How do I prevent rogue devices from connecting to my Huawei ONT's Wi-Fi？

Huawei EchoLife ONT include HG8010, HG8010H, HG8045, HG8045A, HG8240, HG8240H, HG8240T, HG8240W, HG8245, HG8245H, HG8245Q, HG8245T, HG8247, HG8247H, and router etc.

HG8010, HG8010H, HG8240, HG8240H, HG8240T, HG8240W are bridging ONTs and do not have the Wi-Fi function.You need to perform on the connected router, consult the router vendor or the carrier service hotline.

For Huawei ONTs with Wi-Fi functions, such as HG8045, HG8045A, HG8245, HG8245H, HG8245Q, HG8245T, HG8247 and HG8247H, perform the following steps:

1. Exercise caution when using software to access Wi-Fi without permission. Such software uploads a user's Wi-Fi network information without notification. Another user can find this Wi-Fi network name, obtain the Wi-Fi network key from the software server through a 3G or 4G network, and access this Wi-Fi network without permission.
2. Check whether encryption has been performed for the Wi-Fi network. Specifically, log in to the ONT web page. On the main menu, choose WLAN > 2.4G/5G Basic Network Settings. In WPA PreSharedKey , do not select Hide. .
3. Check whether the Wi-Fi password is too simple to be cracked. You are advised to set Authentication Mode to WPA-PSK/WPA2-PSK. Configure and record a password with high security level, for example, a password containing digits, uppercase letters, lowercase letters, and special characters. This prevents password cracking.

   The following figure shows the details.

   
   
   
   
   
   
   

4. By configuring MAC address filtering, you can allow only permitted devices (whitelist) to access the network, and prevent rogue devices (blacklist) from accessing the network.

Note: For some ONTs, you can configure a Wi-Fi password after choosing Advanced Configuration > WLAN > 2.4G/5G Basic Network Settings. on the ONT web page.

How to check of Battery on Huawei MA5683T?

It is recommended that you check the status of Huawei MA5683T battery once every year. This operation ensures that the power supply system can automatically switch to the battery in the case that the AC power supply is cut off. In this manner, the running of services is not affected.

Tools, Instruments, and Materials

• An adjustable wrench: Used to fasten screws.
• Screwdriver: Is used to unscrew the battery covering piece.

Reference Standard

• The shell of the battery is clean and intact.
• The shell of the battery is intact and free of leakage or distortion. There is no acid fume around the terminals or the safety valve.
• The joints between batteries are firm and free of corrosion.
• The proper spacing between batteries should be at least 10 mm.
• The terminals are not distorted or damaged. Damaged terminals will cause high contact resistance or cause cracks in the battery shell.
• The working temperature of the battery ranges from -20°C to 50°C.
• After the mains supply is disconnected, the cabinet switches to the battery and the power supply is normal.

Procedure

1. Check whether the cleanness of the battery shell, spacing between batteries, connection between the battery terminal and the battery, and ambient temperature meet the requirement in "Reference Standard".
2. If the batteries are faulty, handle the fault according to "Exception Handling" until the fault is rectified.

Exception Handling

• If the shell of the battery is dirty, clean the shell immediately.
• If the shell of the battery leaks or is distorted, replace the battery immediately.
• If the terminal of the battery is distorted or damaged, replace the battery immediately.
• If the spacing between batteries is less than 10 mm, adjust it to a proper spacing.
• If the joints between batteries turn loose or are corroded, fasten or replace the joints according to actual situations.
• If the working temperature of the battery is not within the range of -20°C-50°C, locate the cause that results in the over-temperature of the battery. Then, rectify the fault.
• If the floating charging voltage of the battery is abnormal, it is recommended that you replace the faulty battery.

If you have other question like Huawei ONT OLT configuration, U2000 NMS, you can contact supports@thunder-link.com

How to configure MAC address filtering to prevent unauthorized network access on Huawei ONT?

Question: 
How to configure MAC address filtering to prevent unauthorized network access on Huawei ONT(HG8010H, HG8010Z, HG8012H, HG8040, HG8045A, HG8240, HG8245, HG8247H)?

Answer:
By setting MAC address filtering, you can allow only your own device to access the network (whitelist), or do not allow unauthorized devices to access the network (blacklist), effectively preventing unauthorized network access. Huawei ONTs support MAC address filtering for wired and wireless networks. The following describes the two scenarios respectively.

MAC address filtering on wired networks:
(1) Click Advanced Configuration > Security Configuration tab, and choose MAC Address Filtering in the navigation tree on the left. In the pane on the right, after enabling MAC filter and selecting the filter mode, click New. On the dialog box that is displayed, configure the MAC filter rule for the PC to access the Internet.

How to realize flow qos mode configuration on Huawei MA5680T GPON?

For realize scheme with two flows Huawei MA5680T GPON i create new gpon-line profile with these settings:

ont-lineprofile gpon profile-id 10 profile-name "Flow-Test"
qos-mode flow-car
mapping-mode vlan-priority
tcont 1 dba-profile-id 10
gem add 1 eth tcont 1
gem mapping 1 0 vlan 1001 priority 0
gem mapping 1 1 vlan 1001 priority 5
commit

It means, that we use 1 gemport, but mapping it with different mapping index for priority 0 and 5.

After that we create service port for this gemport and Huawei ONT with unlimited traffic-table index 6 with priority policy Tag-In-Package:

service-port 1 vlan 1001 gpon 0/5/0 ont 1 gemport 1 multi-service user-vlan 1001 tag-transform translate inbound traffic-table index 6 outbound traffic-table index 6

That's all, during test we can see, that flow with priority 5 has superior between flow with 0 priority.

For more questions or inquiry about Huawei OLT/ONT, Switch and Router, please contact Thunder-link.com technical support team.

Configuring an Huawei ONT VAS Profile

Huawei ONT value-added service (VAS) is used to support the function of provisioning the ONT value-added service on the ONT like GE ONT HG8546M, and to set the parameters for the VASs on the ONT, such as the ONT value-added service. Therefore, upgrade the ONT before configuring the VAS for the ONT.

Configuring an ONT VAS Profile

After configuring an ONT VAS profile and binding it to an ONT successfully, you can activate the ONT and directly apply the value-added service defined by the profile to the subscribers of the ONT. Each ONT can be bound to only one value-added service configuration profile.

Context

Value-added service configuration profiles vary with the types of the ONTs and software versions. An ONT value-added service (VAS) profile applies only to a certain ONT type and software version. This section considers Huawei HG8240 profile as an example.

To create a general ONT VAS profile based on existing profiles, right-click, and choose Create General VAS Profile from the shortcut menu.

Procedure

1. Choose Configuration > Access Profile Management (traditional style) from the main menu or select Fix-Network NE Configuration in Application Centerand choose Access Service > Access Profile Management (application style) from the main menu.

2. In the dialog box that is displayed, choose PON Profile > ONT VAS Profile from the navigation tree.

3. Click the ONT VAS Profile tab.

4. In the information list, right-click and choose Add from the shortcut menu.

5. In the dialog box that is displayed, set Profile Name, Vendor ID, Terminal Type, and Version. 

Key Item	Description
Import	Imports the .xml file that contains service configuration data to the configured VAS profile.
Export	Exports the parameters in the configured VAS profile to an .xml file.

6. Click OK.

Result

On the Terminal Reference tab, you can query the ONTs bound to this VAS profile.

Follow-up Procedure

If you want to bind a general ONT VAS profile to an Huawei ONT/ONU, select the right record, right-click, and choose Bind General VAS Profile from the shortcut menu.