Huawei SmartAX MA5603T Configuration Manual page 942

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
l
Issue 01 (2014-04-30)
IP address anti-spoofing can be enabled or disabled at three levels: global, VLAN,
and service port levels. This function takes effect only after it is enabled at the three
levels. Among the three levels, IP address anti-spoofing is disabled only at the global
level by default.
1. In global config mode, run the security anti-ipspoofing enable command to
enable IP address anti-spoofing at the global level.
2. In VLAN service profile mode, run the security anti-ipspoofing enable
command to enable IP address anti-spoofing at the VLAN level.
3. Run the security anti-ipspoofing service-port serviceport-id enable command
to enable IP address anti-spoofing at the service port level.
Configure service security.
– Enable Dynamic Host Configuration Protocol (DHCP) Option 82 on both the OLT
and ONUs. This configuration is recommended for the DHCP-based Internet access
service.
1. Enable DHCP Option 82 on both the OLT and ONUs.
DHCP Option 82 can be enabled or disabled at four levels: global, port, VLAN,
and service port levels. This function takes effect only after it is enabled at the
four levels. Among the four levels, DHCP Option 82 is disabled only at the global
level by default.
– The global level: In global config mode, run the dhcp option82 command to
enable DHCP Option 82 at the global level.
When you run this command, select the enable, forward, or rebuild
parameter based on site requirements. The three parameters can all enable
DHCP Option 82 but provide different packet processing policies on the OLT.
For details, see the dhcp option82 command.
– The port level: In global config mode, run the dhcp option82 port or dhcp
option82 board command to enable DHCP Option 82 at the port level.
– The VLAN level:
a. In global config mode, run the vlan service-profile command to create
a VLAN service profile.
b. Run the dhcp option82 enable command to enable DHCP Option 82 at
the VLAN level.
c. Run the commit command to make the profile configuration take effect.
d. Run the quit command to quit the VLAN service profile mode.
e. Run the vlan bind service-profile command to bind the created VLAN
service profile to a VLAN.
– The service port level: In global config mode, run the dhcp option82 service-
port command to enable DHCP Option 82 at the service port level.
2. On the OLT, run the dhcp-option82 permit-forwarding service-port command
with the enable parameter selected, to allow ONU DHCP packets to carry Option
82 information.
– Enable Policy Information Transfer Protocol (PITP) on both the OLT and ONUs. This
configuration is recommended for the PPPoE-based Internet access service.
1. Enable PITP on both the OLT and ONUs.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
11 FTTB and FTTC Solution Configuration
917