Principle Of Security Data Plan - Huawei SmartAX MA5603T Configuration Manual

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
Applicatio
n Scenario
Gateway
ONU
Note:
l
l
l
l
l
l
l
NOTE
l IPTV service is a closed service self-operated by carriers, and single-tagged S-VLAN is recommended.
l The same S-VLAN or different S-VLANs can be used as the M-VLAN and VoD VLAN. It is recommended
that you use different S-VLANs as M-VLAN and VoD VLAN so that the upper-level device easily
differentiates between the BTV service and VoD service.
l S-VLANs of VoD service can identify services and physical locations based on an entire network or an
OLT. It is recommended that you set different VoIP VLANs for the OLTs connected to one VoIP SR to
avoid an excessively large broadcast domain of the VoIP SR and convergence switch.

12.2.6 Principle of Security Data Plan

The security plan involves system security plan, user security plan, and service security plan.
Security policy ensures service security from different aspects.
Issue 01 (2014-04-30)
Service
Type
Multicast
service
VoD
UserVLAN: VLAN carried by upstream packets of user-side devices, U for short.
C-VLAN: VLAN added based on the ONU port. For details, see the description of the
Double-tagged VLAN S+C.
Double-tagged VLAN S+C: C indicates the inner VLAN (C-VLAN) and S indicates the
outer VLAN (S-VLAN).
Double-layer VLAN S+C': C' indicates the translated inner VLAN (C'-VLAN) and S
indicates the outer VLAN (SVLAN).
Single-tagged S-VLAN: Single-tagged VLAN marked or translated by the OLT. It is
generally used in a single-tagged VLAN translation scenario.
C<->S+C': Bidirectional VLAN translation: translates the inner C-VLAN and then adds
one outer S-VLAN.
C<->S+C: Bidirectional VLAN translation: maintains the inner C-VLAN and adds one
outer S-VLAN.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
12 FTTO Configuration(SOHO and SME)
VLAN Plan VLAN Translation Policy
Single- ONUs replicate packets based on user ports and
tagged M-VLANs are removed in downstream
VLAN direction.
The OLT replicates multicast packets based on
PON ports with M-VLAN unchanged.
Single- ONUs add C-VLAN tags to packets. Untagged
tagged VLANs are translated to C-VLANs.
VLAN
The OLT implements VLAN translation: C ->
S.
1091