Appendix Support for non-EPON features

Transceiver module management

·     Display transceiver alarms (display transceiver alarm).

·     Display the current values of the digital diagnosis parameters on transceiver modules (display transceiver diagnosis).

·     Display the key parameters of transceiver modules (display transceiver interface).

·     Display electronic label information for transceiver modules (display transceiver manuinfo).

These features are not supported on ROLT interfaces.

Fundamentals Command Reference

Basic interface parameters

·     Restore the default settings for an interface (default).

·     Configure a description for an interface (description).

·     Bring up or shut down an interface (shutdown).

·     Clear packet statistics on an interface (reset counters interface).

·     Enable broadcast storm suppression (broadcast-suppression).

·     Enable multicast storm suppression (multicast-suppression).

·     Enable unknown unicast storm suppression (unicast-suppression).

Shutting down an OLT interface also deregisters all ONUs on the OLT interface. Shutting down an ROLT interface does not affect the registration status of ONUs on the ROLT interface.

An ROLT interface does not support the following features:

·     Clearing packet statistics on an interface.

·     Broadcast/multicast/unicast storm suppression.

Interface Command Reference

Port isolation

Configure port isolation for interfaces (port-isolate enable).

Layer 2—LAN Switching Command Reference

QinQ and VLAN mapping

·     Configure user-side QinQ or VLAN mapping.

·     Configure network-side VLAN mapping.

OLT interfaces and ROLT interfaces do not support setting the TPID value in CVLAN or SVLAN tags (qinq ethernet-type).

OLT interfaces and ROLT interfaces do not support many-to-one VLAN mapping.

Layer 2—LAN Switching Configuration Guide

Loop detection

Enable loop detection.

When loop detection is enabled globally, loop detection does not take effect on OLT interfaces and ROLT interfaces.

OLT interfaces and ROLT interfaces do not support setting the loop protection action (loopback-detection action).

Layer 2—LAN Switching Command Reference

IGMP snooping

Configure IPv4 multicast source port filtering (igmp-snooping source-deny).

ROLT interfaces do not support this feature.

IP Multicast Command Reference

MPLS L2VPN/VPLS/VXLAN

Configure Ethernet service instances on an interface.

ROLT interfaces do not support MPLS L2VPN or VPLS.

VPLS does not support transparent transmission of 802.1X, IGMP, MLD, and BCMP protocol packets.

The Ethernet service instances support only the VLAN access mode.

MPLS Configuration Guide

VXLAN Configuration Guide

QoS

·     Apply QoS policies on interfaces (qos apply policy).

·     Display QoS policy information for interfaces (display qos policy interface).

·     Configure priority mapping:

¡     Configure the DSCP priority for an interface (qos priority dscp priority-value).

¡     Configure the priority trust mode for an interface (qos trust).

¡     Display the priority trust mode and port priorities of an interface (display qos trust interface).

·     Set GTS parameters (qos gts).

·     Display the GTS information for interfaces (display qos gts interface).

·     Configure rate limiting on an interface (qos lr).

·     Display the rate limit information for interfaces (display qos lr).

·     Configure hardware congestion management:

¡     Enable SP queuing on an interface (qos sp).

¡     Display the SP queuing configuration of an interface (display qos queue sp interface).

¡     Enable WRR queuing on an interface (qos wrr).

¡     Display the WRR queuing configuration of an interface (display qos queue wrr interface).

ROLT interfaces do not support these features.

ACL and QoS Command Reference

802.1X

Configure 802.1X on an interface.

When you configure 802.1X for EPON, as a best practice, execute the dot1x port-method macbased commando to configure MAC-based access control on an OLT interface or ROLT interface.

If you configure this feature on an OLT interface or ROLT interface, you cannot configure this feature on the corresponding ONU interfaces or RONU interfaces.

Security Configuration Guide

MAC authentication

·     Enable MAC authentication (mac-authentication).
If MAC authentication is enabled on an OLT interface or ROLT interface, the interface drops unicast packets that fail authentication. The device creates multicast forwarding entries for multicast packets whether the packets pass authentication or not.

·     Display MAC authentication information for interfaces (display mac-authentication).

·     Clear MAC authentication statistics (reset mac-authentication statistics).

Security Command Reference

Port security

Configure port security on an interface.

Security Configuration Guide

IP source guard

Configure IP source guard on interfaces.

Security Configuration Guide

ARP attack protection

·     Enable the ARP packet rate limit feature (arp rate-limit)

·     Display ARP attack entries detected by source MAC-based ARP attack detection (display arp source-mac)

·     Configure an interface as an ARP trusted interface (arp detection trust).

Only OLT interfaces on 10G-EPON cards support this feature.

Security Command Reference

ND attack defense

·     Display statistics for ND messages dropped by ND attack detection (display ipv6 nd detection statistics).

·     Configure an interface as an ND trusted interface (ipv6 nd detection trust).

·     Clear ND attack detection statistics (reset ipv6 nd detection statistics).

Only OLT interfaces on 10G-EPON cards support this feature.

Security Command Reference

Smart Link

Enable receiving of flush messages (smart-link flush enable).

ROLT interfaces do not support this feature.

High Availability Command Reference

Monitor Link

Configure interfaces as members of a monitor link group (port monitor-link group).

ROLT interfaces do not support this feature.

High Availability Command Reference

Port mirroring

Configure an interface as a source port for a mirroring group (mirroring-group mirroring-port).

Network Management and Monitoring Command Reference

SNMP notifications

Enable link state notifications for interfaces (enable snmp trap updown).

Network Management and Monitoring Command Reference

Basic interface parameters

·     Restore the default settings for an interface (default).

·     Configure a description for an interface (description).

·     Bring up or shut down an interface (shutdown).

·     Clear packet statistics on an interface (reset counters interface).

·     Enable broadcast suppression on an interface (broadcast-suppression).

·     Enable multicast storm suppression on an interface (multicast-suppression).

·     Enable unknown unicast storm suppression on an interface (unicast-suppression).
If you set the max-pps or max-kbps argument to 0, unknown unicast storms are not suppressed on the ONU interface.

Interface Command Reference

MAC address table

·     Display MAC address entries (display mac-address).
If static MAC address entries exist on an ONU interface or RONU interface, the count keyword is not available when you use this command for the ONU interface or RONU interface.

·     Display the global MAC address learning status and the MAC learning status of interfaces (display mac-address mac-learning).

·     Add or modify a MAC address entry (mac-address).

·     Set the MAC learning limit on an interface (mac-address max-mac-count).

ONU interfaces and RONU interfaces do not support the undo mac-address max-mac-count enable-forwarding command.

Layer 2—LAN Switching Command Reference

VLAN mapping

Configure one-to-one VLAN mapping

Layer 2—LAN Switching Configuration Guide

Loop detection

Configure loop detection.

When loop detection is enabled globally on a device, loop detection does not take effect on ONU interfaces or RONU interfaces.

With the loopback-detection action { block | no-learning } command configured on an ONU interface or RONU interface, the system disables MAC address learning on the ONU interface or RONU interface when detecting loops on the ONU interface or RONU interface. In this case, if you use the display loopback-detection command to display VLANs where loops are detected, the command output might display only part of the VLANs to which the ONU interface or RONU interface belongs.

Layer 2—LAN Switching Command Reference

DHCP

·     Enable recording of client information in DHCP snooping entries (dhcp snooping binding record).

·     Enable MAC address check for DHCP snooping (dhcp snooping check mac-address).

·     Enable DHCP-REQUEST check for DHCP snooping (dhcp snooping check request-message).

·     Configure an interface as a DHCP packet blocking interface (dhcp snooping deny).

·     Disable DHCP snooping on an interface (dhcp snooping disable).

·     Set the maximum number of DHCP snooping entries that an interface can learn (dhcp snooping max-learning-num).

·     Configure an interface as a trusted interface (dhcp snooping trust).

·     Configure DHCP snooping to support Option 82:

¡     Enable DHCP snooping to support Option 82 (dhcp snooping information enable).

¡     Configure the padding mode and padding format for the Circuit ID sub-option (dhcp snooping information circuit-id).

¡     Configure the padding mode and padding format for the Remote ID sub-option (dhcp snooping information remote-id).

¡     Configure the handling strategy for Option 82 in request messages (dhcp snooping information strategy).

¡     Display Option 82 configuration on the DHCP snooping device (display dhcp snooping information).

To configure DHCP snooping-related features on an ONU interface or RONU interface of an OLT interface or ROLT interface configured with QinQ or one-to-two VLAN mapping, you must first assign the ONU interface or RONU interface to all inner and outer VLANs for QinQ or VLAN mapping and assign the OLT interface or ROLT interface to the inner VLANs.

Layer 3—IP Services Command Reference

IGMP snooping

·     Enable fast-leave processing on an interface (igmp-snooping fast-leave).

·     Set the maximum number of multicast groups that an interface can join (igmp-snooping group-limit).

·     Configure a multicast group policy on an interface to control the multicast groups that hosts attached to the interface can join (igmp-snooping group-policy).

·     Configure an interface as a simulated member host for a multicast group (igmp-snooping host-join).

·     Enable multicast group replacement on an interface (igmp-snooping overflow-replace).

·     Configure an interface as a static member port of a multicast group (igmp-snooping static-group).

·     Configure an interface as a static router interface (igmp-snooping static-router-port).

IP Multicast Command Reference

QoS

·     Apply QoS policies on interfaces (qos apply policy).
In traffic behavior view, the traffic filtering action can be configured only as filter deny. For more information, see the filter command in ACL and QoS Command Reference. For more QoS configuration restrictions, see Table 3.

·     Display QoS policy information for interfaces (display qos policy interface).

·     Configure priority mapping:

¡     Configure the port priority for an interface (qos priority).

¡     Configure the priority trust mode for an interface (qos trust).

¡     Display the priority trust mode and port priorities of an interface (display qos trust interface).

·     Configure hardware congestion management:

¡     Enable SP queuing on an interface (qos sp).

¡     Display the SP queuing configuration of an interface (display qos queue sp interface).

¡     Configure WFQ queuing on an interface (qos wfq).

¡     Display the WFQ configuration of an interface (display qos queue wfq interface).

RONU interfaces do not support these features.

ACL and QoS Command Reference

802.1X

Configure 802.1X authentication on interfaces.

ONU interfaces and RONU interfaces support only port-based access control.

ONU interfaces and RONU interfaces do not support enabling the 802.1X unicast trigger feature (dot1x unicast-trigger).

Security Configuration Guide

Monitor Link

Configure interfaces as members of a monitor link group (port monitor-link group).

RONU interfaces do not support these features.

High Availability Command Reference

SNMP notifications

Enable link state notifications for interfaces (enable snmp trap updown).

Network Management and Monitoring Command Reference

ACL rule action

When an ACL rule is used in a traffic class of a QoS policy, the action defined in the ACL rule (deny or permit) does not take effect. Instead, the traffic behavior associated with the traffic class determines the actions on the packets that match the ACL rule.

Packet filtering

·     ONU interfaces only support packet filtering based on the following criteria:

¡     Source MAC address.

¡     Destination MAC address.

¡     Ethernet type.

¡     VLAN ID.

¡     Source IP address.

¡     Destination IP address.

¡     Source TCP port.

¡     Source UDP port.

·     Source MAC address-based packet filtering on an ONU interface works only on the uplink direction and supports a maximum of 32 ACL rules.

·     Destination MAC address-based packet filtering on an ONU interface works on both uplink and downlink directions at the same time and supports a maximum of 32 ACL rules.

ACL rule limit

·     The number of ACL rules supported by Ethernet type-based packet filtering on an ONU interface depends on the direction:

¡     Supports a maximum of 30 ACL rules if configured only in one direction.

¡     Supports a maximum of 16 ACL rules for each direction if configured in both directions.

·     The number of ACL rules supported by VLAN ID-based packet filtering on an ONU interface depends on the direction:

¡     Supports a maximum of 6 ACL rules for the uplink direction.

¡     Supports a maximum 8 ACL rules for the downlink direction.

·     The number of ACL rules supported by source or destination IP address-based packet filtering on an ONU interface depends on the direction:

¡     Supports a maximum of 24 ACL rules if configured only in one direction.

¡     Supports a maximum of 16 ACL rules for each direction if configured in both directions.

·     The number of ACL rules supported by source TCP/UDP port-based packet filtering  on an ONU interface depends on the direction:

¡     Supports a maximum of 24 ACL rules if configured only in one direction.

¡     Supports a maximum of 32 ACL rules if configured in both directions.