1 — ONT and MDU overview
1-30 November 2013 Alcatel-Lucent 7302 ISAM | 7330 ISAM FTTN | 7360 ISAM FX ONT R04.06.02
Edition 01 3FE 55873 AAAA TCZZA
ONT Product Information Guide
Figure 1-3 ONT packet authorization
Source address anti-spoofing is implemented in either static or dynamic mode.
• Static mode enables the table of authorized source addresses to be provisioned
statically by an operator for one of the following anti-spoofing control types:
• MAC only
• IP-only
• MAC and IP
• Dynamic mode enables the table of authorized source addresses to be provisioned
both statically by an operator and dynamically through DHCP, and supports the
anti-spoofing control type IP-only.
Source address anti-spoofing filters are applied as follows:
• For IP-only anti-spoofing, packets that match a configured source address are
forwarded, and non matching packets are dropped.
• For MAC and IP anti-spoofing, packets that match a configured pair of MAC
source address and IP source address are forwarded, and non-matching packets
are dropped.
• MAC-only anti-spoofing can be implemented in one of two modes:
• Inclusive mode forwards packets that match a configured MAC source address, and
drops non matching packets.
• Exclusive mode forwards packets that do not match a configured MAC source
address, and drops matching packets.
Not all anti-spoofing control types apply to all traffic. Table 1-13 identifies the
anti-spoofing control types and any traffic exemptions by source address
anti-spoofing mode.
Upstream packets
ONT
Forward authorized packets
Discard
unauthorized
packets
Authorized
source addresses
19075
Authorize
packets
To Next Page
Loading...
