Uplink Protection Configuration
Note:
If this function is enabled, the UAPS optical port of the local NE and the peer device should disable
the auto-negotiation mode and enable force mode.
ZXAN(config-if)#no negotiation auto
11. Use the swap command to switch the UAPS group ports by force.
The active and standby ports in the UAPS group can be switched only when the
standby port is up.
12. Use the show uaps groupid command to view the UAPS group status.
Result
The UAPS is configured successfully.
Example
Configure a UAPS group:
l Group ID: 1
l Active port: gei_0/6/1
l Standby port: gei_0/6/2
l Protection time: 400 s
l Switch-type: common port
l Revertive control: enabled
ZXAN(config)#uaps-group 1
ZXAN(cfg-uaps-1)#port master-portlist gei_0/6/1
slave-portlist gei_0/6/2
ZXAN(cfg-uaps-1)#protect-time 400
ZXAN(cfg-uaps-1)#switch-type common-port
ZXAN(cfg-uaps-1)#revertive enable
ZXAN(cfg-uaps-1)#show uaps groupid 1
Revertive control : enable
PortLight control : disable
Protect-time : 400s
Next-hop : 0.0.0.0
Bfd next_hop : 0.0.0.0
Link-type : normal
Link-detect-retry : 5
Link-detect-interval : 3
12-3

Link status : connected or NA

Bfd Link status : connected or NA
Switch-type : common port
Master ports status : forwarding
gei_0/6/1 : down
Slave ports status : block

gei_0/6/2 : down
12.3 Configuring the CL1A 1+1 Protection

Short Description
Perform this procedure to configure the CL1A 1+1 protection.
Prerequisites
l The user service is configured.
Context
The CL1A 1+1 protection means two CL1A cards to protect each other. One CL1A card
is the working card, connecting to the SDH of the opposite end, as the working channel.
The other CL1A card is the protecting card, connection to the SDH of the opposite end, as
the protecting channel.
1+1 protection works in concurrently transmitting and preferably receiving mode.
l On the CL1A->SDH transmitting direction, the working CL1A and protection CL1A
transmit the data simultaneously. And the SDH of the opposite end receives the data
from one channel.
l On the SDH->CL1A direction, the working channel and protection channel receive
the data simultaneously. The main control card receives data from one channel,
discarding data from the other channel.
To create the protection group, the CES source MAC address of the working card must
keep consistent with that of the protection card. No service is allowed when the address
is configured.
If both CL1A cards use STM-1 interface for the uplink service, two MAC addresses must
be configured:
l Source Mac address of the working card: 1: 0015.eb72.0008, 2: 0015.eb72.0009

l Source Mac address of the protection card: 1: 0015.eb72.0008, 2: 0015.eb72.0009
12-4

Note:
If the IP mode is used, the IP addresses should be the same as well.
When the protection group is created, the inner ports of the working card and protection
card need to be added to the corresponding service VLAN at the same time.
To configure the CL1A 1+1 protection, perform the following steps:
Steps
2. Use the ces command to enter the CES configuration mode.

3. Use the sdhprot group command to configure the protection group.
4. Use the sdhprot prop command to configure the properties of the protection group.
Mode: revertive mode and non-revertive mode. By default, it is non-revertive mode.
Wtr : the time to wait for restoration. The unit is s. Only 0 is supported.
5. Use the sdhprot switch-command group command to configure the protection switch
command.
l force: switch over by force
If forced switch-over is selected, the working card can not receive any other
switch-over command nor responds to any switch-over alarm, unless this
command is deleted.
l manual: switch over manually
If manual switch-over is selected, the working card can receive other switch-over
commands. When there is a switch-over alarm , the working card is switched
over to the protection card. When the alarm disappears, the protection card is
automatically switched back to the working card.
l lockoutprotect: lock the protection channel

l w2p: switch over from the working port to the protection port
l p2w: Switch over from the protection port to the working port
After the protection group is created, the system can switch over automatically
according to the optical port alarm (LOS, LOF, and MS-AIS), or by the configuration
commands. Delete the current protection switchover command before switching over
by the configuration commands.
12-5

6. Use the show ces sdhprot group count command to query the quantity of protection
groups.
7. Use the show ces sdhprot group prop command to query the detailed properties of the
protection groups.
8. Use the show ces sdhprot switch-command command to query the external switchover
commands used by the specified protection group.
9. Use the show ces sdhprot request command to query all the requested messages of
the specified protection group, including the alarm request and external switchover
request.
10. Use the show ces sdhprot sync-data progress-bar command to query the data
synchronization process between the working card and the protection card.
After the protection group is created, the service configuration is disabled on the
protection card while the service is configured on the working card. The service on
the working card is synchronized to the protection card automatically.
The protection group can also be created after the service is configured on the working
card to implement the 1+1 protection.
Result
The CL1A 1+1 protection is configured successfully.
Example
Configure the CL1A 1+1 protection.
l Protection group name: aaa
l Working optical port: tdm_0/14/1
l Protection optical port: tdm_0/13/1
l Mode: non-revertive
l Switchover by force: from the working port to the protection port
ZXAN(config)#ces
ZXAN(config-ces)#sdhprot group aaa worksdhport tdm_0/14/1
protectsdhport tdm_0/13/1 1plus1
ZXAN(config-ces)#sdhprot switch-command group aaa force w2p
ZXAN(config-ces)#show ces sdhprot group prop aaa
Name : aaa
Protect interface: tdm_0/13/1
Work interface : tdm_0/14/1
Active interface: protect-channel
Type : 1+1
12-6

Mode: non-revertive
Holdoff: 0
Wtr: 0
12.4 Configuring the Link Aggregation

Short Description
Perform this procedure to configure the link aggregation.
Prerequisites

Context
The ZXA10 C220 supports two types of link aggregation:
l Static trunk
Static trunk directly adds multiple physical ports to a trunk group, thus forming a logical
port. In this mode, users cannot observe the status of the link aggregated ports.
l LACP
LACP converges multiple physical ports into a trunk group to form a logical port and
automatically generates aggregation to obtain the maximum bandwidth.
The following are rules for link aggregation configuration on the ZXA10 C220:
l Supports maximum eight trunk groups, with maximum eight ports in each trunk group.
l Member ports must in full duplex mode.
l VLAN Mode of the member port must be consistent, such as access, trunk, or hybrid.
The logical port formed by link aggregation on the ZXA10 C220 is called smartgroup. A
smartgroup can be used as a common port, and has the same default VLAN properties as
common Ethernet ports.
To configure the link aggregation, perform the following steps:
Steps
2. Use the interface smartgroup command to create an aggregation port group.

3. Use the smartgroup load-balance command to configure the load-balance mode.
12-7

Note:
The ZXA10 C220 supports six types of load-balance:
l Based on the source IP address

l Based on the destination IP address
l Based on the source and destination IP addresses
l Based on the source MAC address
l Based on the destination MAC address
l Based on the source and destination MAC addresses
The default mode is based on the source and destination MAC addresses.

5. Use the smartgroup mode command to configure the physical port of the aggregation
port group and set the port aggregation mode.
Note:
The aggregation modes include the following:
l On: The port runs static trunk. Both end of the aggregated link should be set to the on mode.
l Passive: The port runs LACP in passive negotiation mode.
Active: The port runs LACP in active negotiation mode.
It is recommended to set one end to active mode and the other end to passive, or set both
ends to active.
The VLAN properties of a member port should be consistent with that of the smartgroup. Other-
wise, the port cannot be added to the trunk group.
Result
The link aggregation is configured successfully.
Example
The ZXA10 C220 connects to switch B through the smartgroup port, which is aggregated
by four physical ports: gei_0/14/1 – gei_0/14/4. The port mode of smartgroup is trunk. The
port bears VLAN 10 and VLAN 20. It uses the load-balance mode based on the source IP
address.
ZXAN(config)#interface smartgroup1
12-8


ZXAN(config-if)#smartgroup load-balance src-ip
ZXAN(config-if)#smartgroup 1 mode active
12.5 Configuring the ZTE Ethernet Switch Ring

Short Description
Perform this procedure to configure the ZTE Ethernet switch ring (ZESR).
Prerequisites

Context
The ZESR provides protection to the ring that is composed of uplink ports of multiple
ZXA10 C220s. When one or multiple uplink ports are faulty, the services are switched
to the secondary port.
Definitions in the ZESR are as below:
l ZESR domain
A ZESR domain, where the ZESR protocol is valid, consists of a master node, multiple
transit nodes, the corresponding control VLAN, and protected VLANs. A typical ZESR
domain equals to a physical ring topology.
12-9

l Master node
There is only one master node in each ZESR domain. The master node sends
health-check control messages to detect status of the ring, and blocks/unblocks
ports.
l Transit node
Transit nodes are the other nodes in a ZESR domain which receive and froward
health-check control messages. Transit nodes detects status of their ports in the ring.
If there is a link disconnection, the transit node informs the master node.
l Primary port
The primary port in the master node sends health-check control messages in the
control VLAN. Primary ports in transit nodes only forward messages.
l Secondary port
The secondary port in the master node receives and detects health-check control
messages. When the ring is in proper state, the port status is block, which means the
port blocks all packets in protected VLANs. When the ring is invalid, the secondary
port status changes to forward.
l Control VLAN
There is only one control VLAN in each ZESR. Health-check control messages are
transited in the control VLAN. On each node, there are only two ports in the control
VLAN. When the secondary port on the master node is in block status, it still receives
data messages in the control VLAN.
l Protected VLAN
Protected VLANs are service VLANs which carry user data. When a ZESR is in the
proper ‘complete’ status, the secondary port in the master node blocks all packets in
protected VLAN to avoid packets storm.
To configure the ZESR, perform the following steps:
Steps
2. Use the vlan command to configure the control VLAN and protected VLAN.
3. Use the spanning-tree enable command to enable STP.
4. Use the spanning-tree mst configuration command to enter the STP configuration
mode.
5. Use the instance command to configure STP instance and VLAN mapping.
6. Use the interface command to enter the uplink port configuration mode.
7. Use the switchport vlan command to configure uplink port of the control VLAN and
protected VLAN.
8. Use the zesr command to configure ZESR domain.
12-10

9. Use the zesr-set-healthtime command to configure the interval of health-check control

messages in the ZESR domain.
10. Use the zesr-set-failtime command to configure the fail time of the ZESR domain.
11. Use the zesr-set-preforwardtime command to configure the pre-forward time of the
ZESR domain.
12. Use the show zesr command to query information about the ZESR domain.
Result
The ZESR is configured successfully.
Example
A typical ZESR networking diagram is shown in Figure 12-1.
Figure 12-1 Typical ZESR Networking Diagram
Configure a ZESR with the following parameters:

l Master node: NE 1
l Control VLAN: VLAN 1000
l Protected VLAN: VLAN 500 – 600
The configuration on the master node is as below:
12-11

ZXAN(vlan)#vlan 500-600,1000
ZXAN(vlan)#exit
ZXAN(config-mstp)#instance 1 vlans 1000
ZXAN(config-mstp)#instance 2 vlans 500-600
ZXAN(config-mstp)#exit
ZXAN(config)#interface gei_0/12/1-2
ZXAN(config-if-range)#switchport vlan 500-600 tag
ZXAN(config)#zesr ctrlvlan 1000 master 0 primaryport gei_0/12/1 secondport
gei_0/12/2 protectInstance 2 ctrlInstance 1 //master 1 means the master node
ZXAN(config-if)#show zesr ctrlvlan 1000
zesr domain:
ctrlvlan : 1000
state : complete
node type : Master
healthtime : 1000ms
failtime : 3000ms
preforwardtime : 3000ms
protectInstance : 2
ctrlvlanInstance : 1
primaryport status : forward
gei_0/12/1 : up
secondport status : block
gei_0/12/2 : up
The configuration on the transit node is as below:
ZXAN(vlan)#vlan 500-600,1000
ZXAN(vlan)#exit
ZXAN(config-mstp)#instance 1 vlans 1000
ZXAN(config-mstp)#instance 2 vlans 500-600
ZXAN(config-mstp)#exit
ZXAN(config)#interface gei_0/12/1-2
ZXAN(config-if-range)#switchport vlan 500-600 tag
ZXAN(config)#zesr ctrlvlan 1000 master 1 primaryport gei_0/12/1 secondport
gei_0/12/2 protectInstance 2 ctrlInstance 1 //master 1 means the transit node
12-12

ZXAN(config)#show zesr ctrlvlan 1000

zesr domain:
ctrlvlan : 1000
state : complete
node type : Transit
healthtime : 1000ms
failtime : 3000ms
preforwardtime : 3000ms
protectInstance : 2
ctrlvlanInstance : 1
primaryport status : forward
gei_0/12/1 : up
secondport status : forward
gei_0/12/2 : up
12-13

12-14

Chapter 13
QoS Configuration
Table of Contents
Overview ..................................................................................................................13-1
Traffic Management Based On ACL Rules ...............................................................13-1
Configuring the Traffic Shaping ................................................................................13-8
Queue Scheduling Configuration ..............................................................................13-9
Configuring the Mapping Between CoS and DSCP ................................................13-15
Configuring the Bridge Port QoS ............................................................................13-17
13.1 Overview
Service Description
QoS indicates the performance of data flows when they pass the network. QoS provides
the peer-to-peer quality assurance through a series of metrics such as the service
availability, throughput, delay/jitter, and packet loss ratio.
The ZXA10 C220 support various QoS operations, including traffic classification and mark,
congestion management, traffic monitoring and shaping.
l It uses ACL to classify packets according to the physical interface, MAC address, IP
address, protocol type, or application port number. Meanwhile, it marks the 802.1q
priority or ToS/DSCP priority of the packets.
l It supports traffic shaping based on the port, queue, or policy, and is applicable for
multiple service models.
l It supports priority marking based on the packet classification result or physical port.
l Both the user side and network side support eight CoS queues. The network side
supports FQ, SP, and WRR scheduling. The user side supports SP, WRR, and
SP+WRR scheduling.
13.2 Traffic Management Based On ACL Rules

This section includes the following topics:
l Configuring the Traffic Limit

l Configuring the Priority Mark
l Configuring the Traffic Mirroring
l Configuring the Redirection
13-1

l Configuring the Traffic Statistics
13.2.1 Configuring the Traffic Limit

Short Description
Perform this procedure to configure the traffic limit.
Prerequisites
l The port for traffic limit works normally.
Context
Traffic limit restrains the bandwidth of certain service traffic. When the service bandwidth
exceeds the limit, the optional actions are as follows:
l Discard or forward the packets.
l Modify DSCP.
l Modify the drop precedence.
To configure the traffic limit, perform the following steps:
Steps
2. Use the acl command to configure the ACL.
4. Use the traffic-limit in command to configure the traffic limit.
5. In Ethernet interface mode, use the ip access-group acl in command to apply the ACL
to the uplink port.
6. In EPON-OLT interface mode, use the ip access-group acl in command to apply the
ACL to the EPON-OLT port.
7. In EPON-ONU interface mode, use the ip access-group acl{ in | out} [ vport vport]
command to apply the ACL to the EPON-ONU interface.
Result
The traffic limit is configured successfully.
Example
Limit the traffic of the packets whose source IP address is 168.2.5.5 on ports gei_0/14/1
and epon-onu_0/6/4:1.
13-2

Chapter 13 QoS Configuration
ZXAN(config-hybd-acl)#rule 1 permit any 168.2.5.5 0.0.0.0 any any
ZXAN(config-hybd-acl)#exit
ZXAN(config)#show acl 300
acl hybrid number 300
rule 1 permit any 168.2.5.5 0.0.0.0 any any ingress any egress any
rule 2 permit any any any any ingress any egress any
ZXAN(config)#traffic-limit in 300 rule-id 1 cir 5000 cbs 2000
pir 10000 pbs 2000 mode blind
13.2.2 Configuring the Priority Mark

Short Description
Perform this procedure to configure the priority mark.
Prerequisites

l The port for priority mark works normally.
Context
Priority mark is used to assign priorities to certain packets according to ACL rules. It
supports the following operations:
l Modify the CoS queue and the 802.1p value.

l Modify the CoS queue but not the 802.1p value.
l Modify the DSCP value.
l Modify the drop precedence.
l Modify the packet ToS priority.
Note:
The ToS priority and DSCP priority are mutually exclusive and cannot be configured at the same time.
13-3

The ZXA10 C220 supports ACL configuration on the uplink port, OLT port, and ONU bridge
port.
To configure the priority mark, perform the following steps:
Steps

4. Use the priority-mark in command to configure the priority mark.
to the uplink port.
7. In xPON-ONU interface mode, use the ip access-group acl in [ vport vport] command
to apply the ACL to the xPON-ONU interface.
Result
Priority mark is configured successfully.
Example
Configure the priority mark on the traffic that matches ACL rules and is received on ports
gei_0/14/1 and epon-onu_0/6/4:1. The DSCP priority is 10, the local priority is 0, and the
drop precedence is low.
ZXAN(config)#priority-mark in 300 rule-id 1 dscp 10 local-precedence 0
drop-precedence low
13-4

13.2.3 Configuring the Traffic Mirroring

Short Description
Perform this procedure to configure the traffic mirroring.
Prerequisites
l The source port and destination port for traffic mirroring work normally.
Context
The ZXA10 C220 supports ACL configuration on the uplink port, OLT port, and PON-ONU)
interface .
l The system supports only one mirroring destination port.
l Multiple ports can be mirrored to one destination port.
l The mirroring destination port cannot be the aggregation port.
To configure the traffic mirroring, perform the following steps:
Steps
4. Use the traffic-mirror in command to configure traffic mirroring.
to the uplink port.
Result
The traffic mirroring is configured successfully.
Example
Mirror the traffic that matches ACL rule 10 received from port gei_0/14/1 to port gei_0/14/2.
ZXAN(config-std-acl)#rule 1 permit 168.2.5.5
ZXAN(config-std-acl)#rule 2 permit any
13-5

ZXAN(config)#traffic-mirror in 10 rule-id 1 interface gei_0/14/2
13.2.4 Configuring Redirection

Short Description
Perform this procedure to the configure redirection.
Prerequisites

l The port for redirection works normally.
Context
Redirection modifies the egress direction of packets according to traffic classification. The
direction may be modified to a specified port, CPU, or next-hop IP address.
To configure the redirection, perform the following steps:
Steps
4. Use the redirect in command to redirect the traffic that matches the ACL rules.
to the uplink port.
Result
The redirection is configured successfully.
13-6

Example
Redirect the packets whose source IP address is 168.2.5.5 from port gei_0/14/4 to port
gei_0/14/3. Configure policy routing on the packets whose destination IP address is
166.100.5.6. Specify the next-hop IP address 166.88.96.56.
ZXAN(config)#acl extend number 100
ZXAN(config-ext-acl)#rule 1 permit ip 168.2.5.5 0.0.0.0 any
ZXAN(config-ext-acl)#rule 2 permit ip any 66.100.5.6 0.0.0.0
ZXAN(config-ext-acl)#rule 3 permit ip any any
ZXAN(config)#redirect in 100 rule-id 1 interface gei_0/14/3
ZXAN(config)#redirect in 100 rule-id 2 next-hop 166.88.96.56
13.2.5 Configuring the Traffic Statistics

Short Description
Perform this procedure to configure the traffic statistics.
Prerequisites
l The port for traffic statistics works normally.
Context
Traffic statistics is used to collect statistics on the packets of specific service flows. It
counts quality and bytes of the packets arrived at the ingress port.
To configure the traffic statistics, perform the following steps:
Steps

4. Use the traffic-statistics in command to collect statistics on the traffic that matches the
ACL rules.
to the uplink port.
13-7

8. Use the show traffic-statistics command to query the traffic statistics information.
9. In privilege mode, use the clear traffic-statistics command to clear traffic statistics.
Result
The traffic statistics is configured successfully.
Example
Collect statistics on the traffic that matches ACL rule 300 received on ports gei_0/14/2 and
epon-onu_0/6/4:1.
ZXAN(config)#traffic-statistics in 300 rule-id 1 pkt-type
all statistics-type byte
ZXAN(config)#traffic-statistics in 300 rule-id 2 pkt-type
all statistics-type packet
13.3 Configuring the Traffic Shaping

Short Description
Perform this procedure to configure the traffic shaping.
Prerequisites
l The uplink port works normally.
13-8

l The OLT port works normally.
Context
Traffic shaping controls the speed rate of the output packets so that the packets are sent
at a constant speed. Traffic shaping is used to set the packet speed rate to match that of
the receiving device, to avoid congestion or packet discarding.
By default, the output traffic shaping function is disabled.
To configure the traffic shaping, perform the following steps:
Steps
2. Use the qos traffic-shape command to configure traffic shaping on the uplink port.
3. In EPON-OLT interface mode, use the qos traffic-shape command to configure traffic
shaping on the PON port.
Result
The traffic shaping is configured successfully.
Example
Configure the traffic shaping on uplink port gei_0/14/1.
ZXAN(config-if)#qos traffic-shape rate-limit 1024 bucket-size 2048
13.4 Queue Scheduling Configuration

Queue is the unit for packet scheduling on a physical port. Queue scheduling ensures that
the packets for key services are processed in time when network congestion occurs.
ZXA10 C220 supports the following queue scheduling features:
l The ZXA10 C220 supports eight queues and schedules the queues according to the
queue priorities. The queue with larger queue ID has higher priority.
l The mapping relations between the queues and the 802.1p priorities can be
configured.
l The queue depth can be configured.
l The ZXA10 C220 supports three queue scheduling modes:
à SP (default)
à WRR
13-9

à SP + WRR
13.4.1 Configuring the Queue Scheduling

Short Description
Perform this procedure to configure the queue scheduling.
Prerequisites
Context
Each physical port of the ZXA10 C220 supports eight (0 – 7) output queues, which are
called CoS queues. The device performs operations on the output queues on the entry
port according to the CoS queues corresponding to the packet 802.1p. When congestion
occurs on the network, multiple packets may compete for one resource. Queue scheduling
can solve this problem.
The ZXA10 C220 supports three queue scheduling modes:
l SP
Queue scheduling follows the priorities strictly. The packets of the queue with higher
priority are sent first. By default, this mode is used.
l WRR
The eight queues have weights from high to low (w7 – w0). The weight indicates
the proportion of obtaining resources. WRR implements round scheduling between
queues to ensure that each queue has certain service time.
l SP + WRR
This mode is the combination of the previous modes. Some queues use SP
scheduling and some use WRR scheduling. When the WRR value is specified to 0,
the queue uses the SP scheduling.
On the network side, the ZXA10 C220 supports three queue scheduling modes:
l Fair-queue
l SP
l WRR
Note:
In fair-queue mode, each priority is scheduled fairly.
13-10

The ZXA10 C220 PON port supports three types of queue scheduling modes:
l SP
l WRR
l SP+WRR
To configure the queue scheduling, perform the following steps:
Steps
2. In Ethernet mode, use the qos queue-mode command to configure the queue
scheduling mode on the network-side port.
Note:
When the queue weight is 0, the queue scheduling mode is SP.
3. Use the qos-user-side queue-block-profile command to create PON interface queue

scheduling profiles.
Note:
The system supports five profiles. The default QoS queue block profile is _DFT_QUEUE_BLOC
K_PRF, which cannot be modified or deleted. The user can create and configure the other four
profiles as required.
4. Use the queue-block command to configure the queue scheduling profile parameters
of the PON port.
Note:
When the queue weight is 0, the queue scheduling mode is SP.
The queue depth of each default PON port is 48, which cannot be configured arbitrarily.
5. In xPON-OLT interface mode, use the qos queue-block-profile command to apply the
queue scheduling profile to the specified OLT port.
Result
The queue scheduling is configured successfully.
Example
Configure SP queue scheduling on port gei_0/14/1.
13-11

ZXAN(config-if)#qos queue-mode strict-priority
Configure WRR queue scheduling on port epon-olt_0/5/1, with the weights of 10, 10, 20,
20, 10, 10, 10, and 10 and the queue depth of 48.
ZXAN(config)#qos-user-side queue-block-profile test
ZXAN(cfg-queue-prf)#queue-block queue0 10 48 queue1 10 48
queue2 20 48 queue3 20 48 queue4 10 48 queue5 10 48
queue6 10 48 queue7 10 48
ZXAN(cfg-queue-prf)#exit
ZXAN(config)#show qos-user-side queue-block-profile test
---------------------------------------------------------
profile name : TEST
profile detail :
queue-block ---- queue_number : 0 1 2 3 4 5 6 7
---- queue_weight : 10 10 20 20 10 10 10 10
---- queue_depth : 48 48 48 48 48 48 48 48
profile used by :
ZXAN(config-if)#qos queue-block-profile test
13.4.2 Configuring the Mapping Between Queues and 802.1p

Priorities
Short Description
Perform this procedure to configure the mapping between queues and 802.1p priorities.
Prerequisites

Context
Table 13-1 lists the default mapping between queues and 802.1p priorities.
13-12

Table 13-1 Mapping Relations Between Queues and 802.1p Priorities
Queue No. 802.1p Priority Drop Precedence at Drop Precedence at

Network Side User Side
0 0 0 1
1 1 0 1
2 2 0 1
3 3 0 1
4 4 0 1
5 5 0 1
6 6 0 1
7 7 0 1
To configure the mapping between queues and 802.1p priorities, perform the following
steps:
Steps
2. Use the qos-network-side cos-local-map command to configure the mapping table
between the network-side 802.1p user priorities and the local queues.
3. Use the qos-network-side cos-drop-map command to configure the mapping table
between network-side 802.1p user priorities and the local drop precedences.
4. Use the qos-network-side trust-cos enable command to enable mapping between
network-side 802.1p priorities and queues.
Note:
If mapping is enabled, the incoming data is mapped from CoS to queues according to the cos-
local-map table.
5. Use the qos-user-side cos-queue-map-profile command to create a mapping profile from

802.1p user priorities on the user-side port to the local queues.
Note:
The system supports five mapping profiles. The default profile name is _DFT_COS_QUEUE_MA
P_PRF, which cannot be modified or deleted. The user can create and configure the other four
mapping profiles as required.
6. Use the cos-queue-map command to configure the mapping between the 802.1p user
priorities to the local queues.
13-13

7. In OLT interface mode, use the qos cos-queue-map-profile command to apply the
mapping profile on the OLT interface.
8. Use the show qos-network-side cos-local-map command to query the mapping between
the network-side port 802.1p priorities and queues.
9. Use the show qos-network-side cos-drop-map command to query the mapping between
the network-side port 802.1p user priorities to the local drop precedence.
10. Use the show qos-network-side trust-cos command to query the mapping function on
the network-side port
11. Use the show qos-user-side cos-queue-map-profile command to query the information
on the mapping profile from the user-side port 802.1p priorities to queues.
Result
The mapping between queues and 802.1p priorities is configured successfully.
Example
Configure the mapping on the network-side port.
l 802.1p priority 0 to queue 0
l Other priorities to queue 6
ZXAN(config)#qos-network-side cos-local-map cos0 0 cos1 2 cos2 6 cos3 6 cos4 6
cos5 6 cos6 6 cos7 6
ZXAN(config)#qos-network-side trust-cos enable
Configure the mapping on the user-side port epon-olt_0/5/1.

l Other priorities to queue 6
l Drop precedences: 0
ZXAN(config)#qos-user-side cos-queue-map-profile test
ZXAN(cfg-cos2q-prf)#cos-queue-map cos0 0 0 cos1 2 0 cos2 6 0 cos3 6 0 cos4 6 0
cos5 6 0 cos6 6 0 cos7 6 0
ZXAN(cfg-cos2q-prf)#exit
ZXAN(config)#show qos-user-side cos-queue-map-profile test
---------------------------------------------------------
profile name : TEST
profile detail :
cos-queue-map ---- cos : 0 1 2 3 4 5 6 7
13-14

---- queue : 0 2 6 6 6 6 6 6
---- drop : 0 0 0 0 0 0 0 0
profile used by :
ZXAN(config-if)#qos cos-queue-map-profile test
13.5 Configuring the Mapping Between CoS and DSCP

Short Description
Perform this procedure to configure the mapping between the CoS (802.1p) priorities and
DSCP priorities.
Prerequisites
Context
By default, the mapping between the CoS (802.1p) priorities and DSCP priorities on the
ZXA10 C220 are as follows:
l Table 13-2 lists the mapping relationship between the DSCP priority and CoS priority
in qos-network-side conform-dscp. The default drop precedence is 0.
Table 13-2 Mapping Between DSCP Priority and CoS (802.1p) Priority
DSCP Priority CoS Priority
0-7 0
8 - 15 1
16 - 23 2
24 - 31 3
32 - 39 4
40 - 47 5
48 - 55 6
56 - 63 7
l By default, the value of qos-network-side trust-dscp is disable.

l By default, the value of qos-user-side cos-dscp-map is:
CoS 0 – 7 correspond to DSCP 0, 8, 16, 24, 32, 40, 48, 56.

l Table 13-2 list the default values of qos-user-side dscp-cos-map.
13-15

To configure the mapping between the CoS (802.1p) priorities and DSCP priorities, perform
the following steps:
Steps
2. Use the qos-network-side conform-dscp command to configure the DSCP value to
service priority mapping on the network-side port.
Note:
This mapping table is used when trust-dscp is enabled on the port.
3. Use the qos-network-side trust-dscp enable command to enable DSCP mapping on the
network-side port.
4. Use the qos-user-side cos-dscp-map command to configure the mapping relations
between the user-side port CoS (802.1p) values and the DSCP values and modify
the DSCP priority according to the 802.1p priority.
Note:
This mapping table is used when the DSCP mode is trust-cos-map on the port or virtual port.
5. Use the qos-user-side dscp-cos-map command to configure the mapping between the
user-side port DSCP values and the CoS (802.1p) values and modify the 802.1p
priority according to the DSCP priority.
Note:
This mapping is used when the mode of CoS or CTAG-CoS is trust-dscp-map on the port or virtual
port.
6. Use the show qos-network-side conform-dscp command to query the mapping between
the network-side port CoS (802.1p) priorities and DSCP priorities.
7. Use the show qos-network-side trust-dscp command to query the DSCP mapping status
on the network-side port.
8. Use the show qos-user-side cos-dscp-map command to query the mapping between the
user-side port CoS (802.1p) values and DSCP values.
9. Use the show qos-user-side dscp-cos-map command to query the mapping between the
user-side port DSCP values and CoS (802.1p) values.
13-16

Result
The mapping between CoS and DSCP is configured successfully.
Example
Configure the priority mapping table on the network-side port:
l DSCP of the received packet: 0
l Modify the DSCP value to 61
l CoS: 0
l Drop precedence: 2
ZXAN(config)#qos-network-side conform-dscp 0 61 0 2
ZXAN(config)#qos-network-side trust-dscp enable
ZXAN(config)#show qos-network-side conform-dscp
--------------------------------------------------------------------
dscp list 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
dscp value 61 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
cos value 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
drop priority 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
------------------------------------------------------------------
dscp list 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
dscp value 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
cos value 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
drop priority 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
---------------------------------------------------------------
dscp list 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47
dscp value 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47
cos value 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
drop priority 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
--------------------------------------------------------------
dscp list 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
dscp value 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
cos value 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
drop priority 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ZXAN(config)#show qos-network-side trust-dscp
-----------------------------------
trust-dscp: Enable
13.6 Configuring the Bridge Port QoS

Short Description
Perform this procedure to configure the bridge port QoS.
13-17

Prerequisites

Context
By default, the system uses the default QoS profile _DFT_VIRTUAL_PORT_PRF on all the
bridge ports. The detailed parameters are as follows:
ZXAN(config)#show qos-user-side virtual-port-profile
_DFT_VIRTUAL_PORT_PRF
-------------------------------------------------------
profile name : _DFT_VIRTUAL_PORT_PRF
profile detail :
cos-filter ---- : disable
def-scos ---- : 0
cos-remark-profile ---- : _DFT_COS_REMARK_PRF
ingress-cos-set-mode ---- : trust
egress-cos-set-mode ---- : trust
ingress-dscp-set-mode ---- : trust
profile used by :
To configure the bridge port QoS, perform the following steps:
Steps
2. Use the qos-user-side virtual-port-profile command to create a bridge port QoS profile.
Note:
The system supports five profiles. The system default profile is _DFT_VIRTUAL_PORT_PRF,
which cannot be modified or deleted. The user can create and configure the other four map-
ping profiles as required.
3. Use the def-scos command to configure the default CoS value.

4. Use the cos-filter command to configure CoS priority filtering.
When this function is enabled and the CoS value in the ingress packet is inconsistent
with the default CoS value of the virtual port, this packet is discarded.
5. Use the ingress-cos-set-mode command to configure the upstream CoS priority setting
mode on the PON port.
13-18

Note:
The CoS priority setting modes include the following:
l trust: Keep the CoS value of the upstream data stream the same.
l scos-override: Change the CoS field of the external tag according to the def-scos value.
l scos-remark: Change the CoS field of the external tag according to the CoS remark profile.
l ccos-scos-remark: Change the CoS field of both the external and internal tags according
to the CoS remark profile.
6. Use the egress-cos-set-mode command to configure the downstream CoS priority

setting mode on the PON port.
Note:
l trust: Set the CoS field according to the CoS value of the ingress packet.
l trust-dscp-map: Implement mapping according to the mapping table from the DSCP values
to the CoS (802.1p) values.
l remark: Change the CoS field according to the CoS remark profile.
7. Use the ingress-dscp-set-mode command to configure the upstream DSCP value setting
mode on the PON port.
Note:
The DSCP value setting modes include the following:
l trust: Keep the DSCP value of the upstream data stream the same.
l trust-cos-map: Implement mapping according to the mapping table from the CoS (802.1p)
values to the DSCP values.
8. Use the cos-remark-profile command to configure the CoS remark profile correlated
to the virtual port.
Before carrying out this command, use the qos-user-side cos-remark-profile command
in global configuration mode to create the CoS remark profile.
ZXAN(config)#qos-user-side cos-remark-profile test
ZXAN(cfg-cos-remark-prf)#cos-remark cos0 2
cos1 6 cos2 7 cos3 3 cos4 4 cos5 5
cos6 0 cos7 1
ZXAN(cfg-cos-remark-prf)#exit
By default, all the virtual ports is correlated to CoS profile _DFT_COS_REMA RK_PRF.
9. Use the interface command to enter the xPON-ONU interface mode.

10. Use the qos virtual-port-profile command to use the bridge port QoS profile.
13-19

11. Use the show qos-user-side virtual-port-profile command to query the QoS profile
configuration on the bridge port.
Result
Bridge port QoS is configured.
Example
Create bridge port QoS profile: test.
l Default bridge port CoS value: 2
l Upstream CoS value mode: override
l Apply the profile to VPORT1 of port epon-onu_0/5/1:1
ZXAN(config)#qos-user-side virtual-port-profile test
ZXAN(cfg-qos-vport-prf)#def-scos 2
ZXAN(cfg-qos-vport-prf)#ingress-cos-set-mode override
ZXAN(cfg-qos-vport-prf)#exit
ZXAN(config)#show qos-user-side virtual-port-profile test
---------------------------------------------------------
profile name : TEST
profile detail :
cos-filter ---- : disable
def-scos ---- : 2
cos-remark-profile ---- : _DFT_COS_REMARK_PRF
ingress-cos-set-mode ---- : scos-override
egress-cos-set-mode ---- : trust
ingress-dscp-set-mode ---- : trust
profile used by :
ZXAN(config-if)#qos virtual-port-profile test vport 1
13-20

Chapter 14
User Security Configuration
Table of Contents
Overview ..................................................................................................................14-1
Port Location Configuration ......................................................................................14-1
Configuring the ARP Anti-Spoofing...........................................................................14-6
Configuring the ARP Agent ......................................................................................14-7
Configuring the PON Port Loopback Detection .........................................................14-8
Configuring the Dual-Layer VLAN Interconnection ...................................................14-9
14.1 Overview
The ZXA10 C220 supports the following user security features:
l Port location
l ARP anti-spoofing
l ARP agent
l PON port loopback detection
l Dual-layer VLAN interconnection
14.2 Port Location Configuration

This section includes the following topics:
l Overview
l Configuring the DHCP option 82
l Configuring the PPPoE+
14.2.1 Overview
The ZXA10 C220 provides the port location mechanism to improve network security
and prevent user accounts from being stolen. Port location can be implemented by the
following methods:
l DHCP Option 82
l PPPoE+
14.2.2 Configuring the DHCP Option 82

Short Description
Perform this procedure to configure the DHCP Option 82 function.
14-1

Prerequisites

l All the cards work normally.
l The xPON service and VLAN are configured.
Context
l The Option 82 field includes CID (Circuit ID), RID (Remote ID), and sub-option90
(optional), and provides the information, such as the shelf number, slot number, port
number, VPI, and VCI.
l Only when DHCP Option 82 is enabled, the Option 82 field can be added/stripped
to/from the DHCP packets.
l When DHCP Option 82 is disabled, the system transparently transmits or directly
forwards the DHCP packets without any processing.
To configure the DHCP Option 82 function, perform the following steps:
Steps
2. Use the dhcp-option82 enable command to enable global DHCP Option 82.
3. Use the port-location access-node-identifier command to configure access node ID in
the user ID.
4. Use the port-location hostname command to configure the host name for port location.
This command is mandatory when port-location access-node-identifier is set to the host
name.
6. Use the port-location format command to configure the Agent Circuit ID format.
7. Use the port-location sub-option remote-id command to enable or disable the DHCP
Option 82 Remote ID field.
8. Use the port-location sub-option remote-id name command to configure the remote ID
of port DHCP Option 82.
9. Use the dhcp-option82 enable command to enable the port DHCP Option 82 function.
10. Use the dhcp-option82 trust command to configure the port to trust/untrust port and
configure the processing policy.
14-2

Chapter 14 User Security Configuration
Note:
If it is a Trust port, the user can select the Keep or Replace policy. If it is an Untrust port, the user
can select the Discard or Add policy.
l Keep: keep Option 82 of the DHCP request packet.

l Replace: replace Option 82 of the DHCP request packet.
l Discard: discard the DHCP request packet with Option 82.
l Add: add an option to the DHCP request packet with Option 82.
11. Use the show port-location global command to query the global configuration of port
location.
12. Use the show port-location port command to query the port-level configuration of port
location.
13. Use the show dhcp-option82 global command to query the global configuration of DHCP
Option 82.
14. Use the show dhcp-option82 port command to query the port-level configuration of
DHCP Option 82.
Result
The DHCP Option 82 function is configured successfully.
Example
Configure the DHCP Option 82 function.
ZXAN(config)#dhcp-option82 enable
ZXAN(config)#port-location access-node-identifier inband-mac
ZXAN(config-if)#port-location format china-telecom vport 1
ZXAN(config-if)#port-location sub-option remote-id enable vport 1
ZXAN(config-if)#port-location sub-option remote-id name ZTE123 vport 1
ZXAN(config-if)#dhcp-option82 enable vport 1
ZXAN(config-if)#dhcp-option82 trust true keep vport 1
ZXAN(config)#show port-location global
identifier : inband-mac
rackno : 0
frameno : 0
hostname : ZXAN
ZZXAN(config)#show port-location port epon-onu_0/5/1:1 vport 1
14-3

Onu Vport CircuitId Format RemoteId status RemoteId name

epon-onu_0/5/1:1 1 china-telecom enable ZTE123
ZXAN(config)#show dhcp-option82 global
option82 status : enable
ZXAN(config)#show dhcp-option82 port epon-onu_0/5/1:1 vport 1
Onu Vport Option82 status Trust Policy
epon-onu_0/5/1:1 1 enable true keep
14.2.3 Configuring the PPPoE+

Short Description
Perform this procedure to configure the PPPoE+ function.
Prerequisites
l All the cards work normally.
l The xPON service and VLAN are configured.
Context
When users access the Internet in PPPoE+ mode, the system uses PPPoE+ Intermediate
Agent to locate port. The system carries the user information in the PPPoE+ discovery
packets to report to the BRAS for user authentication, and thus binding the user account
and circuit.
To configure the PPPoE+ function, perform the following steps:
Steps
2. Use the pppoe-plus enable command to enable the global PPPoE+ functions
3. Use the port-location access-node-identifier command to configure access node ID in

the user ID.
4. Use the port-location hostname command to configure the host name for port location.
This command is mandatory when port-location access-node-identifier is set to the host

name.
6. Use the port-location format command to configure the Agent Circuit ID format.
7. Use the port-location sub-option remote-id command to enable or disable the DHCP
Option 82 Remote ID field.
14-4

8. Use the port-location sub-option remote-id name command to configure the port remote
ID name.
9. Use the pppoe-plus enable command to enable the port PPPoE+ function.
10. Use the pppoe-plus trust command to configure the port to trust/untrust port and
configure the processing policy.
Note:
If it is a Trust port, the user can select the Keep or Replace policy. If it is a Untrust port, the user
can select the Discard or Add policy.
l Keep: keep Option 105 of the PPPoE upstream packet.

l Replace: replace Option 105 of the PPPoE upstream packet.
l Discard: discard the PPPoE upstream packet with Option 105.
l Add: add an Option 105 to the PPPoE upstream packet after the original Option 105.
By default, the port is a Untrust port and the processing policy is Add.
11. Use the show port-location global command to query the global configuration of port
location.
12. Use the show port-location port command to query the port-level configuration of port
location.
13. Use the show pppoe-plus global command to query the global configuration of PPPoE+.
14. Use the show pppoe-plus port command to query the port-level configuration of
PPPoE+.
Result
The PPPoE+ function is configured successfully.
Example
Configure the PPPoE+ function.
ZXAN(config)#pppoe-plus enable
ZXAN(config)#port-location access-node-identifier inband-mac
ZXAN(config-if)#port-location format china-telecom vport 1
ZXAN(config-if)#port-location sub-option remote-id enable vport 1
ZXAN(config-if)#port-location sub-option remote-id name ZTE123 vport 1
ZXAN(config-if)#pppoe-plus enable vport 1
ZZXAN(config)#show port-location global
identifier : inband-mac
rackno : 0
14-5

frameno : 0
hostname : ZXAN
ZXAN(config)#show port-location port epon-onu_0/5/1:1 vport 1
Onu Vport CircuitId Format RemoteId status RemoteId name
epon-onu_0/5/1:1 1 china-telecom enable ZTE123
ZXAN(config)#show pppoe-plus global
pppoe-plus status : enable
ZXAN(config)#show pppoe-plus port epon-onu_0/5/1:1 vport 1
Onu Vport Pppoe-plus status Trust Policy
epon-onu_0/5/1:1 1 enable false add
14.3 Configuring the ARP Anti-Spoofing

Short Description
Perform this procedure to configure the ARP anti-spoofing function.
Prerequisites
Context
At the user side, the ARP anti-spoofing function is based on the ARP entries created by
the DHCP module, and the ARP entries of the fixed user configured by the IP access user
management module.
When the ARP anti-spoofing function is enabled, if the source IP address and VLAN of
the received ARP packet exist in the ARP table, the system checks whether the MAC
addresses are the same. If they are different, the system considers the packet as an ARP
spoofing behavior and discards it.
At the network side, the ARP anti-spoofing function is based on the statica gateway MAC
address of the VLAN.
The ARP anti-spoofing function can be configured with up to eight VLANs.
To configure the ARP anti-spoofing function, perform the following steps:
Steps
1. Use the ip-service arp-anti-spoofing command to enable or disable ARP anti-spoofing.
2. Use the ip-service arp-anti-spoofing vlan command to configure ARP anti-spoofing in
the specified VLAN.
3. Use the show ip-service arp command to show the ARP mapping table information.
4. Use the show ip-service arp-anti-spoofing command to show the related configuration
on ARP anti-spoofing.
14-6

Result
The ARP anti-spoofing function is configured successfully.
Example
Configure and query the ARP anti-spoofing funtion.
ZXAN(config)#ip-service arp-anti-spoofing enable
ZXAN(config)#ip-service arp-anti-spoofing vlan 217
direction uplink-port
ZXAN(config)#show ip-service arp-anti-spoofing
Arp Anti-Spoofing status:Enabled.
vlan direction
----------------------
217 uplink-port
14.4 Configuring the ARP Agent

Short Description
Perform this procedure to configure the ARP agent function.
Prerequisites
l The xPON card status is proper.
Context
When the ARP agent function is configured, the ZXA10 C220 responds to ARP requests
for IPoA subscribers and implements DHCP ARP security control.
To configure the ARP agent function, perform the following steps:
Steps
2. Use the arp-agent gateway vlan command to configure ARP agent gateway.
3. Use the show arp-agent gateway command to query ARP agent gateway.
Result
The ARP agent function is configured successfully.
14-7

Example
Set the ARP agent gateway of the interconnection VLAN 2 to 172.168.1.1.
ZXAN(config)#arp-agent gateway vlan 2 172.168.1.1
ZXAN(config)#show arp-agent gateway
Vlan id Gateway IP Gateway MAC Type

-----------------------------------------------
2 172.168.1.1 1a22.2222.2222 static
3 2.2.22.2 1a33.3333.3333 dynamic
4 3.3.33.3 0000.0000.0000 invalid
14.5 Configuring the PON Port Loopback Detection

Short Description
Perform this procedure to configure the loopback detection on a PON port.
Prerequisites
Context
To configure the loopback detection, perform the following steps:
Steps
1. Use the configure terminal command to command to enter the global configuration
mode.
2. Use the pon-loopback-detection enable command to enable global loopback detection
on a PON port.
3. Use the pon-loopback-auto-shutdown enable command to enable loopback port
auto-shutdown function.
Note:
You need to enable loopback port auto-shutdown function before enabling loopback detection on
a PON port.
4. Use the interface command to enter the PON-OLT interface configuration mode.
5. Use the loopback-detection command to enable loopback detection on a PON port.
14-8

6. Use the show pon-loopback-detection command to query loopback detection

information.
Result
The PON port loopback detection is configured successfully.
Example
Configure the loopback detection on epon-olt_0/3/1.
ZXAN(config)#pon-loopback-detection enable
ZXAN(config)#pon-loopback-auto-shutdown enable
ZXAN(config-if)#loopback-detection enable
14.6 Configuring the Dual-Layer VLAN Interconnection

Short Description
Perform this procedure to configure the layer-2 interconnection between PON ports.
Prerequisites
Context
When the dual-layer VLAN interconnection is configured, subscribers in the same SVLAN
and CVLAN but different PON ports can access each other.
l ZXA10 C220 supports maximum 50 interconnection VLANs.
l The dual-layer VLAN interconnection conflicts with global port protection. Before
configuring VLAN interconnection, use the security port-protect disable command to
disable global port protection.
To configure the dual-layer VLAN interconnection, perform the following steps:
Steps
2. Use the security userswitch command to enable dual-layer VLAN interconnection.
3. Use the security usercommunication command to configure VLAN interconnection
entry.
14-9

4. Use the show security user-switch command to query global VLAN interconnection
status.
5. Use the show security vlan-communication command to query VLAN interconnection
entry.
Result
The dual-layer VLAN interconnection is configured successfully.
Example
Configure dual-layer VLAN interconnection for SVLAN 100 and CVLAN 200.
ZXAN(config)#security userswitch enable
ZXAN(config)#security usercommunication svlan 100 cvlan 200
ZXAN(config)#show security user-switch
Security userswitch enable
ZXAN(config)#show security vlan-communication
vlan-communication item:
Svlan Cvlan
-------------
100 200
14-10

Chapter 15
System Security
Configuration
Table of Contents
Overview ..................................................................................................................15-1
Configuring the SSH.................................................................................................15-1
Configuring the TACACS+........................................................................................15-3
Configuring the RADIUS...........................................................................................15-5
Configuring the Management ACL............................................................................15-6
Configuring the Anti-DoS Attack ...............................................................................15-7
Configuring the Ethernet OAM..................................................................................15-9
15.1 Overview
The ZXA10 C220 supports the following system security features:
l SSH
l TACACS+
l RADIUS authentication
l Management ACL
l Anti-DoS attack
l Ethernet OAM
15.2 Configuring the SSH

Short Description
Perform this procedure to configure the SSH.
Prerequisites

l The ZXA10 C220 device runs normally.
Context
The SSH can replace the Telnet to implement secure remote login. The user can use SSH
to encrypt data during transmission to prevent attack. In addition, the data transmitted
15-1

through SSH are compressed, which enhances the transmission speed. When the SSH
client communicates with the server, the user name and password are encrypted for
security purposes.
The ZXA10 C220 works as an SSH server.
To configure the SSH, perform the following steps:
Steps
2. Use the ssh server enable command to enable the SSH function.
3. Use the ssh server version command to configure the SSH version.
4. Use the ssh server generate-key command to generate the RSA key.
Note:
If the protocol version is v2, the client and the server interworks with each other to generate the
key automatically and the user can skip this command.
5. Use the ssh server authentication mode command to configure the SSH authentication
mode.
6. Use the ssh server authentication type command to configure the SSH authentication
type.
Note:
If the authentication mode is local, the user can skip this command.
7. Use the ssh server authentication ispgroup command to configure the SSH
authentication RADIUS group.
Note:
If the authentication mode is local, the user can skip this command.
8. Use the radius authentication-group command to create a RADIUS server group.

9. Use the server command to configure the IP address and parameters of the RADIUS
server.
10. Use the ssh server only command to permit the SSH only.
11. Use the show ssh command to query the SSH configuration.
15-2

Chapter 15 System Security Configuration
Result
The SSH is configured.
Example
Configure the SSH:
l SSH version: 2
l Authentication mode: RADIUS
l Authentication type: PAP
l SSH only: Enable
l RADIUS server: 192.168.1.1
l RADIUS key: zte
ZXAN(config)#ssh server enable
ZXAN(config)#ssh server only
ZXAN(config)#ssh server authentication mode radius
ZXAN(config)#ssh server authentication type pap
ZXAN(config)#ssh server version 2
ZXAN(config)#ssh server authentication ispgroup 2
ZXAN(config)#radius authentication-group 2
ZXAN(config-authgrp-2)#server 1 192.168.1.1 key zte
ZXAN(config-authgrp-2)#exit
ZXAN(config)#show ssh
SSH configuration:
SSH enable-flag configuration : enable
SSH version : ver2.0
SSH only configuration : enable
SSH init server key : disable
SSH auth radius isp-groupid : 2
SSH auth mode : radius
SSH auth type : pap
15.3 Configuring the TACACS+

Short Description
Perform this procedure to configure the TACACS+.
Prerequisites
15-3

Context
The TACACS+ provides the access control service for routers, network access servers,
and other network processing devices through one or multiple central servers. TACACS+
supports independent AAA functions, allowing different TACACS+ security servers to work
as the authentication, authorization, and accounting servers.
TACACS+ and RADIUS are widely used at present. TACACS+ uses TCP while RADIUS
uses UDP. TACACS has three versions. The third version TACACS+ is incompatible with
the previous two versions.
TACACS allows the client to have its own user name and password and send the query
request to the TACACS authentication server (also known as TACACS Daemon or
TACACSD). Generally, this server runs on the host. The host returns a permit/deny packet
to respond to the request, and then determines whether TIP is permitted. This process is
Opened Up, and the related algorithm and data are determined by the TACACS server.
In addition, the TACACS extended protocol supports more authentication requests and
response codes.
To configure the TACACS+, perform the following steps:
Steps
2. Use the login-authorization-type command to configure the login authentication mode.
3. Use the login-authentication-type configure the login authentication type.
4. Use the ssh server authentication mode command to configure the SSH server
authentication mode.
5. Use the tacacs-server host command to configure the TACACS+.
6. Use the aaa group-server tacacs+ command to create an AAA server group.
7. Use the server command to configure the IP address of the server group.
8. Use the aaa authorization exec default command to configure the authorization
information.
9. Use the aaa authentication login default command to configure the authentication
information.
10. Use the aaa accounting commands command to configure the accounting information.
Result
The TACACS+ is configured successfully.
Example
Configure the TACACS+ function on the ZXA10 C220. Set the IP address of the TACACS+
server to 10.63.79.79.
15-4

ZXAN(config)#login-authorization-type tacacs+
ZXAN(config)#login-authentication-type tacacs+
ZXAN(config)#ssh server authentication mode tacacs+
ZXAN(config)#tacacs-server host 10.63.79.79
ZXAN(config)#aaa group-server tacacs+ zte
ZXAN(config-sg)#server 10.63.79.79
ZXAN(config-sg)#exit
ZXAN(config)#aaa authorization exec default group zte
ZXAN(config)#aaa authentication login default group zte
ZXAN(config)#aaa accounting commands 10 default stop-only group zte
ZXAN(config)#exit
ZXAN#write
15.4 Configuring the RADIUS

Short Description
Perform this procedure to configure the RADIUS.
Prerequisites

Context
The RADIUS is a standard AAA protocol. AAA can authenticate the users who access the
route switch, preventing illegal users, and thus improving the device security.
To configure the RADIUS, perform the following steps:
Steps
2. Use the radius authentication-group command to configure the RADIUS authentication
group.
3. Use the server command to configure the RADIUS server.

4. Use the algorithm command to configure the RADIUS algorithm.
5. Use the timeout command to configure the RADIUS timeout time.
6. Use the deadtime command to configure the RADIUS invalid time.

7. Use the max-retries command to configure the RADIUS maximum retry times.
15-5

Result
The RADIUS is configured successfully.
Example
Configure the RADIUS:
l Authentication group: 1
l Server IP address: 10.61.225.14
l Key: zte
ZXAN(config)#radius authentication-group 1
ZXAN(config-authgrp-1)#server 1 10.61.225.14 key zte
ZXAN(config-authgrp-1)#timeout 120
ZXAN(config-authgrp-1)#algorithm round-robin
ZXAN(config-authgrp-1)#deadtime 60
ZXAN(config-authgrp-1)#max-retries 3
15.5 Configuring the Management ACL

Short Description
Perform this procedure to configure the management ACL.
Prerequisites

Context
In the actual networking, the device is generally configured with an in-band NM IP address
and is connected to the public network or maintenance dedicated network through the
uplink port. All the users in the network can access the device. For security purposes,
only a few users have the right to configure the device. In this case, the ACL function is
used.
Management ACL is used to control the external devices to access the device, that is,
control the source IP addresses of the received IP packets.
When ACL is enabled on the device, the IP packets whose resource IP addresses cannot
be found in the ACL table are discarded. In addition, the device does not respond to the
ARP request packet and ICMP packet from these source IP addresses. This enhances
system security.
15-6

To configure the management ACL, perform the following steps:
Steps
2. Use the acl standard command to configure the standard ACL.
4. Use the line telnet access-class command to apply the ACL to the Telnet access.
5. Use the snmp-server access-list command to apply the ACL to SNMP access.
6. Use the show acl command to query the ACL rule configuration information.
Result
The management ACL is configured successfully.
Example
Configure the management ACL, permitting the devices whose IP addresses are in the
network segment 192.168.1.0/24 to access the device, but deny the device whose IP
address is 192.168.1.100.
ZXAN(config-std-acl)#rule 1 deny 192.168.1.100 0.0.0.0
ZXAN(config-std-acl)#rule 2 permit 192.168.1.0 0.0.0.255
ZXAN(config)#line telnet access-class 10
15.6 Configuring the Anti-DoS Attack

Short Description
Perform this procedure to configure the anti-DoS attack function.
Prerequisite
Context
The ZXA10 C220 uses the following methods to prevent itself from huge traffic attack:
15-7

l For out-of-band traffic, the ZXA10 C220 limits packets rate on the CPU, including total
packet rate and certain protocol packet rate.
l For in-band traffic, besides rate limit, the ZXA10 C220 uses anti-DoS attack module to
record packet MAC addresses and drop packets whose rate exceeds the threshold.
With the anti-DoS attack function, the CPU of the ZXA10 C220 is free from excessive
packets from certain user MAC address.
To configure the anti-DoS attack function, perform the following steps:
Steps
To configure control panel security, perform the following steps:
2. Use the control-panel command to enter the security control configuration mode.
3. Use the anti-dos command to enable or disable anti-DOS attack.
4. Use the anti-dos limit-num command to set the limit of the anti-DOS black list.
When the system detects that the user packets (identified by MAC addresses) sent to
the main control card exceed five times of the threshold, the system considers itself to
be attacked and adds the MAC address to the black list. By default, the threshold is
100 pps.
5. Use the anti-dos drop command to enable or disable anti-DOS packet drop.
When this function is enabled and a MAC address is added to a black list, the system
discards packets from this MAC address.
6. Use the anti-dos drv-limit command to configure drive limit.
7. Use the anti-dos blocking-time command to configure the anti-DOS polling time.
8. Use the packet-limit command to set speed limit of the specific type of packets.
The ZXA10 C220 supports rate limit of the
ARP/BPDU/DHCP/ICMP/IGMP/PPPoE/SNMP/VBAS packets. The unit is pps.
When the parameter is all, the total drive speed on the CPU entrance is limited.
9. Use the cpu queue command to configure the CPU entry list limit.
10. Use the show control-panel anti-dos black-table command to query the black list
information.
11. Use the show control-panel packet-limit statistics command to query statistics
information of the specified packets.
Result
The anti-DoS attack function is configured successfully.
Example
Configure the anti-DoS attack function.
l Anti-DoS polling time: 300 seconds
l Anti-DoS black list limit: 20 pps
15-8

l ARP packet limit: 10 pps

ZXAN(config)#control-panel
ZXAN(control-panel)#anti-dos enable
ZXAN(control-panel)#anti-dos limit-num 20
ZXAN(control-panel)#anti-dos drop enable
ZXAN(control-panel)#anti-dos drv-limit enable
ZXAN(control-panel)#anti-dos blocking-time 300
ZXAN(control-panel)#packet-limit arp 10
15.7 Configuring the Ethernet OAM

Short Description
Perform this procedure to configure the Ethernet OAM function to monitor and manage
service links.
Prerequisites
Context
The ZXA10 C220 support service layer OAM function, which includes link continuity check,
port loopback detection, link trace, and alarm notification.
To configure the Ethernet OAM function, perform the following steps:
Steps
2. Use the cfm create md command to create the Ethernet OAM MD.
3. Use the ma create command to create the Ethernet OAM MA.
4. Use the primary vlan command to configure the MA primary VLAN.
Note:
In the Ethernet OAM MDs of the same level, primary VLAN of MAs is unique.
5. Use the protect command to configure the MA protection mode. Only VLAN protection
mode is valid.
15-9

6. Use the create mep command to create the local Ethernet OAM MEP.
7. Use the assign mep command to assign the local MEP to uplink port.
8. Use the create rmep command to create the remote Ethernet OAM MEP.
9. Use the mep mepid command to enter the MEP configuration mode.
10. Use the ccm-check enable command to enable the MEP CCM check.
11. Use the ccm-send enable command to enable the MEP CCM message sending.
12. Use the state enable command to enable MEP 802.1ag function.
13. Use the show cfm mp all command to query information about the CFM test.
14. In the administrator mode, use the cfm lbm md command to carry out the loopback
test.
15. n the administrator mode, use the cfm ltm md command to carry out the link trace test.
Result
The Ethernet OAM function is configured successfully.
Example
An local ZXA10 C220 is connected to an opposite ZXA10 C220 through an MIP. ZXA10
C220s on both ends work as MEPs, on which the 802.1ag function are enabled, and
monitor and manage the service links in VLAN 200.
The networking diagram is shown in Figure 15-1.
Figure 15-1 Ethernet OAM Networking Diagram
The configuration on the local MEP is as below:

ZXAN(config)#cfm create md session 1 name md1 level 5
ZXAN(config-md)#ma create session 1 name ma1
ZXAN(config-md-ma)#primary vlan 200
ZXAN(config-md-ma)#protect vlan
15-10

ZXAN(config-md-ma)#create mep session 1 111 direction down

ZXAN(config-md-ma-mep)#exit
ZXAN(config-md-ma)#assign mep 111 to interface gei_0/9/1
ZXAN(config-md-ma)#create rmep session 2 222 remote-mac 00D0.D006.F4CC
ZXAN(config-md-ma)#mep mepid 111
ZXAN(config-md-ma-mep)#ccm-check enable
ZXAN(config-md-ma-mep)#ccm-send enable
ZXAN(config-md-ma-mep)#state enable
The configuration on the remote MEP is as below:

ZXAN(config)#cfm create md session 1 name md1 level 5
ZXAN(config-md)#ma create session 1 name ma1
ZXAN(config-md-ma)#primary vlan 200
ZXAN(config-md-ma)#protect vlan
ZXAN(config-md-ma)#create mep session 2 222 direction down
ZXAN(config-md-ma)#assign mep 222 to interface gei_0/9/1
ZXAN(config-md-ma)#create rmep session 1 111 remote-mac 00D0.D011.2233
Carry out the following commands to test link on the local MEP. On the remote MEP, carry
out the same commands. .
ZXAN#cfm lbm md 1 ma 1 smep-id 111 dmep-id 222 //local loopback test
Sending 5 loopback messages to 00d0.d006.f4cc ,timeout is 3 seconds.
ZXAN#cfm ltm md 1 ma 1 smep-id 111 dmep-id 222 //link trace test
Linktrace to 00d0.d006.f4cc: timeout 5 seconds, 64 hops, trans-id 1.
Please wait 5 seconds to print the result.
------------------------------------------------------------------------------
Hops MAC ADDRESS Ingress Action Egress Action Relay Action
------------------------------------------------------------------------------
1 00d0.d006.f4cc IngOK RlyHit
Destination 00d0.d006.f4cc reached.
15-11

15-12

Figures
Figure 1-1 Connection Description Dialog Box .......................................................... 1-2
Figure 1-2 Connect To Dialog box............................................................................. 1-2
Figure 1-3 Com1 Properties Dialog Box .................................................................... 1-3
Figure 1-4 HyperTerminal ......................................................................................... 1-3
Figure 1-5 Run Dialog Box........................................................................................ 1-4
Figure 1-6 Telnet Window ........................................................................................ 1-4
Figure 1-7 NetNumenN31 Unified Management System ........................................... 1-5
Figure 1-8 In-Band NM Networking Diagram............................................................. 1-6
Figure 1-9 In-Band NM Configuration Flow ............................................................... 1-7
Figure 1-10 Out-Of-Band NM Networking Diagram ................................................. 1-10
Figure 1-11 Out-of-Band NM Configuration Flow..................................................... 1-11
Figure 1-12 System Clock Configuration Networking Diagram ................................ 1-21
Figure 2-1 EPON Data Service Networking Diagram ................................................ 2-2
Figure 2-2 EPON Data Service Configuration Flow ................................................... 2-4
Figure 2-3 10G EPON Data Service Networking Diagram ....................................... 2-31
Figure 2-4 Configuration Flow of 10G EPON Data Service ..................................... 2-32
Figure 3-1 GPON Data Service Networking Diagram ................................................ 3-2
Figure 3-2 GPON Data Service Configuration Flow................................................... 3-3
Figure 4-1 IGMP Snooping Multicast Service Networking Diagram (EPON) .............. 4-2
Figure 4-2 IGMP Snooping Multicast Service Configuration Flow (EPON)................. 4-3
Figure 4-3 IGMP Snooping Multicast Service Networking Diagram (GPON).............. 4-8
Figure 4-4 IGMP Snooping Multicast Service Configuration Flow (GPON) ................ 4-9
Figure 5-1 VoIP Service Networking Diagram ........................................................... 5-2
Figure 5-2 VoIP Service Configuration Flow .............................................................. 5-4
Figure 5-3 VoIP Service Networking Diagram ........................................................... 5-7
Figure 5-4 VoIP Service Configuration Flow .............................................................. 5-9
Figure 5-5 VoIP Service Networking Diagram (SIP) ................................................ 5-12
Figure 5-6 Configuration Flow of the VoIP Service (SIP) ......................................... 5-14
Figure 5-7 VoIP Service Networking Diagram (H.248)............................................. 5-17
Figure 5-8 Configuration Flow of VoIP Service ........................................................ 5-19
Figure 5-9 F660 Local Configuration ....................................................................... 5-22
Figure 6-1 EPON CES Service Networking Diagram................................................. 6-2
I
Figure 6-2 EPON CES Service Configuration Flow (MEF8)....................................... 6-4

Figure 6-3 EPON CES Service Networking Diagram................................................. 6-9
Figure 6-4 EPON CES Service Configuration Flow (PWE3) .................................... 6-11
Figure 6-5 EPON CES Service Networking Diagram............................................... 6-17
Figure 6-6 EPON CES Service Configuration Flow ................................................. 6-18
Figure 6-7 GPON CES Service Networking Diagram .............................................. 6-24
Figure 6-8 GPON CES Service Configuration Flow................................................. 6-26
Figure 6-9 GPON CES Service Networking Diagram .............................................. 6-31
Figure 6-10 GPON CES Service Configuration Flow............................................... 6-33
Figure 7-1 Smart QinQ Configuration Flow ............................................................... 7-5
Figure 9-1 DHCP Relay Networking.......................................................................... 9-7
Figure 11-1 EPON PON Port Protection ServiceNetworking Diagram ..................... 11-3
Figure 11-2 EPON PON Port Protection Configuration Flow.................................... 11-4
Figure 11-3 GPON PON Port Protection Networking Diagram................................. 11-7
Figure 11-4 GPON PON Port Protection Configuration Flow ................................... 11-8
Figure 12-1 Typical ZESR Networking Diagram .................................................... 12-11
Figure 15-1 Ethernet OAM Networking Diagram ................................................... 15-10
II
Tables
Table 1-1 In-Band NM Configuration Data................................................................. 1-6
Table 1-2 Out-Of-Band NM Configuration Data ....................................................... 1-10
Table 1-3 Clock Synchronization Methods............................................................... 1-20
Table 1-4 System Clock Configuration Configuration Data ...................................... 1-22
Table 1-5 External Input Clock Parameters ............................................................. 1-23
Table 1-6 External Output Clock Parameters .......................................................... 1-24
Table 2-1 Configuration Data of EPON Data Service................................................. 2-3
Table 2-2 Parameters for Configuring the ONU Bandwidth...................................... 2-10
Table 2-3 ONU Bandwidth Configuration Data ........................................................ 2-10
Table 2-4 Default Bandwidth Profile Parameters ..................................................... 2-12
Table 2-5 ONU Bandwidth Profile Configuration Data ............................................. 2-13
Table 2-6 VLAN Modes ........................................................................................... 2-16
Table 2-7 Configuration Data of 9806H ADSL Data Service .................................... 2-21
Table 2-8 Configuration Data of 10G EPON Data Service ....................................... 2-31
Table 3-1 Configuration Data of GPON Data Service ............................................... 3-3
Table 3-2 ONU Phase State...................................................................................... 3-8
Table 3-3 RELATIONSHIP BETWEEN UPSTREAM BANDWIDTH AND T-CONT
BANDWIDTH ......................................................................................... 3-10
Table 4-1 Configuration Data of IGMP Snooping Multicast Service (EPON) .............. 4-2
Table 4-2 IGMP Snooping Multicast Service Configuration Data (GPON).................. 4-8
Table 4-3 MVLAN Configuration Data ..................................................................... 4-16
Table 4-4 IGMP Global Parameters Description ...................................................... 4-17
Table 4-5 IGMP Port Parameters ............................................................................ 4-21
Table 4-6 Multicast Preview Profile Configuration Parameters................................. 4-24
Table 4-7 CDR Configuration Parameters ............................................................... 4-26
Table 5-1 VoIP Service Configuration Data ............................................................... 5-2
Table 5-2 VoIP Service Configuration Data ............................................................... 5-7
Table 5-3 Configuration Data of VoIP Service......................................................... 5-12
Table 5-4 Configuration Data of VoIP Service.......................................................... 5-17
Table 5-5 Parameters Description for VoIP IP Profile .............................................. 5-23
Table 5-6 Parameters Description for VoIP VLAN Profile......................................... 5-24
Table 5-7 Parameters Description for H.248 Protocol Profile ................................... 5-25
III
Table 5-8 Parameters Description for SIP Protocol Profile....................................... 5-27

Table 6-1 Configuration Data of EPON CES Service (MEF8) .................................... 6-3
Table 6-2 Configuration Data of EPON CES Service (PWE3).................................. 6-10
Table 6-3 Configuration Data of EPON CES Service .............................................. 6-17
Table 6-4 Configuration Data of GPON CES Service (MEF8).................................. 6-24
Table 6-5 Configuration Data of GPON CES Service .............................................. 6-32
Table 6-6 TDM Profile Parameters .......................................................................... 6-38
Table 7-1 VLAN Specifications .................................................................................. 7-1
Table 7-2 Smart QinQ Configuration Data ................................................................. 7-4
Table 11-1 Configuration Data of EPON PON Port Protection ................................. 11-3
Table 11-2 Configuration Data of GPON PON Port Protection ................................. 11-8
Table 13-1 Mapping Relations Between Queues and 802.1p Priorities.................. 13-13
Table 13-2 Mapping Between DSCP Priority and CoS (802.1p) Priority................. 13-15
IV
Index
10G EPON Service ............................ 2-30 Configuring System Clock .................. 1-21
Configuring TACACS+........................ 15-3
A Configuring the 1:1 VLAN..................... 7-6
Configuring the 10G EPON
Adding a Card .................................... 1-15
Service ............................................. 2-30
Adding a Rack.................................... 1-13
Configuring the 9806H ADSL Access
Adding a Shelf.................................... 1-14
Service ............................................. 2-20
Anti-DoS attack .................................. 15-7
Configuring the Bandwidth
Anti-DoS Attack.................................. 15-7
Profile................................................2-11
ARP Anti-Spoofing ............................. 14-6
Configuring the D-Series/F-Series
Authenticating an ONU (EPON) ........... 2-7
ONU Access Service ........................ 2-16
Authenticating an ONU (GPON) ........... 3-7
Configuring the Extended ACL ........... 10-3
Configuring the GPON Service............. 3-2
C
Configuring the Hybrid ACL ................ 10-6
Clock.................................................. 1-20 Configuring the IGMP Global
Configuring CAC ................................ 4-25 Parameters....................................... 4-17
Configuring CDR ................................ 4-26 Configuring the IGMP Port
Configuring CES TDM Interface ......... 6-40 Parameters....................................... 4-21
Configuring CES TDM Profile ............. 6-38 Configuring the IPTV Package ........... 4-23
Configuring CL1A 1+1 Configuring the Layer-2 ACL .............. 10-4
Protection ......................................... 12-4 Configuring the MVLAN
Configuring CL1A Uplink CES Service Parameters....................................... 4-14
(EPON)............................................. 6-16 Configuring the OLT Port
Configuring DHCP Relay...................... 9-5 (EPON)............................................. 2-27
Configuring DHCP Server .................... 9-3 Configuring the OLT Port
Configuring DHCP Snooping ................ 9-2 (GPON) ............................................ 3-20
Configuring EPON Protection ..............11-1 Configuring the ONU Bandwidth........... 2-9
Configuring External Input Configuring the ONU In-Band IP
Clock ......................................... 1-231-24 Address (EPON)............................... 2-14
Configuring GPON Protection..............11-6 Configuring the ONU In-Band IP
Configuring Link Aggregation ............. 12-7 Address (GPON) .............................. 3-17
Configuring Management ACL ........... 15-6 Configuring the ONU Type Profile
Configuring Mapping Relations (EPON)............................................... 2-6
between Queues and 802.1p Configuring the ONU Type Profile
Priorities ......................................... 13-12 (GPON) .............................................. 3-6
Configuring MSTP ................................ 8-2 Configuring the Service Port
Configuring Priority Mark .................... 13-3 VLAN.................................................. 7-9
Configuring Queue Scheduling ......... 13-10 Configuring the Standard ACL............ 10-1
Configuring RADIUS .......................... 15-5 Configuring the T-CONT
Configuring Redirection ...................... 13-6 Profile.........................................3-9, 3-11
Configuring SSH ................................ 15-1
V
Configuring the TLS VLAN ................... 7-2 Multicast Service .................................. 4-1
Configuring Traffic Limit...................... 13-2
Configuring Traffic Mirroring ............... 13-5 O
Configuring Traffic Shaping ................ 13-8 ONU Configuration ............................. 2-16
Configuring Traffic Statistics ............... 13-7 Out-Of-Band NM .................................. 1-9
Configuring Virtual Port QoS ............ 13-18
Configuring VLAN Smart QinQ ............. 7-3 P
PON Protection ...................................11-1
D
Port Location ...................................... 14-1
Deleting a Card .................................. 1-17 PPPoE+ ............................................. 14-4
DHCP................................................... 9-1
DHCP Option 82 ................................ 14-2 Q
QoS ................................................... 13-1
E Queue Scheduling.............................. 13-9
EPON CES Service....................... 6-2, 6-9
EPON Data Service.............................. 2-2 R
EPON Service ...................................... 2-1
Resetting a Card ................................ 1-18
Ethernet OAM .................................... 15-9
RSTP ................................................... 8-1
F S
Flow VLAN Parameters ...................... 3-15 Service Connection ............................ 3-12
Showing the Card Information ............ 1-16
G SSTP ................................................... 8-1
GPON CES Service .................. 6-23, 6-31 STP...................................................... 8-1
GPON Service...................................... 3-1 Swapping the Control and Switching
Cards ............................................... 1-19
I System Security ................................. 15-1
IGMP Proxy Multicast Service ............ 4-13
IGMP Snooping Multicast
T
Service ........................................ 4-2, 4-7 Traffic Management Based On ACL
In-Band NM.......................................... 1-6 Rules................................................ 13-1
L U
Login Through HyperTerminal .............. 1-1 UAPS ................................................. 12-1
Login Through NetNumen N31 Unified UNI VLAN Parameters ....................... 3-16
Management System.......................... 1-5 Uplink Port Protection......................... 12-1
Login Through Telnet............................ 1-4
V
M VoIP ..................................................... 5-1
Managing the ONU Remotely............. 2-23 VoIP Service ................5-1, 5-6, 5-11, 5-16
Mapping between CoS and
DSCP ............................................. 13-15 Z
MSTP................................................... 8-2 ZTE Ethernet Switch Ring .................. 12-9
VI
Glossary
AAA
- Authentication, Authorization and Accounting
ACL
- Access Control List
ADSL
- Asymmetric Digital Subscriber Line
AES
- Advanced Encryption Standard
AIS
- Alarm Indication Signal
ARP
- Address Resolution Protocol
BGP
- Border Gateway Protocol
BPDU
- Bridge Protocol Data Unit
BRAS
- Broadband Remote Access Server
CAC
- Channel Access Control
CBS
- Committed Burst Size
CCM
- Continuity Check Message
CDR
- Call Detail Record
CES
- Circuit Emulation Services
CFM
- Connectivity Fault Management
CIR
- Committed Information Rate
CIST
- Common and Internal Spanning Tree
VII
CLI
- Command Line Interface
CPU
- Central Processing Unit
CVLAN
- Customer Virtual Local Area Network
CoS
- Class of Service
DBA
- Dynamic Bandwidth Allocation
DHCP
- Dynamic Host Configuration Protocol
DNS
- Domain Name Server
DSCP
- Differentiated Services Code Point
DSLAM
- Digital Subscriber Line Access Multiplexer
DoS
- Denial of Service
EBS
- Excess Burst Size
EPON
- Ethernet Passive Optical Network
ES
- Errored Second
FE
- Fast Ethernet
FEC
- Forward Error Correction
FQ
- Fair Queuing
FTTB
- Fiber to the Building
FTTC
- Fiber to the Curb
FTTH
- Fiber to the Home
VIII
Glossary
GEM
- GPON Encapsulation Method
GPON
- Gigabit Passive Optical Network
ICMP
- Internet Control Message Protocol
ID
- Identification/Identity/Identifier
IEEE
- Institute of Electrical and Electronics Engineers
IETF
- Internet Engineering Task Force
IGMP
- Internet Group Management Protocol
IP
- Internet Protocol
IPTV
- Internet Protocol Television
IPoA
- IP over ATM
LACP
- Link Aggregation Control Protocol
LAN
- Local Area Network
LLID
- Logical Link Identifier
MA
- Maintenance Association
MAC
- Medium Access Control
MAN
- Metropolitan Area Network
MD
- Maintenance Domain
MEF
- Metro Ethernet Forum
MEP
- MEG End Point
IX
MG
- Media Gateway
MGC
- Media Gateway Controller
MGCP
- Media Gateway Control Protocol
MIP
- MEG Intermediate Point
MST
- Multiplex Section Termination
MSTP
- Multiple Spanning Tree Protocol
MVLAN
- Multicast Virtual Local Area Network
NE
- Network Element
NM
- Network Management
NMS
- Network Management System
OAM
- Operation, Administration and Maintenance
OC
- Optical Carrier
OLT
- Optical Line Terminal
OMCI
- ONT Management Control Interface
ONU
- Optical Network Unit
OSPF
- Open Shortest Path First
PAP
- Password Authentication Protocol
PON
- Passive Optical Network
POTS
- Plain Old Telephone Service
X
Glossary
PPPoE
- Point to Point Protocol over Ethernet
PSN
- Packet Switched Network
PVC
- Permanent Virtual Channel
PVID
- Port VLAN ID
PW
- Pseudo Wire
QoS
- Quality of Service
RADIUS
- Remote Authentication Dial In User Service
RMON
- Remote Monitoring
RSTP
- Rapid Spanning Tree Protocol
RTP
- Real-time Transport Protocol
SDH
- Synchronous Digital Hierarchy
SEC
- SDH Equipment Clock
SFU
- Single Family Unit
SIP
- Session Initiation Protocol
SLC
- Subscriber Line Circuit
SMS
SN
- Serial Number
SNMP
- Simple Network Management Protocol
SONET
- Synchronous Optical NETwork
XI
SP
- Strict Priority
SS
- Soft Switch
SSH
- Secure Shell
SSM
- Synchronization Status Message
SSTP
- Single Spanning Tree Protocol
STM
- Synchronous Transport Module
STP
- Spanning Tree Protocol
SVLAN
- Selective VLAN
SVLAN
- Service Virtual Local Area Network
TACACS+
- Terminal Access Controller Access-Control System Plus
TCP
- Transfer Control Protocol
TDM
- Time Division Multiplexing
TID
- Terminal Identification
TLS
- Transport Layer Security
ToS
- Type Of Service
UAPS
- Uplink Auto Protection Switching
UDP
- User Datagram Protocol
UNI
- User Network Interface
VBAS
- Virtual Broadband Access Server
XII
Glossary
VCI
- Virtual Channel Identifier
VID
- VLAN Identifier
VLAN
- Virtual Local Area Network
VPI
- Virtual Path Identifier
VPN
- Virtual Private Network
VoIP
- Voice over Internet Protocol
WAN
- Wide Area Network
WRR
- Weighted Round Robin
XIII

ZXA10 C220 (V1.2.1) XPON Optical Access Convergence Equipment Configuration Manual (CLI)

Uploaded by

Copyright:

Available Formats

ZXA10 C220 (V1.2.1) XPON Optical Access Convergence Equipment Configuration Manual (CLI)

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ZXA10 C220 (V1.2.1) XPON Optical Access Convergence Equipment Configuration Manual (CLI)

Uploaded by

Copyright:

Available Formats

ZXA10 C220

xPON Optical Access Convergence Equipment

Revision No. Revision Date Revision Reason

R1.0 2010-10-30 First Edition

Serial Number: SJ-20101126132257-006

Publishing Date: 2010-12-30(R1.1)

Chapter 2 EPON Data Service Configuration........................................... 2-1

Chapter 3 GPON Data Service Configuration .......................................... 3-1

Chapter 4 Multicast Service Configuration .............................................. 4-1

Chapter 5 VoIP Service Configuration...................................................... 5-1

Chapter 7 VLAN Configuration.................................................................. 7-1

Chapter 8 STP Configuration .................................................................... 8-1

Chapter 9 DHCP Configuration ................................................................. 9-1

Chapter 10 ACL Configuration ................................................................ 10-1

Chapter 11 PON Port Protection Configuration..................................... 11-1

Chapter 13 QoS Configuration ................................................................ 13-1

Chapter 14 User Security Configuration ................................................ 14-1

Chapter 15 System Security Configuration ........................................... 15-1

Prerequisite Skill and Knowledge

What Is in This Manual

Chapter 1, Basic Configuration Describes access methods, NM configuration, physical

Chapter 4, Multicast Service Describes IGMP snooping multicast configuration, IGMP

Chapter 8, STP Configuration Describes STP mode and MSTP configuration.

Chapter 9, DHCP Configuration Describes DHCP snooping configuration, DHCP server

Italics References to other Manuals and documents.

“Quotes” Links on screens.

Note: Provides additional information about a certain topic.

Checkpoint: Indicates that a particular step needs to be checked before

Tip: Indicates a suggestion or hint to make things easier or more productive

Mouse operation conventions are listed as follows:

1.1 Access Methods

1.1.1 Logging in Through HyperTerminal

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

Figure 1-1 Connection Description Dialog Box

Figure 1-2 Connect To Dialog box

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

Figure 1-3 Com1 Properties Dialog Box

Figure 1-4 HyperTerminal

1.1.2 Logging in Through Telnet

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

Figure 1-5 Run Dialog Box

Figure 1-6 Telnet Window

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

1.1.3 Logging in Through NetNumen N31 Unified Management

Figure 1-7 NetNumenN31 Unified Management System

1.2.1 Configuring the In-Band NM

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

Figure 1-8 In-Band NM Networking Diagram

Table 1-1 In-Band NM Configuration Data

In-band NM interface l VLAN ID: 1000

Router interface IP address: 10.67.1.254/24

SNMP server IP address: 10.63.10.105/24

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

Figure 1-9 In-Band NM Configuration Flow

To configure the in-band NM, perform the following steps:

b. Enter the uplink interface configuration mode.

SJ-20101126132257-006|2010-12-30(R1.1) ZTE Proprietary and Confidential

c. Add the uplink port to the NM VLAN in tag mode.

2. Configure the IP address of the in-band NM interface.

a. Enter the VLAN interface configuration mode.