On a fiber to the x (FTTx) network, if the MA5600T/MA5603T/MA5608T provides x digital subscriber line (xDSL) services for broadband users and the users connect to the Internet in Point-to-Point Protocol over Ethernet (PPPoE) dialup mode, you can configure the MA5600T/MA5603T/MA5608T by referring to this topic to provide users with high-speed Internet (HIS) services. The MA5600T/MA5603T/MA5608T functions as an optical network unit (ONU) in this service. PPPoE is a commonly used Internet access mode currently. In this mode, broadband users are authenticated, authorized, and charged in Authentication, Authorization and Accounting (AAA) method.
Service Requirements
- The user accesses the Internet through the PPPoE dialup.
- The user packet goes upstream carrying two VLAN tags. The outer VLAN tag identifies the service and the inner VLAN tag identifies the user. The service of each user is identified by unique S-VLAN+C-VLAN, that is, this is a 1:1 access scenario.
- A traffic profile is adopted for rate limitation. The user access rate is 2048 kbit/s.
- To ensure reliability, dual GE ports are adopted for upstream transmission, and link aggregation is configured for the two upstream ports.
Figure 1 shows an example network of the xDSL Internet access service through the PPPoE dialup.
Prerequisite
- The AAA function must be configured.
- To enable the AAA function on the device, see Configuring the Local AAA.
- If the AAA function is implemented by the BRAS, a connection to the BRAS must be established. The BRAS should be capable of identifying the VLAN tag of the MA5600T/MA5603T/MA5608T in the upstream direction. For the identification purpose, the user name and password for dial-up Internet access must be configured on the BRAS.
Procedure
- Configure a VLAN.
Configure S-VLAN 50 with the stacking attribute. The user packet goes upstream carrying two VLAN tags. The outer VLAN tag identifies the service and the inner VLAN tag identifies the user. The service of each user is identified by unique S-VLAN+C-VLAN, and the VLAN forwarding mode is the S-VLAN+C-VLAN mode.
huawei(config)#vlan 50 smart huawei(config)#vlan attrib 50 stacking huawei(config)#vlan forwarding 50 vlan-connect
- Configure upstream ports.
Add upstream ports 0/19/0 and 0/19/1 to VLAN 50. Two ports are added for the purpose of port aggregation.
huawei(config)#port vlan 50 0/19 0 huawei(config)#port vlan 50 0/19 1
To aggregate the two upstream ports as one aggregation group, set the packet forwarding mode of the aggregation group to egress-ingress, and set the aggregation group to work in the LACP static mode, do as follows:
huawei(config)#link-aggregation 0/19 0 0/19 1 egress-ingress workmode lacp-static
NOTE:The aggregated ports must meet the following requirements: The ports must work in the full-duplex mode; the port rates must be the same and the rate of an electrical port must not be of the auto-negotiation type; the attributes of the ports, such as the default VLAN ID (PVID) and VLAN, must be the same; one port can belong to only one aggregation group; the port must not be a mirroring destination port; the port must not be in the auto-negotiation mode; the start port ID must be smaller than the end port ID.
- In the ADSL access mode, follow this procedure.
- In the SHDSL access mode, follow this procedure.
- In the VDSL access mode, follow this procedure.
In this example, the VDSL normal mode is used as an example.
- Configure the user account security.
The PITP P mode can be enabled to protect the user account against theft and roaming. The RAIO mode can be customized according to actual requirements. The encoding format required by China Telecom is considered as an example. The encoding format required by China Telecom is a customized format, corresponding to the cntel option.
huawei(config)#pitp enable pmode huawei(config)#raio-mode cntel pitp-pmode
NOTE:For details about the PITP configuration for the user account security, see Configuring Anti-theft and Roaming of User Accounts Using PITP. - Save the data.
huawei(config)#save
Verification
- Dialing verification on the user side:
- Step 1: Configure the user name and password for the dialup on the modem (the user name and password must be the same as those configured on the BRAS).
- Step 2: Dial up on the PC by using the PPPoE dialup software. After the dialup is successful, the user can access the Internet.
- Step 3: When FTP is used to download files, after the dialup is performed on the PPPoE dialup software, the PPPoE dialup software prompts that the dialup is successful. Then, the PC can access the Internet in the PPPoE mode.
- Step 4: When downloading files through FTP, you can open Task Manager in Windows and click Networking to check the link speed. Then, you can calculate the Internet access rate by the following formula: Attainable Internet access rate = Computer network adapter rate/48 x 53 x 8. The calculation result approximates to the planned 2048 kbit/s.
- Remote emulation dialing verification:
- Step 1: On the MA5600T/MA5603T/MA5608T, run the pppoe simulate start command to start the PPPoE emulation dialer (the entered user name, password, and authentication mode must be the same as those configured on the BRAS).
- Step 2: Run the display pppoe simulate info command to query status of PPPoE emulation dialing. If the PPPoE emulation dialing result is success, that is, simulating interaction between the user and the BRAS is successful, the user can access the Internet in the PPPoE access mode.
- After the emulation verification is completed, run the pppoe simulate stop command to stop the PPPoE emulation dialing task initiated by the user.
Configuration File
Configuration File in the ADSL access mode:
vlan 50 smart vlan attrib 50 stacking vlan forwarding 50 vlan-connect port vlan 50 0/19 0 port vlan 50 0/19 1 link-aggregation 0/19 0 0/19 1 egress-ingress workmode lacp-static interface adsl 0/2 deactivate 0 activate 0 profile-index 1 alarm-config 0 1 quit service-port 1 vlan 50 adsl 0/2/0 vpi 1 vci 39 inbound traffic-table index 5 outbound traffic-table index 5 service-port desc 1 description Vlanid:50/adsl/vpi:1vci:39/stacking stacking label service-port 1 10 stacking inner-priority service-port 1 4 pitp enable pmode raio-mode cntel pitp-pmode save
Configuration File in the SHDSL access mode:
vlan 50 smart vlan attrib 50 stacking vlan forwarding 50 vlan-connect port vlan 50 0/19 0 port vlan 50 0/19 1 link-aggregation 0/19 0 0/19 1 egress-ingress workmode lacp-static shdsl line-profile quickadd 3 ptm rate 512 2048 interface shl 0/3 deactivate 1 activate 1 3 alarm-config 1 1 quit service-port 2 vlan 50 shdsl mode ptm 0/3/1 inbound traffic-table index 5 outbound traffic-table index 5 service-port desc 2 description Vlanid:50/shdsl/vpi:1vci:39/stacking stacking label service-port 2 10 stacking inner-priority service-port 2 4 pitp enable pmode raio-mode cntel pitp-pmode save
Configuration File in the VDSL access mode:
vlan 50 smart vlan attrib 50 stacking vlan forwarding 50 vlan-connect port vlan 50 0/19 0 port vlan 50 0/19 1 link-aggregation 0/19 0 0/19 1 egress-ingress workmode lacp-static vdsl line-profile quickadd 3 snr 60 0 300 60 0 300 vdsl channel-profile quickadd 3 path-mode ptm interleaved-delay 8 2 inp 4 2 rate 128 10000 128 10000 2048 2048 interface vdsl 0/4 deactivate 1 activate 1 template-index 3 alarm-config 1 1 quit service-port 3 vlan 50 vdsl mode ptm 0/4/1 inbound traffic-table index 5 outbound traffic-table index 5 service-port desc 3 description Vlanid:50/vdsl/vpi:1vci:39/stacking stacking label service-port 3 10 stacking inner-priority service-port 3 4 stacking inner-priority service-port 2 4 pitp enable pmode raio-mode cntel pitp-pmode save




















