3.
Run the
security anti-ipspoofing service-port serviceport-id
enable
command
to enable IP address anti-spoofing at the service port level.
l
Configure service security.
–
Enable Dynamic Host Configuration Protocol (DHCP) Option 82 on the master
subrack. This configuration is recommended for the DHCP-based Internet access
service.
DHCP Option 82 can be enabled or disabled at four levels: global, port, VLAN, and
service port levels. This function takes effect only after it is enabled at the four levels.
Among the four levels, DHCP Option 82 is disabled only at the global level by default.
–
The global level: In global config mode, run the
dhcp option82
command to enable
DHCP Option 82 at the global level.
When you run this command, select the
enable
,
forward
, or
rebuild
parameter
based on site requirements. The three parameters can all enable DHCP Option 82
but provide different packet processing policies on the OLT. For details, see the
dhcp option82
command.
–
The port level: In global config mode, run the
dhcp option82 port
or
dhcp
option82 board
command to enable DHCP Option 82 at the port level.
–
The VLAN level:
1.
In global config mode, run the
vlan service-profile
command to create a
VLAN service profile.
2.
Run the
dhcp option82 enable
command to enable DHCP Option 82 at the
VLAN level.
3.
Run the
commit
command to make the profile configuration take effect.
4.
Run the
quit
command to quit the VLAN service profile mode.
5.
Run the
vlan bind service-profile
command to bind the created VLAN
service profile to a VLAN.
–
The service port level: In global config mode, run the
dhcp option82 service-
port
command to enable DHCP Option 82 at the service port level.
–
Enable Policy Information Transfer Protocol (PITP) on the master subrack. This
configuration is recommended for the PPPoE-based Internet access service.
PITP can be enabled or disabled at four levels: global, port, VLAN, and service port
levels. This function takes effect only after it is enabled at the four levels. Among the
four levels, PITP is disabled only at the global level by default.
–
The global level: In global config mode, run the
pitp enable pmode
,
pitp forward
pmode
, or
pitp rebuild pmode
command to enable PITP at the global level.
In the preceding commands, the
enable
,
forward
, and
rebuild
parameters can all
enable PITP but provide different packet processing policies on the OLT. Select
one of them based on site requirements. For details, see the
pitp
command.
–
The port level: In global config mode, run the
pitp port
or
pitp board
command
to enable PITP at the port level.
–
The VLAN level:
1.
In global config mode, run the
vlan service-profile
command to create a
VLAN service profile.
2.
Run the
pitp enable
command to enable PITP at the VLAN level.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
11 FTTB and FTTC Solution Configuration
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1062