OLT (MA5600T)

Note
1. GIU card is used for uplink, now in project it is Ge cards, each card have 2 GE uplink, but now OLT support the 10G cards

ONT (HG8240/HG850a)

T support the 10G cards

Tn dch v

FiberVNN

MyTV
MegaWan
Voip

Tn gi cc

FiberPublic (up/down)
FiberOffice (up/down)
FiberExtra (up/down)
FiberPro (up/down)
FiberHomeTV1(up)
FiberhomeTV1 (down); FiberBusiness (up)
FiberhomeTV2 (up)
FiberhomeTV2 (down);
FiberBusiness (down)
FiberDreaming (up/down)
Up
Down_1HD
Down_2HD
MegaWan_2M

Tn Profile-name-standard

Fiber_33M
Fiber_35M
Fiber_40M
Fiber_50M
Fiber_2M
Fiberd_5M
Fiber_3M
Fiber_7M
Fiber_20M
Fiber_100M
MyTV_up_1M
MyTV_down_11M
MyTV_down_22M
FiberWan_2M
FiberVoip_1M

Module

Vlan

Detail Configuration

(config)#btv
(config-btv)#multicast-vlan 9
(config-btv-mvlan9)#igmp program modify all unsolicited enable
(config-btv-mvlan9)#quit

MyTV

PPPOE(FiberVNN)

10

(config)#dhcp option82 enable

(config)#security anti-macspoofing enable
(config)#vlan service-profile profile-name MyTV
(config-vlan-srvprof-3)#security anti-macspoofing enable
(config-vlan-srvprof-3)#dhcp proxy disable
(config-vlan-srvprof-3)#dhcp option82 disable
(config-vlan-srvprof-3)#pitp disable
(config-vlan-srvprof-3)#packet-policy unicast discard
(config-vlan-srvprof-3)#packet-policy multicast discard
(config-vlan-srvprof-3)#commit
(config-vlan-srvprof-3)#quit
(config)#vlan bind service-profile 10 profile-name MyTV

2351 2376

(config)#security anti-macspoofing enable

(config)#security pitp enable pmode
(config)#vlan service-profile profile-name FiberVNN
(config-vlan-srvprof-1)#security anti-macspoofing enable
(config-vlan-srvprof-1)#dhcp proxy disable
(config-vlan-srvprof-1)#dhcp option82 disable
(config-vlan-srvprof-1)#pitp enable
(config-vlan-srvprof-1)#packet-policy unicast discard
(config-vlan-srvprof-1)#packet-policy multicast discard
(config-vlan-srvprof-1)#commit
(config-vlan-srvprof-1)#quit
(config)#vlan bind service-profile 2371 profile-name FiberVNN
CauGiay(config)#vlan service-profile profile-name MegaWAN
CauGiay(config-vlan-srvprof-2)#security anti-macspoofing disable

IPOE(MegaWan)
Ring check
Anti-DOS

2251 2276
/
/

Unicast Storm

CauGiay(config-vlan-srvprof-2)#dhcp proxy disable

CauGiay(config-vlan-srvprof-2)#dhcp option82 disable
CauGiay(config-vlan-srvprof-2)#pitp disable
CauGiay(config-vlan-srvprof-2)#packet-policy unicast discard
CauGiay(config-vlan-srvprof-2)#packet-policy multicast discard
CauGiay(config-vlan-srvprof-2)#commit
CauGiay(config-vlan-srvprof-2)#quit
(config)#vlan bind service-profile 2271 profile-name MegaWan
(config)#ring check enable
(config)#security anti-dos enable
CauGiay(config)#interface giu 0/19
CauGiay(config-if-giu-0/19)# traffic-suppress all unicast value 3

Remark

1. Bind the Mac-address for every STB user, avoide the user-mac spoofing and flooding;
Follow the DSLAM optimized items
2. Discard the unknown unicast and unknown multicast traffic.
3. Because VASC not support DHCP option82, so here we disable.

1. Bind the Mac-address for every CPE, avoide the user-mac spoofing and flooding;
2. Discard the unknown unicast and unknown multicast traffic.
3. Proibit the user side BRAS.

1. For MegaWan service, we can not enable "Anti-macspoofing", otherwise the service will be down.

Detect the user side ring and blocked the problem port
Prohibit the end-user to attack the system by a mass of protocol packets
1. Discard the unknown unicast storm

Note: it is used for PAT test only, during the real service deployment, we will use U2000 to deploy by remote
FiberVNN/MegaWan
Step1: Log into the ONT web management (username: telecomadmin; password: admintelecom)

Step2: Change all of the LAN port to be "Lay3" mode which means all of these ports will handled by the Layer3 module of ONT

Step3: Configure the WAN interface, it can be PPPOE(FiberVNN) or IPOE(MegaWan).

Step4: Save the configuration

If there is MyTV service, the only difference is the LAN port mode setting at Step1:

oy by remote

he Layer3 module of ONT, it can be PPPOE module(FiberVNN) or IPOE routing module(MegaWan)