TN500 SYS Bridging

TN500_SYS_Bridging
Confidential
TK3721 Bridging Modes

Technical Note
Abstract ................................................................................................................................................. 3
Brief Overview of 802.3ah Bridging.................................................................................................... 3
Multiple Link Solution VS Single Link Solution ............................................................................... 5
Hardware Review ................................................................................................................................. 7
Simple Bridge........................................................................................................................................ 8
5.1
Upstream Explanation.................................................................................................................... 8
5.2
Downstream Explanation ............................................................................................................... 9
5.3
Summary....................................................................................................................................... 11
Transparent VLAN ............................................................................................................................ 12

6.1
Downstream Explanation ............................................................................................................. 12
6.2
Upstream Explanation.................................................................................................................. 13
6.3
Summary....................................................................................................................................... 13
Dedicated Single VLAN ..................................................................................................................... 14

7.1
7.2
7.3
Summary....................................................................................................................................... 16
Dedicated Double VLAN.................................................................................................................... 17
Shared VLAN...................................................................................................................................... 19
9.1
9.2
9.3
Summary....................................................................................................................................... 22
10
Translated VLAN ........................................................................................................................... 23
10.1
10.2
10.3
Summary....................................................................................................................................... 24
11
Priority VLAN ................................................................................................................................ 26
12
1
Priority Shared VLAN ................................................................................................................... 28

6/17/2005
TN500_SYS_Bridging
Teknovus Confidential - View Under NDA Only
TN500_SYS_Bridging
Confidential
12.1
12.2
12.3
Summary....................................................................................................................................... 31
13
Transparent Priority Shared VLAN............................................................................................. 32
14
Priority Simple Bridged ................................................................................................................. 33
15
Cross-connect.................................................................................................................................. 36
16
TK3721 Bridging Mode Options ................................................................................................... 37
16.1
Discard Unknown Frames Option................................................................................................ 37
16.2
Allow VLAN Tags on Simple Bridge............................................................................................. 37
16.3
Address learning and MacMove Option....................................................................................... 37
16.4
Priority Copy Option .................................................................................................................... 38
16.5
Priority Mode Option ................................................................................................................... 40
Shared VLAN Multicast SLA.................................................................................................................... 41

16.6
Disabling Multicast Traffic .......................................................................................................... 41
16.7 Adding and Removing Multicast Links ......................................................................................... 41

16.7.1 Link Arrived / Both SLAs Disabled ..................................................................................... 42
16.7.2 Upstream / Downstream SLA Enabled................................................................................. 42
16.7.3 Link Added to Shared VLAN Group.................................................................................... 42
16.7.4 Upstream / Downstream SLA Enabled (from Link Added) ................................................. 42
16.8
17
Lifecycle of Shared VLAN Multicast SLA ..................................................................................... 44

Bridging Mode Restrictions ........................................................................................................... 47
17.1
Bridging Mode Compatibility Matrix ........................................................................................... 47
17.2
Bridging Mode Per Entity Limitations.......................................................................................... 48
17.3
Summary of Upstream Bridging Behavior.................................................................................... 49
17.4
Summary of Downstream Bridging Behavior ............................................................................... 49
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
1
Abstract
The Teknovus EPON System supports a wide variety of efficient MAC, VLAN, and L3 based bridging
functions that provide the security and flexibility required by a wide variety of applications. Many of these
functions can be managed remotely by the Element Management Layer, reducing time in the field and
making for a highly scalable solution. Remote management is facilitated by an abstraction layer known as
the Host Interface.
Dynamic and static MAC based filtering and classification is provided by default. The TK3721, TK3701
and TK3711 support multiple traffic flows, known as links (also called logical links). VLAN tags are
provisioned on a per link basis. VLANs can be applied to a single link, or multiple links may be grouped
together into a managed broadcast domain known as a shared VLAN group. A shared VLAN group works
like a virtual bridge, and is the ideal solution for deploying multiple services, where each service has
demanding performance requirements. Downstream bridging decisions can also be made based on a
combination of VLAN, IPv4 TOS, and DA fields.
The TK3701 supports 3 links and the TK3711 supports 6. Each link can be configured into a unique
bridging mode. Links are managed independently by the Element Management Layer for end-to-end
scalability. All ONUs support flexible queue based classification and filtering, allowing packets to be
classified by a combination of several filtering rules. ONU configuration is beyond the scope of this
document; please refer to the TK_EPON_ONU_CLASS_FILTER.pdf technical note for information on
this topic.
Brief Overview of 802.3ah Bridging
Ethernet Passive Optical Network (EPON) is a point-to-multipoint (P2MP) network, with an Optical Line
Terminal (OLT) serving multiple Optical Network Units (ONUs). To ensure compatibility with IEEE
802.1D bridging and to facilitate seamless integration of EPON with other Ethernet networks, the IEEE
802.3ah standard specifies Point-to-Point Emulation (P2PE) functionality that emulates a point-to-point
topology. P2PE operation relies on tagging of Ethernet frames with tags that specify the destination ONU.
These tags are called Logical Link IDs (LLID) and are placed in the preamble before each Ethernet frame.
Each ONU is assigned one or more tags by the OLT during initial registration phase.
To emulate point-to-point topology, the OLT must have N MAC ports (interfaces), one for each ONU
(Figure 1). When sending a frame downstream (from the OLT to an ONU), the P2PE function in the OLT
will insert the LLID value associated with a particular MAC port (Figure 1.a) into the frame. The
transmitted frame will arrive (almost) simultaneously at the EPON port of every ONU on the PON. Each
ONU will then search the table of assigned LLIDs for the LLID value carried by the frame. If a match is
found the frame is passed to the ONUs MAC layer for further verification, otherwise the frame will be
ignored. In this sense, it appears as if the frame was sent on a point-to-point link to only one ONU.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
OLT
Insert link ID
associated with
particular port
Accept frame if
embedded link
ID matches
assigned link ID
MAC
MAC
MAC
PtP Emulation
PtPE
PtPE
PtPE
MAC
MAC
MAC
ONU 1
ONU 2
ONU 3
Reject frame if
embedded link ID
does not match
assigned link ID
(a) Downstream Transmission
OLT
Demultiplex the
frame to a particular
port based on
embedded link ID
Insert link ID
assigned to
given ONU
MAC
MAC
MAC
PtP Emulation
PtPE
PtPE
PtPE
MAC
MAC
MAC
ONU 1
ONU 2
ONU 3
(b) Upstream Transmission
Figure 1: Point-to-Point Emulation
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
In the upstream direction, the ONU will insert one of its assigned LLIDs into the preamble of each
transmitted frame. The P2PE function in the OLT will de-multiplex the frame to the proper MAC port
based on the received LLID value (Figure 1.b).
Multiple Link Solution VS Single Link Solution
Teknovus implementation of OLT and ONU allows more than one LLID to be assigned to an ONU. To
remain standards compliant the ONU also supports multiple MAC ports, as shown in Figure 2. From the
OLTs perspective such an ONU appears as a set of multiple ONUs with one LLID each. We call such an
ONU a virtual ONU since multiple virtual ONUs may be implemented as one physical device. The OLT
must grant each virtual ONU as if it is a separate physical ONU. This means that scheduling decisions may
be made by the OLT that would otherwise have to be made by the ONU. For instance an LLID might be
used to represent a class of service, and LLIDs might be scheduled differently based on the service class to
which they belong.
OLT
MAC
MAC
MAC
MAC
PtP Emulation
PtP Emulation
PtP
Emulation
PtP
Emulation
MAC
MAC
MAC
MAC
VONU 1
VONU 2
VONU 3
VONU 3
Figure 2: Each virtual ONU is granted by the OLT as if it were a physical ONU
The OLT has a separate (virtual) port corresponding to each LLID (virtual ONU). A bridge may be
connected to these virtual ports, allowing the ONUs to communicate to each other and to the OLT.
Additionally, the bridge may be configured to use multiple VLAN tags to isolate traffic to distinct
broadcast domains LLIDs. For example, a physical link between the OLT and ISP point-of-presence
device (such as edge router) may use VLANs to segregate users traffic. Thus, in the downstream direction
(from network to user), the OLT should be able to map multiple VLANs to multiple LLIDs. In the
upstream direction (from users to network), the OLT should be able to map multiple LLIDs to multiple
VLANs.
If the Teknovus OLT did not support multiple LLIDs then the OLT would have to grant all traffic the same
way, so when a users SLA runs out because of a large file upload, the telephone service might also stop
working! Upstream rate control on the ONU could be used to solve this problem, but will result in a
reduction in system performance (this feature is available on the TK3711). A multi-service single LLID
solution is like a shipping company that offers three levels of service but handles all packages the same
way.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Most shipping companies feature different classes of service or priorities. A typical company might offer
three different priority levels: next day, two day, and one week. Imagine that the shipping company never
examined the priority level of a given shipment until it got to the local distribution center. What are the
chances that the shipment would actually meet the service guarantee? To meet its contractual obligations
the shipping company would have to send all the shipments as if they were two day (even the ones labeled
one week), and the final distribution center would incur a huge overhead to sort the packages, an operation
which might have been done more efficiently had the decision been made sooner! This type of solution is
the least effective, which is why no existing shipping company operates this way.
The EPON System is similar to a shipping company, the difference being that instead of shipping packages,
the EPON System ships packets. In this analogy the ONUs represent both the customer and the final
distribution center (depending on the direction) and the LLIDs represent available service levels. In the
customer roll (upstream) the ONU uses some attribute of a given packet such as its IP address or Ethertype
to determine which service class the packet belongs to, and then sends the packet on the appropriate LLID.
The OLT grants the low latency LLID first, guaranteeing on time delivery without sacrificing throughput,
just like the shipping company in the analogy.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
4
Hardware Review
All Teknovus EPON chips (TK3721, TK3701, TK3711) incorporate hardware lookup engines which
process incoming packets at line rate, and make filtering and classification decisions on those frames based
on set of rules. Rules represent programmable actions taken by the look-up engine in response to specific
conditions, such as some fields within a frame having a value in specified range. Filtering rules can remove
packets from the data stream, while classification rules can select queues, links, and priority handling of a
frame. The TK3721 and TK3711 also have the ability to add, remove, or modify VLAN tags within
frames.
All of the VLAN modes discussed below are the result of programming the lookup engines appropriately.
Teknovus firmware translates requests for link switching modes from the host CPU (further referred to as
host) into detailed lookup engine rules.
Each link at the OLT may be individually provisioned for a particular switching mode, which affects the
traffic switching decisions made by the EPON nodes in the upstream and downstream directions. Except
when noted otherwise, any or all switching modes may be in use on a single OLT simultaneously.
VLAN modes use IEEE VLAN tags to control information flow. An important characteristic of VLAN
modes is the segregation of traffic into separate broadcast domains. Broadcast traffic is limited by the
VLAN tag to only those links that are part of that VLAN, and perhaps to one link alone.
The switching mode rules generally preserve the integrity of VLANs by ignoring frame destination
addresses. A frame without the proper VLAN tag is not permitted onto that VLAN even if the DA is
known to the OLT. Unless there is a link configured in Simple Bridged, downstream frames with unprovisioned VLAN tags will be dropped. If any links have been provisioned for the Simple Bridge mode,
downstream frames with unrecognized VLAN tags will be forwarded onto the Simple Bridge. This rule
allows Simple Bridge users to have tagged frames. A VLAN tagged frame will not be forwarded onto a
link provisioned for another VLAN even if the DA has been learned on that link. This rule prevents
upstream users from smuggling frames into a private VLAN by using knowledge of the MAC addresses.
Data
User VLAN
Network VLAN
VID
Provisioned
?
Y: Process Per Provisioned VLAN Mode
N: VID not known
Simple
Bridge
Allows
Tags?
Y: Process Per Simple Bridge
N: Drop
Figure 3: VID Matching Procedure

Teknovus ONUs assigned to a VLAN mode will ignore general broadcast traffic and forward only data for
their particular VLAN. This protects user networks attached to ONU ports from general broadcast traffic
downstream on the EPON that does not apply to them. An ONU with multiple links assigned to multiple
switching modes will forward broadcast or multicast traffic to a port only if one of the links connected to
that port requires it.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
5
Simple Bridge
An 802.1D learns locations of stations connected to it by examining the sources Media Access Control
(MAC) addresses of incoming frames. For each incoming frame, the bridge makes a forwarding decision
by consulting its table of previously learned addresses. If the destination MAC address is found in the
table, the bridge forwards the frame to the port associated with the given MAC address. If the MAC
address cannot be found in the table, the frame will be flooded to all ports except the port from which the
frame has arrived. This behavior will generate large amount of frames that are flooded to multiple ports.
In an access network which serves non-cooperative users, this may result in private information being
delivered to non-authorized users.
TK3721 modifies this default bridge behavior to reduce the amount of flooded traffic. In simple bridged
mode, the OLT behaves like a bridge; however it distinguishes two types of ports: network-side ports and
user-side ports. Network-side ports connect the OLT to upstream devices such as edge routers or switches.
User-side ports are the ports that correspond to individual LLIDs.
The simple bridging mode may be configured for dynamic learning or have static pre-provisioned look-up
table. Upstream frames on the Simple Bridge may have VLAN tags, which are ignored by the system, but
downstream frames with VLAN tags are dropped. The Simple Bridged mode would be used for an
application that might use an ordinary Ethernet bridge.
5.1 Upstream Explanation

A frame that arrived to a user-side port is forwarded according to its destination address to one or many
network-side ports, but is never forwarded to any user-side port. If a frame has a destination address which
is learned to be behind another user-side port, such frame is dropped. If a frame has a destination address
which cannot be found in the address table (i.e., it was never learned or is purged from the table due to
aging process), this frame is flooded to all network-side ports.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
The OLT will learn the mapping
between LLID and SA before
removing the LLID value from the
forwarded frame. Broadcast and
multicast addresses will not be
learned.
One of the ONUs assigned

LLID values is added to each
forwarded frame based on
the host provisioned queue
configuration.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
Queue 0
OLT
UNI 2
EPON 0
Link 0
Uplink 1
Each forwarded frame is classified into a particular

queue based on the ONUs host provisioned
classification scheme.
Link 1
Link 2
Link 3
ONU B
UNI 1
Queue 0
EPON 0
Link 2
Filtering rules may be applied on a per port basis to
prevent unwanted frames from being forwarded
onto the core network. Dynamic MAC based filtering
rules prevent user traffic intended for the customer
network from being forwarded upstream.
Link 3
Queue 0
UNI 2
Figure 4: Upstream Simple Bridged
5.2 Downstream Explanation

A frame that arrived to a network-side port is forwarded onto a user-side port, but is never forwarded to a
network-side port. If an arriving frame has a destination address which cannot be found in the address table
(i.e., it was never learned or is purged from the table due to aging process), this frame is flooded to all userside ports. The process of forwarding a frame to a user-side port (which is a virtual port) is simply a
process of identifying the correct LLID value and pre-pending this value to the frame (i.e., placing this
value in the frames preamble) before transmitting the frame on the single user-side physical port. If a
frame is to be flooded to all user-ports, it uses broadcast LLID. The TK3721 does not duplicate frames.
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
LLID values are
added based on the
link to which they will
be forwarded.
Frames with unlearned DAs

will be forwarded on the
broadcast link.
LLID values are removed by

the ONU. Unwanted frames
will be discarded based on
host provisioned filters.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Queue 0
Link 1
Broadcast
OLT
Flooding
UNI 2
EPON 0
Link 0
Link 1
Uplink 1
Link 2
Link 3
Since both ONUs have been assigned

the IEEE standard broadcast LLID.
Frames sent with this tag will be
forwarded by all 4 links.
The ONU queue

configuration determines the
port to which a given queue
will drain.
Broadcast
ONU B
UNI 1
Queue 0
Frames are classified into appropriate queues based

on the Host provisioned classification scheme.
EPON 0
Link 2
Queue 0
Link 3
Frames with learned DAs are
classified onto links based on DA.
VLAN tagged frames are not
forwarded on the Simple Bridge
For broadcast traffic destined to both ports the

Flooding queue will be used. Otherwise the
ONU will classify the traffic onto the first queue
of the highest priority link (not shown).
Broadcast
Flooding
UNI 2
Figure 5: Downstream Simple Bridged

The figure above illustrates downstream simple bridged. Notice that the flooding queue is used to write
broadcast, multicast and unlearned unicast packets to both UNI ports of the ONU.
10
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
5.3 Summary
Upstream
VLAN
Data
VLAN
Data
Data
VLAN
unicast
Data
VLAN
broadcast
Downstream
Data
VLAN
DA known?
Figure 6: Forwarding in Simple Bridged
Upstream Simple Bridge Mode

Source MAC Address
Bridging Action
Unicast
Learn SA; Forward
Multicast
Forward
Broadcast
Forward
Upstream Simple Bridge Mode

VLAN Tag
Destination MAC Address
Bridging Action
No
Learned
Forward To Link
No
Unlearned
Flood on broadcast channel
Yes
N/A
Drop
** Refer to section 16.1 for Bridging Options that affect the forwarding rules
11
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
6
Transparent VLAN
Transparent VLAN mode preserves VLAN tags in all forwarded frames. This mode is well suited to
application in which the uniqueness of VLAN tags used by subscribers can be guaranteed; for example,
when VLAN tag values are provisioned by the network operator (Figure 11). This might also be
accomplished by provisioning filtering/classification rules on the ONU, or another device in the equipment
chain.

The Host software may provision up to 62 VLAN tags per link configured in transparent VLAN mode.
When a tagged downstream frame arrives at the OLTs Uplink port, the OLT will attempt to match the tag
carried by the frame against those provisioned by the Host. If the VID identifies a link provisioned in
Transparent VLAN then that frame will be forwarded without modification to the associated link. All
untagged downstream frames are discarded by the OLT.
The LLID value is removed
from forwarded frames. The
classification scheme
determines the destination
queue.
Downstream traffic is classified by VID. Up to 62

unique VID values may be provisioned per link.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
Queue 0
OLT
VID=2000
EPON 0
VID=2000
Uplink 1
VID=2010
VID
Link
2000
Link
0
2001
2010
VID=2004
2003
2004
2020
UNI 2
VID=2010
The Host provisioned ONU queue configuration
determines the destination port for a given queue.
Link
1
Link
2
ONU B
UNI 1
VID=2004
EPON 0
Link 2
Queue 0
Filtering rules may be applied on a

per port basis to prevent unwanted
frames from being forwarded onto
the user network.
UNI 2
Figure 7: Downstream Transparent VLAN

The figure above depicts 3 links provisioned in Transparent VLAN. Note how forwarded frames leaving
the ONUs UNI ports are unchanged from those received by the Uplink.
12
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Since downstream bridging decisions are based exclusively on VID the SAs of upstream frames are not
learned. All upstream frames arriving on links provisioned in Transparent VLAN will be forwarded.
configuration.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
Queue 0
OLT
UNI 2
EPON 0
Link 0

queue based on the ONUs host provisioned
Link 1
Uplink 1
Link 2
Link 3
ONU B
UNI 1
Queue 0
EPON 0
Link 2
Filtering rules may be applied on a per port basis to
prevent unwanted frames from being forwarded
onto the core network. Dynamic MAC based filtering
rules prevent user traffic intended for the customer
network from being forwarded upstream.
Link 3
Queue 0
UNI 2
Figure 8: Upstream Transparent VLAN

The figure above depicts the behavior of upstream transparent VLAN. Upstream transparent VLAN is
identical to Simple Bridged, except that the SAs of forwarded frames are not learned by the OLT.
6.3 Summary
Upstream Transparent VLAN
VLAN Tag Present
Bridging Action
Yes
Forward without modification (based on VID only)
No
Forward without modification (based on VID only)
Downstream Transparent VLAN

Bridging Action
Forward on link without modification (based on VID only)
13
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Dedicated Single VLAN
Dedicated Single VLAN is so named because it strips a user-supplied VLAN tag, if any, before adding a
network-provisioned VLAN tag. Unlike Transparent VLAN mode, Dedicated Single VLAN allows the
network operator secure control over the VLAN tags injected into the core network. Nesting frames inside
multiple layers of VLAN tags is now widely supported by Ethernet products. However, this capability is
not part of the IEEE 802.1 standard. For this reason Dedicated Single VLAN has been provided to facilitate
interoperability with some older equipment.

When a tagged upstream frame arrives on a link configured in Dedicated Single VLAN the tag is stripped
before forwarding. It should be noted that in the case that an upstream frame has more than 1 VLAN tag,
only the outermost tag (the tag closest to the L2 SA field) will be stripped. Untagged upstream frames are
simply forwarded.
The LLID value is
appended to forwarded
frames, based on vendor
provisioned queue
configuration.
Unlike Simple Bridged, SAs of forwarded frames

are NOT learned. If a VLAN tag is present in the
frame it will be removed by the OLT prior to being
forwarded.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
OLT
Queue 0
VID=5
UNI 2
EPON 0
Uplink 1
VID
Link
2000
VID=2010
2010
VID=2004
2004
VID=2000
Host provisioned classification scheme will determine

the queue to which a given frames will be forwarded.
ONU B
UNI 1
EPON 0
the core network. Dynamic MAC
based filtering rules prevent user
traffic intended for the customer
network from being forwarded
upstream.
Link 2
Queue 0
UNI 2
Figure 9: Upstream Dedicated Single VLAN

The figure above depicts 3 Links configured in Single VLAN. Note that the tag arriving at link 0 will be
striped prior to forwarding.
14
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
When a tagged downstream frame matching a link provisioned in Dedicated Single VLAN is received by
the OLTs uplink port the tag is first striped before forwarding the frame to the link. Untagged downstream
frames are discarded by the OLT.
queue.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
Queue 0
OLT
UNI 2
EPON 0
Uplink 1
VID
Link
2000
VID=2010
2010
VID=2004
2004
VID=2000

determines the port to which a given queue will drain.
ONU B
UNI 1
EPON 0
upstream.
Link 2
Queue 0
UNI 2
Figure 10: Downstream Dedicated Single VLAN

In Dedicated Single VLAN mode, VLANs might be used to isolate customer traffic to unique VPNs, or
private pipes between customer campuses. Each VPN is assigned a unique VLAN tag associated with a
particular link configured in Dedicated Single VLAN
15
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
7.3 Summary
V1
L1
V2
L2
up
isi
on
ed
LLID
Vn
g
in
In
se
rt
om
Pr
ov
...
c
In
Ln
nk
Li
Network VLAN V1
VLAN
o
Lo
Ta
g
Upstream
Data
User VLAN
Data
L1
Strip
Downstream
Data
Network VLAN
VID selects link
Data
unicast
Strip
Figure 11: Forwarding Frames in Dedicated Single VLAN
Upstream Dedicated Single VLAN

VLAN Tag Present
Bridging Action
Yes
Strip tag; Add provisioned tag; Forward
No
Add provisioned tag; Forward
Downstream Dedicated Single VLAN

Bridging Action
Strip tag; Forward on link (based on VID only)
16
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Dedicated Double VLAN
Dedicated Double VLAN is so named in contrast to single VLAN mode because it preserves user-supplied
VLAN tags. Thus, frames on the network side of the OLT may have two (or perhaps more) VLAN tags,
one supplied by the network at the OLT, and others by the customer. The outermost tag (closest to the
Ethertype field) is provisioned by the network, allowing control over switching and traffic engineering,
while nested tags are preserved for those customers, that require their own VLAN tag scheme. Upstream, a
tag is added by the OLT; downstream, the tag is removed before the frame is forwarded to the customer.
The LLID value is

appended to forwarded
frames, based on vendor
provisioned queue
configuration.
Unlike Dedicated Single, Dedicated Double

preserves upstream VLAN Tags from the
customer network. The provisioned VLAN Tag will
be appended in front of the User Tag.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
OLT
Queue 0
VID=5
UNI 2
EPON 0
Uplink 1
VID
Link
2000
VID=2010
2010
VID=2004
2004
VID=2000, VID=5
Host provisioned classification scheme will determine

the queue to which a given frames will be forwarded.
ONU B
UNI 1
EPON 0
upstream.
Link 2
Queue 0
UNI 2
Figure 12: Dedicated Double VLAN

The figure above depicts Dedicated Double VLAN Mode. Note that the VID from the customer network
will be preserved.
17
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
VLAN
LLID
V1
L1
up
ro
vis
io
ne
d
L2
V2
o
Lo
Ta
g
Upstream
In
se
rt
P
Vn
g
in
m
co
In
...
Ln
n
Li
k
Network VLAN V1
User VLAN
Data
User VLAN
Data
L1
Downstream
VID selects link

Data
User VLAN
Network VLAN
User VLAN
Data
unicast
Strip
Figure 13: Forwarding in Dedicated Double VLAN
Upstream Dedicated Double VLAN

VLAN Tag Present
Bridging Action
Yes
Add Provisioned Tag; Forward
No
Downstream Dedicated Double VLAN

Bridging Action
Strip Tag; Forward on VLAN (based on VID only)
18
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Shared VLAN
Shared VLANs work like virtual bridges to segment the PON into multiple broadcast domains, each of
which might have 1 or more associated links. One possible use of shared VLAN is to segment the PON
based on service class; for instance one shared VLAN might be used to serve voice traffic while another
could be dedicated to data. A link is added to a shared VLAN by first configuring the link for Shared
VLAN mode and then provisioning a VLAN tag. All links configured in Shared VLAN mode with the
same provisioned VLAN ID are said to be members of the same shared VLAN multicast group (not to be
confused with an IGMP multicast group). Each shared VLAN has a broadcast channel that isolates the
broadcast traffic of group members from that of other links. Filtering and classification rules on the OLT
and ONU may be used to provide additional security.
There is no bound on the number of links that may be provisioned in a shared VLAN mode. However, it is
important to note that no two links with the same destination UNI port may belong to the same shared
VLAN. This restriction doesnt represent a significant limitation; as such a configuration is illogical.

When an upstream frame (tagged or untagged) is received on a link associated with a shared VLAN, the
OLT adds the provisioned VLAN tag before forwarding the frame to the core network. The OLT learns the
SA of upstream frames as dynamic MAC address filtering rules for downstream bridging. Learning
behavior depends on the state of the MacMove option, which is described in Section 16 of this document.
LLID values are removed, and
the provisioned VLAN Tag
appended to forwarded frames.

configuration.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Queue 1
Link 1
OLT
UNI 2
EPON 0
VID=1
Uplink 1
VID=2
VID=1
VID=2
Link 0
Link 1
Each forwarded frame is classified into a

particular queue based on the ONUs host
provisioned classification scheme.
Link 2
Link 3
ONU B
UNI 1
Queue 0
Because both links receive traffic from the same UNI

port it is perfectly acceptable for the same MAC
address to appear on both. For this reason the MAC
Move Interrupt must be disabled!
EPON 0
Link 2
Link 3
The second UNI port is unused in this

example. However, it remains a perfectly
usable port.
19
Queue 1
6/17/2005
UNI 2
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Figure 14: Upstream Shared VLAN
The figure above depicts two ONUs, each having 2 links configured in shared VLAN mode. From the
perspective of the OLT the ONU data-path is not of particular importance.
20
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
When a tagged downstream frame identifying a shared VLAN group is received by the OLTs Uplink port,
the tag is first striped before forwarding the frame. Downstream frames, for which the DA is unknown, are
broadcast on the shared VLAN. These frames will be forwarded by every link belonging to the shared
VLAN group, but will not be forwarded by other links. If the DA is known, the frame is forwarded to only
the associated link.
LLID values are
added based on the
be forwarded.
Tagged frames with unlearned

DAs will be forwarded on the
multicast link, based on VID.

ONU A
EPON 0
UNI 1
Queue 0
Link 0
Link 1
Queue 1
Multicast 0
OLT
Multicast 1
UNI 2
EPON 0
VID=1
VID=2
VID=1
Uplink 1
VID=2
VID=1
VID=2
Link 0
One multicast LLID for each link provisioned in a shared VLAN is
assigned to the ONU. This LLID is used to receive traffic broadcast on
the VLAN. If two links on the same ONU are in the same VLAN (not
shown) the flooding queue will be used. Otherwise, the ONU firmware
will classify VLAN multicast traffic onto the first queue of the link.
Link 1
Link 2
Link 3
Multicast 0
Multicast 1
ONU B
UNI 1
Queue 0
Since both ONUs have been assigned the same

multicast LLID values. Frames sent with these tags
will be forwarded by both of the associated links.
EPON 0
Link 2
Link 3
Queue 1
Multicast 0
Tagged frames with learned DAs
are classified onto links based
on DA + VID.
The second UNI port is unused in this

example. However, it remains a perfectly
usable port.
Multicast 1
UNI 2
Figure 15: Downstream Shared VLAN

The figure above depicts 2 ONUs, each having 2 links configured in shared VLAN. Link 0 and Link 2
belong to shared VLAN 1, while Link 1 and Link 3 belong to shared VLAN 2. Multicast 0 is the shared
VLAN multicast channel for VLAN 1 and Multicast 1 is the shared VLAN multicast channel for VLAN 2.
21
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
9.3 Summary
V1
L1
V2
L2
isi
o
up
ne
LLID
VLAN
o
Lo
Ta
g
Upstream
g
in
ro
v
In
se
rt
P
m
co
In
...
Vn
Ln
n
Li
k
Network VLAN V1
Data
User VLAN
Data
L1
Strip
Downstream
VID
selects
link
Data
User VLAN
Network VLAN
DA known
on this
VLAN?
User VLAN
Data
unicast
User VLAN
Data
multicast
Strip
N
Figure 11: Frame forwarding in Shared VLAN mode.

Upstream Shared VLAN
Source Mac
Bridging Action
Unicast
Learn SA; Add provisioned tag; Forward
Multicast
Forward
Broadcast
Forward
Downstream Shared VLAN

Destination MAC
Bridging Action
Learned
Strip Tag; Forward on link (based on L2 DA + VID)
Unlearned
Strip Tag; Broadcast on VLAN (base on VID only)
**
22
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
10 Translated VLAN
Translated VLAN mode is used when the uniqueness of VLAN tags used by subscribers connected to one
EPON cannot be guaranteed, for example, in the case when VLAN tag values are selected by the
subscribers themselves. In translated VLAN mode, for each upstream frame, the OLT translates the 2-tuple
of non-unique user VLAN tag and unique LLID into a unique network VLAN tag (Figure 12). For each
downstream frame a reversed translation is performed, where a unique network VLAN is translated into a
non-unique user VLAN tag and unique LLID.

When a tagged upstream frame arrives to a user-side port, the OLT substitutes the possibly non-unique
VLAN tag by a unique VLAN tag, based on the values of the original VLAN tag and the LLID field in the
arrived frame. An untagged upstream frame is discarded by the OLT.
LLID values is added to
each forwarded frame
based on the host
provisioned queue
configuration.
The VLAN Flags Personality parameter

shall determine the output CoS value.
If the passThroughCoS bit is set to 1
then the ouput CoS will be the same as
the input, otherwise 0 will be written as
the output CoS.
ONU A
UNI 1
Queue 0
EPON 0
Link 0
Link 1
Queue 0
OLT
EPON 0
VID=2001
Uplink 1
VID=2010
VID=2020
VID=1
Translations
Link
2001
2000
Link
0
2003
2010
2004
2020
UNI 2
VID=2
queue based on the host provisioned ONU
Link
1
Link
2
ONU B
Queue 0
LLID
...
8100
4
VID=4
The LLID value is used to pick an associated translation table. The

User provisioned VLAN tag is then overwritten with the provisioned
network side tag found in the table. If the frame is untagged or the user
side tag is not present in the table, the frame will be dropped.
EPON 0
Link 0
Figure 16: Upstream Translated VLAN

The figure above depicts 3 links configured in translated VLAN. Notice how the LLID value is used to
select the logical link and then the VID is used to select the output VID.

When a tagged downstream frame is received by the OLTs Uplink port, the OLT selects an individual
user-side port (link) based on the VLAN tag value of the frame, after which the OLT substitutes the VLAN
tag value with a new (possibly non-unique) value expected by the subscriber. An untagged downstream
frame is discarded by the OLT.
23
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
The Network-Side VID is used to lookup a
provisioned User-Side VID and associated LLID.
The VID is overwritten with the provisioned UserSide VID. If the frame is untagged or the user
side tag is not present in the table, the frame will
not be passed on the VLAN.

queue.
ONU A
Queue 0
EPON 0
Link 0
Link 1
OLT
Queue 0
EPON 0
VID=2000
Uplink 1
UNI 1
VID=2010
VID=2004
Net
VID
User
VID
2000
2001
2010
2003
2004
2020
Link
Link
0
VID=1
UNI 2
VID=1
determines the port to which a given queue will drain.
Link
1
Link
2
ONU B
UNI 1
User VID = 3
EPON 0
The VLAN Flags Personality
parameter shall determine the
output CoS value. If the
passThroughCoS bit is set to 1
then the ouput CoS will be the
same as the input, otherwise 0
will be written as the output CoS.
Link 2
Queue 0

the customer network.
UNI 2
10.3 Summary
Translated VLAN mode can be useful where equipment on the customer side of the ONU has a limited
range of VIDs that it can support, or where the equipment cannot be provisioned. Each customer on the
PON might have, for example, a VoIP phone or VLAN switch that only generates frames on VID 1. But,
the network side needs unique VID values for each customer. The Translated VLAN mode could be
provisioned to map VID 1 on each LLID to a unique network-side value.
24
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Upstream
Net VLAN
User VLAN
N1
U1
N2
U2
N3
U3
N4
U4
Replace
VLAN Tag
unprovisioned
Drop
Net VLAN V1
Data
LLID
selects
table
Select
table for
each LLID
Look-up
incoming
user VLAN
User VLAN
Data
L1
Data
User VLAN
unicast
Downstream
Data
Net VLAN
Look-up
VLAN Tag
Replace
VLAN
Net VLAN
User VLAN
LLID
N1
U1
L1
N2
U2
L2
Un
Ln
Select
unicast
LLID
...
Nn
Figure 13: Frame forwarding in translated VLAN mode.

Upstream Translated VLAN
VLAN Tag Present
Bridging Action
Yes
Strip Tag; Add network tag; Forward
No
Drop
Downstream Translated VLAN

Bridging Action
Strip Tag; Add user tag; Forward on VLAN (based on VID only)
25
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
11 Priority VLAN
The Priority VLAN mode uses the VID carried by the downstream frame to select a particular ONU and the
802.1p priority (VLAN CoS) field to select a particular link of that ONU. Optionally the IPv4 ToS field
may be used to select the link (the decision is made based on a personality flash parameter. refer to the Host
Interface specification). This mode allows mapping of customer-side priority information, such as the IP
Precedence / TOS field, into individual links on the PON, where service contracts can be enforced on each
class of service. On the network side, the classes of service are mapped to VLAN priority values.
Note: Only links belonging to the same ONU may use the same VID values
In the downstream direction, switching is performed in two stages. The VID is used to select a group of
links (an ONU), and the priority field is used to select the appropriate link within that group. This selection
may be made based on a single priority value or a contiguous inclusive range of priority values, such as [3,
5].
Note: If IPv4 TOS is used then one link should be provisioned to allow non-IP (non-ToS) frames
to be transmitted. One and only one link should be used for this purpose. This link is usually the
lowest priority link, probably dedicated to data communications.
In the upstream direction, the link on which the frame arrived is used to select a VLAN Tag (provisioned
VID and Upstream CoS value). Upstream user tags will be stripped prior to forwarding similar to Dedicated
Single VLAN mode. Note that though a range of priority values may be used downstream, upstream one
and only one priority field value may be used to determine the VLAN.
26
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Upstream
Net Pri:VID
LLID
Pri6:VID1
L1
Pri4:VID1
L2
Pri6:VID2
L3
Pri4:VID2
L4
Look-up
incoming
LLID
...
Insert
Provisioned
VLAN tag
Pri6:VID1
Pri:VIDn
User VLAN
Ln
Data
User VLAN
Data
L1
ONU
Pri6:VID1
User VLAN
Data
User VLAN
Data
L2
Pri 6
Data
L1
Pri 4
Data
L2
Downstream
VID
selects
ONU
Data
802.1p
priority
select
LLID
Net VLAN
VID
unprovisioned
Drop
Priority
unprovisioned
Drop
Figure 14: Frame forwarding in Priority VLAN mode.
The tables below summarize the behavior of Priority VLAN

Upstream Priority VLAN
VLAN Tag Present
Bridging Action
Yes
Strip Tag; Add Provisioned Tag; Forward
No
Downstream Priority VLAN

Bridging Action
Strip Tag; Forward on link (based on VID + Priority Value)
27
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
12 Priority Shared VLAN
Priority Shared VLAN mode is similar to Shared VLAN mode except that as with Priority VLAN mode all
bits of the VLAN tag may be used to specify a VLAN. Thus the VID is used to select a group of ONUs and
the 802.1p priority field (CoS) is used to select a particular subset of links associated with that set of ONUs.
Optionally IPv4 ToS may be used in favor of VLAN CoS, the selection is made by provisioning a
personality parameter in the OLTs personality flash file (refer to the TK3712_Host_Interface.pdf
document). Note that, just like Priority VLAN mode, the downstream broadcast domain is identified by a
combination of VID and an inclusive range of upstream priority field values such as [0, 4]. Except where
noted the restrictions for Priority Shared VLAN is the same as that of Shared VLAN.
The main benefit of Priority VLAN over Shared VLAN is that downstream bridging decisions may be
made by IPv4 ToS. Additionally, this mode conserves VLAN address space by using priority values as part
of the domain identification. A modicum of flexibility is gained by allowing bridging decisions to be made
on ranges of values. The typical application of this mode would be the same as that of Shared VLAN.
NOTE : When links are provisioned for Priority Shared VLAN the user has to ensure that for each
VLAN all the priority ranges (0-7) are provisioned. The user cannot leave any holes. For example if
there are links which are provisioned for Priority Shared VLAN with the following data
Link Id
VLAN
Min Priority
Max Priority
10
10
then traffic on VLAN 10 will not be allowed since VLAN = 10, Priority = 7 has not been provisioned
for any link. The following tables show a complete provisioning where there are no holes in the
priority.
28
Link Id
VLAN
Min Priority
Max Priority
10
10
Link Id
VLAN
Min Priority
Max Priority
10
10
10
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
In the upstream direction, links are associated with a particular VLAN based on a combination of VID and
unique CoS value provisioned by the Host software and referred to as the Upstream CoS Field. When a
frame arrives on a link configured in Priority Shared VLAN, the OLT inserts a VLAN tag that is the
combination of the upstream CoS and VID values provisioned for that link. Just like Shared VLAN mode
the OLT learns the L2 SA of upstream frames to facility dynamic MAC filtering downstream.
Note: If Priority Shared VLAN is used then the OLTs MacMove option MUST be disabled.
Figure 17: Upstream Priority Shared VLAN
29
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
In the downstream direction, forwarding decisions are more complicated. The VID carried by the frame is
used to select a subset of ONU UNI Ports. The priority field (IPv4 ToS or VLAN CoS, depending on OLT
Personality) carried by the frame is used to select a smaller subset of links (the VLAN) from the subset of
UNI Ports. The L2 DA is used to select a particular link within the VLAN to forward the frame. If the DA
has not been learned the frame will be broadcast on the VLAN.
Note: The Host software must ensure that no two links with the same destination ONU UNI Port,
are configured in the same Shared VLAN.
Note: When provisioning Priority Shared VLAN, all groups of LLIDs that have the same VID
must be provisioned such that they do not have matching or overlapping priority ranges. Since the
downstream forwarding decision is based on VID and ToS (or CoS), having multiple groups of
LLIDs with the same value provisioned will produce unexpected results. Furthermore, all values
within the downstream (ToS or CoS) range should be provisioned.
Note: If IPv4 ToS is used as the priority field then one link (and only one link) should be
provisioned for forwarding non-IP frames. This is typically the lowest priority link, probably
dedicated to data communications. To allow a link to forward non-IP frames the Tx-Non-ToSFrames option should be provisioned as 1.
Figure 18: Downstream Priority Shared VLAN
30
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
12.3 Summary
The tables below summarize the behavior of Priority Shared VLAN:
Downstream Priority Shared VLAN (Switch on ToS)
ToS in Range
Tx-Non-ToS-Frames
Yes
N/A
No
L2 DA Learned
Bridging Action
Yes
Strip Tag; Forward (Based on DA + VID + ToS)
No
Strip Tag; Broadcast on VLAN (Based on VID + ToS)
Yes
Yes
Strip Tag; Forward (Based on DA + VID)
No
Strip Tag; Broadcast on VLAN (Based on VID)
No
N/A
Drop
**
Downstream Priority Shared VLAN (Switch on CoS)

CoS in Range
Tx-Non-ToS-Frames
L2 DA Learned
Bridging Action
Yes
N/A
Yes
Strip Tag; Forward (DA + VID + CoS)
No
Strip Tag; Broadcast on VLAN (VID + CoS)
No
N/A
N/A
Drop
**
Upstream Priority Shared VLAN
VLAN Tag Present
Bridging Action
Yes
Strip Tag; Add Provisioned Tag (VID + Upstream CoS); Forward
No
31
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
13 Transparent Priority Shared VLAN
This mode is the exactly the same as Priority Shared VLAN in terms of provisioning & classification of
traffic in both the directions. The only difference is that this mode does not STRIP VLAN in the down
stream direction. It uses the VLAN for classification but does not remove it. As shown in the Figure 19
down stream frames transmitted out of the UNI ports still have a TAG since they are not stripped at the
OLT. Any restrictions that apply to Priority Shared VLAN apply to this mode as well.
Figure 19 Down Stream Transparent Priority Shared VLAN classification
32
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
14 Priority Simple Bridged
This mode is used to classify simple bridged traffic further based on the priority field. The prioritization
happens only for Unicast traffic, broadcast is not prioritized. The following figures explain how to setup the
ONU and the OLT for this mode to work
LLID values are
added based on the
be forwarded.
Frames with unlearned DAs

will be forwarded on the
broadcast link.

ONU A
UNI 1
Queue 0
EPON 0
Link 0
Queue 0
Link 1
Broadcast
OLT
Flooding
UNI 2
EPON 0
Link 0
Link 1
Uplink 1
Link 2
Link 3
Since both ONUs have been assigned

the IEEE standard broadcast LLID.
Frames sent with this tag will be
forwarded by all 4 links.
The ONU queue

configuration determines the
port to which a given queue
will drain.
Broadcast
ONU B
UNI 1
Queue 0
Frames are classified into appropriate queues based

on the Host provisioned classification scheme.
EPON 0
Link 2
Queue 0
Link 3
Frames with learned DAs are
classified onto links based on DA
and TOS field. VLAN tagged frames
are not forwarded in this mode
For broadcast traffic destined to both ports the

Flooding queue will be used. Otherwise the
ONU will classify the traffic onto the first queue
of the highest priority link (not shown).
Broadcast
Flooding
UNI 2
Note:
1 Mac Move should be Disabled
2 Cannot Mix Shared Priority Vlan
and Priority Simple Bridge on the
same ONU
Figure 20 Down Priority Bridge Mode
33
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Down stream Prioritized Bridging

VLAN Tag
Destination MAC Address
Priority
Bridging Action
No
Learned
Within Provisioned Priority Range
Forward To Link
Outside Provisioned Priority Range
Drop
No
Unlearned
Dont care
Flood on broadcast
channel
Yes
N/A
N/A
Drop
Figure 21 Upstream Priority Bridge Mode
34
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Upstream Prioritized Bridging

Source MAC Address
Bridging Action
Unicast
Learn SA; Forward
Multicast
Forward
Broadcast
Forward
As illustrated by the figure above this mode is similar to the Simple Bridged mode except that the IPv4 ToS
field is used to differentiate traffic into services. The mode allows the user to provision the priority range
that is valid for each link and uses this range to classify the packet further. This mode doesnt support
VLAN tagged frames and hence it cannot classify based on CoS. Non IP packets will be classified just
like an IP packet with ToS = 0. The priority is used to classify only in the down stream direction. Packets
with destination MAC addresses that havent been learned by the OLT will not be subjected to
classification based on the priority. Only packets that have known destination MAC addresses will be
further classified based on the priority field. Frames with priority that are outside the priority range
provisioned for that link are dropped. The MAC MOVE option in the personality has to be disabled
before the user can provision a link for this mode.
NOTE : Priority Simple Bridge and Priority Shared VLAN should never be provisioned together on
the same ONU.
35
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
15 Cross-connect
The Cross-connect mode creates a nailed up connection between two links. Upstream traffic from one
link is switched to the downstream of the other link, and vice versa. None of the traffic from the crossconnected links appears on the uplink side of the OLT. Only the two links involved in the cross-connect
can see the traffic; no other ONU can receive the cross-connected traffic. No frames in the cross-connect
are modified.
The Cross-connect mode can be useful to create VPN pipes between two ONUs on the same PON span,
as for a business with multiple offices, without loading the core network.
Upstream
VLAN
Data
L1
VLAN
Data
L2
Downstream
Data
VLAN
L1
Data
VLAN
L2
Figure 17: Frame forwarding in cross-connect mode.
36
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
16 TK3721 Bridging Mode Options
16.1 Discard Unknown Frames Option
Tk3721 allows the option to drop frames with destination MAC addresses that are not learned in the
upstream direction. Modes that use the destination MAC address to route the frame, can make use of this
option. By default, this option is not enabled, which causes all frames with unknown MAC addresses to be
sent on the Broadcast or Multicast link depending on the mode (Simple Bridge: Broadcast; Any Shared
VLAN Mode: Multicast). When this Option is enabled, the OLT will discard frames with unknown MAC
addresses in the down stream direction with the exception of frames that have Multicast BIT set in their
destination MAC address.
SPECIAL NOTE: The Discard Unknown Frames option works on a global basis, not on any per logical
link. In other words, MAC addresses learned from any logical links will be considered known to the
TK3721 overall and will no longer be considered unknown.
NOTE: The Teknovus system considers the following address range as Multicast:
0x01 00 5E 00 00 00 0x01 00 5E FF FF FF
16.2 Allow VLAN Tags on Simple Bridge

The TK3721 allows the option to forward frames with VLAN tags on logical links that are configured for
simple bridge. By default, this option is not enabled, which means all frames with VLAN tags will not be
forwarded either on unicast or multicast LLIDs. If this option is enabled, frames with VLAN tags that are
not provisioned, will be forwarded. In other words, this means that frames with VLAN tags not associated
with any existing logical links will be forwarded on simple bridge logical links.
16.3 Address learning and MacMove Option

Often, to serve different types of traffic, multiple LLIDs are assigned to one ONU. Frames belonging to
different traffic flows may pass through a single user device, such as home gateway, and therefore, may
have the same source MAC address. This however may create a problematic situation in which the OLT
constantly relearns SA on different LLIDs. Since in the shared VLAN and priority shared VLAN modes
the MAC address is used to make downstream forwarding decisions, having DA re-learned in different
broadcasting domain may have a detrimental effect on efficiency of the downstream transfer. For example,
if a downstream frame arrived with VLAN A (destined to domain A) and DA d, but d was learned on
broadcasting domain B, the frame will be flooded to all LLIDs in A.
To resolve this situation, the MacMove option is introduced. When MacMove is set to true (on), the OLT
will re-learn MAC address every time it arrives on a different LLID. When this happened, the address in
disassociated (un-learned) with the previous LLID and is associated with the new LLID. This is the
default address-learning behavior.
When the MacMove option is set to false (off), whenever a new MAC address arrives from any LLID, it is
learned simultaneously on all LLIDs belonging to the same ONU. Therefore, addresses do not become unlearned when the same address arrives on a different LLID and the OLT does not flood frames
unnecessarily.
37
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
16.4 Priority Copy Option
Some VLAN modes have an option to set priority values in the network-side VLAN tag based on priority
fields from user frames. Modes with this option include the Dedicated Single, Dedicated Double, and
Shared VLAN mode. Rather than using a host-provisioned priority value for the network-side VLAN tag
added in these modes, the Priority Copy option uses the VID specified by the host, but determines the
802.1p priority field values based on the user frame input.
This option uses either one or two priority fields as a source of the priority for the frame. These fields are
known as Priority A and Priority B. The actual field in the frame used for each field is programmable.
As an example, this discussion assumes that Priority A is the 802.1p Class of Service bits in the VLAN tag
(the COS), and that Priority B is the IP Precedence or Type of Service field in the IP header (TOS).
Consider the case where only Priority A is used, and the COS field is selected. A frame arriving upstream
on a link will have a VLAN tag with some priority value included. These three bits representing an input
priority value are used to look up an output priority value in a table for Priority A. A three-bit value is
produced, and the network side VLAN tag inserted by the OLT will have this value as the priority field in
the tag. Note that if the table is programmed such that the output value is the same as the input index, the
output priority of the VLAN tag will be the same as the input priority on the tag the user supplies. Hence
the name priority copy for this option. The output values in the table can be programmed to other values,
however, so there can be an arbitrary mapping from input priority to output priority. This feature can be
useful, for instance, to invert a priority scheme. (Some schemes use lower numbers to represent higher
priority traffic; others use higher numbers to represent higher priority traffic.)
If the input frame has no VLAN tag, there is no input priority to use to index into the table. In such a case,
a programmed default priority value is used.
As mentioned above, it is possible to configure two input priority fields, A and B, to use to determine the
network-side priority. Each priority field has its own lookup table, and each lookup produces a possible
value for the priority in the network VLAN tag. This mode includes an A/B Precedence parameter to
choose which priority to use if both values are present. If only one of the two fields is present in the frame,
that value will be used. If neither field is present in the frame, the default value will be supplied. The A/B
Precedence parameter can be set to select the priority from field A only, field B only, to prefer the value
from Field A to that from Field B, or to prefer Field B over Field A.
Note: Priority Copy option cannot be used if any LLID in a given
EPON is configured to use the Translated VLAN mode.
38
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
Upstream
Priority B
b0
b1
b2
b3
b4
b5
b6
b7
b8 (Default)
not present
IP TOS
Priority A
A
B
A over B
B over A
a1
a2
a3
a4
a5
a6
a7
a8 (Default)
not present
802.1p
COS
802.1p
COS
Precedence
a0
Network VLAN
IP Header
User VLAN
IP Header
L1
Figure 16: VLAN modification using priority copy option.
39
6/17/2005
TN500_SYS_Bridging
TN500_SYS_Bridging
Confidential
16.5 Priority Mode Option

Certain bridging modes make use of the IPv4 ToS or VLAN CoS field for bridging decisions. Do to limited
hardware resources a single TK3721 may be provisioned for only ToS or CoS switching operation, but
never both. The Priority Mode Option is provisioned in the OLTs personality FLASH and allows system
vendors to select a default bridging behavior at manufacturing time. Note that certain VLAN modes, such
as Priority Simple Bridge must always use ToS. Therefore if CoS is selected these bridging modes cannot
be used. The TK3721 CLI allows operators to set the personality parameter using the /pers/choosepri
command.
40
6/17/2005
TN500_SYS_Bridging
Technical Note
TN500_SYS_Bridging
Shared VLAN Multicast SLA

The broadcast channel (sometimes called a shared multicast link) associated with the shared VLANs has an
SLA similar to that of a unicast link. The broadcast channels SLA may be provisioned using the Get/Set
Multicast SLA Host Interface command. Note that a shared Multicast SLA should not be mistaken for the
IGMP multicast SLA.
Size
10
4
4
2
2
11
Description
Queue Label
Minimum Guaranteed Bandwidth
Maximum Allowed Bandwidth
Delay Sensitive (1 = Sensitive, 0 =
Tolerant)
Max Burst Size
Reserved
Units
Default
Kbps
Kbps
1,000,000
1,000,000
0
0
0
1,000,000
1,000,000
10
256
Kbytes
Min
Max
The multicast SLA is addressed using the MAC address of a link that belongs to the Shared VLAN group.
Note that the port and the queue number in the label are set to 0. At least one link must be provisioned in a
shared VLAN mode before provisioning the multicast SLA.
16.6 Disabling Multicast Traffic

For unicast links, the ability to stop traffic without affecting the traffic of other links is highly desirable.
The Teknovus EPON System provides the Disable SLA Host Interface command to facilitate this behavior.
Stopping multicast traffic for a particular link may also be desirable. However, unlike unicast SLAs
multicast SLAs have a many-to-one association with a link. Thus, if a hypothetical Disable Multicast
SLA command were implemented by the OLT, the command would affect the multicast traffic of all
associated links. Certainly it would be more desirable if a mechanism could be devised that disabled only
the multicast traffic of a particular link, while preserving the multicast traffic of other links. The Teknovus
OLT provides just such a mechanism.
Before describing the method by which multicast traffic is disabled, some new terminology must be
introduced. The Disable/Enable nomenclature, used thus far is imprecise. For the purpose of clarity these
terms, as they apply to a Multicast SLAs, shall be replaced with add and remove. Add shall denote the
process of establishing a links multicast service. Remove shall denote the process of stopping the links
multicast service.
16.7 Adding and Removing Multicast Links

The process of adding and removing a link from a multicast group is orchestrated by the OLT. However,
based on the links state, the Host software has indirect control over this process. The remainder of the
discussion shall focus on the states of a logical link, as they apply to a given links membership in a shared
VLAN multicast group. These states are logical, and do not represent actual hardware or software modules.
The OLT is presumed to be configured in strict boot mode (host-driven). Only links configured in a shared
VLAN mode with a provisioned VLAN tag will be considered. Note that issuing the Set Multicast SLA
Host Interface command has no effect on a given links state.
41
6/17/2005
Technical Note
TN500_SYS_Bridging
Downstream
SLA Enabled
Enable SLA
(Downstream)
Enable SLA
(Upstream)
Disable SLA
(Upstream)
Disable SLA
(Downstream)
Link Arived
Both SLAs
Disabled

Removed
Link Added to
Shared VLAN
Multicast
Group

Removed
Disable SLA
(Downstream)
Disable SLA
(Upstream)
Enable SLA
(Downstream)
Enable SLA
(Upstream)
Upstream SLA
Enabled
Figure 22: State Diagram of Multicast SLA Membership

The figure above depicts the states of a given link as they apply to the Shared VLAN multicast SLA. All
links start initially in the Link Arrived state. When a link departs from the network all of its SLAs will be
disabled, and the link will automatically be removed from the shared VLAN multicast group.
16.7.1 Link Arrived / Both SLAs Disabled

A newly arrived links SLAs will automatically be disabled. The OLT will not add a link to its multicast
group until after both (upstream and downstream) SLAs have been enabled. Therefore, link arrival also
implies that the link has not been added to a shared VLAN multicast group.
16.7.2 Upstream / Downstream SLA Enabled

Enabling an SLA using the Enable SLA Host Interface command will allow unicast traffic to be passed in
the specified direction on the given link.
16.7.3 Link Added to Shared VLAN Group

After both upstream and downstream SLAs have been enabled the link will be added to the shared VLAN
group.
16.7.4 Upstream / Downstream SLA Enabled (from Link Added)

If either of the links SLAs are disabled the link will also be removed from the shared VLAN multicast
group.
42
6/17/2005
Technical Note
Host
TN500_SYS_Bridging
OLT
In strict boot mode unicast SLAs are
disabled by the OLT when a link departs
the network or is newly discovered.
Therefore link arrival implies unicast links
are disabled. The OLT will not allow the
link to join a VLAN multicast group until
both upstream and downstream SLAs
have been enabled.
Autonomous Link Discovery (Link A)
Enable SLA (Link A, Downstream)
Enable SLA Ack (Link A, Downstream)
Enable SLA (Link A, Upstream)

Add Link to VLAN Multicast Group (Link A)
Enable SLA Ack (Link A, Upstream)
Assuming that Link A is associated with

a VLAN multicast group, the link will not
join the multicast group until its upstream
and downstream SLAs have both been
enabled. Once both SLAs have been
enabled the multicast group is joined
automatically.
Disable SLA (Link A, Downstream)

Remove Link From VLAN Multicast Group (Link A)
Disable SLA Ack (Link A, Downstream)
If either of Link As SLAs are disabled, or

the link departs the network, then Link A
will be removed from its VLAN multicast
group. Link A will rejoin the VLAN
multicast group only after the disabled
SLAs are enabled again.
Figure 23: Typical Host Sequence
43
6/17/2005
Technical Note
TN500_SYS_Bridging
16.8 Lifecycle of Shared VLAN Multicast SLA

The lifecycle of a Shared VLAN Multicast SLA is exactly the same as that of the corresponding VLAN
Record. The OLT firmware maintains the relationship between the links, Shared VLAN SLAs, and VLAN
Records. All links provisioned in the same Shared VLAN maintain a reference (binding) to the same
VLAN record. When a VLAN tag is deleted the binding between the record and the link is broken. When
the VLAN tag is added the binding is restored. When there is no longer any links referencing a particular
VLAN record, the record itself is released back to the system (along with its shared VLAN SLA) to be
allocated to another VLAN.
Link Record Table
VLAN Record
Reference to Link 0
Type = Shared VLAN
...
VLAN Tag
Reference to Link n
Reference Count = 3
SLA
Link 0
Link 1
Link 2
MAC
MAC
MAC
SLA
SLA
SLA
Reference To VLAN
Reference To VLAN
Reference To VLAN
Figure 24: Logical VLAN Logical Link Relationship Model

The figure above illustrates the relationship between the VLAN tag, Shared VLAN Multicast SLA and
logical links that is maintained by the OLT firmware.
44
6/17/2005
Technical Note
yes
TN500_SYS_Bridging
Target Link has

Tag assigned?
No
No
Yes
No
VLAN Tag Exists?
Bridged VLAN?
No
yes
Notify Host of
Error
Number Bridged
VLANs < Max?
Yes
No
Bridged VLAN?
Yes
Increment Reference
Count and assign
VLAN Record to link.
Allocate new Shared

VLAN record
(Reference Count = 0)
Increment Number of
Shared VLANs
Done
Figure 25: Add VLAN Tag

The figure above illustrates the steps the OLT will take to add a VLAN Tag
45
6/17/2005
Technical Note
TN500_SYS_Bridging
No
Notify Host of
Error
VLAN Tag Exists?
yes
Assign null Tag to Link

and decrement
reference count.
Reference
Count is 0?
Yes
Yes
Bridged VLAN?
Decrement Number of
Bridged VLANs
No
No
Done
Release VLAN
Figure 26: OLT Process of Deleting a Tag

The figure above illustrates the steps the OLT will take when deleting a VLAN tag.
46
6/17/2005
Technical Note
TN500_SYS_Bridging
17 Bridging Mode Restrictions

This section is intended to convey important restrictions on the use of the TK3721 VLAN modes. To obtain
the complete set of restrictions for a particular mode, that modes detailed description MUST be consulted.
17.1 Bridging Mode Compatibility Matrix

For each bridging modes available on the TK3721, the table below lists compatible bridging modes and
necessary system settings. Each system setting is detailed in the section entitled Bridging Mode System
Options.
Shared VLAN
Transparent VLAN
Translated VLAN
Link Cross-Connect
Prioritized VLAN
Priority Copy Single VLAN
Priority Copy Double VLAN
Priority Copy Shared VLAN
Priority Shared VLAN
Priority Simple Bridged
Transparent Priority Shared VLAN
0
1
2
3
4
5
6
7
8
9
10
11
12
13
------
Bridging Type
Bridging Type
Simple Bridged
Shared VLAN
Transparent VLAN
Translated VLAN
Link Cross-connect
Prioritized VLAN
/pers/pricopyenable
/pers/macmove
/pers/choosepri
Allow VLAN on Simple Bridge
/pers/enableprivlan
Simple Bridged
Key:
Y = Yes
N=N
T = Must be set to True (1)
F = Must be set to False (0)
TF = True or False may be used
-- = No Effect
0
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
-TF
-TF
--
1
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
------
2
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
------
3
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
-F
----
4
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
------
5
Y
Y
Y
Y
Y
Y
Y
Y
N
N
N
Y
Y
Y
F
-----
6
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
------
7
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
--TF
-T
8
Y
Y
Y
Y
Y
N
Y
Y
Y
Y
Y
Y
Y
Y
T
F
----
9
Y
Y
Y
Y
Y
N
Y
Y
Y
Y
Y
Y
Y
Y
T
-----
10
Y
Y
Y
Y
Y
N
Y
Y
Y
Y
Y
Y
Y
Y
T
F
----
11
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
-F
----
12
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
N
-F
F
TF
--
13
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
Y
-F
----
Note: The enableprivlan option is intended for future use and currently has no effect on modes other than
the Prioritized VLAN mode. However, this option MUST be set to True if Prioritized VLAN is to be used
on the TK3721. The choosepri option can now be performed dynamically during run time with the Get/Set
Priority VLAN host command.
47
6/17/2005
Technical Note
TN500_SYS_Bridging
17.2 Bridging Mode Per Entity Limitations

This section lists the per entity limitations for each of the OLTs bridging modes.
Bridging Mode
Simple Bridged
Dedicated Single
Dedicated Double
Shared
Transparent
Translated
Link Cross-connect
Prioritized
Priority Copy Single
Priority Copy Double
Priority Copy Shared
Priority Shared
Transparent Priority Shared
Max Bridging
Domain/TK3721
239
239
239
* 24
4095
4095
119
239
239
239
* 24
* 24
239
* 24
Max
VIDs/Link
** N/A
1
1
1
62
31
0
1
1
1
1
1
** N/A
1
Max Links/ONU
TK3701
TK3711
**** 2
2
3
6
3
6
3
*** 3
3
6
3
6
3
6
3
6
3
6
3
6
3
3
3
3
3
6
3
3
TK3713
2
?
?
?
?
?
?
?
?
?
?
?
?
?
Max Links/ONU User Port

TK3701
TK3711
TK3713
1
1
3
6
3
6
3
3
3
6
3
6
3
6
3
6
3
6
3
6
3
3
3
3
3
6
3
3
1
?
?
?
?
?
?
?
?
?
?
?
?
?
Note: up to 239 links may be configured in any bridging mode.

*
Each multicast link registered will reduce the number of unicast links that may be
registered by 1. A bridging domain is defined by the presence of a unique multicast link.
Thus 2 unicast links configured in priority shared VLAN with the same VID but different
upstream CoS values constitutes two distinct bridging domains.
**
If the host software provisions the OLT to allow VLAN tags on the simple bridge, there
is no limit to the number of VLAN tags that may be passed on any given link configured
in simple bridge. VLAN tag values are NEVER used to make any bridging decision for
links provisioned in Simple Bridged.
***
Each multicast link that is register by a given ONU reduces the total number of unicast
links that that ONU may register by 1. This limitation currently applies to the TK3711
only.
****
In general only 1 link/port can be configured in Simple Bridged Mode. This is because in
a typical deployed system only 1 user with 1 MAC address will be associated with any
particular link/port configured in Simple Bridged Mode. Since Simple Bridge Mode
cannot make use of fields other than the DA to differentiate a users traffic into multiple
service classes, such a configuration would mean that the OLT could not possibly make a
downstream switching decision between two links. The exception would be where two
users or two services reside behind the same UNI port and each user/service is identified
by a unique MAC address, guaranteed by an ONU classification rule.
48
6/17/2005
Technical Note
TN500_SYS_Bridging
17.3 Summary of Upstream Bridging Behavior

Bridging Mode Type
Simple Bridged
0
1
Forwards
Tagged Frames?
Yes
Yes

Shared VLAN
2
3
Yes
Yes
Transparent VLAN
Translated VLAN
4
5
Link Cross-connect
Prioritized VLAN
6
7
Yes
Only if VID
matches
provisioned VID
Yes
Yes
Yes
Yes
10
Yes
11
Yes

12
13
Yes
Yes
Modifies Frame?
No.
Overwrites existing tag with provisioned tag. Otherwise
inserts tag.
No.
Overwrites existing tag with provisioned tag. Otherwise
inserts tag.
No.
Overwrites existing tag with provisioned tag, based on
translation function.
No.
If tag present, overwrites tag with provisioned tag;
otherwise inserts tag.
otherwise inserts tag. Output CoS value determined by
provisioned mapping function.
Inserts provisioned tag; output CoS value determined by
No.
otherwise inserts tag.
Learns Source
Address?
Yes
No
No
Yes
No
No
No
No
No
No
Yes
Yes
Yes
Yes
17.4 Summary of Downstream Bridging Behavior

Bridging Mode Type
Simple Bridged

Shared VLAN
Transparent VLAN
Translated VLAN
1
2
3
4
5
Forwards
Tagged Frames?
Yes, if explicitly
enabled.
Yes
Yes
Yes
Yes
Yes
Link Cross-connect
Prioritized VLAN
6
7
Yes
Yes

8
9
10
11
Yes
Yes
Yes
Yes

12
13
Yes
Yes
Forward By:
Modifies Frame?
DA
No.
VID
VID
VID
VID
VID
Removes tag.
Removes tag.
Removes tag.
No.
Overwrites existing tag with provisioned tag, based on
translation function.
No.
Removes tag.
LLID Value
VID + Selected
Priority Range
VID
VID
VID + DA
VID + DA + ToS
or CoS
DA + ToS
VID + DA + ToS
Removes tag.
Removes tag.
Removes tag.
Removes tag.
No.
No.
49
6/17/2005

TN500 SYS Bridging

Hochgeladen von

Dokumentinformationen

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

TN500 SYS Bridging

Hochgeladen von

Copyright:

Verfügbare Formate

TN500_SYS_Bridging

TK3721 Bridging Modes

Brief Overview of 802.3ah Bridging.................................................................................................... 3

Multiple Link Solution VS Single Link Solution ............................................................................... 5

Hardware Review ................................................................................................................................. 7

Downstream Explanation ............................................................................................................... 9

Transparent VLAN ............................................................................................................................ 12

Downstream Explanation ............................................................................................................. 12

Dedicated Single VLAN ..................................................................................................................... 14

Downstream Explanation ............................................................................................................. 15

Dedicated Double VLAN.................................................................................................................... 17

Downstream Explanation ............................................................................................................. 21

Translated VLAN ........................................................................................................................... 23

Downstream Explanation ............................................................................................................. 23

Priority VLAN ................................................................................................................................ 26

Priority Shared VLAN ................................................................................................................... 28

Downstream Explanation ............................................................................................................. 30

Transparent Priority Shared VLAN............................................................................................. 32

Priority Simple Bridged ................................................................................................................. 33

TK3721 Bridging Mode Options ................................................................................................... 37

Discard Unknown Frames Option................................................................................................ 37

Allow VLAN Tags on Simple Bridge............................................................................................. 37

Address learning and MacMove Option....................................................................................... 37

Priority Copy Option .................................................................................................................... 38

Priority Mode Option ................................................................................................................... 40

Shared VLAN Multicast SLA.................................................................................................................... 41

Disabling Multicast Traffic .......................................................................................................... 41

16.7 Adding and Removing Multicast Links ......................................................................................... 41

Lifecycle of Shared VLAN Multicast SLA ..................................................................................... 44

Bridging Mode Compatibility Matrix ........................................................................................... 47

Bridging Mode Per Entity Limitations.......................................................................................... 48

Summary of Upstream Bridging Behavior.................................................................................... 49

Summary of Downstream Bridging Behavior ............................................................................... 49

Brief Overview of 802.3ah Bridging

(a) Downstream Transmission

(b) Upstream Transmission

Figure 1: Point-to-Point Emulation

Multiple Link Solution VS Single Link Solution

Y: Process Per Provisioned VLAN Mode

N: VID not known

Y: Process Per Simple Bridge

Figure 3: VID Matching Procedure

5.1 Upstream Explanation

One of the ONUs assigned

Each forwarded frame is classified into a particular

Figure 4: Upstream Simple Bridged

5.2 Downstream Explanation

Frames with unlearned DAs

LLID values are removed by

Since both ONUs have been assigned

The ONU queue

Frames are classified into appropriate queues based

For broadcast traffic destined to both ports the

Figure 5: Downstream Simple Bridged

Figure 6: Forwarding in Simple Bridged

Upstream Simple Bridge Mode

Learn SA; Forward

Upstream Simple Bridge Mode

Destination MAC Address

Flood on broadcast channel

6.1 Downstream Explanation

Downstream traffic is classified by VID. Up to 62

Filtering rules may be applied on a

Figure 7: Downstream Transparent VLAN