How to configure MAC address filtering to prevent unauthorized network access on Huawei ONT?

Question: 
How to configure MAC address filtering to prevent unauthorized network access on Huawei ONT(HG8010H, HG8010Z, HG8012H, HG8040, HG8045A, HG8240, HG8245, HG8247H)?

Answer:
By setting MAC address filtering, you can allow only your own device to access the network (whitelist), or do not allow unauthorized devices to access the network (blacklist), effectively preventing unauthorized network access. Huawei ONTs support MAC address filtering for wired and wireless networks. The following describes the two scenarios respectively.

MAC address filtering on wired networks:
(1) Click Advanced Configuration > Security Configuration tab, and choose MAC Address Filtering in the navigation tree on the left. In the pane on the right, after enabling MAC filter and selecting the filter mode, click New. On the dialog box that is displayed, configure the MAC filter rule for the PC to access the Internet.

How to add eNodeB to U2000 Network Management System?

Firstly it is necessary to download an U2000 client to local PC. In addition, we need to login into OSMU server as user ossuser to install the software mediation. If we are going to add an EnodeB, DBS software and mediation must match, otherwise we cannot add the site to the U2000 server.
Secondly a connection between U2000 and NE must be established. IP route and device IP configuration should be configuted on NE side. We can use Web LMT for this configuration. 

1) Installation the Mediation Software and Network Connection
UseOSMU platform to install mediation file.
We can login into OSMU platform using 31123 port. Login information has been provided.
User: "ossuser" and Password: "Changeme_123"
- After login was successfully, we will select general tab and navigate to the mediation package management. (click the Mediation Installation tab in the right pane). 
- The tab page for installing mediation software is displayed. Click Upload in the Upload Mediation Package area and then specify the installation package of the mediation software to be uploaded. You need to ensure that the language version of the selected installation package is consistent with the language version of the U2000 server application..
If many pieces of mediation software are available for installation in Mediation Packages to be Installed, click Show Only Med Not Installed to sort the mediation software that has not been installed.

2) Adding IPRT and DEVIP in order to reach NE from U2000 server.
In this section we should login with Ethernet cable to the base station.You can loginto NE by using UMPT default IP which is 192.168.0.49.
User: "admin" and the Password: "hwbs@com"
After loginprocess has finished, we will add DEVIP and IPRT that will use for connection.

IP address will be our OM IP. Inaddition, we have to consider the port number.

If you have other problem about U2000 or Huawei MSTP DWDM equipment, you can contact our technical support team supports@thunder-link.com 

How to make a capture for uplink port of Huawei HG8245Q?

How to make a capture for uplink port of Huawei HG8245Q?

Commond:

set ethportmirror sourceport {value} destport {value} mirrordate {0:out/1:in/2:all} enable {0/1}

OPTIONS:
sourceport : value range [1-5:eth/9:cpu/10:pon] 
destport : eth port value range [1-5] 
mirrordate : direction [0:out/1:in/2:all]
enable : switch [1:enable/0:disable]

Example: Make whole traffic mirror from pon port to ETH3
WAP>set ethportmirror sourceport 10 destport 3 mirrordate 2 enable 1

How to Configure a Layer 2 Interface as a Layer 3 Interface on a Switch?

By default, Ethernet interfaces on switches work as Layer 2 interfaces.Run the undoportswitch command to configure the Ethernet interfaces as Layer 3 interface

For switches in V200R003C00 and earlier versions:

Only Layer 2 Ethernet interfaces on the S5700-HI, S5710-EI, and S5710-HI can be
configured as Layer 3 interfaces.

After an Ethernet interface is configured as a Layer 3 interface, the interface cannot be
configured with an IP address.

For switches in V200R005C00 and later versions:
Only Layer 2 Ethernet interfaces on the S5700-EI, S5700-HI, S5710-EI, S5710-HI,
S5720-EI like S5720-50X-EI-46S-AC, S5720-HI, S6700-EI, S6720-EI switch, and S6720S-EI can be configured as Layer 3
interfaces.

After an Ethernet interface is configured as a Layer 3 interface, the interface can be

configured with an IP address.

Which is the innovation of Huawei OSN 6800/8800 system?

Huawei OSN 6800 and OSN 8800 system innovations are the three-level traffic grooming infrastructure:                                                          

 1. integrating dynamic cross-connect (Multi-degree ROADM)

 2. flexible electronic grooming 

 3. embedded L2 switch processing capability

An ACL Applied to the Outbound Direction Cannot Define the Port Number Range. Why?

When you define the port number range in an ACL and apply the ACL to the outbound
direction, the system displays a failure message.

You can define the port number range in an ACL and apply the ACL to the inbound direction.
A maximum of 32 port number ranges can be defined and applied to the inbound direction on
Huawei S5720-EI, Huawei S6720-EI, and Huawei S6720S-EI. On other fixed switches, port number ranges are not supported and ACLs are delivered.

How Can I Identify Whether Huawei GPON ONU MA5626 Supports PoE and Reverse PoE?

You can identify whether Huawei GPON ONU MA5626 supports PoE and reverse PoE by checking the identifier on the panel. Identifier "PoE" indicates that PoE is supported, as shown in Figure 1; identifier "PD" indicates that reverse PoE is supported, as shown in Figure 2.

Figure 1 MA5626 that supports PoE 

Figure 2 MA5626 that supports reverse PoE 

Huawei MA5616 64 channels POTS service board ASPB Introduction

Huawei ADPB is POTS board of Huawei DSLAM MA5616, 64 channels POTS service board that provides POTS access service. Huawei ASPB has 3 different models H837ASPB, H838ASPB, H839ASPB. Please note 2 PCS subscriber cable should purchase separately with ASPB board.

• Apply to Huawei MA5616 system.
• ASPB has the following model names: H837ASPB, H838ASPB, H839ASPB, same function with different chipset
• ASPB doesn't come with subscriber cable

FAQ: 

Q: What is the difference between H837ASPB H838ASPB H839ASPB?

A: H837ASPB has the same functions as H838ASPB; therefore, H837ASPB can substitute for H838ASPB.

 Compared with H837ASPB/H838ASPB, H839ASPB supports a new function: direct current-isolated (DC-I) grounding.

Q: How many subscriber cables each ASPB will need?

A: Each ASPB 2 cables.

Q: How many ASPB cards supported in 1 MA5616?

A: 4 Units.

Huawei DSLAM MA5616 Hardware Configuration

In Huawei MA5616 chassis, slot 0 houses the control board, slots 1-4 service boards, and slot 5 power board.

MA5616s support H831MABA and H831MABB backplanes. If an MA5616 is required to support vectoring, configure an H831MABB backplane for it..

Figure 1 shows the layout of the MA5616 chassis.

Figure 1 Layout of the MA5616 chassis 

Table 1 Board configuration and slot restriction in the MA5616 chassis

Board Name	Slot
Control board	0
VDSL2 service board	1-4 (These boards can be installed in all of the four slots.) NOTE: When the MA5616 uses the CCUC control board, EIUD can be inserted in slot 1 or 2, and can be configured in all the two service slots.
ADSL2+ service board
SHDSL service board
Ethernet service board
Voice board
Combo board
Power board	5

How can you identify unreachable NEs in U2000?

Method 1:

In the DCN management window, identify unreachable NEs based on their communication status. 1.Choose Administration > DCN Management from the main menu (traditional style); alternatively, double-click Fix-Network NE Configuration in Application Center and choose Administration > DCN Management from the main menu (application style). Click the NE tab.
2.View Communication Status. If the value is Cannot connect, the NE is unreachable. 

Method 2:

 Identify unreachable NEs based on NE_NOT_LOGIN alarms. 1.Choose Fault > Browse Current Alarm from the main menu (traditional style); alternatively, double-click Fault Management in Application Center and choose Browse Alarm > Browse Current Alarm from the main menu (application style). In the Filter dialog box, click OK.
2.Find the alarms whose Name is NE_NOT_LOGIN and view their Location Information.

If any other questions about U2000 client on Windows installation, U2000 license upgrade..., you can contact supports@thunder-link.com freely, they will response you within 24 hours.

How to realize flow qos mode configuration on Huawei MA5680T GPON?

For realize scheme with two flows Huawei MA5680T GPON i create new gpon-line profile with these settings:

ont-lineprofile gpon profile-id 10 profile-name "Flow-Test"
qos-mode flow-car
mapping-mode vlan-priority
tcont 1 dba-profile-id 10
gem add 1 eth tcont 1
gem mapping 1 0 vlan 1001 priority 0
gem mapping 1 1 vlan 1001 priority 5
commit

It means, that we use 1 gemport, but mapping it with different mapping index for priority 0 and 5.

After that we create service port for this gemport and Huawei ONT with unlimited traffic-table index 6 with priority policy Tag-In-Package:

service-port 1 vlan 1001 gpon 0/5/0 ont 1 gemport 1 multi-service user-vlan 1001 tag-transform translate inbound traffic-table index 6 outbound traffic-table index 6

That's all, during test we can see, that flow with priority 5 has superior between flow with 0 priority.

For more questions or inquiry about Huawei OLT/ONT, Switch and Router, please contact Thunder-link.com technical support team.

Does Huawei GPON ONT HG8245H support 802.11e (QoS)?

Huawei GPON ONT HG8245H support only WMM which is part of the 802.11e.

802.11e defines Quality of Service (QoS) for the wireless LAN, which provides the required service quality for voice and multimedia applications and enhances network performance. Wi-Fi Multimedia (WMM) defines four access categories, including voice, video, best effort, and background to optimize network communication quality and ensure stable access of corresponding applications to network resources. The WMM standard is a subset of IEEE 802.11e.

In conclusion, HG8245H support partially the 802.11e standard.

How to solve DHCP issue on GPON side?

Analysis:

We found Huawei OLT has enable arp unicast function which only allowed 8 dhcp user dial up in one service port. OLT will discard dhcp packets whose amount is more than 8 dhcp users.

ARP unicast function description:

The function of ARP unicast is shown below and it is not needed to enable normally unless there are lots of ARP packets in the network.

If the ARP broadcast converted to unicast function is enabled on the network side, MA5680T/MA5683T/MA5608T queries user's going online information based on destination IP address and VLAN after receiving an
ARP request.

·         After detecting that a user goes online, MA5680T/MA5683T/MA5608T sends the ARP request to this user.

·         If no online users are detected, when security arp-unicast unknown-policy is set to discard, the ARP request is broadcast cascading-side and network-side ports excluding the source port in the VLAN.
However, the user side cannot receive ARP requests sent by the network side; when security arp-unicast unknown-policy is set to forward, the ARP request is broadcast to the user-side, cascading-side, and network-side ports excluding the source port in the VLAN.

Solution:

Disable ARP unicast function.

Optical power management : ALS function

Note that ALS function need to be activated on each port, in this way the laser will not harm anybody!

When a client-side or WDM-side fault occurs during the transmission of non-OTN services, the automatic laser shutdown (ALS) function, if being enabled, shuts down the laser(s) on the associated transmit ports. It turns on the laser(s) on the transmit port(s) again when the fault has been eliminated.
 
The automatic laser shutdown (ALS) function needs to be configured at each required port.
 
ALS application for Huawei OSN 8800

If need Huawei OSN 8800 service board like TTX, TQX, 100G line board TN54NS4..., you can contact sales@thunder-link for inquiry.

What is the temperature limit of optical patchcords on a Huawei OSN3500?

One of our Customer has Huawei OSN3500 equipment at the container. Inside 

container there are warm, but in the holl of container in the winter can be very 

cold.  Customer wants to know temperature limit (low and high temperature 

restrictions) of Huawei optical patchcords (2mm diameter) to set ODF in

 the container's hall.

Operating temperature range:-40℃ to +75℃
Storing temperature range:-45℃ to +85℃

Thunder-link.com is a Huawei SDH/DWM OLT/ONT Switch/Router Supplier and Solution provider, with professional technical support team.

How to collect dump on PON port of MA5600T by tftp?

Please follow belowsteps:

MA5680T(config)#acl 4000

// create the ACL

MA5680T(config-acl-link-4000)#rule 1 permit

MA5680T(config)#diag

MA5680T(diagnose)#su

// enter su mode

MA5680T(su)%ckup-server debug primary 80.73.64.23 tftp

// tftp server ip , for example: 80.73.64.23

MA5680T(su)%ture item 1 inbound link-group 4000 rule 1 port 0/1/3

// direction can be: inbound / outboun / bidirection

// PON port, for example: 0/0/0

MA5680T(su)%ture start -c 1000

// count of collected packets, for example: 1000, in attach such case

// If set count of packets more then need, capturing can be stop by command:

MA5680T(su)%ture stop

If you have any other questions about Huawei OLT/ONT, you can contact supports@thunder-link.com.

What are the Functions and Features of Main Control Card EH1D2SRUC000 on Huawei S9700 Switch?

Main Control Card EH1D2SRUC000 integrates control and switching functions and provides the control plane, management plane, and data plane, which are described as follows:

• The control plane is responsible for protocol processing, service processing, route computing, forwarding control, service scheduling, traffic statistics collection, and system security.
• The management plane is responsible for system status monitoring, environment monitoring, log and alarm processing, system software loading, and system upgrades.
• The data plane provides high-speed, non-blocking data channels to implement service switching between service modules.

The EH1D2SRUC000 consists of the following modules:

• Control module: provides the control and management plane for the EH1D2SRUC000 and the entire system, implementing protocol processing, route computing, forwarding control, system management, and system security.
• Switching module: provides the data plane and high-speed service channels for service switching.
• Local clock module: provides working clock for chips of the control module, switching module, and device management and monitoring module.
• Device management and monitoring module: provides a controller area network bus (CAN Bus) module to monitor the EH1D2SRUC000 and manage the CAN Bus modules of LPUs.
• Power supply module: provides power for the EH1D2SRUC000.
• Apply to Huawei S9706/S9712 Switch

Table 1 describes the functions and features of the EH1D2SRUC000.

Table 1 Functions and features of the EH1D2SRUC000

Function and Feature	Description
Basic functions	The EH1D2SRUC000 is the system control and management unit for the S9712 and S9706. It integrates the main control unit, clock unit, switching unit, and system maintenance unit.
Distributed forwarding	Performs concurrent data forwarding using a distributed data plane.
CF card	512 MB by default, expandable to 1 GB or 2 GB By default, the system configuration data, startup files, system software package, and system logs are saved to the CF card.
CSS	The EH1D2SRUC000 can have EH1D2VS08000 installed to provide the CSS service.
Clock	The EH1D2SRUC000 can have LE0D00CKMA00 installed to provide stratum-3 clock, synchronous Ethernet functions.
Redundancy backup	Supported Main control board is mandatory for switches. Each switch must be configured with one or two main control boards. When one main control board is configured for a switch, the main control board can be installed in either main control board slot of the switch. When two main control boards are configured, the two main control boards work in hot standby mode to improve reliability of the switch. The active and standby main control boards monitor the status of each other. If the active main control board fails, the standby main control board automatically becomes active to ensure uninterrupted services.
Hot swap	The EH1D2SRUC000 is hot swappable. Before removing the active EH1D2SRUC000 card, perform an active/standby switchover.