Bản sao của SOP Guide for Gigabit Passive Optical Network ZyXEL Technology PDF

GPON SOP Guide
SOP Guide for Gigabit Passive Optical Network

ZyXEL Technology
ZyXEL Communications Corp.

Proprietary & Confidential Information
Page 1
GPON SOP Guide
Table of Content
Table of Content ............................................................................................................. 2
Revision History.............................................................................................................. 3
1. System hardware test .............................................................................................. 4
1.1. Power redundancy ............................................................................................ 4
1.2. General alarms ................................................................................................ 16
1.3. Remote connectivity ....................................................................................... 32
1.4. EMS connectivity ............................................................................................ 42
1.5. Uplink redundancy .......................................................................................... 55
1.6. NT card redundancy ........................................................................................ 73
2. Layer 2&3 functional Test ...................................................................................... 82
2.1. Q-in-Q VLAN cross connect ............................................................................. 82
2.2. VLAN translation ............................................................................................ 94
2.3. MAC learning function ................................................................................. 106
2.4. Mac address aging function ......................................................................... 119
2.5. MTU .............................................................................................................. 132
3. IGMP functional Test ............................................................................................ 144
3.1. IGMP proxy MVR........................................................................................... 144
3.2. IGMP snooping MVR ..................................................................................... 165
4. Security Functions ................................................................................................ 185
4.1. Security logs .................................................................................................. 185
4.2. Secure shell (SSH), and telnet ....................................................................... 188
4.3. User security ................................................................................................. 191
4.4. VLAN filter ..................................................................................................... 194
4.5. MAC address filter ........................................................................................ 207
4.6. Broadcast storm prevention ......................................................................... 221
4.7. MAC spoofing protection .............................................................................. 234
4.8. ARP spoofing protection ............................................................................... 249
4.9. Craft (console) terminal login ....................................................................... 263
5. Clock synchronization .......................................................................................... 266
5.1. Network time protocol, NTP ......................................................................... 266
6. ONT Function ....................................................................................................... 279
6.1. ONT hardware ID .......................................................................................... 279
6.2. ONT Customer ID & Hardware ID ................................................................. 285
6.3. ONT DHCP Server/Client ............................................................................... 293
6.4. ONT VLAN Q-in-Q.......................................................................................... 305

Page 2
GPON SOP Guide
Revision History
Date
Release
Author
Description
2014/08/04
1.0
Jose Sagastume
SOP guide based on OLT2412 and PMG5318B20A
2014/08/07
1.1
Jose Sagastume
Minor text correction

Page 3
GPON SOP Guide
1 System hardware test

1.1 Power redundancy
Objective: Verify that the system supports power redundancy
Pre-requisites: Setup below topology.
Topology:
Uplink interface, slot 3 using port 1.

PON interface, slot 5 using port 1.
Management interface, management card 2 using console port or out-band interface.
Test expected procedure:

1.
2.
3.
4.
Ensure that the system is powered by two separate DC power feed.

Send a stream traffic from the Test Center
Turn off ONE of the DC power feed.
Verify that the traffic is not affected and the line cards are functioning.
Configurations: The red square shows the command

OLT
Page 4
GPON SOP Guide
Enter OLT CLI command by using the out-band interface with IP address 192.168.0.1 or the console
interface. (The username/password is admin/1234)
Configure uplink line card, slot 3.
configure
interface slot slot-3
cardtype ether
no inactive
exit
Configure PON line card, slot 5.

cardtype gpon
no inactive
exit

Page 5
GPON SOP Guide
Check the uplink line card and PON line card are already configure.
exit
show lc status
Configure uplink port according to switch capabilities (switch is using fix 1000-full duplex) (NOTE: any
problem on this step, reference the file initial ONT provision)
configure
interface port-channel xe-3-1
speed-duplex 1000-full
no inactive
exit

Page 6
GPON SOP Guide
Check the uplink port is up (status forwarding).
exit
show interface xe-3-1
Configure the PON transceiver on line card 5 using port 1, including registration method and transceiver
type. (PON SFP provided by ZyXEL is type 12)
configure
interface olt pon-5-1
transceiver 12
register-method A
no inactive
Check the PON port has recognize the connected ONTs in line card 5 using port1. (For this example,
there is only one ONT connected)
Page 7
GPON SOP Guide
exit
show remote-ont ont unreg
Configure the VLAN for the services (In this example, will be used VLAN 100)
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
Configure bandwidth profile. (On this example, is using 10M with fixed bandwidth, the values on this
section are defined in kbps)
qos bwprof 10M sir 10024 air 0 pir 10024
Configure the ONT profile settings (Depending on the ONT, the model id changes, reference the
documentation for the ONT in use)
remote-ont ont ont-5-1-1

sn 5A59584544000015
password DEFAULT
model 2

Page 8
GPON SOP Guide
bwgroup 1 ustype 1 usbwprofname 10M dsbwprofname 10M

no inactive
exit
Check the ONT is correctly register in the OLT (The status of the ONT should be IS, means In Service)
exit
show remote-ont ont
Configure the ONT card-type (In this example, the ONT is a PMG5318-B20A, routing device)
configure
remote-ont ontcard ontcard-5-1-1-2
cardtype VEIP data-port 1
no inactive
exit

Page 9
GPON SOP Guide
Enable the selected ONT card-type.
remote-ont ontvenet ontvenet-5-1-1-2-1

no inactive
exit
Configure the ingress profile to use queue 0 (setup the different priorities of the incoming traffic to the
ONT, from user PC to ONT, and select the traffic queue the traffic will use, the OLT only support up to 8
queues)
qos ingprof alltc0 dot1p0tc 0 dot1p1tc 0 dot1p2tc 0 dot1p3tc 0 dot1p4tc 0 dot1p5tc 0 dot1p6tc
0 dot1p7tc 0
Configure the VLANs and the queue that ONT will use (In this example, the downstream rate limit is
applied by the OLT, using the command dsoption = olt)
remote-ont uniport uniport-5-1-1-2-1

Page 10
GPON SOP Guide
queue tc 0 priority 0 weight 0 usbwprofname 10M dsbwprofname 10M dsoption olt

bwsharegroupid 1
vlan 100 ingprof alltc0
exit
Check the VLAN provision on the ONT is correctly configured with status In Service.
exit
show remote-ont uniport uniport-5-1-1-2-1 vlan
ONT
Enter the ONT Web GUI interface by typing the IP address 192.168.1.1 on the web with
username/password, admin/1234. (Depending on the ONT, the management IP address may be
different)

Page 11
GPON SOP Guide
Click Ignore to the screen to change the password.
Configure the WAN interface with bridge mode (in this example, we want to check the traffic wont be
interrupted by changing power feed)

Page 12
GPON SOP Guide

Page 13
GPON SOP Guide
Apply test procedure

1. Connect a traffic generator to ONT port 1 and OLT line card 3 with port 1. (In this example, we
are using the device SmartBits)
2. Send an upstream traffic from the traffic generator from ONT port 1 to OLT line card 3 with port
1.
3. Turn off ONE of the DC power feed.
4. The traffic doesnt disconnect from the traffic generator.

Page 14
GPON SOP Guide
Configuration files of OLT2412 and ONT PMG5318-B20A

To upload the configuration file to OLT and ONT, follow the SOP for restore configuration for each
device.
NOTE: the file extension with .rom is the ONT configuration, and the file without an extension is the OLT
configuration.

Page 15
GPON SOP Guide
1.2 General Alarms

Objective: Verify that alarms are generated and the alarm threshold can be set
Topology:


1. Unplug card in Slot 3. Alarm is generated on logging system
2. Re-insert Line card in Slot 3. Alarm is cleared on logging system
3. Remove the uplink fiber from the OLT. A critical link alarm is generated.
4. Re-insert the fiber Alarm is cleared.
5. Power off ONT. Alarm is generated
6. Power on ONT and wait for it to boot and range. Alarm is cleared
7. Remove optical fiber between ONT and OLT. Alarm is generated.
8. Reinsert optical fiber between ONT and OLT. Alarm is cleared.
9. Set the alarm threshold for ONT to be major
10. Generate a minor alarm on the ONT.
11. Verify that the alarm is not generated as the threshold is set to major.
12. Generate an ONT major alarm and verify that the alarm is shown.
Page 16
GPON SOP Guide

OLT
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 17
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 18
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive
exit

Page 19
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit

sn 5A59584544000015
password DEFAULT
model 2

Page 20
GPON SOP Guide
no inactive
exit
exit
show remote-ont ont
configure
no inactive
exit

Page 21
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 22
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 23
GPON SOP Guide

Page 24
GPON SOP Guide

Page 25
GPON SOP Guide

Enter OLT CLI command and erase the current logs of the system.
no logging
Unplug card in Slot 3. Alarm on OLT is generated, and check the logs of the OLT.
show logging
Re-insert Line card in Slot 3. Alarm on OLT is cleared, and check the logs of the OLT.
Page 26
GPON SOP Guide
show logging
Erase the current logs of the system. (This step is optional, and it is suggest to avoid confusion with logs
of previous test)
no logging
Remove the uplink fiber from the OLT, slot 3 port 1. A critical link alarm is generated.
show logging
Re-insert the fiber Alarm is cleared.
show logging
of previous test)
no logging

Page 27
GPON SOP Guide
Power offs ONT. Alarm is generated.
Show logging
Power on ONT and wait for it to boot and range. Alarm is cleared
show logging
of previous test)
no logging

Page 28
GPON SOP Guide
Remove optical fiber between ONT and OLT. Alarm is generated.
show logging
Reinsert optical fiber between ONT and OLT. Alarm is cleared.
show logging
of previous test)
no logging
Set the alarm threshold for ONT to be major. In this test, we setup the upper and lower temperature
threshold of ont-alarm-profile, and apply to ont-5-1-1.
show remote-ont ont ont-5-1-1 ddmi

Page 29
GPON SOP Guide
configure
ont-alarm-profile test
low-temp -40
up-temp 10
exit
alarm-profile test
exit
exit

Page 30
GPON SOP Guide
Generate a minor alarm on the ONT, verify that the alarm is not generated as the threshold is set to
major, and generate an ONT major alarm and verify that the alarm is shown.
show logging

device.
configuration.

Page 31
GPON SOP Guide
1.3 Remote connectivity

Objective: To verify that the OLT can be remote access from the EMS server via both telnet and SSH
Pre-requisites: Setup below topology, tester have operating system access to EMS with privilege to
telnet. Tester has OLT user credential.
Topology:


1. User login to EMS server.
2. User telnet to OLT with user credential.
3. Logout of OLT if step 2 is successful.

OLT
Page 32
GPON SOP Guide
configure
cardtype ether
no inactive
exit
exit
show lc status

Page 33
GPON SOP Guide
configure
no inactive
exit
exit

Page 34
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
exit
Check the vlan 100 has connection to the uplink devices. (In this test, port xe-3-1 using vlan 100 is
receiving multiple MAC address from the uplink devices, therefore there is a communication)
show mac address-table vlan 100

Page 35
GPON SOP Guide
Configure an IP address with a default gateway on VLAN 100, in this test; we use the IP address
10.10.10.200/24. (The IP address should be routable to the EMS IP address or be in the same network)
configure
vlan 100
ip address 10.10.10.200 255.255.255.0
exit
exit
Check the OLT in-band IP with VLAN 100 can ping the EMS server IP address.(In this test, the EMS server
is in the same network using IP address 10.10.10.100, in case the EMS is in different network, set a
default gateway in the VLAN)
ping 10.10.10.100

Page 36
GPON SOP Guide
Telnet and SSH are enabled by default in the OLT.
show remote-management
Install EMS serve and client; please follow the EMS server installation SOP.
Open EMS client application, and enter the EMS credentials. (In this test, the EMS server IP address is
10.10.10.100, default username/password is admin/1234)

Page 37
GPON SOP Guide
Include the OLT into the EMS network. (In this test, the OLT is using IP address 10.10.10.200)
Right click the EMS icon.
Select the option Add Node
Select the option Device, and fill the information, Node Name, IP address, Username, and
Password. After filling the information click the OK button. (In this test, the OLT IP address is
10.10.10.200, default OLT username/password is admin/1234)

Page 38
GPON SOP Guide
Check the OLT has been correctly included in the EMS network by clicking the topology button on the
upper options of the EMS. A figure with the IP address of the OLT should appear on screen.

Page 39
GPON SOP Guide

Use telnet to access OLT by using the embedded Telnet application that is in the EMS client.
Select the option Tool on the EMS client.

Left-click the option Telnet on the EMS client interface.
Left-click the OLT-2412 (10.10.10.200)
Click Apply once the OLT IP appears on the IP field.
Once the telnet session is open, type username/password of the OLT (By default
username/password is admin/1234)
Logout initiated telnet session from EMS client, by typing the command exit.

Page 40
GPON SOP Guide
Configuration files of OLT2412

device.
configuration.

Page 41
GPON SOP Guide
1.4 EMS connectivity

Objective: To verify that the OLT can be managed by the EMS server
Pre-requisites: Setup below topology, tester have operating system access to EMS, the community
strings for SHUB and IACM is configured on the OLT, and the EMS IP addresses are the provisioned as
the allowed hosts in OLT.
Topology:

Create a network node on EMS with the OLTs IP address and system ID.
Apply the SNMP profile to network node.
Supervised network node.
Unplanned LT card on slot 5.
Planned LT card on slot 5.

Page 42
GPON SOP Guide

OLT
configure
cardtype ether
no inactive
exit
exit
show lc status

Page 43
GPON SOP Guide
configure
no inactive
exit
exit

Page 44
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
exit

Page 45
GPON SOP Guide
Configure an IP address with a default gateway on VLAN 100, in this test; we use the IP address
configure
vlan 100
ip address 10.10.10.200 255.255.255.0
exit
exit
ping 10.10.10.100

Page 46
GPON SOP Guide
Configure the GET/SET community strings as SHUB and IACM on the OLT (By default the community
strings are configured as public/public)
configure
snmp-server get-community SHUB
snmp-server set-community IACM
exit
Check the community strings are configured as expected.
show snmp-server

Page 47
GPON SOP Guide

Page 48
GPON SOP Guide

Select the option Device, and fill the information, Node Name, IP address, Username, Password, set
community string, and get community string. After filling the information click the OK button. (In this
test, the OLT IP address is 10.10.10.200, default OLT username/password is admin/1234, community
string set/get is SHUB/IACM)

Page 49
GPON SOP Guide
Apply the SNMP profile to network node.

Right-click on the OLT-2412 (10.10.10.200).
Left-Click on the option Configuration
Click the option System

Page 50
GPON SOP Guide
Click on the SNMP option, and create a new SNMP trap destination profile.
Select SNMP v2c, type the EMS server IP address, and save the options by clicking the OK
button. (EMS server IP address is 10.10.10.100)

Page 51
GPON SOP Guide
Apply the new SNMP trap destination settings to all OLT features, by checking all the option in
the Trap Group option. (Trap destination IP is the EMS server IP address)
Unplanned LT card on slot 5, change the status to Planned LT card on slot 5.
Select the option system, and then select the option Line Card Management
Select the line card slotID 5, and click the button Set

Page 52
GPON SOP Guide
Click the active option, select the GPON as provision type, and after click the OK button. (The
line card in slot 5 is a GPON line card)
Slot ID 5 will change the status to activate.

Page 53
GPON SOP Guide

device.
configuration.

Page 54
GPON SOP Guide
1.5 Uplink redundancy

Objective: To verify LAG connectivity with uplink switch
Pre-requisites: Setup below topology and setup a switch with LACP.
Topology:
Uplink interface, slot 3 using port 1, port 2, and uplink interface, slot 4 using port 1, port 2.

1. break physical link of port 1
2. recover physical link of port 1

Page 55
GPON SOP Guide

OLT
configure
cardtype ether
no inactive
exit

Page 56
GPON SOP Guide

cardtype gpon
no inactive
exit
Check the uplink line cards and PON line card are already configure.
exit
show lc status
Page 57
GPON SOP Guide
configure
no inactive
exit

no inactive
exit
configure
no inactive
exit
configure
no inactive

Page 58
GPON SOP Guide
exit
exit

Page 59
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive

Page 60
GPON SOP Guide
exit
Configure the VLAN for the services (In this example, will be used VLAN 100, and VLAN 200)
configure
vlan 100
fixed slot-3
fixed slot-4
fixed ge-5-1
exit
configure
vlan 200
fixed slot-3
fixed slot-4
fixed ge-5-1
exit

Page 61
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit

Page 62
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 63
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 64
GPON SOP Guide

bwsharegroupid 1
exit

exit
exit

Page 65
GPON SOP Guide
Configure LACP in the OLT
configure
trunk T1
trunk T1 interface xe-3-1
trunk T1 lacp
lacp
exit
Configure Spanning tree in the LACP ports. (Optional, it is not necessary unless using two trunk groups)
configure
spanning-tree xe-3-1

Page 66
GPON SOP Guide
spanning-tree
Check LACP is correctly configured.
exit
show lacp
show trunk
ONT
different)

Page 67
GPON SOP Guide
Configure the WAN1 interface with bridge mode, and WAN2 as PPPoE (in this example, we want to
check the traffic wont be interrupted by changing power feed)

Page 68
GPON SOP Guide

Page 69
GPON SOP Guide
Check ONT has received IP address from PPPoE server.

Page 70
GPON SOP Guide

Connect a PC in port 1 (IPoE bridge test) of the ONT, and use a tool to verify the traffic is not lost. (In
this test, we will use ping to check the stability of LACP)
Follow the test item test procedure (unplug and re-plug uplink connector)
Connect a PC in port 2 (PPPoE routing test) of the ONT, and use a tool to verify the traffic is not lost. (In
this test, we will use ping to check the stability of LACP)
Follow the test item test procedure (unplug and re-plug uplink connector)

Page 71
GPON SOP Guide

device.
configuration.

Page 72
GPON SOP Guide
1.6 NT card redundancy

Objective: To verify controller card (Management Card) has 1+1 redundancy functionality
Pre-requisites: Setup below topology, tester have operating system access to EMS with privilege to
telnet and SSH. Tester has OLT user credential.
Topology:

Connect Management card 1 and 2.

1.
2.
3.
4.
5.
6.
7.
8.
9.
Telnet into OLT from EMS server.

Deactivate NTA. (Management Card A, card 1)
Wait for ACT LED on NT-B (Management Card B) to be lighted.
Telnet to the same IP address after NT-B LED is lighted.
Activate NT-A.
Wait for NT-A to be on hot standby.
Deactivate NT-B.
Observe that NT-B restarts and wait for ACT LED to be lighted.
Telnet to the same IP address after NT-B LED is lighted.

Page 73
GPON SOP Guide
10. Normalized network by activating NT-B.

OLT
configure
cardtype ether
no inactive
exit
exit
show lc status

Page 74
GPON SOP Guide
configure
no inactive
exit
exit
Page 75
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
exit
Configure an IP address with a default gateway on VLAN 100, in this test, use we use the IP address
configure
vlan 100
ip address 10.10.10.200 255.255.255.0
exit
exit
Page 76
GPON SOP Guide
ping 10.10.10.100
Telnet and SSH are enabled by default in the OLT.

Page 77
GPON SOP Guide

Page 78
GPON SOP Guide
Select the option Device, and fill the information, Node Name, IP address, Username, and
Password. After filling the information click the OK button. (In this test, the OLT IP address is
10.10.10.200, default OLT username/password is admin/1234)
Check the OLT has been correctly included in the EMS network by clicking the topology button on the
upper options of the EMS. A figure with the IP address of the OLT should appear on screen.

Page 79
GPON SOP Guide

User telnet to OLT with user credential by using the embedded Telnet application that is in the EMS
client.
Select the option Tool on the EMS client.

Left-click the option Telnet on the EMS client interface.
Left-click the OLT-2412 (10.10.10.200)
Click Apply once the OLT IP appears on the IP field.
Once the telnet session is open, type username/password of the OLT (By default
username/password is admin/1234)
Unplug active management card, (In this test, the active management card is in slot 1)
Page 80
GPON SOP Guide
Close the telnet window by pressing the close button, and use embedded telnet in the EMS to access
the OLT again. (The telnet session is successful in this step)
Until this step, the management card in slot 2 has become active.
Re-plug management card in slot 1 (The telnet session is not lost)
Unplug active management card, (in this step, the active management card is in slot 2)
Close the telnet window by pressing the close button, and use embedded telnet in the EMS to access
the OLT again.
Until this step, the management card in slot 1 has become active.
device.
configuration.

Page 81
GPON SOP Guide
2. Layer 2&3 functional Test

2.1 Q-in-Q VLAN
Objective: Verify that the device supports Q-in-Q VLAN function
Pre-requisites: Setup below topology, a topology that uses Q-in-Q, and a PPPoE server
NOTE: In this test, we dont use a PPPoE server, and instead test this item by using ping.
Topology:


2.1
3.1
4.1
5.1
Provision HIS (Internet service) service with C-VLAN 2

Initiate a PPPoE connection (in this step, we use ping)
Capture traffic on uplink port
Captured packet should be encapsulated with outer VLAN (SVLAN 600) and Inner vlan (CVLAN 2)

OLT
Page 82
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 83
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 84
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive
exit

Page 85
GPON SOP Guide
Configure the SVLAN for the services (In this example, will be used VLAN 600)
configure
vlan 600
fixed xe-3-1
fixed ge-5-1
exit
Configure the CVLAN for the users (In this example, will be used VLAN 2)
vlan 2
fixed ge-5-1
exit
configure

Page 86
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 87
GPON SOP Guide
configure
no inactive
exit

no inactive
exit

Page 88
GPON SOP Guide
queues)
0 dot1p7tc 0
Configure the CVLANs and the queue that ONT will use (In this example, the downstream rate limit is

bwsharegroupid 1
exit
Check the CVLAN provision on the ONT is correctly configured with status In Service.
exit
Configure Q-in-Q services on the PON port 5-1 using SVLAN 600 with CVLAN 2 and setting it up as cross
connect.
configure
interface uni-port ge-5-1

Page 89
GPON SOP Guide
vlan-translation name 2in600cc ing-ovid 2 egr-svid 600 egr-cvid 2 cross-connect enable crossport xe-3-1
vlan-translation
exit
exit
ONT
different)

Page 90
GPON SOP Guide

Page 91
GPON SOP Guide

1. Connect a PC to ONT port 1, and connect necessary devices that are configured with Q-in-Q, to
OLT line card 3 with port 1.
2. Send an upstream traffic (ping) from the PC (from ONT) to another device that is connected to
the other end of the Q-in-Q network.
3. Capture the traffic on the OLT line card 3 with port 1.
4. Check the MAC addresses are not learned because crosses connect function is enabled.

Page 92
GPON SOP Guide

device.
configuration.

Page 93
GPON SOP Guide
2.2 VLAN translation

Objective: Verify that the device supports VLAN translation function
Pre-requisites: Setup below topology, and a topology that uses Q-in-Q.
Topology:


1. Create a stacked VLAN 600
2. The vlan to the ONT port is vlan 2
3. Using network performance analyzer sends untagged packet to user port as Vlan 2, to the uplink
port as Vlan 600:30
4. Capture packet from uplink port and users port
OLT
Page 94
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 95
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 96
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 97
GPON SOP Guide
configure
vlan 600
fixed xe-3-1
fixed ge-5-1
exit
Configure the CVLAN for the users (In this example, will be used VLAN 2)
vlan 2
fixed ge-5-1
exit
configure

Page 98
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 99
GPON SOP Guide
configure
no inactive
exit

no inactive
exit

Page 100
GPON SOP Guide
queues)
0 dot1p7tc 0
Configure the CVLANs and the queue that ONT will use (In this example, the downstream rate limit is

bwsharegroupid 1
exit
Check the CVLAN provision on the ONT is correctly configured with status In Service.
exit
Configure Q-in-Q services on the PON port 5-1 using SVLAN 600 with CVLAN 2.
configure
interface uni-port ge-5-1
vlan-translation name 2ch600.30 ing-ovid 2 egr-svid 600 egr-cvid 30

Page 101
GPON SOP Guide
vlan-translation
exit
exit
ONT
different)
Page 102
GPON SOP Guide

Page 103
GPON SOP Guide

Mirror port PON port and uplink port, and capture the traffic.
Connect a PC to the ONT port 1, and use the PC to generate traffic (In this test, I will use ping to
generate traffic)
The captured traffic shows the PON port traffic (access port), and the uplink traffic (tunnel port). (access
port carry one vlan tag and tunnel port carry double tag)

Page 104
GPON SOP Guide

device.
configuration.

Page 105
GPON SOP Guide
2.3 MAC learning function

Objective: Verify MAC learning function
Topology:


1. Tester to transmit traffic between OLT and ONT
2. Stop transmitting packet
3. Issue the command to check the MAC address learned
OLT

Page 106
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 107
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 108
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 109
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 110
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 111
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 112
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 113
GPON SOP Guide

Page 114
GPON SOP Guide

Page 115
GPON SOP Guide

Page 116
GPON SOP Guide

1. Connect a PC to ONT port 1, and use another PC to connect OLT line card 3 with port 1. (In this
example, we are using a switch in the uplink)
2. Send an upstream traffic from the PC from ONT port 1 to OLT line card 3 with port 1.
3. The MAC address of the PC is learned by the OLT in slot ge-5-1

show mac address-table port ge-5-1
4. Check the MAC address of the PC is the same MAC address learned by the OLT

Page 117
GPON SOP Guide

device.
configuration.

Page 118
GPON SOP Guide
2.4 MAC address aging function

Objective: To test the OLT function of aging the dynamically learned MAC addresses during the preset
MAC address aging time
Topology:


1.
2.
3.
4.
Tester to transmit traffic between OLT and ONT

Stop transmitting packet
Issue the command to check the MAC address learned
Set the ageing time to 20 seconds

OLT
Page 119
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 120
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 121
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 122
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 123
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 124
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 125
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 126
GPON SOP Guide

Page 127
GPON SOP Guide

Page 128
GPON SOP Guide

Connect a PC to ONT port 1, and use another PC to connect OLT line card 3 with port 1. (In this example,
we are using a switch in the uplink)
Send an upstream traffic from the PC from ONT port 1 to OLT line card 3 with port 1.
The MAC address of the PC is learned by the OLT in slot ge-5-1

Page 129
GPON SOP Guide
Check the MAC address of the PC is the same MAC address learned by the OLT
Configure the MAC aging time to 20 seconds
configure
mac-aging-time 20
exit
Stop sending upstream packets (in this test, we physically disconnect the Ethernet cable from the ONT)
Page 130
GPON SOP Guide
NOTE: the aging function will start to delete the MAC entries according to the setup time, and this
time is around 40~60 seconds after the aging time out.
device.
configuration.

Page 131
GPON SOP Guide
2.5 MTU
Objective: To test the OLT function of MTU maximum transmission unit
Topology:


1.
2.
3.
4.
Provision ONT with VLAN 100

Define the MTU size of OLT to nx64
Generate one stream of traffic with MTU size lower than nx64
Generate one stream of traffic with MTU greater than nx64

OLT

Page 132
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 133
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 134
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 135
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 136
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 137
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 138
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 139
GPON SOP Guide

Page 140
GPON SOP Guide

Page 141
GPON SOP Guide

1. Connect a PC to ONT port 1, and use another PC to connect OLT line card 3 with port 1. (In this
example, we are using a switch in the uplink)
2. Send an upstream traffic from the PC from ONT port 1 to OLT line card 3 with port 1.
3. Modify MTU size of port ge-5-1
Enter debug mode
Define the MTU size for PON port ge-5-1 to 64.

Page 142
GPON SOP Guide
Generate a traffic that is below and above the MTU size that it is configure on ge-5-1. The traffic below
the configured values is fragmented or dropped.
The port numbering on debug command is different than normal command line. Below figure, shows
number of the port that command line uses, and the number of the port that is used on debug
command (Debug xe# or ge#, command line #)

device.
configuration.

Page 143
GPON SOP Guide
3. IGMP functional Test

3.1. IGMP proxy
Objective: Verify that the device supports IGMP proxy function
Pre-requisites: Setup below topology, OLT is enabled with port mirroring on upstream port, and enable
IGMP proxy.
Topology:

Monitor port for mirrored traffic, slot 3 using port 2

1. Both ONTs are not joined to any IGMP group.
2. ONT 1 joins IGMP group by sending report message.
3. ONT 1 leaves IGMP group by sending leave message.
OLT

Page 144
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 145
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 146
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive

Page 147
GPON SOP Guide
exit
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit

Page 148
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 149
GPON SOP Guide
configure
no inactive
exit

no inactive
exit

Page 150
GPON SOP Guide
queues)
0 dot1p7tc 0

bwsharegroupid 1
exit
exit
Page 151
GPON SOP Guide
Connect a second ONT to the PON port in slot 5 using port 1 (In this test, we are using an splitter to
connect many ONTs to one PON port)
Check the PON port has recognize the new connected ONT in line card 3 using port1. (For this example,
there are two ONTs connected)
configure
sn 5A59584538000052
password DEFAULT
model 2
no inactive
exit

Page 152
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

no inactive
exit

Page 153
GPON SOP Guide

bwsharegroupid 1
exit
exit
Configure the multicast channel that the multicast traffic will use.
configure
mcast-channel 224.1.1.1 224.1.1.255 vlan 803 package-member 1
Apply the multicast channel to the two connected ONTs.

Page 154
GPON SOP Guide
igmpchannel 100 fullviewpkg 1

exit
exit
Configure IGMP behavior to be set us Proxy
mvr behavior 1
Check the configuration IGMP settings.
exit
show mvr
Configure port mirror upstream port xe-3-1
configure

Page 155
GPON SOP Guide

mirror dir both
mirror
exit
Configure monitor port xe-3-2
mirror-port xe-3-2
mirror-port
Check mirror port is correctly configured.
exit
show mirror

Page 156
GPON SOP Guide
Configure the monitor port with full-duplex settings according to the settings in the uplink device (In this
test, the uplink device is a switch and it configured with 1000-full duplex)
configure
no inactive
exit
exit
Configure the uplink port as a querier-port (Using this setup, the OLT will forward the report and leave
message to the configured uplink port)
NOTE: if the uplink port is setup with auto mode, then make sure the querier devices on the uplink
send the general query packets using the same VLAN id as the multicast VLAN.
configure
igmp-querier-mode fixed
exit
exit

Page 157
GPON SOP Guide
Check the uplink port is using the correct igmp settings.
show multicast mode-querier
ONT
The same configuration is done on the two ONT that we are using for this test.
different)

Page 158
GPON SOP Guide

Page 159
GPON SOP Guide

Page 160
GPON SOP Guide

Connect one PC to each ONT on LAN port 1 (this interface is using bridge mode)
Use a software (in this test, VLC) to generate a report message and leave message on the PCs that are
connected to the ONTs.
In this case, the OLT uplink port, will only forward one report and one leave (the behavior of
IGMP PROXY) when using two multicast client or more. Additionally, use VLAN 803 on uplink.
NOTE: report and leave message use VLAN 100 from ONT to OLT.

Page 161
GPON SOP Guide
The source MAC address of the report and leave IGMP message belong to the OLT MAC address.
o Show mac address-table all

Page 162
GPON SOP Guide
On one PC use a software to capture the traffic (in this test, wireshark), and filter the general query
message.
In this case, the general queries are generated by a switch that is connected to the OLT uplink
port xe-3-1.
NOTE: The MAC address of the general query packet belongs to the OLT MAC address.
Additional information:
The multicast traffic from OLT to ONT uses multicast VLAN id 803.
NOTE: If want to capture below information, then enable mirror port on the PON port ge-5-1.
Page 163
GPON SOP Guide

device.
configuration.

Page 164
GPON SOP Guide
3.2 IGMP snooping

Objective: Verify that Verity that the device supports IGMP snooping function
Pre-requisites: Setup below topology, OLT is enabled with port mirroring on upstream port, and enable
IGMP snooping.
Topology:

Monitor port for mirrored traffic, slot 3 using port 2

1.
2.
3.
4.
5.
6.
Enable the IGMP snooping

Both ONTs are not joined to any IGMP group.
ONT 1 joins IGMP group by sending report message.
ONT 2 joins the same IGMP group by sending report message.
ONT 1 leaves IGMP group by sending leave message.
ONT 2 leaves IGMP group by sending leave message

OLT
Page 165
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 166
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 167
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive

Page 168
GPON SOP Guide
exit
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit

Page 169
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 170
GPON SOP Guide
configure
no inactive
exit

no inactive
exit

Page 171
GPON SOP Guide
queues)
0 dot1p7tc 0

bwsharegroupid 1
exit
exit
Page 172
GPON SOP Guide
configure
sn 5A59584538000052
password DEFAULT
model 2
no inactive
exit

Page 173
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

no inactive
exit

Page 174
GPON SOP Guide

bwsharegroupid 1
exit
exit
Configure the multicast channel that the multicast traffic will use.
configure
mcast-channel 224.1.1.1 224.1.1.255 vlan 803 package-member 1
Apply the multicast channel to the two connected ONTs.

Page 175
GPON SOP Guide

exit
exit
Configure IGMP behavior to be set us Snooping
mvr behavior 0
Check the configuration IGMP settings.
exit
show mvr
Configure port mirror upstream port xe-3-1
configure
mirror dir both

Page 176
GPON SOP Guide
mirror
exit
Configure monitor port xe-3-2
mirror-port xe-3-2
mirror-port
Check mirror port is correctly configured.
exit
show mirror
Configure the monitor port with full-duplex settings according to the settings in the uplink device (In this
test, the uplink device is a switch and it configured with 1000-full duplex)
Page 177
GPON SOP Guide
configure
no inactive
exit
exit
Configure the uplink port as a querier-port (Using this setup, the OLT will forward the report and leave
message to the configured uplink port)
NOTE: if the uplink port is setup with auto mode, then make sure the querier devices on the uplink
send the general query packets using the same VLAN id as the multicast VLAN.
configure
igmp-querier-mode fixed
exit
exit
Check the uplink port is using the correct igmp settings.
show multicast mode-querier

Page 178
GPON SOP Guide
ONT
different)

Page 179
GPON SOP Guide

Page 180
GPON SOP Guide

Page 181
GPON SOP Guide

Connect one PC to each ONT on LAN port 1 (this interface is using bridge mode)
Use a software (in this test, VLC) to generate a report message and leave message on the PCs that are
connected to the ONTs.
In this case, the OLT uplink port, will forward two report and two leave (the behavior of IGMP
SNOOPING) when using two multicast client. Additionally, use VLAN 803 on uplink.
Client PC1 using IP address 10.59.2.71 sending two report message

Page 182
GPON SOP Guide
Client PC2 using IP address 10.59.2.38 sending two report message
Client PC1 using IP address 10.59.2.71 sending two leave message
Client PC2 using IP address 10.59.2.38 sending two leave message

Page 183
GPON SOP Guide

device.
configuration.

Page 184
GPON SOP Guide
4. SECURITY FUNCTION
4.1 Security logs
Objective: Verity that the connection log can be viewed
Pre-requisites: Setup below topology and OLT is using default configurations.
Topology:
NOTE: For this test, we are going to use out-band interface.

1.
2.
3.
4.
Setup the network as in the diagram above

Perform a successful login and a failed login from the PC connected to the out-band interface
Retrieve the logs
Verify that the successful login and the failed login were logged

OLT
Enter OLT CLI command by using the console port.
Page 185
GPON SOP Guide
Enter to OLT CLI command using a computer that is connected to the out-band interface and access to it
by using the IP address 192.168.0.1, and then exit the access.. (Use the username/password,
admin/1234)
Using the PC connected to console port, check the connection that was made by the out-band interface.
show logging
Using the PC connected to the out-band interface, access to it by using the IP address 192.168.0.1, and
fail to type the correct username/password.

Page 186
GPON SOP Guide
Using the PC connected to console port, check the connection that was made by the out-band interface.
show logging

Page 187
GPON SOP Guide
4.2 Secure shell (SSH) and Telnet

Objective: Verify that secure shell and telnet can be used to manage OLT
Topology:

5.
6.
7.
8.
Setup the network as in the diagram above

Perform a successful login and a failed login from the PC connected to the out-band interface
Retrieve the logs
Verify that the successful login and the failed login were logged

OLT
Enter OLT CLI command by using the console port. (The username/password is admin/1234)

Page 188
GPON SOP Guide
Check telnet and SSH services are enabled on the OLT (By default these features are enabled)
by using the IP address 192.168.0.1 using Telnet, and then exit the access. (Use the
username/password, admin/1234)
by using the IP address 192.168.0.1 using SSH, and then exit the access. (Use the username/password,
admin/1234)
Page 189
GPON SOP Guide
Check the OLT logs for the telnet and SSH access.
show logging

Page 190
GPON SOP Guide
4.3 User security

Objective: Verify that an operator user can be created with different security levels
Topology:

9. Setup the network as in the diagram above
10. Create a new user account with limited access to the CLI commands.
11. Perform a successful login and a failed login from the PC connected to the out-band interface
using the new created user account.
12. Retrieve the logs
13. Verify that the successful login and the failed login were logged
OLT
Enter OLT CLI command by using the console port. (The username/password is admin/1234)
Page 191
GPON SOP Guide
Create a new user with low level access permission. (In this test, we setup the username/password
operator/1234)
configure
logins username operator password 1234 privilege 0
exit
Check the new created user account is correctly created.
show logins
Use the created new user account to access the OLT. (In this test, we use telnet)

Page 192
GPON SOP Guide
Check the current available commands for the new created user account.
Close the connection that the new created user account has with the OLT, and the logs using the CLI
interface by console cable.
show logging

Page 193
GPON SOP Guide
4.4 VLAN filter

Objective: Verify that the device supports VLAN filter functionality
Topology:


1.
2.
3.
4.
Provision HSI service on VLAN 100, and send a stream traffic from test center
Configure deny rule based on VLAN 100
Run packet-filter with rule above on the user port
Start a capture on uplink port

OLT

Page 194
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 195
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 196
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 197
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 198
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 199
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 200
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 201
GPON SOP Guide

Page 202
GPON SOP Guide

Page 203
GPON SOP Guide

Connect one PC to ONT on LAN port 1 (this interface is using bridge mode)
Check the packets send by the connected PC are using VLAN 100, by generating traffic from the PC to
uplink devices (In this test, the PC is using IP address 10.59.2.71)

Page 204
GPON SOP Guide
Create a classifier to identify the VLAN 100 and the port that the classifier is applied.
configure
classifier filter100 vlan 100 source-port ge-5-1
Create a policy, select the created classifier, and select the action. (In this test, the action is to drop the
traffic with VLAN tag 100 on port ge-5-1)
Check the policy and classifier are well configured.

exit
show policy
show classifier
Page 205
GPON SOP Guide
Check the packets send by the connected PC that are using VLAN 100, are dropped because of the policy
to filter VLAN 100.

device.
configuration.

Page 206
GPON SOP Guide
4.5 MAC address filter

Objective: Verify that the device supports MAC address filter
Topology:


1.
2.
3.
4.
5.
Configure service port and uplink port VLAN.

Configure deny rule based on source MAC address (defined by tester)
Run packet-filter with rule above on the user port (port 1, ge-5-1)
Send packets from port 2 (uplink port xe-3-1) with source MAC address (defined by tester)
Check the packets on port 1

OLT
Page 207
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 208
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 209
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 210
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 211
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 212
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 213
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 214
GPON SOP Guide

Page 215
GPON SOP Guide

Page 216
GPON SOP Guide

Check the packets send by the connected PC, and check the MAC address of connected PC (In this test,
the PC is using IP address 10.59.2.71)

Page 217
GPON SOP Guide
Copy the MAC address of the PC that is connected to ONT on LAN port 1. (In this test, we copy from the
OLT, MAC address 00:0a:e4:13:7f:d3)
Create a classifier to identify the MAC address 00:0a:e4:13:7f:d3 and the port that the classifier is
applied. (In this test, the port is user port)
configure
classifier mac_filter source-mac 00:0a:e4:13:7f:d3 source-port ge-5-1
Create a policy, select the created classifier, and select the action. (In this test, the action is to drop the
traffic with MAC address 00:0a:e4:13:7f:d3 on port ge-5-1)
policy source_mac classifier mac_filter forward-action drop

Page 218
GPON SOP Guide
Check the policy and classifier are well configured.
exit
show policy
show classifier
Check the packets send by the connected PC that are using MAC address 00:0a:e4:13:7f:d3, are dropped
because of the policy to filter VLAN 100.
Disconnect the PC that is connected to the ONT, connected it to the uplink port of the OLT (or switch),
and forward traffic another PC that is connected to the ONT (In this test, the rule only applies for source
MAC address 00:0a:e4:13:7f:d3 with source port ge-5-1)
Page 219
GPON SOP Guide
Check MAC address 00:0a:e4:13:7f:d3 on OLT.

device.
configuration.

Page 220
GPON SOP Guide
4.6 Broadcast storm prevention

Objective: Verify that the device supports broadcast storm prevention
Topology:


1.
2.
3.
4.
5.
Create a VLAN, Add uplink port and user port to this VLAN.
Configure PON parameter, get through from OLT to ONT s channel;
Configure the broadcast suppression allow 500 pps
Send a broadcast packet at 1000 pps to the uplink port;
Capture packet on the user port.

OLT
Page 221
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 222
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 223
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 224
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 225
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 226
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 227
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 228
GPON SOP Guide

Page 229
GPON SOP Guide

Page 230
GPON SOP Guide

Configure broadcast storm prevention on the uplink port xe-3-1 of OLT.
configure
broadcast-limit 500
broadcast-limit
exit
exit

Page 231
GPON SOP Guide
Send a broadcast packet at 1000 pkt/s to the uplink port using below setup
OLT2412 XE-3-1->SMB 4A-02 FIBER

OLT2412 GE-5-1->PMG5318 PON port
PMG5318 LAN Port ->SMB 4A-04 COPPER
Send a broadcast packet at 1000 pkt/s to the uplink port;

Page 232
GPON SOP Guide
500 packets only is received on SMB 4A-04 COPPER port.

Note: Receive port counters sometimes will display more than 500 packets, because the switch sends a
few OMCI packets.
device.
configuration.

Page 233
GPON SOP Guide
4.7 MAC spoofing protection

Objective: Verify that the OLT can discover and block duplicate MAC address
Pre-requisites: Setup below topology, and prepare a splitter to connect two ONTs.
Topology:


1.
2.
3.
4.
5.
6.
Ensure that all equipment planned and in service.

Configure 2 ONTs and add both to the same VLAN (ex. VLAN 100).
Send a bi-directional stream to and from ONT1 and verify that traffic is successfully transmitted.
Send traffic stream from ONT2 using the same MAC address that is used on ONT1.
Verify that a Duplicate MAC alarm is generated.
Verify that traffic on ONT2 is blocked.

OLT
Page 234
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 235
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 236
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 237
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 238
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 239
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 240
GPON SOP Guide

bwsharegroupid 1
exit
exit

Page 241
GPON SOP Guide
configure
sn 5A59584538000052
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont
configure

Page 242
GPON SOP Guide

no inactive
exit

no inactive
exit

bwsharegroupid 1
exit
exit

Page 243
GPON SOP Guide
ONT
different)

Page 244
GPON SOP Guide

Page 245
GPON SOP Guide

Connect one PC to ONT1 on LAN port 1 (this interface is using bridge mode)
Check the MAC address on ONT1.
Configure MAC spoofing protection on the ONT1. (In this case, we refer to ONT1 to ONT profile 5-1-1)
Page 246
GPON SOP Guide
configure
no anti-mac-spoofing inactive
exit
exit
Check the MAC spoofing protection is activated for ONT profile 5-1-1
show remote-ont ont ont-5-1-1
Disconnect the PC that is connected to ONT1 and connect it to ONT2 port 1 (this interface is using bridge
mode)
Check the OLT MAC table for VLAN 100, to check if the OLT has learned the MAC address on ONT profile
5-1-2. (In this test, the OLT hasnt allow ONT profile 5-1-2 to learn the same MAC address as ONT profile
ONT profile 5-1-2)

Page 247
GPON SOP Guide
Wait for the MAC address aging time-out on ONT profile 5-1-1, and check the MAC table for VLAN 100.
(In this step, the OLT will learn the MAC address because it is not in use on other ONT profiles)
Check the OLT has recorded the alarm for duplicated MAC address on different ONT profiles.
Show logging

device.
configuration.

Page 248
GPON SOP Guide
4.8 ARP spoofing protection

Objective: Verify the ARP spoofing protection
Topology:


1. Ensure that the OLT is active with all equipment in service.
2. Configure a static IP address on the PC connecting to ONT.
3. Activate IP anti-spoofing feature on the Bridgeport on the HSI service to allow the PCs static IP
address.
4. Verify that the PC can reach the network via ping.
5. Change the IP address of the PC,
6. Verify that the PC is now blocked from reaching the network.
OLT

Page 249
GPON SOP Guide
interface.
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 250
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 251
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive

Page 252
GPON SOP Guide
exit
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit

Page 253
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 254
GPON SOP Guide
configure
no inactive
exit

no inactive
exit

Page 255
GPON SOP Guide
queues)
0 dot1p7tc 0

bwsharegroupid 1
exit
exit
Page 256
GPON SOP Guide
ONT
different)

Page 257
GPON SOP Guide

Page 258
GPON SOP Guide

Connect one PC to ONT1 on LAN port 1 (this interface is using bridge mode)
Configure an static IP on the PC and check it can reach uplink device (In this test, the PC is using IP
address 192.168.100.100, and the uplink device is using IP address 192.168.100.200)
Ping from the PC to the uplink device, and check the MAC address of the PC on the OLT. (In this test, the
MAC address of the PC is 00:0a:e4:13:7f:d3). In this step, the PC can ping the uplink device.
Configure ARP spoofing protection on ge-5-1 port.

configure
interface port-channel ge-5-1
Page 259
GPON SOP Guide
anti-spoofing inclusive ip 192.168.100.100

anti-spoofing
exit
Enable ARP spoofing protection on the OLT.
Check the ARP spoofing protection is well configured.
show anti-spoofing ge-5-1
Change the static IP address from 192.168.100.200 to 192.168.100.150, and ping the IP address on the
uplink.
In this step, the traffic is drop by the OLT anti-spoofing feature, until the uniport-5-1-2-2-1 mac
aging the MAC address 00:0a:e4:13:7f:d3.

Page 260
GPON SOP Guide

device.
configuration.

Page 261
GPON SOP Guide
Additional information
The following tables describe the expected result for each type of anti-spoofing entry.
Table 1. Results for Inclusive Anti-Spoofing Entries
Setting
Result
IP-Only
The OLT allows non-IP packets and DHCP, but blocks other IP
(Inclusive)
packets unless the source IP address is in the list.
MAC-Only
The OLT blocks all packets unless the source MAC address is in
(Inclusive)
the list.
IP-MAC
The OLT allows non-IP packets and DHCP, but blocks other IP
(Inclusive)
packets unless the source MAC address and source IP address
are in the list.
OUI-MAC
The OLT blocks all packets unless the source OUI-MAC is in the
(Inclusive)
list.
However, if the IP-only entry and the MAC-only entry are both set at one port, the port allows all DHCP
packets.
The OLT forwards packets from source IP addresses or MAC addresses listed in the inclusive entries and
drop others.
Table 2. Results for Exclusive Anti-Spoofing Entries
Setting
Result
IP-Only
The OLT allows non-IP packets. The OLT also allows IP packets
(Exclusive)
unless the source IP address is in the list.
MAC-Only
The OLT allows all packets unless the source MAC address is in
(Exclusive)
the list.
IP-MAC
The OLT allows non-IP packets. The OLT also allows IP packets
(Exclusive)
unless the source MAC address and source IP address are in the
list.
The OLT drops packets from source IP addresses or MAC addresses listed in the exclusive entries and
forward others.

Page 262
GPON SOP Guide
4.9 Craft terminal login

Objective: Verify the craft terminal login capability
Pre-requisites: Setup below topology, prepare a console (USB to DB9) and prepare software that can
use the console cable.
Topology:
Management interface, management card 2 using console port.

1. Connect Craft terminal cable to OLT console port
2. Setup COM port of PC and OLT same parameter
PC
In this test, we are going to use the software call Tera Term. For reference can be download it here:
http://ttssh2.sourceforge.jp/index.html.en
Connect the console cable to PC (USB side), and open Tera term.
Select the serial connection on Tera Term, and click on the Ok buttom.

Page 263
GPON SOP Guide
Change the baud rate of the connection to 115200.

Page 264
GPON SOP Guide
OLT
Enter OLT CLI command by using the console interface, and type the username/password, admin/1234.

Page 265
GPON SOP Guide
5. Clock synchronization
5.1. Network time protocol, NTP
Objective: Verify the clock synchronization
Pre-requisites: Setup below topology, and prepare an NTP server
Topology:


1. Configure NTP server to broadcast time
2. Configure OLT and tester to receive synchronization from NTP server.
NTP Server
On this test, we are going to use a NTP server call NetTime, and the download link for reference:
http://www.timesynctool.com/
OLT
Page 266
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 267
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 268
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive
exit

Page 269
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 270
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 271
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 272
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 273
GPON SOP Guide

Page 274
GPON SOP Guide

Page 275
GPON SOP Guide

Configure an IP address that will be used to communicate with the NTP server. (In this test, the OLT IP
address is 10.59.2.33 and it is applied on the VLAN of the uplink)
configure
vlan 100
ip address 10.59.2.33 255.255.255.0
exit
exit

Page 276
GPON SOP Guide
Check the OLT and the NTP server can communicate between each other. (In this test, NTP server IP
address is 10.59.2.97)
ping 10.59.2.97
Configure the NTP setting on OLT using the IP address of the NTP server as reference.
6.1
7.1
8.1
9.1
configure
time timezone 800
timesync server 10.59.2.97
timesync ntp
exit
Check the NTP settings are configured correctly.
show timesync

Page 277
GPON SOP Guide
After the PC receive IP address from the DHCP server (if the is not DHCP server, use static IP address),
open the command line (In windows CMD), and execute the command net time \\10.59.2.97

device.
configuration.

Page 278
GPON SOP Guide
6 ONT Function
1.2 ONT hardware ID
Objective: Verify the authentication of the ONT with the use of ONTs Serial Number. ONT can only be
active when the correct serial number is configured.
Topology:


1.
2.
3.
4.
5.
Connect the ONT to the PON. A new ONT alarm will be generated by the system
Configure ONT with the correct Serial Number
The ONT will range and status will be In Service
Delete the ONT and enter a different serial number
The ONT will not come up and status will be Out Of Service

OLT

Page 279
GPON SOP Guide

cardtype gpon
no inactive
exit
exit
show lc status

Page 280
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit
NOTE: an alarm is generated

exit
configure

Page 281
GPON SOP Guide

Configure the ONT profile settings using correct serial number and password (Depending on the ONT,
the model id changes, reference the documentation for the ONT in use)

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 282
GPON SOP Guide
Remove the configured ONT.
configure
no remote-ont ont ont-5-1-1
exit
Check the ONT has been successfully removed.
Show remote-ont ont ont-5-1-1
Configure the ONT profile settings using incorrect serial number and with correct password (Depending
on the ONT, the model id changes, reference the documentation for the ONT in use)
configure
sn 5A59584544111115
password DEFAULT
model 2
no inactive
exit

Page 283
GPON SOP Guide
Check the ONT has not successfully register to the OLT, because of the incorrect serial number.
show remote-ont ont

Page 284
GPON SOP Guide
1.3 ONT Customer ID & Hardware ID

Objective: Verify the SLID (Subscriber Location Identification) can be used to authenticate the ONT
Topology:


1. Configure SLID at the ONT before connect the ONT to the PON
2. Configure the ONT at OLT using TL1 with a wrong SLID and a dummy serial number
5A59584544111115
3. The ONT will not come up and status will be Out Of Service
4. Reconfigure the ONT with the correct SLID
5. The ONT will range and status will be In Service.
ONT
different)
Page 285
GPON SOP Guide
Configure a SLID on the ONT (The ONT must not be connected to the OLT during the modification of the
SLID value)

Page 286
GPON SOP Guide

Page 287
GPON SOP Guide
NOTE: after rebooting the ONT, then connected the optical fiber into the ONT.
OLT
interface.

cardtype gpon
no inactive
exit
exit
show lc status

Page 288
GPON SOP Guide
configure
transceiver 12
register-method C
no inactive
exit
NOTE: an alarm is generated

exit

Page 289
GPON SOP Guide
NOTE: the new SLID will show up here.

configure

Configure the ONT profile settings using correct serial number and password (Depending on the ONT,
the model id changes, reference the documentation for the ONT in use)

sn 5A59584544111115
password DEFAULT
model 2
no inactive
exit
Check the ONT is correctly register in the OLT (In this step, the ONT status is OOS, means Out of
Service)
Page 290
GPON SOP Guide
show remote-ont ont
Remove the configured ONT.
configure
no remote-ont ont ont-5-1-1
exit
Check the ONT has been successfully removed.
Show remote-ont ont ont-5-1-1
Configure the ONT profile settings using only password (SLID previously configure on the ONT)
(Depending on the ONT, the model id changes, reference the documentation for the ONT in use)
configure
password TEST123
model 2
no inactive
exit

Page 291
GPON SOP Guide
Check the ONT has not successfully register to the OLT, because of the incorrect serial number.
Show remote-ont ont

Page 292
GPON SOP Guide
6.3 ONT DHCP Server/Client

Objective: Verify the ONT supports DHCP server/client function
Topology:


1.
2.
3.
4.
Setup DHCP server supply

Enable the DHCP function at the ONT.
ONT receive IP from DHCP server.
Connect the PC to the ONT and configure the PC to obtain a dynamic.

OLT

Page 293
GPON SOP Guide
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 294
GPON SOP Guide
exit
show lc status
configure
no inactive
exit
exit

Page 295
GPON SOP Guide
configure
transceiver 12
register-method A
no inactive
exit

Page 296
GPON SOP Guide
configure
vlan 100
fixed xe-3-1
fixed ge-5-1
exit
sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
Page 297
GPON SOP Guide
exit
show remote-ont ont
configure
no inactive
exit

Page 298
GPON SOP Guide

no inactive
exit
queues)
0 dot1p7tc 0

Page 299
GPON SOP Guide

bwsharegroupid 1
exit
exit
ONT
different)

Page 300
GPON SOP Guide
Configure the WAN interface with IP mode.

Page 301
GPON SOP Guide

Page 302
GPON SOP Guide
Configure a PC with DHCP client and plug it into the LAN port of the ONT. (In this step, the computer
should get IP from the ONT)

Page 303
GPON SOP Guide
Check ONT LAN settings.

device.
configuration.

Page 304
GPON SOP Guide
3.5 ONT VLAN Q-in-Q

Objective: Verify the ONT supports VLAN Q-in-Q
Pre-requisites: Setup below topology, a topology that uses Q-in-Q, and a PPPoE server
NOTE: In this test, we dont use a PPPoE server, and instead test this item by using ping.
Topology:


1.
2.
3.
4.
5.
Provision SHUB VLAN 600 mode Cross-connect

Provision PON VLAN 600 mode Cross-Connect, tagging stacked
Provision HSI service with C-VLAN 2
Initiate PPPoE connection (instead uses ICMP traffic, ping)
Capture traffic on uplink port
NOTE: Captured packets at uplink port (PADI packets) are double tagged with S- VLAN 600, C-VLAN2

Page 305
GPON SOP Guide
Procedure:
OLT
configure
cardtype ether
no inactive
exit

cardtype gpon
no inactive
exit

Page 306
GPON SOP Guide
exit
show lc status
configure
no inactive
exit

Page 307
GPON SOP Guide
exit
configure
transceiver 12
register-method A
no inactive

Page 308
GPON SOP Guide
exit
configure
vlan 600
fixed xe-3-1
fixed ge-5-1
exit
section are defined in bps)
configure

Page 309
GPON SOP Guide

sn 5A59584544000015
password DEFAULT
model 2
no inactive
exit
exit
show remote-ont ont

Page 310
GPON SOP Guide
Configure the ONT card-type (In this example, the ONT is a PMG5318-B20A, using bridge cardtype)
configure
cardtype 10_100_1000BASET data-port 4
no inactive
exit
remote-ont ontenet ontenet-5-1-1-1-1

no inactive
exit
queues)
0 dot1p7tc 0

Page 311
GPON SOP Guide
Configure the SVLAN:CVLAN and the queue that ONT will use (In this example, the downstream rate
limit is applied by the OLT, using the command dsoption = olt)

bwsharegroupid 1
vlan 2 txtag tag network 600:2 ingprof alltc0
exit
exit
NOTE: the port is configure as txtag tag, this means the device connected to this port must understand
VLAN.
Check the SVLAN:CVLAN provision on the ONT is correctly configured with status In Service. (In this
step, connect a PC to ONT LAN1, otherwise the status will be OOS-OU, Uni-port Out of Service)
ONT
different)

Page 312
GPON SOP Guide

Page 313
GPON SOP Guide

Page 314
GPON SOP Guide

Connect a PC to ONT port 1, and connect necessary devices that are configured with Q-in-Q, to OLT line
card 3 with port 1.
Send an upstream traffic (ping) from the PC (from ONT) to another device that is connected to the other
end of the Q-in-Q network.
Capture the traffic on the OLT line card 3 with port 1.
NOTE: during the writing of this document PMG5318-B20A with firmware version V100AANC1b6
doesnt support Q-in-Q settings on the ONT.
device.
configuration.

Page 315

Bản sao của SOP Guide for Gigabit Passive Optical Network ZyXEL Technology PDF

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Bản sao của SOP Guide for Gigabit Passive Optical Network ZyXEL Technology PDF

Încărcat de

Drepturi de autor:

Formate disponibile

GPON SOP Guide

SOP Guide for Gigabit Passive Optical Network

ZyXEL Communications Corp.

GPON SOP Guide

ZyXEL Communications Corp.

GPON SOP Guide

SOP guide based on OLT2412 and PMG5318B20A

Minor text correction

ZyXEL Communications Corp.

GPON SOP Guide

1 System hardware test

Uplink interface, slot 3 using port 1.

Test expected procedure:

Ensure that the system is powered by two separate DC power feed.

Configurations: The red square shows the command

GPON SOP Guide

Configure uplink line card, slot 3.

Configure PON line card, slot 5.

interface slot slot-5

ZyXEL Communications Corp.

GPON SOP Guide

ZyXEL Communications Corp.

GPON SOP Guide

Check the uplink port is up (status forwarding).

GPON SOP Guide

qos bwprof 10M sir 10024 air 0 pir 10024

remote-ont ont ont-5-1-1

ZyXEL Communications Corp.

GPON SOP Guide

bwgroup 1 ustype 1 usbwprofname 10M dsbwprofname 10M

ZyXEL Communications Corp.

GPON SOP Guide

Enable the selected ONT card-type.

remote-ont ontvenet ontvenet-5-1-1-2-1

remote-ont uniport uniport-5-1-1-2-1

ZyXEL Communications Corp.

GPON SOP Guide

queue tc 0 priority 0 weight 0 usbwprofname 10M dsbwprofname 10M dsoption olt

ZyXEL Communications Corp.

GPON SOP Guide

Click Ignore to the screen to change the password.

ZyXEL Communications Corp.

GPON SOP Guide

ZyXEL Communications Corp.

GPON SOP Guide

Apply test procedure

ZyXEL Communications Corp.

GPON SOP Guide

Configuration files of OLT2412 and ONT PMG5318-B20A

ZyXEL Communications Corp.

GPON SOP Guide

1.2 General Alarms

Uplink interface, slot 3 using port 1.

Test expected procedure:

GPON SOP Guide

Configurations: The red square shows the command

Configure uplink line card, slot 3.

Configure PON line card, slot 5.

interface slot slot-5

ZyXEL Communications Corp.

GPON SOP Guide

Check the uplink port is up (status forwarding).

GPON SOP Guide