.jpeg)
Connected to it with a console cable at a speed of 9600.
There was no configuration, all ports are turned off.
There may be a standard identical username and password admin
After connecting, let’s go to the configuration mode:
| 1 2 | enableconfig |
Let’s see what is the saved and active configuration:
| 1 2 | show configurationshow running-config |
Let’s start setting up!
1) Remove the standard vlan 1 and add the management vlan (I have it 207), vlan 301 (client):
| 1 2 3 4 5 6 7 8 | no interface vlan 1vlan 207,301exitinterface vlan 207description coreip address 192.168.1.3 255.255.255.0exitip default-gateway 192.168.1.1 |
2) I configured the fifth combo port as incoming (207 – management vlan, 301 – client):
Cost Of Living In Canada For International Students
| 1 2 3 4 5 6 7 8 | interface gigaEthernet 0/5description UPLINKno shutdownswitchport trunk vlan-allowed 207switchport trunk vlan-allowed add 301switchport trunk vlan-untagged noneswitchport mode trunkexit |
I chose a combo port so that I could enable the incoming link via copper or SFP.
3) Let’s write a template for ONU (in the future they will register themselves,
you will only need to add a description and save the config):
| 1 2 3 4 5 6 7 8 9 10 11 | epon onu-config-template user1cmd-sequence 001 epon onu port 1 ctc vlan mode tag 301cmd-sequence 002 epon onu port 1 ctc loopback detectcmd-sequence 003 epon onu port 2 ctc vlan mode tag 301cmd-sequence 004 epon onu port 2 ctc loopback detectcmd-sequence 005 epon onu port 3 ctc vlan mode tag 301cmd-sequence 006 epon onu port 3 ctc loopback detectcmd-sequence 007 epon onu port 4 ctc vlan mode tag 301cmd-sequence 008 epon onu port 4 ctc loopback detectcmd-sequence 009 loopback-detection recovery-time 7200exit |
Another example of commands for a template:
| 1 2 3 4 | switchport port-security dynamic maximum 2switchport port-security mode dynamicepon onu all-port storm-control mode 4 threshold 256epon onu all-port ctc loopback detect |
Manually allow only two MAC addresses per ONU:
| 1 2 3 | interface EPON0/2:2switchport port-security dynamic maximum 2switchport port-security mode dynamic |
4) Set up EPON ports:
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 | interface EPON0/1no shutdowndescription madankcswitchport trunk vlan-untagged noneswitchport trunk vlan-allowed 301switchport mode trunkepon pre-config-templateuser1 binded-onu-llid 1-64filter dhcpfilter bpduswitchport protected 1 interface EPON0/2no shutdowndescription Madankcswitchport trunk vlan-untagged noneswitchport trunk vlan-allowed 301switchport mode trunkepon pre-config-template user1 binded-onu-llid 1-64filter dhcpfilter bpduswitchport protected 2interface EPON0/3no shutdowndescription ixnfoswitchport trunk vlan-untagged noneswitchport trunk vlan-allowed 301switchport mode trunkepon pre-config-template user1 binded-onu-llid 1-64filter dhcpfilter bpduswitchport protected 3 interface EPON0/4no shutdowndescription ixnfoswitchport trunk vlan-untagged noneswitchport trunk vlan-allowed 301switchport mode trunkepon pre-config-template user1 binded-onu-llid 1-64filter dhcpfilter bpduswitchport protected 4 |
5) Add admin and password:
| one234five6 | aaa authentication login default aaa authentication enable aaa authorization execusername admin enable password 0 TEXTservice password-encryption |
6) Specify from which IPs the admin is allowed to connect:
| one234 | ip access-list standard MANAGEMENTpermit 192.168.1.2 exitip telnet access-class MANAGEMENT |
7) Specify the time zone and NTP server with which to synchronize the time (on new firmware, instead of sntp, you need to write ntp):
| one23 | time-zone Kyiv +2sntp server 192.168.1.1sntp query-interval 3600 |
8) Configure SNMP:
| one23 | snmp-server location testsnmp-server contact testsnmp-server community public ro MANAGEMENT |
9) Set the device name and the length of the console line:
| one23 | hostname TESTterminal width 256terminal length 256 |
10) Disable HTTP:
| one | no ip http server |
Or configure with IP access from a previously created access-list:
| one2 | ip http serverip http access-class MANAGEMENT |
Specify the period in seconds after which the port should turn on after the error-disable state:
| one | error-disable-recovery 10800 |
For the test, I took ONU BDCOM P1501C1 (no need to configure), FOXGATE 1001w and FOXGATE 1001c (no need to configure), Foxgate NR1001 (standard IP 192.168.101.8 admin / admin) and TP-Link EP110 (you need to disable DHCP by going to 192.168.1.1) , connected them through a 1 * 8 divider to the first PON port.
Let’s save the settings:
| one | write |
On new firmware, save like this:
| one | write all |
This completes the basic setup.
Select the desired ONU and add a description:
| 1 2 | interface EPON0/1:1description TEST |
You can limit the speed on the ONU ports in kilobits, for this we will execute the commands (you can also specify them in the template above):
| 1 2 | epon onu port 1 ctc rate-limit 15000 ingressepononu port 1 ctc rate-limit 15000 egress |
If it is necessary for the ethernet port of the ONU to pass 1Gb / s, then we specify (if not specified, then pir 100000 cir 1000 is used by default for all ONUs):
| 1 2 3 | interface EPON0/3:15epon sla upstream pir 1000000 cir 10000epon sla downstream pir 1000000 cir 10000 |
If it is necessary that traffic can go between ONUs (which is not recommended!), then add the command for the port:
| 1one | epon inner onu switch |
Optionally, instead of telnet, you can use SSH, which is enabled by the command:
| 1one | ip sshd enable |
An example of setting up a GigaEthernet port with a vlan without a tag:
| 1 2 3 4 | interface GigaEthernet0/6switchport mode accessswitchport pvid 301switchport protected 1 |
An example of including short SNMP descriptions, for example, by default: GigaEthernet0/1, EPON0/1, and with the executed command: g0/1, epon0/1:
| 1 2 | short-ifdescrnoshort-ifdescr |
