Service Security
Security
Vulnerability
Solution
Description and Usage
Suggestion
Unauthorized
broadband access of
small enterprises
(IPoE)
DHCP option 82 is enabled
on OLT and MDU, and the
BRAS implements user
authentication based on the
RAIO information.
In the DHCP option 82 mode, user's
physical location is added to the
option 82 field carried in the DHCP
request packet initiated by a user. The
physical location, used for user
authentication on the upper-layer
authentication server, can help
implement the following functions:
l
The DHCP relay forwards DHCP
response packets to devices with
specified CID and RID.
l
Prevents DHCP address
exhaustion.
l
Achieves static allocation of
DHCP addresses.
l
Implements anti-IP spoofing.
l
Implements anti-user ID spoofing.
l
Implements anti-MAC spoofing.
Use this solution for the DHCP
Internet access service.
Broadband access of
residential users
(PPPoE), user
account theft/
borrowing
PPPoE+ (PITP) is enabled
on OLT and MDU, and the
BRAS implements user
authentication based on
binding of the RAIO
information to the user
account.
The BRAS responds to request
packets of users with specified CID
and RID. In this way, the following
functions are implemented:
l
Prevents IP address exhaustion.
l
Implements anti-IP spoofing.
l
Implements anti-user ID spoofing.
l
Implements anti-MAC spoofing.
Use this solution for the PPPoE
Internet access service.
11.3 Configuring Services in Various FTTB and FTTC
Scenarios (GPON and 10G GPON Access)
This topic describes how to configure the Internet access service, voice service and multicast
service in GPON/10G GPON access mode in FTTB/FTTC networking scenarios.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
11 FTTB and FTTC Solution Configuration
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
856
