Configuring Congestion Control And Security Policies - Huawei SmartAX MA5603T Configuration Manual

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
You can remote log in to the ONU from the OLT to perform the configuration. User name:
root (default); password: mduadmin (default)
Step 2 Create an SVLAN and add an upstream port to the VLAN.
huawei(config)#vlan 300 smart
huawei(config)#port vlan 300 0/0 1
Step 3 Configure a traffic profile.
Configure traffic profile 8. The upstream and downstream rates are not limited. Packets
transmitted upstream use the priority (4 by default) copied from the user side. Packets transmitted
downstream use the priority carried by themselves.
huawei(config)#traffic table ip index 8 cir off priority user-cos 4 priority-policy
tag-in-package
Step 4 Add a service port.
Add service port 301 and bind it to port 0/3/1. Set the user VLAN to untagged and bind it to
traffic profile 8.
huawei(config)#service-port 301 vlan 300 eth 0/3/1 multi-service user-vlan
untagged rx-cttr 8 tx-cttr 8
NOTE
Packets sent from the user side (enterprise branches) may be transmitted upstream with a VLAN tag. In this
case, change untagged to the VLAN tag when configuring a service port.
----End

13.3.1.7 Configuring Congestion Control and Security Policies

This topic describes how to configure global priority-based scheduling policies for queues to
ensure service reliability and configure global security policies to ensure service security.
Context
Congestion control uses queue scheduling technology to map packets sent from the same port
into multiple queues and process packets in each queue based on priority. Congestion control is
recommended.
Security policies cover system security, user security, and service security, which ensure normal
running of services.
NOTE
Enable security features based on service types. For details, see
Procedure
l
l
Issue 01 (2014-04-30)
Configure queue scheduling.
Based on 13.2.3 Principle of QoS Data
scheduling and are mapped to queues based on priorities.
huawei(config)#queue-scheduler strict-priority
huawei(config)#cos-queue-map cos0 0 cos1 1 cos2 2 cos3 3 cos4 4 cos5 5 cos6 6
cos7 7 //System default
Configure system security.
– Enable deny of service (DoS) anti-attack on both the OLT and optical network units
(ONUs).
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
13 FTTO Configuration (Large-sized Enterprise Access)
13.2.5 Principle of Security Data
Plan, all packets use strict priorities for queue
Plan.
1279