MA5616 Service Configuration For HSI+IPTV (ADSL)

Security Level:
MA5616 Service
Configuration for
ADSL2+ (HSI+IPTV)
www.huawei.com
HUAWEI TECHNOLOGIES CO., LTD.
Huawei Confidential
Objectives
Upon completion of this course, you will be able to:
Understand the principles of services implementation in
MA5616U
Provision ADSL2+ port, uplink Ethernet port
Provision VLAN, QoS
Provision basic high speed internet service
Provision basic multicast service
Huawei Confidential
Page 2
Contents
1. Multi-service Principle
2. Physical Layer Provisioning

3. Data Link Layer Provisioning
4. HSI+IPTV Service Provisioning
5. Debugging and Mirroring
Huawei Confidential
Page 3
Contents

Huawei Confidential
Page 4
Multi-Service Access Overview

Internet
PC
DSLAM
CPE
ATM/
PTM
IPTV
VLAN600
IPTV Traffic
VLAN99+
VOD VLAN
IP
Network
VoD Server
Middle
ware
VLAN100
Softswitch
SIP Phone
Service
sense
engine
Policy
engine
Forwarding
Engine
DHCP
Server
VoIP
The MA5616 have a strong capability to support mulit-services,

such as IPTV service, VoIP service and HSI Service.
The MA5616 sense and forward different services with different
QoS policy.
Huawei Confidential
Page 5
MA5616 in this project
Note: in this training

a.
b.
c.
d.
e.
The uplink port is 0/0/0 & 0/0/1

VDSL board slot:0/1 (VDSE)
ADSL board slot:0/2 (ADLE)
P2P board slot:0/3 (EIUA)
POTS board slot:0/4 (ASPB)
Huawei Confidential
Page 6
Multi-Service Access Process

Packet
Token
VLAN switching
Traffic
classifi
cation
Add onelayer VLAN
Queue 1
CAR
Add twolayer VLAN
Queue 2
PQ
WRR
PQ+WRR
Switch onelayer VLAN

Switch twolayer VLAN
Transmit
Priority
processing
Transparent
transmission
.
.
.
Queue n
MA5616 has a strong capability to classify the services from the CPE
side
MA5616 forwards and guarantees services with different VLAN polices
and QoS policies
Huawei Confidential
Page 7
Multiple-play Requires High QoS

Multiple-play
Service
awareness
Different users
Different services
C-VLAN
PVC
802.1P
Ether-Type
Encapsulation
type
Priority
scheduler
Service
isolation
Based on user
Based on port
Based on flow
1:1 VLAN Stack

N:1 VLAN
S+C VLAN
Traffic
control
Different users
Different services
PQ
WRR
PQ+WRR
Based on user
Based on port
Based on flow
CAR based on CoS

TrTCM
Huawei Confidential
Page 8
Contents

4. HSI Service Provisioning
Huawei Confidential
Page 9
Contents
2.1 ADSL2 Port Provisioning
2.2 Ethernet Port Provisioning
Huawei Confidential
Page 10
ADSL2+ Port Profiles

Transmission mode
Bit Swap
Rate adaptation
Line
INP
SNR Margin
Rate
Interleaving
Lineprofile
Extendprofile
ADSL2+ Line
Huawei Confidential
Page 11
ADSL2+ Port Provisioning Procedure

Line profile
No
Extend profile
Bonding?
Yes
Bonding group
Bonding group link

Activate Bonding group
Activate ADSL2+ physical
port
Huawei Confidential
Page 12
Configure ADSL2+ Line-Profile

When we deploy the IPTV service, the ADSL line quality should be more strict than internet service, it is
recommendatory to enable: Trellis, Bit Swap and the mode to be Interleaved, but if the Modem do
not support ADSL2+(992.5), it is not recommendatory to deploy IPTV service at these ports, cause the
bandwidth of 992.1(ADSL, 8M) is not enough for the IPTV service generally.
Huawei Confidential
Page 13

MA5616(config)#display adsl line-profile 12
Profile index :12 Name: IPTV_16M
ADSL transmission mode : All(G992.1~5,T1.413)
Trellis mode : Enable
Upstream channel bit swap : Enable
Downstream channel bit swap : Enable
Channel mode : Interleaved
Maximum downstream interleaved delay(ms) : 16
Maximum upstream interleaved delay(ms) : 6
Target downstream SNR margin(dB) : 10
Maximum acceptable downstream SNR margin(dB) : 31
Minimum acceptable downstream SNR margin(dB) : 0
Target upstream SNR margin(dB) : 10
Maximum acceptable upstream SNR margin(dB) : 31
Minimum acceptable upstream SNR margin(dB) : 0
Downstream SNR margin for rate downshift(dB) : 0
Downstream SNR margin for rate upshift(dB) : 0
Upstream SNR margin for rate downshift(dB) : 0
Upstream SNR margin for rate upshift(dB) : 0
Minimum upshift time in downstream(seconds) : 0
Minimum downshift time in downstream(seconds) : 0
Minimum upshift time in upstream(seconds) : 0
Minimum downshift time in upstream(seconds) : 0
Downstream form of transmit rate adaptation : Adapting at startup
Minimum transmit rate downstream(Kbps) : 32
Maximum transmit rate downstream(Kbps) : 16000
Minimum transmit rate upstream(Kbps) : 32
Maximum transmit rate upstream(Kbps) : 1024
Huawei Confidential
Page 14

Profile index :11 Name: HSI_4M
Maximum acceptable upstream SNR margin(dB) : 31
Minimum acceptable upstream SNR margin(dB) : 0
Upstream SNR margin for rate upshift(dB) : 0
Minimum upshift time in downstream(seconds) : 0
Minimum upshift time in upstream(seconds) : 0
Huawei Confidential
Page 15
Configure ADSL2+ Extend-Profile

For the IPTV users, it is recommendatory to bind with extend line-profile so as to improve the QOS, the
INP normally can be set to be "2", but if the line condition is good, it can be set to be "1","0.5" or just do
not bind with extend line-profile
Warning: If we bind the port with extend-profile, the port will be activated one more time.
And if we bind with extend line-profile, the line speed will be down for few, the bigger the INP value, the
more rate down, but it is beneficial for the line stability.
Huawei Confidential
Page 16

MA5616(config)#adsl extline-profile add
{ <cr>|profile-index<L><1,32> }:
Command:
adsl extline-profile add
Press 'Q' to quit the current configuration and new configuration will be neglected
> Do you want to name the profile (y/n) [n]:y
> Please input profile name:IPTV
> Will you configure the disabled tone? (y/n)[n]:
> Will you configure the minimum INP in downstream? (y/n)[n]:y
> Minimum INP on downstream direction:
> 0--auto
> 1--noProtection(0)
> 2--halfSymbol(0.5)
> 3--singleSymbol(1)
> 4--twoSymbols(2)
> 5--fourSymbols(4)
Please select (0~5) [0]:4
> Will you configure the minimum INP in upstream? (y/n)[n]:
> Will you configure the maximum PSD mask in downstream? (y/n)[n]:
> Warning: The configuration of transmission mode in extline-profle will
replace the one configured in line-profile when the transmission mode is enabled!
> Will you enable the transmission mode?(y/n)[n]:
> Will you configure the L2 parameter?(y/n)[n]:
Add profile 1 successfully
Huawei Confidential
Page 17

MA5616(config)#display adsl extline-profile 1
-----------------------------------------------------------------Profile Index : 1 Name: IPTV
Minimum INP in downstream(DMT Symbol) :2
Minimum INP in upstream(DMT Symbol)
:auto
Maximum PSD mask in downstream(-dBm/Hz) :40
ADSL transmission mode in standard
:ADSL annex type
:L2 mode state
:disable
Minimum L0 time(s)
:Minimum L2 time(s)
:L2 interval power(db)
:L2 total power(db)
:Current configuration of each section:
Sections
Value
Effective
Section 1
0 - 0
n
Section 2
0 - 0
n
Section 3
0 - 0
n
Section 4
0 - 0
n
------------------------------------------------------------------
Huawei Confidential
Page 18

MA5616(config-if-adsl-0/2)#extline-config
{ PortID<L><0,63>|all<K> }:0
{ profile-index<K>|profile-name<K> }:profile-name
Command:
extline-config 0 profile-name
Warning: this operation will cause the activating or activated port to
reactivate
Are you sure to continue? (y/n)[n]:y
Set extline-profile 1 to port 0 successfully
Huawei Confidential
Page 19
ADSL2+ Port Status
MA5616(config)#interface ADSL 0/2
MA5616(config-if-ADSL-0/2)#display port state all

------------------------------------------------------------------------------------------ Port Status
Loopback
Line Template Alarm Template
-------------------------------------------------------------------------------------------
0 Deactivated
Disable
1
1
1 Deactivated
Disable
1
1
2 Deactivated
Disable
1
1

21 Deactivated
1
1
22 Deactivated
Disable
1
1
31 Deactivated
Disable
1
1
24 Deactivated
Disable
1
1

--------------------------------------------------------------------------------------------
Huawei Confidential
Page 20
Activate ADSL2+ Port

ADSL2+ Port operation: Activate/Deactivate
MA5616(config)#interface ADSL 0/2
MA5616(config-if-ADSL-0/2)#deactivate
{portid<0,31>|all<K>}:0
MA5616config-if-ADSL-0/2)#deactivate 0
MA5616(config-if-ADSL-0/2)#activate
{portid<0,31>|all<K>}:0
{<cr>|Profile-index<K>|Profile-name<K>}:Profile-index
{profile-index<1,128>}:11
MA5616(config-if-ADSL-0/2)#activate 0 profile-index 11
Huawei Confidential
Page 21
Contents
2.1 ADSL2+ Port Provisioning
2.2 Ethernet Port Provisioning
Huawei Confidential
Page 22
Provision Uplink Ethernet Port
Query the uplink port
MA5616(config)#display board 0/0

---------------------------------------------------------------------------------------------------Board Name
: H831CCUB
Board Status
: Active normal
----------------------------------------------------------------------------------------------------Subboard[0]: H831GE1A
Status: Normal
----------------------------------------------------------------------------------------------------Port Port COMBO Optic MDI Speed
Duplex Flow- Active Link
Type Mode
Status
(Mbps)
Ctrl State
-----------------------------------------------------------------------------------------------------0 GE electric
auto
auto
auto
off active offline
1 GE optical
normal auto_1000 auto_full off active online
-----------------------------------------------------------------------------------------------------Note: For a 1000 M, electrical port in the full-duplex mode, setting MDI to any
value is invalid
Huawei Confidential
Page 23
Ethernet Physical Parameters

Login to the eth mode
MA5616(config)#interface eth
{ frameid/slotid<S><Length 1-15> }:0/0
MA5616(config-if-eth-0/0)#
Specify the port role
MA5616(config-if-eth-0/0)#network-role
{ portid<0,1> }:1
{ role-type<E><uplink,cascade> }:uplink
Disable /enable the port
MA5616(config-if-eth-0/0)#undo shutdown
{ all<K>|portid<0,15> }:1
Huawei Confidential
Page 24
Summary
ADSL2+ including tw0 profiles: line-profile, Extend-profile.
Ethernet port physical parameters can set the port speed, duplex mode
and mdi.
Huawei Confidential
Page 25
Contents

Huawei Confidential
Page 26
Contents
3.1 Service Classification
3.2 VLAN Provisioning
3.3 QoS Provisioning
3.4 Link Aggregation
Huawei Confidential
Page 27
Service Classification
Service virtual port
A virtual channel used to forward the user traffic from the user
side to the device
used to classify the different services traffic and then mapping to
the upstream VLAN
Support two encapsulation mode: ATM and PTM
PC
IPTV
IPTV Traffic
Service virtual port 1

VLAN 600
VLAN 99+VOD VLAN
VLAN 100
CPE
DSLAM
IP Phone
Huawei Confidential
Page 28
Contents
Huawei Confidential
Page 29
VLAN Port Definitions

Standard port
A standard port refers to a physical port of the control card, namely, an GE
port of the control card
The standard port is also called the upstream port
Service virtual port

A service virtual port refers to a service connection of a user-side physical
port such as an xDSL
The service virtual port is also called the access port
CCU
Standard
Port
Upstream
AD
VLAN
port
Huawei Confidential
ADSL2+
Port
ADSL2+
Port
ADSL2+
Port
ADSL2+
Port
Page 30
Service
Virtual
Ports
VLAN Description (Forwarding Mode)

Types
Description
Application
Standard
Only contains standard port in the same

VLAN
Only contain Ethernet ports for

subtending
Smart
Contains multiple xDSL virtual ports whose

service flows are isolated
xDSL access services, reducing the

number of VLANs occupied
Contains only one xDSL virtual port whose

service flows are isolated in different VLANs
xDSL access services, distinguish

different customers by the VLAN IDs
MUX
Attribute
QinQ
Stacking
Description
Application
Contains two VLAN tags: inner VLAN tag

Through the outer VLAN tag, a layer 2 (L2)
from the private network and outer VLAN tag VPN tunnel can be set up to transparently
from the MA5603U
transmit service data from private
networks to public networks
Contains two VLAN tags: inner VLAN tag
used to improve the reuse of the networkouter VLAN tag from the MA5603U
side VLAN (outer VLAN) and be used for
the wholesale service
Huawei Confidential
Page 31
Smart VLAN (Intelligent Bridge Mode)
Definition
A smart VLAN is a VLAN that contains multiple upstream ports and multiple service
ports. These service ports are isolated from each other.
Specifications
There is no limit to the number of the upstream ports and the number of the service
ports in each smart VLAN.
AD
CCU
NSP1
NSP
Backbone
NSP1 VLAN
NSP1
NSP
Backbone
NSP2
Upstream
port
Service port-4
VLAN Tagged packets
Huawei Confidential
Service port-2
Service port-3
NSP2 VLAN
NSP2
Service port-1
Page 32
Service port-5
MUX VLAN (Cross Connect Mode)
Definition
A MUX VLAN is a VLAN that contains one or more upstream ports, but contains
only one service port.
The traffic streams of any two MUX VLANs are isolated.
One-to-one mapping can be set up between a MUX VLAN and an access user.
AD
CCU
Service port-1
NSP1
C VLAN 1
NSP
Backbone
C VLAN 1
Upstream
Service port-2
port
NSP
Backbone
C VLAN 3
C VLAN 3
NSP2
VLAN Tagged packets
Huawei Confidential
Page 33
Service port-3
VLAN Switching
S VLAN
Untagged
S VLAN
C VLAN
Up layer
network
MA5616
VTU-R
S VLAN
+C VLAN
C VLAN
S VLAN
+C VLAN
Untagged
Huawei Confidential
Page 34
Provision VLAN Procedures and Commands
Add VLAN
Add uplink port to

VLAN
Add service port to

VLAN
vlan vlanid [ to end-vlanid ] { mux | smart |

standard }
port vlan vlanid [ to end-vlanid ]

frameid/slotid portlist
service-port [ index ] vlan vlanid ADSL

frameid/slotid/portid
Huawei Confidential
Page 35
VLAN Provisioning
Setp1: Add one VLAN or multiple VLANs of a same type
in batches
MA5616(config)#vlan 600 smart
Setp2: Add an upstream port to a VLAN
MA5616(config)#port vlan 600 0/0 0
Setp3: Add a service virtual port or add service virtual

port in batches
MA5616(config)#service-port vlan 600 ADSL 0/2/0 vpi 8 vci 35 rxcttr 11 tx-cttr 11
Huawei Confidential
Page 36
Questions
1. Which types of VLAN can access xDSL services and reduce the number of
VLANs occupied?
A. mux
B. smart
C. stand
D. QinQ
E. Stacking
2. How many kinds of ports are contained in one VLAN?
A. uplink port
B. service virtual port
C. maintenance port
D. serial port
Huawei Confidential
Page 37
Contents
Huawei Confidential
Page 38
QoS Overview
Qos Guarantee
Physical layer
Data link layer
ADSL2+ channel profile
Traffic table
Rate
Rate
Delay
Priority
Ethernet port line rate
Priority policy
Rate
Huawei Confidential
Page 39
Physical Layer QoS-LineProfile

Profile index :12 Name: IPTV_16M
Maximum acceptable upstream SNR margin(dB) :
31
Minimum acceptable upstream SNR margin(dB) :
0
Upstream SNR margin for rate upshift(dB) :
0
Minimum upshift time in downstream(seconds) :
0
Minimum upshift time in upstream(seconds) :
0
Huawei Confidential
Page 40
Physical Layer QoS-LineProfile

MA5616(config)#adsl extline-profile add
{ <cr>|profile-index<L><1,32> }:
Command:
adsl extline-profile add
Press 'Q' to quit the current configuration and new configuration will be neglected
> Do you want to name the profile (y/n) [n]:y
> Will you configure the disabled tone? (y/n)[n]:
> Will you configure the minimum INP in downstream? (y/n)[n]:y
> Minimum INP on downstream direction:
> 0--auto
> 1--noProtection(0)
> 2--halfSymbol(0.5)
> 3--singleSymbol(1)
> 4--twoSymbols(2)
> 5--fourSymbols(4)
Please select (0~5) [0]:4
> Will you configure the minimum INP in upstream? (y/n)[n]:
> Will you configure the maximum PSD mask in downstream? (y/n)[n]:
> Warning: The configuration of transmission mode in extline-profle will
replace the one configured in line-profile when the transmission mode is enabled!
> Will you enable the transmission mode?(y/n)[n]:
> Will you configure the L2 parameter?(y/n)[n]:
Add profile 1 successfully : 0
Huawei Confidential
Page 41
Physical Layer QoS

Control Ethernet uplink port rate
MA5616(config)#line-rate
{inbound<K>|outbound<K>}:inbound
{ integer<64,1000000> }:51200
{ port<K> }:port
{ frameid/slotid/portid<S><Length 5-15> }:0/0/0
Huawei Confidential
Page 42
Data Link Layer QoS- TrTCM

Discard
PIR
Drop priority =1
CIR
Drop priority =0
Higher than PIR,

dropped at once
Between CIR and
PIR, mark as Yellow,
Passed at this point
Drop Red
Drop Green
Drop Yellow
Lower than CIR,

mark as Green,
Passed
Dual drop threshold (green and yellow) for queue, while traffic congestion, the
packets with yellow color will be dropped first.
Huawei Confidential
Page 43
Data Link Layer QoS-Prioriy Policy

Control service traffic rate and priority
MA5616(config)#traffic table ip
{}
{priority-policy<K>}:priority-policy
{priority-policy<E><Local-Setting,Tag-In-Package>}:local-
Setting
Local-Setting: DSLAM no trust the Priority in the SVLAN from MANE but schedule according the local setting.
Tag-In-Package: DSLAM trust the Priority in the SVLAN from MANE.
Huawei Confidential
Page 44
Layer2 QoS - Traffic Table (1/2)

{cir<K>|index<K>|modify<K>|name<K>}:index
{row-index<0,127>}:11
{cir<K>|name<K>}:name
{name<S><Length 1-32>}:HSI
{cir<K>}:cir
{cir<64,524288>|off<K>}:off
{pir<64,524288>|off<K>}:pir off
{color-mode<K>|priority<K>}:priority
{prival<0,7>|user-cos<K>|user-tos<K>}:0
{priority-policy<E><Local-Setting,Tag-In-Package,CTag-InPackage>}:local-Setting
Huawei Confidential
Page 45
Layer2 QoS - Traffic Table (2/2)

{cir<K>|index<K>|modify<K>|name<K>}:index
{row-index<0,127>}:12
{cir<K>|name<K>}:name
{name<S><Length 1-32>}:IPTV
{cir<K>}:cir
{cir<64,524288>|off<K>}:off
{pir<64,524288>|off<K>}:pir off
{color-mode<K>|priority<K>}:priority
{prival<0,7>|user-cos<K>|user-tos<K>}:4
{priority-policy<E><Local-Setting,Tag-In-Package,CTag-InPackage>}:local-Setting
Huawei Confidential
Page 46
Contents
Huawei Confidential
Page 47
Ethernet Link Aggregation
Ethernet link aggregation refers to aggregation of multiple Ethernet

ports to form one port to provide higher bandwidth and link security.
Link aggregation mode
Manual link aggregation

dynamic link aggregation
static link aggregation.
The Link Aggregation Control Protocol (LACP) is the control protocol that is
specified in the IEEE 802.3ad standard for implementing link aggregation.
Through LACP, the Ethernet ports of different devices can be automatically
aggregated without interventions from the user, and the link layer failure of
the ports can be detected, so as to implement control over link aggregation
control.
Huawei Confidential
Page48
Introduction to LACP
Device B
Device A
LAG
Port1
Port1
Port2
Port2
Port3
Port3
Port4
Port4
Huawei Confidential
Page49
Link Aggregation
The port aggregation

The Ethernet bridge device
adds multiple Ethernet ports
into one aggregation group to
realize the protection and load
sharing among ports.
The protection and load
sharing among ports can be
realized.
Huawei Confidential
L2/L3 aggregator
Aggregation
LACP
Page 50
Provision Link Aggregation

Setp1: Set the link aggregation mode
MA5616(config)#link-aggregation
{ frame/slot<S><3,4> }:0/0
{ port-list<S><1,255> }:0-1
{ frame/slot<S><3,4>|mode<E><ingress,egress-ingress> }:ingress {
<cr>|workmode<K> }:workmode
{ lacp-static<K> }:lacp-static
Step2: Add the member of the link aggregation
MA5616(config)#link-aggregation add-member
{ frameid/slotid/portid<S><Length 5-7> }:0/0/0
{ frame/slot<S><Length 3-4> }:0/0
{ port-list<S><Length 1-255> }:1
{ <cr>|frame/slot<S><Length 3-4> }:
Huawei Confidential
Page 51
Questions
1. Which profiles are used to control user traffic priority ?
A. line profile
B. channel profile
C. traffic table
D. alarm profile
2. How to process the untrusted traffic ?
A. remark the DSCP
B. remark the 802.1p
C. discard
D. transparent
Huawei Confidential
Page 52
Summary
Service port is used to classify the different service stream from the
user side. Service port supports two escalation modes: ATM and PTM.
VLAN is used to forward the different service to the up layer network.
Different VLAN types are used in the different application. smart VLAN
is for the Intelligent Bridge Mode, MUX VLAN is for the cross connection
mode.
The QoS is guaranteed in the different layers. The physical layer QoS
use the ADSL2+ profiles to set the rate and delay parameters, and data
link layer QoS use the traffic table to set the priority level.
Link aggregation is used for the uplink port to increase the bandwidth
and improve the reliability
Huawei Confidential
Page 53
Contents

Huawei Confidential
Page 54
Provision HSI Service Procedure

Add Line profile
Provision ADSL2+ port
Add Extend
profile(optional)
Bonding?
No
Yes
Add Bonding group

Add Bonding group link
Activate bonding group
Provision QoS
Activate port
Add traffic table
Add VLAN
Provision VLAN
Add uplink port to VLAN

Add service port to VLAN
Huawei Confidential
Page 55
Configuration Example for HSI

Item
VLAN
Internet
Data
VLAN ID: 600
Uplink port :0/0/0
Security control: enable unknown unicast limitation
Subscriber port : 0/2/0
Security control :
1. each subscriber can access 10 MAC address;
2. The subscriber can not use BRAS MAC address;
3. Enable Anti-DOS feature at subscriber;
4. Enable Loop detecting feature at subscriber;
5. Enable Anti-MAC spoofing feature at subsciber.
BRAS
WAN
Traffic
profile
Index: 11
CIR: off kbit/s ,PIR: off kbit/s
Priority: 0 ,Priority policy: Local-Setting
Line Profile index: 11
Extend profile: Index: 1
Line
template
Huawei Confidential
Page 56
Provision HSI Service

Setp1 :Activate the ADSL2+ port.
MA5616(config)# interface ADSL 0/2

MA5616(config-if-ADSL-0/2)#deactivate 0
MA5616(config-if-ADSL-0/2)#extline-config 0 profile-index 1
Huawei Confidential
Page 57

Setp2: Create a VLAN and add an upstream port to the VLAN

Setp3: Create the service port to the VLAN
MA5616(config)#service-port vlan 600 ADSL 0/2/0 vpi 8 vci 35 rx-cttr

11 tx-cttr 11
Setp4: Security control -MAC address limit
MA5616(config)#mac-address max-mac-count ADSL 0/2/0 stream 10
Huawei Confidential
Page 58

Setp5: Configure the Unicast Traffic-suppress at uplink port
MA5616(config-if-eth-0/0)#display traffic-suppress all

-----------------------------------------------------------------------NO. Min bandwidth(kbps) Max bandwidth(kbps)
Package number(pps)
/Jumbo frame enable(kbps)
-----------------------------------------------------------------------1
6
145 /
884
12
2
12
291 /
1769
24
3
24
582 /
3538
48
4
48
1153 /
7004
95
5
97
3119 /
14082
191
6
195
4639 /
28164
382
7
390
9265 /
56254
763
8
781
18531 / 112508
1526
9
1562
37063 / 225017
3052
10
3125
74126 / 450035
6104
11
6249
148241 / 899997
12207
12
12499
296483 / 1799995
24414
-----------------------------------------------------------------------PortID
Broadcast_index
Multicast_index
Unicast_index
-----------------------------------------------------------------------0
7
-7
1
7
-7
We can choose depend on the requirement from VNPT, currently we deploy Level3 for MA5600.
Huawei Confidential
Page 59

Setp5: Configure the Anti-Macspoofing for HSI service
First, we enable the Anti-Macspoofing function at global
MA5616(config)# security anti-macspoofing enable
Now we enable the Anti-Macspoofing function for HSI VLAN profile

MA5616(config)#vlan service-profile profile-id 1 profile-name HSI
MA5616(config-vlan-srvprof-1)# Anti-macspoofing enable
MA5616(config-vlan-srvprof-1)# commit
MA5616(config-vlan-srvprof-1)# quit
At last, we can bind the VLAN profile to the HSI VLAN, the Anti-Macspoofing feature will be enable at HSI
service.
MA5616(config)#vlan bind service-profile 600 profile-name HSI
Huawei Confidential
Page 60

Setp5: Configure the Anti-Dos/Mac-Filter/RingCheck at DSLAM
MA5616(config)#security anti-dos { enable | disable }

If there is one user port have too much protocol packet, system can detect and discard all of the protocol
packets of that port but the common data packet can be transfer still.
And if this port recovers, system will release this port and begin to deal with the protocol packet of that port
again.
Prevent the end-user attack the Server/BRAS with the same MAC address of Server, otherwise the whole
Internet service of that VLAN will be affected.
huawei(config)#security mac-filter
{ mac_addr<XXXX-XXXX-XXXX> }:1010-1010-3020
Command:
security mac-filter 1010-1010-3020
Note: System can configure 4 different Security MAC-Filter in total.
MA5616(config)#ring check { enable | disable }
By default, the ring check function is disabled.

When the Ring Check feature is enabled in the device, the device sends 16 Ring Check packets (proprietary BPDU
packets) to the subscriber port per second. The device sends the Ring Check packets to only the traffic stream that is in
the Up state.
Ring check mechanism:
If the MA5616 receives the private ring check packet from a user port, it blocks the user port and sends the matched
alarm.
If the device receives Ring Check packet from a user port, it determines whether the root bridge in the packet is the
same as that in the device. If they are the same, the device blocks the user port and sends the matched alarm.
If the device received the private Ring Check packet from the upstream port, it determines whether the packet is sent
from the root bridge. If the packet is sent from the root bridge, the device blocks the user port and sends the matched
alarm.
Huawei Confidential
Page 61

Setp6: Configure the PITP for HSI service
First, we enable the PITP function at global
MA5616(config)#pitp enable pmode

By default it is
ATM port: device name atm shelfID/slotID/subslotID/portID:vpi.vci
ETH port: device name eth shelfID/slotID/subslotID/portID:subscriber VLAN ID
But we can modify the format as VNPT requirement:

raio-mode user-defined pitp-pmode
raio-format [ pitp-pmode | dhcp-option82 | ancp ] { cid | rid } [ atm | eth ] format-string
raio-format pitp-vmode [ atm | eth ] format-string
Now we enable the PITP function for HSI VLAN profile
MA5616(config)#vlan service-profile profile-id 1 profile-name HSI

MA5616(config-vlan-srvprof-1)# pitp enable
At last, we can bind the VLAN profile to the HSI VLAN, the PITP feature will be enable at HSI service.
MA5616(config)#vlan bind service-profile 600 profile-name HSI
Huawei Confidential
Page 62
Configuration Example for VASC

Item
VLAN
Data
VLAN ID: 1100,BTV VLAN: 99
Uplink port :0/0/0
Security control :
1. Enable Anti-MAC spoofing feature at subscriber.
2. Enable DHCP-OPTION82 feature at subscriber.
VASC
WAN
Traffic
profile
Index: 12
Profile index: 12
Extend-profile: Index: 1
Line
template
Huawei Confidential
Page 63
Provision VASC Service


MA5616(config-if-ADSL-0/2)#extline-config 0 profile-index 1
Huawei Confidential
Page 64


MA5616(config)#service-port 1100 vlan 1100 ADSL 0/2/0 vpi 8 vci 37

rx-cttr 12 tx-cttr 12
Note: Here the ID of service-port is 1100, every service-port have
one id.
Huawei Confidential
Page 65

Setp4: Configure the Anti-Mac spoofing at DSLAM
Now we enable the Anti-Macspoofing function for IPTV VLAN profile
MA5616(config)#vlan service-profile profile-id 2 profile-name IPTV

At last, we can bind the VLAN profile to the IPTV VLAN, the Anti-Macspoofing feature will be enable at IPTV
service.
MA5616(config)#vlan bind service-profile 1100 profile-name IPTV
Huawei Confidential
Page 66

Setp5: Configure the DHCP Option82 at DSLAM
First, we enable the DHCP-Option82 function at global
MA5616(config)#dhcp option82 enable

By default it is

raio-mode user-defined dhcp-option82
Now we enable the DHCP-Option82 function for IPTV VLAN profile

MA5616(config-vlan-srvprof-2)# dhcp option82 enable
At last, we can bind the VLAN profile to the IPTV VLAN, the DHCP-OPTION82 feature will be enable at IPTV service.
Huawei Confidential
Page 67

Setp5: Configure the BTV at DSLAM
MA5616(config)#multicast-vlan 99
MA5616(config-mvlan99)# igmp mode proxy
MA5616(config-mvlan99)# igmp version v2
MA5616(config-mvlan99)# igmp uplink-port 0/0/0
MA5616(config-mvlan99)# igmp program add name program1 ip 232.84.1.1
igmp program add batch ip 232.84.1.1 to-ip 232.84.1.150
MA5616(config-mvlan99)#btv
MA5616(config-btv)#igmp proxy router gen-query-interval 30
MA5616(config-btv)#igmp proxy router robustness 1
MA5616(config-btv)#igmp user add service-port 1100 no-auth
MA5616(config-btv)#multicast-vlan 99
MA5616(config-mvlan99)#igmp multicast-vlan member service-port 1100
Note: The BTV user under BTV mode can join the channel at differnet MVLAN.
Huawei Confidential
Page 68
Configuration Example for VTC

Item
VLAN
Data
VLAN ID: 1102,BTV VLAN: 99
Uplink port :0/0/0
Security control :
1. Enable Anti-MAC spoofing feature at subscriber.
2. Enable DHCP-OPTION82 feature at subscriber.
VTC
WAN
Traffic
profile
Index: 12
Line Profile index: 12
Extend-profile: Index: 1
Line
template
Huawei Confidential
Page 69
Provision VTC Service


MA5616(config-if-ADSL-0/2)#extline-config profile-index 1
Huawei Confidential
Page 70


MA5616(config)#service-port 1102 vlan 1102 ADSL 0/2/0 vpi 8 vci 36

rx-cttr 12 tx-cttr 12
Huawei Confidential
Page 71

Setp4: Configure the Anti-Mac spoofing at DSLAM
Now we enable the Anti-Macspoofing function for IPTV VLAN profile

At last, we can bind the VLAN profile to the IPTV VLAN, the Anti-Macspoofing feature will be enable at IPTV
service.
Huawei Confidential
Page 72

Setp5: Configure the DHCP Option82 at DSLAM
First, we enable the DHCP-Option82 function at global
MA5616(config)#dhcp option82 enable

By default it is

raio-mode user-defined dhcp-option82
Now we enable the DHCP-Option82 function for IPTV VLAN profile

MA5616(config-vlan-srvprof-2)# dhcp option82 enable
At last, we can bind the VLAN profile to the IPTV VLAN, the DHCP-OPTION82 feature will be enable at IPTV
service.
Huawei Confidential
Page 73

Setp5: Configure the BTV at DSLAM
MA5616(config)#multicast-vlan 99
MA5616(config-mvlan99)# igmp mode proxy
MA5616(config-mvlan99)# igmp version v2
MA5616(config-mvlan99)# igmp uplink-port
MA5616(config-mvlan99)# igmp program add
MA5616(config-mvlan99)#btv
MA5616(config-btv)#igmp proxy router gen-query-interval 30
MA5616(config-btv)#igmp proxy router robustness 1
MA5616(config-btv)#igmp user add service-port 1102 no-auth
MA5616(config-btv)#multicast-vlan 99
MA5616(config-mvlan99)#igmp multicast-vlan member service-port 1102
0/0/0
name program1 ip 239.1.1.1
Note: The BTV user under BTV mode can join the channel at differnet MVLAN.
Huawei Confidential
Page 74
Questions
1. Which profiles are used to control ADSL2+ traffic rate ?
A. line profile
B. channel profile
C. traffic table
D. alarm profile
2. How to delete the HSI service step by step ?
A. delete the VLAN
B. delete the uplink port
C. delete the service port
D. delete the profiles and traffic table
Huawei Confidential
Page 75
Summary
High speed internet service is the basic service for the customer.
Provision the HSI service should flow the main procedure: provision
ADSL2+ port, provision Qos and VLAN.
If the user need two ADSL2+ lines to increase the bandwidth, then add
the ADSL2+ bonding group.
Huawei Confidential
Page 76
Contents

4. HSI/IPTV Service Provisioning
Huawei Confidential
Page 77
Mirror Concept
A sniffing
monitor
Ingres
s
Egress
Purpose
Mirror is a Debugging and
troubleshooting tool
Mirror port
Two types of Mirror

Mirror port
copy the traffic of a port to

other ports.
Mirror traffic
A sniffing
monitor
Filter
copy the packets that match

the ACL to monitor the
inbound or outbound packets
of a port
Mirror traffic
Huawei Confidential
Page 78
Mirroring Port Procedure
Step1: Enable to copy source port to the mirror destination port

CLI Format:
mirror port src-portid-list dst-portid { ingress | egress | all }
For example:
MA5616(config)#interface eth 0/0

MA5616(config-if-eth-0/0)#mirror port 0 1 all
WAN
A sniffing
monitor
Copy
Destination
port
Source port
Huawei Confidential
Page 79
Mirroring Traffic Procedure

Step1: Configure the ACL rule
CLI Format:
acl { basic-acl-number | adv-acl-number | link--acl-number | user-aclnumber }

rule [ rule-id ] { permit | deny } protocol [ established | source {
sour-addr { sour-wildcard | 0 } | any } | destination { dest-addr destmask | any } | source-port operator port1 [ port2 ] | destinationport operator port1 [ port2 ] | icmp-type icmp-type icmp-code
| precedence precedence | tos tos | dscp dscp | time-range timerange-name | fragment ]*
For example:
MA5616(config)# ACL 3000

MA5616(config-acl-adv-3000)#rule 10 permit ip source 10.10.10.2 0
destination 10.20.20.2 0
Huawei Confidential
Page 80
Mirroring Traffic Procedure

Step2: Enable to copy source port to the mirror
destination port when match the ACL rule
CLI Format:
traffic-mirror { inbound | outbound } { user-group access-listnumber1 [ rule rule-id ] | { ip -group access-list-number2 [ rule
rule-id ] | link-group access-list-number3 [ rule rule-id ] } * } port
frameid1/slotid1/portid1 [ to port frameid2/slotid2/portid2 ]
For example:
MA5616(config)# traffic-mirror inbound ip-group 3000 port 0/2/0 to

port 0/0/0
Huawei Confidential
Page 81
Debugging
Purpose
monitoring the system message when a fault occurs and you
need to locate or monitor the problem
Procedure
Setp1: Debugging system
MA5616(config)#debugging
{all<K>|dns<K>|firewall<K>|hwtacacs<K>|igmp<K>|ip<K>|lacp<K>|ntpservice<K>|rawip<K>|rawlink<K>|rm<K>|rsa<K>|stp<K>|tcp<K>|udp<K>
}:
For example:
MA5616(config)#debugging igmp
{ user<K> }:user
{ all<K>|user-index<0,255> }:all
Huawei Confidential
Page 82
Debugging
Step2: Display the debugging information to the CLI terminal
MA5616(config)#terminal debugging
Step3: Debugging information output to the terminal
MA5616(config)#terminal monitor
Huawei Confidential
Page 83
Questions
1. How to copy the traffic stream from one port to another port ?
A. port mirror
B. debugging
C. both
D. none
2. How to filter the specify destination IP address packet from the uplink
port to another port ?
A. ACL rule
B. port mirror
C. traffic mirror
D. debugging
Huawei Confidential
Page 84
Summary
Mirror is used to troubleshooting and analyze the traffic stream from

one port to another port.
MA5616 can mirror all the traffic from one port to another port, also
support mirror specify packed from one port to another port through the
ACL rules.
Debugging is a useful tool for troubleshooting, the specify message is

output to the monitor terminals after debugging and monitor the
message.
Huawei Confidential
Page 85
Glossary
CPE: Customer Premise Equipment

DSLAM: Digital Subscriber Line Access Multiplexer
PVC: Permanent Virtual Channel
SIP: Session Initiation Protocol
CAR: Committed Access Rate
VLAN: Virtual Local Area Network
QoS: Quality Of Service
ADSL: Asymmetric Digital Subscriber Line
Huawei Confidential
Page 86
Glossary
SNR: Signal Noise Ratio

DPBO: Downstream Power Back-Off
INP: Impulse Noise Protection
MTU: Maximum Transmission Unit
MDI: Medium Dependent Interface
ATM: Asynchronous Transfer Mode
PTM: Packet Transfer Mode
TrTCM: Two Rate Three Color Marker
Huawei Confidential
Page 87
Thank you
www.huawei.com

MA5616 Service Configuration For HSI+IPTV (ADSL)

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

MA5616 Service Configuration For HSI+IPTV (ADSL)

Uploaded by

Copyright:

Available Formats

Security Level:

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI TECHNOLOGIES CO., LTD.

2. Physical Layer Provisioning

HUAWEI TECHNOLOGIES CO., LTD.

2. Physical Layer Provisioning

HUAWEI TECHNOLOGIES CO., LTD.

Multi-Service Access Overview

The MA5616 have a strong capability to support mulit-services,

HUAWEI TECHNOLOGIES CO., LTD.

MA5616 in this project

Note: in this training

The uplink port is 0/0/0 & 0/0/1

HUAWEI TECHNOLOGIES CO., LTD.

Multi-Service Access Process

Add onelayer VLAN

Add twolayer VLAN

Switch onelayer VLAN

HUAWEI TECHNOLOGIES CO., LTD.

Multiple-play Requires High QoS

1:1 VLAN Stack

HUAWEI TECHNOLOGIES CO., LTD.

CAR based on CoS

2. Physical Layer Provisioning

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI TECHNOLOGIES CO., LTD.

ADSL2+ Port Profiles

HUAWEI TECHNOLOGIES CO., LTD.

ADSL2+ Port Provisioning Procedure

Bonding group link

HUAWEI TECHNOLOGIES CO., LTD.

Configure ADSL2+ Line-Profile

HUAWEI TECHNOLOGIES CO., LTD.

Configure ADSL2+ Line-Profile

Configure ADSL2+ Line-Profile

Configure ADSL2+ Extend-Profile

HUAWEI TECHNOLOGIES CO., LTD.

Configure ADSL2+ Extend-Profile

HUAWEI TECHNOLOGIES CO., LTD.

Configure ADSL2+ Extend-Profile

HUAWEI TECHNOLOGIES CO., LTD.

Configure ADSL2+ Extend-Profile

HUAWEI TECHNOLOGIES CO., LTD.

ADSL2+ Port Status

MA5616(config)#interface ADSL 0/2

MA5616(config-if-ADSL-0/2)#display port state all

HUAWEI TECHNOLOGIES CO., LTD.

Activate ADSL2+ Port

MA5616(config)#interface ADSL 0/2

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI TECHNOLOGIES CO., LTD.

Provision Uplink Ethernet Port

Query the uplink port

MA5616(config)#display board 0/0

HUAWEI TECHNOLOGIES CO., LTD.

Ethernet Physical Parameters

Specify the port role

Disable /enable the port

HUAWEI TECHNOLOGIES CO., LTD.

ADSL2+ including tw0 profiles: line-profile, Extend-profile.

HUAWEI TECHNOLOGIES CO., LTD.

2. Physical Layer Provisioning