corecess intensive course_daimler0404

127
CORECESS Inc. http://www.corecess.com CORECESS Intensive Course April, 2008

Upload: forseil

Post on 30-Nov-2015

49 views

Category:

Documents


6 download

TRANSCRIPT

Page 1: Corecess Intensive Course_daimler0404

CORECESS Inc.http://www.corecess.com

CORECESS Intensive Course

April, 2008

Page 2: Corecess Intensive Course_daimler0404

Your Success is Corecess2

Simply Connecting the World

2

Table of Contents

GEPON Overview

WDM-PON Overview

Introduction Corecess Products

Solution & Application

Hardware Architecture

Key Features of Solutions

Configuring S5

Maintenance & Trouble Shooting

Page 3: Corecess Intensive Course_daimler0404

Your Success is Corecess3

To understand the important fundamental conceptof opitical fiber network

To understand GEPON & WDM PON network componentsand their functions

To be able to carry out ordinary day to day operation and maintenance

Purpose of CIC

Page 4: Corecess Intensive Course_daimler0404

Your Success is Corecess4

Training Schedule

Page 5: Corecess Intensive Course_daimler0404

Your Success is Corecess5

Simply Connecting the World

5

GEPON Overview

Page 6: Corecess Intensive Course_daimler0404

Your Success is Corecess6

GEPON Overview

Gigabit Ethernet Passive Optical Network

Point-to-Multipoint, MPCPUsing Unpowered Optical Splitters (RN:Remote Node)Single Feeder Fiber (One strand of Fiber) to serve multiple Premises (32 or 64)Downstream Packets are broadcastUpstream Packets are combined using a multiple accessprotocol, Time Division Multiple Access (TDMA)OLTs (Optical Line Termination) “Range” ONUs (OpticalNetwork Unit)Static & Dynamic Bandwidth AllocationLogical Link IDBurst Mode TransmissionEncryption

Page 7: Corecess Intensive Course_daimler0404

Your Success is Corecess7

GEPON Overview

Downstram

Physical broadcast of 802.3 Frames802.3 Frames extracted by Logical Link ID in Preamble64 byte GATE messages sent downstream to assign bandwidth

OLT ONU 2 USER 2

ONU 1

USER 3ONU 3

USER 1

1 3 1 2 1 3 1 2

13

12

13

12

1 1

2

3

header Payload FCS

802.3 frame

Page 8: Corecess Intensive Course_daimler0404

Your Success is Corecess8

GEPON Overview

Upstream

Upstream control managed by MPCP protocolTime slots contains multiple 802.3 Ethernet frames64 byte REPORT Message sends ONU state to OLTNo collisionsNo packet fragmentationDBA controls granting

OLT ONU 2 USER 2

ONU 1

USER 3ONU 3

USER 1

2

33 3

1 1

33

3

2

11

1 1 2 3 3 3

header Payload FCS

802.3 frame

time slot

Page 9: Corecess Intensive Course_daimler0404

Your Success is Corecess9

Simply Connecting the World

9

WDM-PON Overview

Page 10: Corecess Intensive Course_daimler0404

Your Success is Corecess10

WDM PON Overview

Wavelegth Division Multiplex PON

Economic Colorless WDM PONRSOA (Reflective Semiconductor Optical Amplifier)Link employs 16 Wavelength Channels in the C-bandThin-Film Filter (TFF)

Page 11: Corecess Intensive Course_daimler0404

Your Success is Corecess11

WDM PON Overview

Optical Link Structure

Page 12: Corecess Intensive Course_daimler0404

Your Success is Corecess12

WDM PON Overview

Wavelength Plan

Link employs 16 Wavelength Channels in the C-band(1530 nm to 1560 nm) both for Upstream and Downstreamtransmission

Page 13: Corecess Intensive Course_daimler0404

Your Success is Corecess13

WDM PON Overview

Fiber Loss

It is assumed that the maximum loss of the 20km fiberreach is 10 dBThis 10 dB dynamic range is calculated by summing the normal single-mode fiber loss in the C-band and the fiber connection loss

Max. loss of the 20km fiber = (0.3dB/km x 20km) + (fiber connection & splicing loss of 4dB)

Page 14: Corecess Intensive Course_daimler0404

Your Success is Corecess14

Simply Connecting the World

14

Corecess Products

Products Overview & Highlights

S-Series OLT Products

L1 Broadband Light Source

R-Series ONU/Remote Node Products

ONT & CPE Products

Field Passives & OSP Products

EMS

Page 15: Corecess Intensive Course_daimler0404

Your Success is Corecess15

S5 Platform L3 gigabit switch based OLT providing GbE, GEPON & WDM PON

64 ports GbE / GEPON with 4 GbE and 2x10GbE uplink

S1 PlatformDual port GEPON OLT, Temperature Hardened

2 ports GEPON with 2 GbE uplink

L1 Seed Light Source4 ports WDM light source

R1 Series1 RU box type remote access

24 ports, 100M Tx, Fx, VDSL2, ADSL2+

Various Optional Slots

ONTIndoor or outdoor type customer premise equipment for data or TPS

EMS

RN OSPPassive WDM DeMux, Splitters

Products Overview

Page 16: Corecess Intensive Course_daimler0404

Your Success is Corecess16

S518 Platform- 12 RU- 2 SCM & 16 LIM- Built-in DC support- GbE, GEPON

S506 Platform- 4 RU- 1 SCM & 4 LIM- 2 Power slots (AC or DC)- GbE, GEPON

High performance L3 Gigabit Ethernet SwitchETSI Compliant form factor in 600x300(mm)Full Front Cabling SupportScalable & upgradeable

S511 Platform- 7 RU- 2 SCM & 8LIM- 3 Power slots (AC or DC)- GbE, GEPON & WDM PON

S5 Platform OLT Line-Up

Page 17: Corecess Intensive Course_daimler0404

Your Success is Corecess17

2 SCM, 16 LIM slotsBuilt-in DC12 RU, ETSI compliant form factorFull front access

SCM 72GNon-blocking 72G throughput2 ports 10GbE + 4 ports GbE for uplinkFull layer 3 capability

LIM-D8GF8 ports GbE 1000BaseFX SFP LIM

LIM-EP4G4 ports GEPON 1000BasePX SFP LIM

S518 Platform

Page 18: Corecess Intensive Course_daimler0404

Your Success is Corecess18

LIM-EP8G-2.58 ports GEPON/4 ports 2.5G EPON SFP LIMAvailable Q2,2008

LIM-D8GT8 ports 10/100/1000Base TX LIM

LIM-GW16GF16 GbE WDM-PON LIMDouble slot Redundant Seed light input

2 SCM, 8 LIM slots3 power slots (AC or DC, 2:1 protection)7 RU, ETSI compliant form factorFull front access

LIM-D8GF8 ports 1000BaseFX SFP LIM

SCM 72GNon-blocking 72G throughput2*10GbE(4*1G TX) + 4*1GbE for uplinkFull layer 3 capability

S511 Platform

Page 19: Corecess Intensive Course_daimler0404

Your Success is Corecess19

Supports QoS management and multicast routingPacket classification and markingClass - based packet schedulingSLA using multiple LLID with GEPONPIM-SM, PIM-DM and DVMRPIGMP & IGMP snoop

High reliability and availabilityRedundant Power, SCM, Uplink, GEPON/GbE line linkS/W & H/W upgradeable without service discontinuity

Patent pending network protection technologySecured network from bad users’ threatsProtection from IP/ARP spoofing, packet storming & TCP sync flooding

S511 Platform Features

Page 20: Corecess Intensive Course_daimler0404

Your Success is Corecess20

Number of WDM channel : 16 channelNumber of WDM ports: 1 PortNumber of subscriber ports per LIM : 16 portMaximum data rate : 16 GbpsWDM Center Wavelength : ITU-T CH23~53, 200GHz Spacing ,

CH23= 1558.98nm, CH53=1535.04nmWDN-PON Optical link port connector : 1 SC/APCSeed light source input connector : 2 SC/APC (with redundancy)Connector location : All front accessTemperature range: -20℃ ~ 60℃

S5 LIM-GW16GF

Page 21: Corecess Intensive Course_daimler0404

Your Success is Corecess21

RSOA

BMRx

CN

TL

S5 OLT TRx

RSOA

BMRx

CN

TL

WMUX

WDMUX

2 3

RSOA

Rx

CN

TL

ONU TRx

RN

Circulator1

2 3

GW16GF

1

23

16 channelONT TRx

WMUX

3db coupler

λ1

λ1

λ16

λ1

λ16

1

λ16

Λ1, Λ2,,,, Λ16,

L1-SLS16L1-SLS16

Λ1, Λ2 Λ3,,,,…… Λ16,Λ1, Λ2 Λ3,,,,…… Λ16,

Λ1, Λ2 Λ3,,,,…… Λ16,

GW16GF Operation Scheme

Page 22: Corecess Intensive Course_daimler0404

Your Success is Corecess22

Seed Light Source4 ports Seed Light Source outputC-Band 200GHz SpacingManagement console port & Ethernet portFits into 19” 1.5 RURedundant power (DC or AC)Operating Temperature: 0 ~ 50℃

POWER SLS output (4 ports) POWER

Console Ethernet portfor

Management

L1-SLS16 Seed Light Source

Page 23: Corecess Intensive Course_daimler0404

Your Success is Corecess23

WDM RNLow insertion loss Thin Film Filter: < 4dB ILPassive device16 Channel supportC-band: From 1535.xx to 1559.xx

WDM PON RNs

Page 24: Corecess Intensive Course_daimler0404

Your Success is Corecess24

Media Converter ( GW-PON to Gigabit Ethernet)GW-PON 2 port , Gigabit Ethenet FX 2 portS1-uOLT System Slide-in module DC 3.3V through S1-uOLT System power moduleDimension (H x W x D, mm):

Corecess 3702W : 41.3 x 133.8 x 150Fiber Optic Connector SPECS

WDM PON portSupporting 1.25Gbps & Operation Within wavelength range from 1530nm to 1560nm(C-band)Fiber pigtailed SC-APC duplexClass A(10Km) & ClassB(20Km)

1000Base-LX SFP port1310nm Single Mode Fiber Up to 40Km

Operating Temperature: -40 ~ 65℃

3702W

Page 25: Corecess Intensive Course_daimler0404

Your Success is Corecess25

Media Converter ( GW-PON to Gigabit Ethernet)GW-PON 1 port , Gigabit Ethenet FX and 1000baseTX comboStand-alone type Supporting 1.25GbpsDC 5V/2A through external adapter Auto-negotiation (IEEE802.3u)Auto-media detect Copper & FiberDimension (H x W x D, mm) : 35 x 160 x 160Fiber Optic Connector SPECS

WDM PON portSupporting 1.25Gbps & Operation Within wavelength range from 1530nm to 1560nm(C-band)Fiber pigtailed SC-APC duplexClass A(10Km) & ClassB(20Km)

1000Base-LX SFP port1310nm Single Mode Fiber Up to 40Km

RJ45 port( 3701W only)Operating Temperature: -40 ~ 50℃

3701W

Page 26: Corecess Intensive Course_daimler0404

Your Success is Corecess26

Temperature hardened Dual port GEPON OLTTwo port GbE for network & Two port GEPON for subscriberUplink connection span reaches up to 80km with commercial single core GbE SFP optical moduleIn-band managementFits into 19” 1RU with power and splitter/WDM media converterPower : DC, AC, HFC feeding DC power unitOperating Temperature: -40 ~ 65℃

POWER Unit

S102 uOLT Dual 1x4/1x8 splitter

GEPON GbE 3702 WDM media converter

S102 GEPON uOLT

Page 27: Corecess Intensive Course_daimler0404

Your Success is Corecess27

POWERUnit

S102 uOLT

3702WWDM media converter

3.3V

WDM GbE from/ to S518(SC/APC)

GEPON [1]GEPON [2] GbE [1] GbE [2]

Native GbE(LC/2 core)

GEPON signal(SC/PC)

GEPON

Uplink of S1 with WDM PON

Page 28: Corecess Intensive Course_daimler0404

Your Success is Corecess28

R1 is a series of 1RU fixed configuration type productSeparate product for 100BaseTX & 100BaseFX Ethernet, VDSL2, ADSL2+Provides high speed and reliable fiber base transport in an optional slot : GbE, GEPON and WDM PONProvides flexible role out configurations from single unit to mid-capacity stacking (through 10/100/1000Base-T cascading)Remote management and provisioning capabilitiesFull front cabling

Temperature hardened – operating -40 ~ 65℃

R1-AD ADSL2+ IPDSLAM- 48/24 ports ADSL2+

R1P-SW L2/3 switch- 24 port 10/100Base-TX

R1P- VD VDSL2 DSLAM- 24/16 ports VDSL2

R1 Series ONU

Page 29: Corecess Intensive Course_daimler0404

Your Success is Corecess29

User Ports24 RJ45 Connectors for R1-SW24 TX Switch24 SFP Connectors for R1-SW24 FX Switch2 RJ21 Connectors for R1- VD24/16 VDSL2 DSLAM2 RJ21 Connectors for R1- AD48/24 ADSL2+ IPDSLAM

Uplink Ports (Optional)

Two port 1000BaseFX/SFP & 10/100/1000BaseTX/RJ45 COMBO

One port 1000BasePX-10U GEPON & One port 1000BaseFX/SFP & 10/100/1000BaseTX/RJ45 COMBO

One port Gigabit WDM PON

F.GUplink/Cascade

10/100/1000Base-TX

Console

LED LINK/ACT

LED RUN

100Base-TX Line

Optional uplink slotPower Inlet

R1 ONU Port Configuration

Page 30: Corecess Intensive Course_daimler0404

Your Success is Corecess30

Network Interface User Interface VoIP WLAN

DataFeatures

DeploymentOperating

Temperature

3251 VDSL2 1 FE Tx No No Desk-top 0 ~ 50 ℃

3700 series WDM PON1 GbE Tx, SFP combo2 GbE SFP

No No Media converter Desk-top

0 ~ 50 ℃-40 ~ 65 ℃

3800 series GEPON1 GbE & 1 FE Tx,4FE Tx

No No L2 Features Desk-top 0 ~ 50 ℃

3900 series

FE, GbE,GEPON,WDM PON,VDSL2

4 FE Tx 2 CH OptionalL2 Features/NAT/Firewall

Desk-top/Wall/Out-door

0 ~ 50 ℃(Desk-top)-40 ~ 65 ℃(Wall/Out-door)

Corecess 3804TN- 1 port 1000BasePX-10U or -20U

GEPON- 4 ports 10/100Base-TX

GEPON ONT

Corecess 3942 withOutdoor enclosureGateway ONT

Corecess 3251- 1 port VDSL2- 1 port 10/100Base-Tx

VDSL2 Modem

ONT & CPE Products

Page 31: Corecess Intensive Course_daimler0404

Your Success is Corecess31

TPS enabled home gateway with common user interfaces of 4 100BaseTX, 2 VOIP and wi-fi Separate products with network interface of 100BaseTX & 100BaseFX(combo type), VDSL2 and GEPON( optional video overlay)Key features

Network function with Tagged VLAN and NATMulticast function with IGMP snoopQoS function with priority, BW control and schedulingSubscriber management with DHCP, PPPoE and 802.1x authentication

Remote management and provisioning capabilitiesDesk top and wall mountableIndoor type and outdoor type with enclosure

RF VideoGEPON

VOIP100BaseTX

VDSL

100BaseTX or FX

CC3900 Residential Gateway

Page 32: Corecess Intensive Course_daimler0404

Your Success is Corecess32

Optical Devices

Attenuation between OLT and ONT

Max. Loss 27dB between OLT and ONT (Standards)Internal line Reflex loss Min 40dB (Standards)Line Distance Maximum 20kmBy clarifying IEEE802.3ah, Max. Loss of 10km Link is21dB(Reference)

Page 33: Corecess Intensive Course_daimler0404

Your Success is Corecess33

Optical Devices

Splitter

Characteristics Unit Criterion 1:4 1:8 1:16 1:32

1*N Insertion Loss Max dB <0.8+3.4log2(N) <7.3 <10.7 <13.9 <17.2

When configuring multiple split, it need to consider loss by increasing Joint node.Need to check bandwidth on each splitter.Configure not to be total loss over 27dB.

Page 34: Corecess Intensive Course_daimler0404

Your Success is Corecess34

Optical Devices

Cable Assemblies

GEPON OLT SFP Adapter

GbE BidirectionalSFP Adapter

SC/PC Connector SC/APC Connector LC Connector

SC/APC AdapterSC/PC Adapter

Page 35: Corecess Intensive Course_daimler0404

Your Success is Corecess35

SNMP API

NodeDiscover

NodeMonitor

BasicTraffic

Monitor

EMSLauncher

TopologyViewer

Tree View

Tool ManagerMisc. Tools

Manager

PerformanceManager

SoftwareUpdate Utility

MIB Browser MIB Parser

Network Tools

SNMP Tools

FaultManager

EquipmentManagement

Systems

FX5400SeriesFX5400

SeriesFX5400SeriesFX5400

SeriesS5 OLTR1 ONU

Corecess North Bound Interface (JAVA API, XML Server)

OSSUpper NMS

DB

ViewlinX

Corecess NBI

Service/BusinessLevel

S5 OLT R1 ONUNEs

Corecess ViewlinX NMS

Page 36: Corecess Intensive Course_daimler0404

Your Success is Corecess36

Fault ManagementAlarm (Trap: System, Module, Port, Subscriber, Environment) report with Sound and LEDAlarm history management

Configuration ManagementConfigurations by GUI instead of CLI per each type of Equipment

Performance ManagementStatistics per interface, port, VLAN with display methods of Graph and tableEvery 5 min, 15 min, 1 day, 1 week, 1 month, 1 year

Access security ManagementLogin password, User grade (Admin, RO, RW) management

Service Profile ManagementBatch configuration for bulk configuration

File managementRemote Software upgrade, Configuration backup/restore

ViewlinX Key Features

Page 37: Corecess Intensive Course_daimler0404

Your Success is Corecess37

Corecess S5

IP Core

Edge Node

RN

Corecess R1

Corecess R1

Telnet/SNMP C:\> telnet 192.168.10.1...localhost# control terminalLocalhost(config)#...Localhost(config)# endLocalhost# exit

C:\> telnet 192.168.10.2...localhost# control terminalLocalhost(config)#...Localhost(config)# endLocalhost# exit

Corecess Stacking Group

Stacking Master

Master is a Centralized Point for Managing the Stacking Group.

• Single IP Address for a whole group

• Community-based Node Approach

• Graphical Node Management with ViewlinX NMS/EMS

losangeles-001

irvine-010-CA

Simplified Node Management-CoreStacking

Page 38: Corecess Intensive Course_daimler0404

Your Success is Corecess38

Corecess North Bound Interface

ONT

CH# 1

SLA 1Gbps

Edge Switch

10Gbpsvlan #1

vlan #4095

….

Edge Switch

Edge Switch

WDM-PON Link Provisioning

* ONT/ONU Provisioning* CPE Provisioning: VLAN, QoS

Switch Provisioning

* VLAN Creation/Removal* WDM-PON Link/VLAN Mapping* Ethernet QoS Provisioning

3rd Party OSS

Provisioning: Java, XML, CORBA

Corecess ViewlinX

Remote Service Provisioning

Page 39: Corecess Intensive Course_daimler0404

Your Success is Corecess39

Simply Connecting the World

39

Solution & Application

Page 40: Corecess Intensive Course_daimler0404

Your Success is Corecess40

IP CORE

S5

Edge Router

Management

PSTNVideo Transport PSTN GW

IP Video GW

GbE or 10GbEIP Aggregation

Network

MxU FTTC

FE

VDSL2

R1

ADSL2+

R1 Series:RT/Building1RU 24 ports

S5 Platform:CO/Hub GbE switchPON OLT

R1

ADSL2+

Single Home FTTN

Street Cabinet

SMB

Home

S5

Enterprise

ONT

GbE, GEPON,

WDM PON

GbEGEPON

RN

RN

ONT

ONT

S1

Long Distance Service Area

ONT ONT

S1 uOLTRT/Node

ONTIndoor/Outdoor (Hardened)

VDSL2

RN

CPE

CPE

CPE

CPE

GEPON

GbE

GbE, GEPON,

WDM PON

Solution Portfolio

Page 41: Corecess Intensive Course_daimler0404

Your Success is Corecess41

S5GbE or 10GbEIP Aggregation

Network

S5 Platform:CO GigE switchGEPON OLT

GEPONSplitter

S1

CC 3800CC 3900

128 UsersUp to 10Km

GEPONSplitter

S1

CC 3800CC 3900

Small Service Area

Long Distance Service Area

Spans upto 80Km

WDM

Gigabit Ethernet

128 UsersUp to 10Km

S102 uOLT Solution

Page 42: Corecess Intensive Course_daimler0404

Your Success is Corecess42

A state-of-the art WDM PON and GEPON technology offers scalability and flexibility for FTTx access network with minimum CapEx & OpEx

High performance L3 switch based OLT provides GbE, GEPON and WDM PONColorless operation of WDM PON

Provides integrated access solution with various ONT and the latest last mile access solution directly coupled to OLT

Ethernet Tx & Fx, VDSL2, ADSL2+

Common platform & solution for both residential and commercial service

Provides remote uOLT solution to extend service coverage and save CapEx for small service area

Solution Highlight

Page 43: Corecess Intensive Course_daimler0404

Your Success is Corecess43

Your Success is Corecess

S511

CO/Hub/Center Single Service AreaBuilding / MDU

Ethernet TX ONU

VDSL2 ONU

100BaseTX

Ethernet FX ONU

RG

100BaseFX

VDSL2GEPON splitter

ADSL2+ ONU

ADSL2+

GEPON

FTTB with GEPONOptical CableUTP CablePOTS Line

Internet

VoIP

IPTV

Home/SMB

GEPON splitterGEPON uOLT

GEPON

remote service area

1 GbE

Page 44: Corecess Intensive Course_daimler0404

Your Success is Corecess44

Your Success is Corecess

L1 SLS

CO/Hub/Center

WDMFilter

WDM PON ONT

Ethernet TX ONU

VDSL2 ONU

100BaseTX

Ethernet FX ONU

GEPON splitter

RG Home/SMB

GEPON uOLT

100BaseFX

VDSL2

GEPON

GbE Corporate

16 x GbE

S511

FTTB with WDM PON

remote service area

Single Service AreaBuilding / MDU

Internet

VoIP

IPTV

Optical CableUTP CablePOTS Line

GEPON splitterGEPON uOLT

GEPON

remote service area

1 GbE

Page 45: Corecess Intensive Course_daimler0404

Your Success is Corecess45

Your Success is Corecess

L1 SLS

CO/Hub/Center

WDMFilter

WDM PON ONT

Ethernet TX ONU

VDSL2 ONU

100BaseTX

Ethernet FX ONU

GEPON splitter

Home/SMB

GEPON uOLT

100BaseFX

VDSL2

GEPON

GbE

Ethernet TX ONU

VDSL2 ONU

100BaseTX

Ethernet FX ONU

RG

100BaseFX

VDSL2GEPON splitter

ADSL2+ ONU

ADSL2+

Corporate

16 x GbE

GEPON

S511

FTTB with WDM & GEPON

RG

remote service area

Single Service AreaBuilding / MDU

Internet

VoIP

IPTV

Page 46: Corecess Intensive Course_daimler0404

Your Success is Corecess46

Your Success is Corecess

CO/Hub/Center Single service area

GEPONSpliter

GEPON splitter

RG

S511

FTTH with GEPON

GEPONSpliter

GEPONSpliter

ONT

Max 64

Home/SMB

Internet

VoIP

IPTV

Page 47: Corecess Intensive Course_daimler0404

Your Success is Corecess47

Your Success is Corecess

L1 SLS

CO/Hub/Center Single service area

WDMFilter

RG

GEPON splitterGEPON uOLT

GEPON

GEPON splitterGEPON uOLT

GEPONremote service area

GEPON splitterGEPON splitter

GEPON splitter

RG

S511

FTTH with WDM & GEPON

Page 48: Corecess Intensive Course_daimler0404

Your Success is Corecess48

Simply Connecting the World

48

Hardware Architecture

Switching & Control Module

Line Card Module

Page 49: Corecess Intensive Course_daimler0404

Your Success is Corecess49

CPU BlockPowerPC 440GP 400MHz (Maker: IBM) used for controller.512Mbytes (266MHz DDR SDRAM, SO-DIMM type) Main memory.

Carrier Block128Mbytes (Compact Flash) non-volatile memory used for containing OS code as well as configuration.32 or 128Kbytes (FRAM) Log memory.

Switch chipset Block72 GE : BCM56502 – BCM56504 –BCM56504,

Three chips connected with 2HiGig+ each other

Backplane Interface64 Gigabit Ethernet SerDes Interface when 72 GE

Uplink InterfaceBasically support 4 Optic Module: Pluggable Type (SFP)Optionally support 4 port 1000BaseT Gigabit Ethernet : S5-UIM-4GTX PBAOptionally support 2 port 10Gigabit Ethernet XFP:

S5-UIM-2XGF PBAIPC Interface

18 Fast Ethernet Switch = 16 LIM + 1 CPU + 1 Other SCM

SCI (when Non-CPU built-in LIM)LEDs

RUN, MASTER, Ethernet Console Link/Act,

4 Uplink Link/Act IPC InterfaceOS

Linux

Overview SCM-B72G

Page 50: Corecess Intensive Course_daimler0404

Your Success is Corecess50

SWITCH

CPU

Memory :SDRAM, CF, ROM

Optional Uplink : UIM-2XGF, UIM-4GTX

Uplink 4GB

Feature SCM-B72G

Page 51: Corecess Intensive Course_daimler0404

Your Success is Corecess51

Board Block Diagram

Power Supply Unit (PSU)

DC-DC 12V-to-2.5V 16A

ZD connectorZD connectorZD connectorZD connectorZ-PACK connector GND

Receptacle

FPGA XC2S200E-

FG456

Compact Flash Region

RTC Region

Ethernet PortRJ-45

Serial Port

RJ-45

66MHzCLK

1832

SFP

SFP

SFP

SFP

LED

LED

LED

LED

LED

CPUPPC440GP

IPC88E6083

IPC88E6083

AC 201

LED

RESET

Code ROM

SD

RA

M S

O-D

IMM

SO

CK

ET

CPLDXC95144XL-10TQ144C

11.0592MHz CLK

33MHzCLK

SP 3222

CD

CV 85 5

PCI BUS

GENERIC BUS

SDRAM BUS

GENERIC BUS

ETHERNET BUS

IPC ETHERNET BUS

UM #A

UM #B

UM #C

UM #D

LM81

PHYBCM5221

CPLDXC95288XL-10TQ144C

88E1112Giga Phy

88E1112Giga Phy

88E1112Giga Phy

88E1112Giga Phy

Gigabit DATA BUSB

CM

5650

x11

56FC

BG

A#A

24GE

PCI

HiG

ig+

DC-DC 12V-to-1.25V 16A

25MHzCLK

OneNAND

Gigabit Ethernet PortRJ-45

Gigabit Etherne

t PortRJ-45

UM #A UM #B

Gigabit Ethernet PortRJ-45

Gigabit Etherne

t PortRJ-45

UM #C UM #D

25MHzCLK

25MHzCLK

1.5VLDO

Option Board Connector

Option Board Connector

8535-01

SMD

A12

C

Gigabit DATA BUSSYSTEM BUS

LOGIC

Boot ROM

FRAM

FRAM

1.8VLDO

SCM-B24G

Page 52: Corecess Intensive Course_daimler0404

Your Success is Corecess52

SCM-B72G

Board Block Diagram

Power Supply Unit (PSU)

DC-DC 12V-to-1.25V 16A

DC-DC 12V-to-2.5V 16A

ZD connectorZD connectorZD connectorZD connectorZD connectorZD connectorZ-PACK connector GND

Receptacle

FPGA XC2S200E-

FG456

Compact Flash Region

RTC Region

Ethernet PortRJ-45

Serial Port

RJ-45

66MHzCLK

1832

SFP

SFP

SFP

SFP

LED

LED

LED

LED

LED

CPUPPC440GP

IPC88E6083

IPC88E6083

AC 201

LED

RESET

Code ROM

DC-DC 12V-to-1.8V 10A

SD

RA

M S

O-D

IMM

SO

CK

ET

CPLDXC95144XL-10TQ144C

11.0592MHz CLK

33MHzCLK

25MHzCLK

SP 3222

CD

CV 85 5

PCI BUS

GENERIC BUS

SDRAM BUS

GENERIC BUS

ETHERNET BUS

IPC ETHERNET BUS

UM #A

UM #B

UM #C

UM #D

LM81

PHYBCM5221

CPLDXC95288XL-10TQ144C

88E1112Giga Phy

88E1112Giga Phy

88E1112Giga Phy

88E1112Giga Phy

Gigabit DATA BUS

PM8380

BCM5650x1156

FCBGA#C

24GE

PCI

HiGig+

BC

M56

50x

1156

FCB

GA

#A

24GE

PCI

HiG

ig+

BC

M56

50x

1156

FCB

GA

#B

24GE

PCI

HiG

ig+

PM8380 PM8380 PM8380

DC-DC 12V-to-1.25V 16A

DC-DC 12V-to-1.25V 16A

25MHzCLK

25MHzCLK

OneNAND

Gigabit Ethernet PortRJ-45

Gigabit Etherne

t PortRJ-45

UM #A UM #B

Gigabit Ethernet PortRJ-45

Gigabit Etherne

t PortRJ-45

UM #C UM #D

25MHzCLK

25MHzCLK

1.5VLDO

Option Board Connector

Option Board Connector

8535-01

SMD

A12

C

Gigabit DATA BUSSYSTEM BUS

LOGIC

Boot ROM

FRAM

FRAM

Page 53: Corecess Intensive Course_daimler0404

Your Success is Corecess53

Switch Configuration

Compare SCM-B24G with SCM-B72G

24G Switch Configuration 72G Switch Configuration

S518 With UIM

2 SCM-8G + 12 LIM-4G + 4 UM-8G = 72

S518 2 SCM-8G + 16 LIM-1G = 24 2 SCM-8G + 16 LIM-4G = 72

S511 With UIM

2 SCM-8G + 6 LIM-8G + 2 UM-16G = 72

S511 2 SCM-8G + 8 LIM-2G = 24 2 SCM-8G + 8 LIM-8G = 72

S506 1 SCM-8G + 4 LIM-4G = 24 1 SCM-8G + 4 LIM-16G = 72

Page 54: Corecess Intensive Course_daimler0404

Your Success is Corecess54

Simply Connecting the World

54

GEPON QoS Architecture

Downstream with Single LLID

Upstream with Single LLID

Downstream with Multiple LLIDs

Upstream with Multiple LLIDs

Page 55: Corecess Intensive Course_daimler0404

Your Success is Corecess55

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

LLID

-1

LLID

-N

Gro

up1

Gro

upN

Leve

l-0

Leve

l-2

Single Copy Broadcast

Broadcast/Multicast Shaper

Strict Priority Scheduler

SLA(MIN/MAX) configurable LLIDs for Unicast Traffic

Control packets guarantee(OAM,IGMP, etc..)

Control packets guarantee (OAM,IGMP, etc..)

MPCP processing in H/W

IP Multicasts are distributed to each queue by Hash when IGMP proxy configuredSLA Configurable (MIN/MAX)

IP Multicast filtering by IGMP Snoop

950Mbps

3Level Hierarchical Scheduler(SPQ, HWRR, Shaping)

Level-0 : MIN = MAX and SensitiveLevel-1 : MIN≠ 0 and TolerantLevel-2 : MIN = 0 and Tolerant

Downstram with Single LLID

Page 56: Corecess Intensive Course_daimler0404

Your Success is Corecess56

Time slot allocation for ONU

When the queues are not empty, the ONU request time slot.

Time slot allocation for ONUs(Report threshold, LLID Queue Length, Token Size)

DBA cycle time is determined by token size(32XTime Slot)4KB X 32 ≈ 1ms

850Mbps

3Level Hierarchical Scheduler(SPQ, HWRR, Shaping)

Level-0 : MIN = MAX and SensitiveLevel-1 : MIN≠ 0 and TolerantLevel-2 : MIN = 0 and Tolerant

SLA(MIN/MAX) configurable LLIDs

Control packets guarantee (OAM,IGMP, etc..)

Strict Priority Scheduler

Control packets guarantee (OAM,IGMP, etc..)

Upstram with Single LLID

Page 57: Corecess Intensive Course_daimler0404

Your Success is Corecess57

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

LLID

-1

LLID

-N

Gro

up1

Gro

upN

Leve

l-0

Leve

l-2

HIG

H

LO

W

<950Mbps

Bridge Table TOS or COS + MAC

Single Copy Broadcast

Broadcast/Multicast Shaper

Strict Priority Scheduler

SLA(MIN/MAX) configurable LLIDs for Unicast Traffic

Control packets guarantee(OAM,IGMP, etc..)

Control packets guarantee (OAM,IGMP, etc..)

MPCP processing in H/W

IP Multicasts are distributed to each queue by Hash when IGMP proxy configuredSLA Configurable (MIN/MAX)

IP Multicast filtering by IGMP Snoop

3Level Hierarchical Scheduler(SPQ, HWRR, Shaping)

Level-0 : MIN = MAX and SensitiveLevel-1 : MIN≠ 0 and TolerantLevel-2 : MIN = 0 and Tolerant

Downstram with Multiple LLIDs

Page 58: Corecess Intensive Course_daimler0404

Your Success is Corecess58

LLID

-1

LLID

-N

2

3Time S

lot

1 1

1 1

Time S

lot

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

HIG

H

LO

W

<800MbpsTime slot allocation for ONUWhen the queues are not empty, the ONU request time slot.

Time slot allocation for ONUs(Report threshold, LLID Queue Length, Token Size)

DBA cycle time is determined by token size<example>Level-0 : Token 4KB, Dropdown 64KBLevel-1 : Token 4KB

DBA Cycle Time (32 ONU)Level-0 : 4KB X 32 + 64KB ≈ 1.5msLevel-1 : 1.5ms X 2 ≈ 3ms

3Level Hierarchical Scheduler(SPQ, HWRR, Shaping)

SLA(MIN/MAX) configurable LLIDs

Control packets guarantee (OAM,IGMP, etc..)

Strict Priority Scheduler

Control packets guarantee (OAM,IGMP, etc..)

LLID is determined by classification

Upstram with Multiple LLIDs

Page 59: Corecess Intensive Course_daimler0404

Your Success is Corecess59

Simply Connecting the World

59

Configuring S5

Configuring Basic Features

Configuring QoS

Configuring PON Port

Configuring NetSnoop

Page 60: Corecess Intensive Course_daimler0404

Your Success is Corecess60

Configuring Basic Features

Setting Up Console Connection

Terminal ConfigurationSpeed : 9600bpsData : 8bitParity Bit : NoneStop Bit : 1bitFlow Control : No

Console (RJ-45 - DB-9)Console Cable Maximum Length : 15m

Speed Data BIT Parity BIT Stop BIT

None 1 bit

Flow Control

8 bit No9600 bps

Console Terminal

Page 61: Corecess Intensive Course_daimler0404

Your Success is Corecess61

Configuring Basic Features

Console Cable

RJ-45 on S5 DB9 on Console

365

235

Page 62: Corecess Intensive Course_daimler0404

Your Success is Corecess62

Log in System

Configuring Basic Features

When the Corecess S5 starts up for the first time, the only CLIaccess is available through the console portThe Default Log in ID & Password are ‘corecess’To configure the Corecess S5, enter the ‘Privileged’ mode by enable command. If you enter Privileged mode, the prompt ischanged from localhost> to localhost#

login: corecessPassword: localhost> enable localhost#

Page 63: Corecess Intensive Course_daimler0404

Your Success is Corecess63

Changing System Name (Node Name)

Configuring Basic Features

The Default System Name is ‘localhost’If the proper System Name is specified, it is useful to classify the product purpose or the location

localhost# configure terminal localhost(config)# hostname S511@PutrajayaS511@Putrajaya(config)#

Page 64: Corecess Intensive Course_daimler0404

Your Success is Corecess64

Adding a New User (Change Password)

Configuring Basic Features

Register the New User ID on System (config)# username <user name> password <password>After Restart the system, Default User will be deleted

localhost# configure terminal localhost(config)# username steven passwd applelocalhost(config)# exitlocalhost# show username corecess console Fri Mar 28 28 01:04:23 +0000 2008steven none none **Never logged in**localhost# write memory

Page 65: Corecess Intensive Course_daimler0404

Your Success is Corecess65

Configuring Management Interface

Configuring Basic Features

To set the IP address of the Ethernet management port, following procedure:

localhost# configure terminal localhost(config)# interface management localhost(config-if)# ip address 172.18.10.1/24localhost(config)# exitlocalhost# show interface management Interface management

index 0, kernel index 2(0) metric 1 mtu 1514 <UP,BROADCAST,RUNNING,MULTICAST>

HWaddr: 00:aa:11:aa:11:00…

Page 66: Corecess Intensive Course_daimler0404

Your Success is Corecess66

Configuring Interface

Configuring Basic Features

Assign the IP address of a Interface

localhost# configure terminal localhost(config)# interface vlan id 1localhost(config-if)# ip address 172.18.200.254/24localhost(config)# exitlocalhost# show interface vlan id 1

Page 67: Corecess Intensive Course_daimler0404

Your Success is Corecess67

Configuring Default Gateway

Configuring Basic Features

The default gateway is used for the transmission of packets that are not matched with other routing entriesIf the default route is not in the routing table, the router can not transmit packets that are not matched with other routing table entries.

localhost# configure terminal localhost(config)# ip route default 172.18.100.2

Page 68: Corecess Intensive Course_daimler0404

Your Success is Corecess68

Configuring VLANs

Configuring Basic Features

In the factory default configuration, VLAN support is enabled and all the ports are only in the S5 System physical broadcast domain,which is given the name DEFAULTDivide the S5 System into multiple virtual broadcast domains

localhost# configure terminal localhost(config)# vlan id 100 name uplinklocalhost(config)# vlan id 200 name subscriberslocalhost# show vlan

Page 69: Corecess Intensive Course_daimler0404

Your Success is Corecess69

Assigning Ports to VLAN

Configuring Basic Features

Add ports that belong to the same broadcast domain to a VLAN after defining a VlanIf you add ports belonging to the default VLAN to other VLAN, the ports are deleted from the default VLAN and are added to other VLAN

localhost# configure terminal localhost(config)# vlan id 100 port gigabitethernet 18/1-4localhost(config)# vlan id 200 port epon 1/1-4 localhost# show vlan

Page 70: Corecess Intensive Course_daimler0404

Your Success is Corecess70

Configuring 802.1Q Tag VLAN

Configuring Basic Features

The VLAN can transmit and receive data with other devices when the VLAN has its proper ID using 802.1Q trunk

localhost# configure terminal localhost(config)# dot1q port gigabitethernet 18/1 tag 100,200,300 localhost(config)# dot1q port epon 1/1 tag 100,200 localhost# show dot1q

Page 71: Corecess Intensive Course_daimler0404

Your Success is Corecess71

Configuring SNMP Agent

Configuring Basic Features

In order for the NMS to access the system, the community definitionson the NMS must match on the system

localhost# configure terminal localhost(config)# snmp-server community public rolocalhost(config)# snmp-server community corecess rwlocalhost# show snmp-server community-list

Community Access Source -------------------- ---------- --------------------public read-only any corecess read-write any

Page 72: Corecess Intensive Course_daimler0404

Your Success is Corecess72

Management Configuration File

Configuring Basic Features

Displaying the Current Running Configurationshow running-configSaving the Current Running Configurationwrite memory

localhost# copy startup-config flash config test_0326localhost# show flash configConfiguration flash directory:File Length (bytes) Name/status----- --------------- ------------------------------------------1 4793 test_0326 2 1555 test_0326.cfg …. [total 9523 Kbytes, 5325 Kbytes available usages(45%)]

Page 73: Corecess Intensive Course_daimler0404

Your Success is Corecess73

Configuring IP Pool

Configuring DHCP Server

Creating IP PoolDefining NetworkConfiguring IP Range, Default Gateway, DNS Server, and Lease Time

localhost(config)# ip pool net_200 localhost(config-ippool)# network 172.18.200.0/24 localhost(config-ippool)# ip range dhcp 172.18.200.1 172.18.200.100 localhost(config-ippool)# ip dhcp default-gateway 172.18.200.254localhost(config-ippool)# ip dhcp dns-server 168.126.63.1 168.126.63.2localhost(config-ippool)# ip dhcp leasetime 1800

Page 74: Corecess Intensive Course_daimler0404

Your Success is Corecess74

Assigning IP Pool to Interface

Configuring DHCP Server

Enabling DHCP ServerAssigning IP Pool to Interface

localhost# configure terminal localhost(config)# interface vlan id 200 localhost(config-if)# ip dhcp server localhost(config-if)# dhcp address-pool local net_200

Page 75: Corecess Intensive Course_daimler0404

Your Success is Corecess75

Simply Connecting the World

75

Quality of Service

Class map QoS

Non-Class map QoS

Page 76: Corecess Intensive Course_daimler0404

Your Success is Corecess76

Class Map QoS

Configuring C-P-S

Defining Class MapClass map defines a standard to classfy a particular traffic

and execute the role of QoS classifier

Defining Policy MapPolicy map defines QoS action that is applied to classified

traffic and execute the role of traffic manager

Applying Service PolicyService policy consists of a policy-map and ingress/egress

ports which the policy map will be applied to

Page 77: Corecess Intensive Course_daimler0404

Your Success is Corecess77

Sample Configuration with C-P-S

class-map msndmatch udp-dpn 3702 0

!class-map vmpmatch tcp-dpn 2869 0

!class-map lltdmatch ether-type 0x88d9

!class-map ipv6match ether-type 0x86dd

!

policy-map vistaclass msndfilter deny

class vmpfilter deny

class lltdfilter deny

class ipv6filter deny

!service-policy vista policy-map

vista

Class Map QoS

Page 78: Corecess Intensive Course_daimler0404

Your Success is Corecess78

Packet Filtering

Non-Class Map QoS

DHCP Packet FilteringFilter DHCP Offer packets receive from the DHCP server of

ONU

File and Resource Sharing Protocol FilteringApple FileSharing ProtocolRendezvous ProtocolNetBIOS ProtocolUPnP (Universal Plug & Play) Protocol

Default Traffic FilteringThe S5 System can filter default traffic that is not classified

by class map

Broadcast Packet FilteringUnnecessary broadcast packets

Page 79: Corecess Intensive Course_daimler0404

Your Success is Corecess79

DHCP Packet Filtering

Non-Class Map QoS

localhost# configure terminal localhost(config)# qoslocalhost(config-qos)# dhcp-offer filter discard port epon 1/1-4 localhost(config-qos)# endlocalhost# show dhcp-offer-filter Dhcp Offer Filter Ports--------------------------------------------------Discard :

1/1, 1/2, 1/3, 1/4Accept :

Page 80: Corecess Intensive Course_daimler0404

Your Success is Corecess80

File and Resource Sharing Protocol Filtering

Non-Class Map QoS

localhost# configure terminal localhost(config)# qoslocalhost(config-qos)# netbios filter discard port epon 1/1-4 localhost(config-qos)# upnp filter discard localhost(config-qos)# endlocalhost# show running-config…qosupnp filter discarddhcp-offer filter discard port epon 1/1-4

Page 81: Corecess Intensive Course_daimler0404

Your Success is Corecess81

Storm Control

Non-Class Map QoS

localhost# configure terminal localhost(config)# qoslocalhost(config-qos)# broadcast-storm-controllocalhost(config-qos)# multicast-storm-controllocalhost(config-qos)# unknown-storm-control

Page 82: Corecess Intensive Course_daimler0404

Your Success is Corecess82

Bridge Block

Non-Class Map QoS

localhost# configure terminal localhost(config)# bridge block mac-floodlocalhost(config)# bridge block multicast localhost(config)# bridge block unknown-unicast

Page 83: Corecess Intensive Course_daimler0404

Your Success is Corecess83

Simply Connecting the World

83

Monitoring PON Port

Page 84: Corecess Intensive Course_daimler0404

Your Success is Corecess84

Displaying the Chip Information

Monitoring PON Port

localhost# show port epon 1/1 information port 1/1mac address IEEE OUI product code product version Firmware version------------- -------- ------------ ------------- ---------------00:90:a3:21:72:21 000db6 3721 060 0130

Page 85: Corecess Intensive Course_daimler0404

Your Success is Corecess85

Displaying all Registered Links

Monitoring PON Port

localhost# show port epon 1/1 registered-link port 1/1llid(num) : LLID number(onu index number)llid mac address block profile -------- ----------------- ----- -------------------------------3700( 1) 00:90:a3:15:b9:3c No N/D ,N/D 3701( 2) 00:90:a3:16:05:ab No N/D ,N/D total : 2localhost# show port epon 1/1 onuport 1/1index mac address product name attach allow profile---- ----------------- --------------- ------ ----- ------------1 00:90:a3:15:b9:3c CC3804TN Yes Yes N/D 2 00:90:a3:16:05:ab CC3804TN Yes Yes N/D 3 00:90:a3:15:b7:8c N/A No Yes N/A 4

Page 86: Corecess Intensive Course_daimler0404

Your Success is Corecess86

Simply Connecting the World

86

Configuring PON Port

Page 87: Corecess Intensive Course_daimler0404

Your Success is Corecess87

Restoring GEPON Port & ONU

Configuring PON Port

localhost# default port epon 1/1 restore OLT successreset OLT success

localhost# default port epon 1/1 onu index 2 restore ONU(00:90:a3:16:05:ab) successreset ONU[00:90:a3:16:05:ab] success

Restoring Parameters of GEPON Portdba polling ratebridge option

Restoring Patameters of ONUqueueup/down class

Page 88: Corecess Intensive Course_daimler0404

Your Success is Corecess88

Blocking Link Registration

localhost# configure terminal localhost(config)# port epon 1/1 link-id 3701 blocklocalhost(config)# exit localhost# show port epon 1/1 registered-link

port 1/1llid(num) : LLID number(onu index number)llid mac address block profile ------- ----------------- ----- -------------------------------3700( 1) 00:90:a3:15:b9:3c No N/D ,N/D N/A 00:90:a3:16:05:ab Yes N/A ,N/A

total : 1

Configuring PON Port

Page 89: Corecess Intensive Course_daimler0404

Your Success is Corecess89

Configuring DBA Polling Rate

localhost# configure terminal localhost(config)# port epon 1/1 dba polling-rate 1 2 2localhost(config)# exitlocalhost# show port epon 1/1 dba polling-rate port 1/1level 0(msec) level 1 level 2------------- ------- -------1 2 2

Configuring PON Port

Configure the DBA Polling IntervalLevel 0 : MIN = MAX for SLA parameter, SensitiveLevel 1 : MIN ≠ 0 for SLA parameter , TolerantLevel 2 : MIN = 0 for SLA parameter , TolerantDefault value is Level 1

Page 90: Corecess Intensive Course_daimler0404

Your Success is Corecess90

Configuring SLA per ONU

Configuring PON Port

SLA parameters can decide MIN, MAX, Delay, Burst Size of traffic by using LLID or MAC address of ONTsSLA parameters can be configured both for the Upstream/Downstream in an increase of 1Mbps unit from 0 up to 1000MAX parameter means ShapingDelay parameters include tolerant and sensitive mode,

and sensitive has a higher priorityBoth MIN and MAX value must be same to set the SLA tosensitive modeBurst Size indicates a maximum amount of byte to exceed MAX parameter

Page 91: Corecess Intensive Course_daimler0404

Your Success is Corecess91

Configuring SLA per ONU

localhost# configure terminal localhost(config)# port epon 1/1 link-id 3700 up-bw 10 20 4 delay tolerant localhost(config)# port epon 1/1 link-id 3700 down-bw 10 100 4 delay tolerantlocalhost(config)# exitlocalhost# show port epon 1/1 link-id 3700 up-bwmin bw(Mbps) max bw(Mbps) delay max burst(KByte) state------------ ------------ --------- ---------------- -------10 20 tolerant 4 enable

localhost# show port epon 1/1 link-id 3700 down-bwmin bw(Mbps) max bw(Mbps) delay max burst(KByte) state------------ ------------ --------- ---------------- -------10 100 tolerant 4 enable

Configuring PON Port

Page 92: Corecess Intensive Course_daimler0404

Your Success is Corecess92

Simply Connecting the World

92

NetSnoop

DHCP Snoop

ARP Snoop

IGMP Snoop

Page 93: Corecess Intensive Course_daimler0404

Your Success is Corecess93

Overview NetSnoop

NetSnoop

NetSnoop is the function to protect end users and network equipment from various network attack

It consists of two modules : DHCP Snoop and ARP Snoop

Page 94: Corecess Intensive Course_daimler0404

Your Success is Corecess94

DHCP Snoop

DHCP snooping ensures IP integrity on a L2 swiched domainThis function works on independent of DHCP ServerWhen DHCP snoop interworks with arp snoop, it may

prevent illegal use of IP by the method to pass only the ARP Packet to which IP was assigned through DHCP

Prevent an unauthorized DHCP Server from allocating IPsPrevent an unauthorized Static IPs from duplicatingIPs of well-intentioned subscribers

DHCP Snoop

localhost# configure terminallocalhost(config)# ip dhcp snoop

Page 95: Corecess Intensive Course_daimler0404

Your Success is Corecess95

DHCP Snoop

Server PortPort connected with DHCP ServerDHCP Snoop transfers all the Packets, which was transferred to server by client, to Server Port

Transparent Port Transparent Port acts as a common port All the hosts may access the network regardless of Base Rule

Client PortClient Port conneted with SubscriberThe DHCP Packets sent by client are received by ClientPort and the Packets sent from Server are blockedIf Base Rule is in Deny status, the clients received Ipsthrough DHCP may only communicate

Port Type

localhost# configure terminallocalhost(config)# ip dhcp snoop port gigabitethernet 18/1 server

Page 96: Corecess Intensive Course_daimler0404

Your Success is Corecess96

DHCP Snoop

Base Rule

This is the filtering rule of whole systemPermit Mode Communication Blocking is not performedDeny ModeSubscribers who were allocated IPs from DHCP Server may only access the networkDeny Mode with Timeout

localhost# configure terminallocalhost(config)# ip dhcp snoop port epon 3/1 circuit-id aaa

Page 97: Corecess Intensive Course_daimler0404

Your Success is Corecess97

DHCP Snoop

Packet Control : Information Policy

When inputted Packet is not same with saved information, whether to update is decided

replace (default)Existing information is replaced with the information of inputted PacketdropInputted Packet is dropped.

localhost# configure terminallocalhost(config)# ip dhcp snoop information policy replacelocalhost(config)# ip dhcp snoop information policy drop

Page 98: Corecess Intensive Course_daimler0404

Your Success is Corecess98

DHCP Snoop

Packet Control : Inspection

Appropriateness of inputted Packet is inspected and the Packet that does not meet the condition is dropped

mac-matchIt is inspected whether the mac address of ethernet header and the mac address recorded in chaddr of dhcp header is same

localhost# configure terminallocalhost(config)# ip dhcp snoop inspection mac-match

Page 99: Corecess Intensive Course_daimler0404

Your Success is Corecess99

DHCP Snoop

Opcode(1=Request, 2=Reply)

Hardware Type Hardware Length Hop Count

XID (Transaction ID)

Number of seconds Unused

CIADDR (Client IP address)

YIADDR (Your IP address)

SIADDR (Server IP address)

GIADDR (Gateway IP address)

CHADDR (Client hardware address) (16 bytes)

Server name (64 bytes)

Boot file name (128 bytes)

Options (up to 64 bytes)

0 15 16 31

300 bytes

4 bytes

BOOTP PDU Format

Page 100: Corecess Intensive Course_daimler0404

Your Success is Corecess100

DHCP Snoop

Packet Control : Secure Unicast

The Packet, which is transferred to broadcast if corresponding client information exists when the Packet to be transferred to client is inputted, is transferred to unicast

localhost# configure terminallocalhost(config)# ip dhcp snoop secure-unicast

Page 101: Corecess Intensive Course_daimler0404

Your Success is Corecess101

DHCP Snoop

Packet Control : Surpression

When two or more Discover Packets are inputted from a same DHCP Client within the set time, the Packets other than the firstly inputted Discover Packet are dropped.

secondsThe section to process only one Packet is set as time

localhost# configure terminallocalhost(config)# ip dhcp snoop suppression 1

Page 102: Corecess Intensive Course_daimler0404

Your Success is Corecess102

DHCP Snoop

To limit the number of Clients that may be connected with specificPorts, input following commandsThis setting is possible in the ports that are set as clients

Limiting Number of Clients per Port

localhost# configure terminallocalhost(config)# ip dhcp snoop port epon 3/3 clients-limit 200

Page 103: Corecess Intensive Course_daimler0404

Your Success is Corecess103

DHCP Snoop

Circuit-ID is one of the sub-options of DHCP Option #82To add and transfer Circuit-ID set in all the DHCP Packets comingfrom corresponding port by setting Circuit-ID in a specific Port when using DHCP Option82, input following commands

Setting Circuit ID for a specific Port

localhost# configure terminallocalhost(config)# ip dhcp snoop port epon 3/1 circuit-id aaa

Page 104: Corecess Intensive Course_daimler0404

Your Success is Corecess104

DHCP Snoop

To set a specific host to communicate always in the connected port, input following commands

Registering Static Host

localhost# configure terminallocalhost(config)#ip dhcp snoop port epon 3/3 static a:b:c:d:e:f 10.1.1.1

Page 105: Corecess Intensive Course_daimler0404

Your Success is Corecess105

Simply Connecting the World

105

Maintenance & Trouble Shooting

Page 106: Corecess Intensive Course_daimler0404

Your Success is Corecess106

Simply Connecting the World

106

Maintenance

Page 107: Corecess Intensive Course_daimler0404

Your Success is Corecess107

Maintaining the System

You can check the Process CPU & Memory, using the commands as below,

show process cpushow process memory

Displaying Process CPU & Memory

localhost# show process cpuCPU utilizationfor one minute: 11 %, five minutes: 13 %,fifteen minutes: 12 % CPU high load threshold 80 %, low load threshold 70 % (80)

localhost# show process memory Memory Utilization(47)Total 247 MB, Used 114 MB(Buffers/Cache 4/53 MB), Free 133 MBMemory usage 47 %Memory consumption threshold 90 %, low threshold 85 %

Page 108: Corecess Intensive Course_daimler0404

Your Success is Corecess108

Maintaining the System

Display the status of Module, type of LIM, sofware version, etc.

Displaying System Module Information

localhost# show module Codes : * - Internal/Built-in Module, N - Network Attached Module

X - Switch Fabric Module, > - Current Management Module

Module Ports Description Status Serial No.------- ----- ----------------- ------------ ---------> A(S1) N/A Control Module active N/A

B(S2) N/A Control Module not-exist N/A 1 4 S5-EP4G-GR insert,up N/A

Module Version Hw Fw Sw------- ---------------- --------- ------------ ------------

1 release.rev(patch) 0.0(3) 1.0(177) REL0.6.5RC4

Page 109: Corecess Intensive Course_daimler0404

Your Success is Corecess109

Maintaining the System

Display the contents of the Log FileYou can specify a number from 1 to 100 as a parameter value, and it displays the number of the resent saved log messages in the log file

Displaying Log File

localhost# show logging buffer 10Mar 28 01:04:23 dia0327 AUTHORIZE-6-LOGIN: login corecess authentication service(login) tty(console) from (local)Mar 28 01:04:24 dia0327 AUTHORIZE-6-USER: corecess login from consoleMar 28 01:56:33 dia0327 SYS-6-CFGCHANGE: system configuration was changed by corecessMar 28 01:57:45 dia0327 AUTHORIZE-6-USER_LOGOUT: corecess logout

Page 110: Corecess Intensive Course_daimler0404

Your Success is Corecess110

Display epon link-registered trapWhen you connect to the system through console, you need logging console enableWhen you connect to the system through telnet, you needlogging session enable

Displaying epon link-registered trap

localhost# configure terminallocalhost(config)# epon link-registered traplocalhost(config)# logging console enablelocalhost(config)# logging session enable

Maintaining the System

Page 111: Corecess Intensive Course_daimler0404

Your Success is Corecess111

Displaying the Statistics Info

Displaying Port Counter

show port countershow port epon 1/1 onu index 1 port countersshow port epon 1/1 counter epon upstreamshow port epon 1/1 counter epon downstreamshow port epon 1/1 counter network upstream show port epon 1/1 counter network downstreamshow port epon 1/1 onu index 1 counter epon upsteamshow port epon 1/1 onu index 1 counter epon upsteamshow port epon 1/1 onu index 1 port counters

Page 112: Corecess Intensive Course_daimler0404

Your Success is Corecess112

Mac Address Table

Displaying Mac Address Table

localhost# show mac-address-tablelocalhost# show port epon 1/1 onu index 1 mac-address-tablelocalhost# show port epon 1/1 onu index 1 epon-mac-address-tablelocalhost# show port epon 1/1 link-id 3700 mac-address dynamiclocalhost# show port epon 1/1 onu index 1 epon-phylocalhost# show port epon 1/1 onu index 1 epon-phy eport 1 mac-address

Page 113: Corecess Intensive Course_daimler0404

Your Success is Corecess113

Simply Connecting the World

113

Recover Password

Page 114: Corecess Intensive Course_daimler0404

Your Success is Corecess114

Trouble Shooting

To recover password, use the following stepsStep 1 : Press “Ctrl+c” to access ppcboot mode by using

console after the system is booted Step 2 : Input the “setenv sys_options nopasswd”Step 3 : Input the “boot”Step 4 : After finish booting process , both Login ID and

Password will be set to “recover”Step 5 : Create a new User ID/PasswordStep 6 : After rebooting the system, the “recover”

for Login ID/Password will be deleted automatically

Recover Password

Page 115: Corecess Intensive Course_daimler0404

Your Success is Corecess115

U-Boot 1.1.4 (Jun 30 2007 - 18:31:54)R1P-VD u-Boot 1.1.4(3) (sdream@hera)

CPU: AMCC PowerPC 405EP Rev. B at 200 MHz (PLB=99, OPB=33, EBC=49 MHz)I2C boot EEPROM disabledInternal PCI arbiter enabled16 kB I-Cache 16 kB D-Cache

Board: Corecess R1P-VD I2C: readyDRAM: 124 MB .... OKFLASH: 512 kBIn: serialOut: serialErr: serialFMEM: OneNAND 64MB 2.65/3.3V 16-bit KFG1216D2A Samsung

63.1008 Mbytes available (BB=0), 504Blocks(128KB)BEDBUG:readyHit CTRL-C to stop autoboot: 0 => setenv sys_options nopasswd

Trouble Shooting

Recover Password

Page 116: Corecess Intensive Course_daimler0404

Your Success is Corecess116

=> printbootcmd=run hdbootbootdelay=3baudrate=9600loads_echo=1...bootpath=1stdin=serialstdout=serialstderr=serialbootpart=0:3sys_options=nopasswd

Environment size: 1755/65532 bytes=> boot

login: recoverPassword: recoverlocalhost>

Trouble Shooting

Recover Password

Page 117: Corecess Intensive Course_daimler0404

Your Success is Corecess117

Simply Connecting the World

117

Restoring Default Configuration

Page 118: Corecess Intensive Course_daimler0404

Your Success is Corecess118

localhost# copy factory-default startup-configdonelocalhost# reset system

▷Caution Do not use the command ‘write memory’, after ‘copy factory-default startup-config’

Trouble Shooting

Restoring Default Configuration

To restore the default configuration, use the following commands in Privileged Mode

# copy factory-default startup-config

Page 119: Corecess Intensive Course_daimler0404

Your Success is Corecess119

Simply Connecting the World

119

Update Image

Page 120: Corecess Intensive Course_daimler0404

Your Success is Corecess120

① Checking the Image Files in Flash Memory

localhost# show flash image System flash directory:File Length (bytes) Name/status----- --------------- ------------------------------------------1 8271324 ss5-base-osapp-REL0.6.5.img (*)2 4657728 ss5-ep4g-osapp-REL0.6.5RC4.img [12628 blocks used, 49804 available, 62432 total, 1K-blocks]*/# : running/updated image

Update Image

Updating SCM Image

The following example shows how to download the image file from FTP server and apply the download file to the system

Page 121: Corecess Intensive Course_daimler0404

Your Success is Corecess121

② Downloading New Image File from FTP Server

localhost# copy ftp 172.18.35.35 flash image NAME File name. coreos-base-osapp-1.0.0.img

localhost# copy ftp 172.18.35.35 flash image ss5-base-osapp-REL0.6.6RC2.img/tmp/ss5-base-osapp-REL0.6.6RC2.img: 7.92 MB 3.30 MB/s done

③ Checking the File ID of New Image

localhost# show flash image System flash directory:File Length (bytes) Name/status----- --------------- ------------------------------------------1 8271324 ss5-base-osapp-REL0.6.5.img (*)2 8299535 ss5-base-osapp-REL0.6.6RC2.img3 4657728 ss5-ep4g-osapp-REL0.6.5RC4.img [20734 blocks used, 41698 available, 62432 total, 1K-blocks]*/# : running/updated image

Update Image

Updating SCM Image

Page 122: Corecess Intensive Course_daimler0404

Your Success is Corecess122

④ Updating New Image File

localhost# update flash image id 2updating... 100%update flash(0:1):ss5-base-osapp-REL0.6.6RC2.img is completedMar 28 05:18:57 dia0327 SYS-6-UPDATE: update is completed ss5-base-osapp-REL0.6.6RC2.img

⑤ Checking the Result of Update

localhost# show flash image System flash directory:File Length (bytes) Name/status----- --------------- ------------------------------------------1 8271324 ss5-base-osapp-REL0.6.5.img 2 8299535 ss5-base-osapp-REL0.6.6RC2.img (#)3 4657728 ss5-ep4g-osapp-REL0.6.5RC4.img [20734 blocks used, 41698 available, 62432 total, 1K-blocks]*/# : running/updated image*** Kernel Image is updated, You should reboot sp board

Update Image

Updating SCM Image

Page 123: Corecess Intensive Course_daimler0404

Your Success is Corecess123

⑥ Reset the System for Applying New Software

localhost# reset system

Update Image

Updating SCM Image

Page 124: Corecess Intensive Course_daimler0404

Your Success is Corecess124

Update Image

Updating EPON Module Image

① Checking the Software Version of EPON Module

localhost# show module Codes : * - Internal/Built-in Module, N - Network Attached Module

X - Switch Fabric Module, > - Current Management Module

Module Ports Description Status Serial No.------- ----- ----------------- ------------ ---------> A(S1) N/A Control Module active N/A

B(S2) N/A Control Module not-exist N/A 1 4 S5-EP4G-GR insert,up N/A

Module Version Hw Fw Sw------- ---------------- --------- ------------ ------------1 release.rev(patch) 0.0(3) 1.0(177) REL0.6.5RC4

Page 125: Corecess Intensive Course_daimler0404

Your Success is Corecess125

Update Image

Updating EPON Module Image

② Downloading New Image File from FTP Server

localhost# copy ftp 172.18.35.35 flash image ss5-ep4g-osapp-REL0.6.6RC2.img/tmp/ss5-ep4g-osapp-REL0.6.6RC2.img: 4.43 MB 4.25 MB/s done

③ Updating New Image File

localhost# update epon-module 1 image ss5-ep4g-osapp-REL0.6.6RC2.img localhost#

Page 126: Corecess Intensive Course_daimler0404

Your Success is Corecess126

Update Image

Updating EPON Module Image

④ Checking Update Status

localhost# show update epon-module 1 status % << Slot 1 >> -----------------------------------------------------epon module/slot 1STATUS : update image successIMGNAME : ss5-ep4g-osapp-REL0.6.6RC2.imgstart-time : 4h:5m:48s end-time : 4h:5m:59s -----------------------------------------------------

⑤ Reset the Module for Applying New Software

localhost# reset module 1

Page 127: Corecess Intensive Course_daimler0404

Thank you

YOUR SUCCESS IS CORECESSwww.corecess.com