Step 2
Create an SVLAN 300.
huawei(config)#
vlan 300 smart
Step 3
Add upstream port 0/0/1 to the SVLAN.
huawei(config)#
port vlan 300 0/0 1
Step 4
Configure a traffic profile.
Configure traffic profile 8. The upstream and downstream rates are not limited. Packets
transmitted upstream use the priority (4 by default) copied from the user side. Packets transmitted
downstream use the priority carried by themselves.
huawei(config)#
traffic table ip index 8 cir off priority user-cos 4 priority-policy
tag-in-package
Step 5
Add a service port.
Add a service port and bind it to port 0/3/1. Set the user VLAN to untagged and bind it to traffic
profile 8.
huawei(config)#
service-port vlan 300 eth 0/3/1 multi-service user-vlan
untagged rx-cttr 8 tx-cttr 8
NOTE
Packets sent from the user side (IP PBX) may be transmitted upstream with a VLAN tag. In this case, change
untagged
to the VLAN tag when configuring a service port.
----End
13.3.3.7 Configuring Congestion Control and Security Policies
This topic describes how to configure global priority-based scheduling policies for queues to
ensure service reliability and configure global security policies to ensure service security.
Context
Congestion control uses queue scheduling technology to map packets sent from the same port
into multiple queues and process packets in each queue based on priority. Congestion control is
recommended.
Security policies cover system security, user security, and service security, which ensure normal
running of services.
NOTE
Enable security features based on service types. For details, see
13.2.5 Principle of Security Data Plan
Procedure
l
Configure queue scheduling.
Based on
13.2.3 Principle of QoS Data Plan
, all packets use strict priorities for queue
scheduling and are mapped to queues based on priorities.
huawei(config)#
queue-scheduler strict-priority
huawei(config)#
cos-queue-map cos0 0 cos1 1 cos2 2 cos3 3 cos4 4 cos5 5 cos6 6
cos7 7
//System default
l
Configure system security.
–
Enable deny of service (DoS) anti-attack on both the OLT and optical network units
(ONUs).
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
13 FTTO Configuration (Large-sized Enterprise Access)
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1306