145
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
For CLI
create eth-sec-profile <p-name> [src-mac-limit|src-mac-age|dhcp-lease-
limit|upstrm-bcast-mcast-limit|l2cp-filter|dos-attack-detection|allow-
ip-v6|dot1x-profile]
create l2cp-filter <name> [range-1-action|range-2-action|range-3-
action]
delete eth-sec-profile
set eth-sec-profile <p-name> [src-mac-limit|src-mac-age|dhcp-lease-
limit|upstrm-bcast-mcast-limit|l2cp-filter|dos-attack-detection|allow-
ip-v6|dot1x-profile]
set l2cp-filter <name> [range-1-action|range-2-action|range-3-action]
delete l2cp-filter <name>
create dot1x-profile <name>
set dot1x-profile <name> [reauth-period|quiet-period|reauth-timer|max-
retries|svr-timeout|retrans-timer]
show dot1x-profile
show eth-sec-profile [<p-name>]
Creating an L2CP Filter
This topic shows you how to create an Layer 2 Control Protocol (L2CP) filter that specifies
which L2CP ranges to discard or tunnel L2CP protocol frames. The E-Series already has two
system default filters that either discard (all-discard) or pass (all-tunnel) all L2CP protocol
frames for all ranges.
The L2CP filter is referenced from the Ethernet security profile that is applied to an xDSL
port interface to enable and/or specify security attributes of the xDSL port.
Note: The E-Series implementation of security profiles applies to non-TLAN services only.
Layer 2 Control Protocol (L2CP) handling
The E-Series supports provisionable Layer 2 Control Protocol (L2CP) handling (tunnel,
discard) on xDSL interfaces and VLANs on the interface. The L2CP filtering is an MEF-
driven requirement for business services that use BPDU tunneling. The L2CP feature
supports per subscriber port configuration options to pass or discard the following L2CP
protocols:
BPDU Range - indicates L2CP protocol frames with destination MAC addresses
0x01:80:c2:00:00:00 through 0x01:80:c2:00:00:0f.
GARP Range - indicates L2CP protocol frames with destination MAC addresses
0x01:80:c2:00:00:20 through 0x01:80:c2:00:00:2f.
All-LANs Range - (Bridge Management Group) indicates L2CP protocol frames with
the destination MAC address 0x01:80:c2:00:00:10.
To Next Page
Loading...