8-65
Cisco ONS 15454 DWDM Reference Manual, R8.5
78-18343-02
Chapter 8 Transponder and Muxponder Cards
8.11.6 Security
• Ingress CoS—Assigns a CoS value to the port from 0 (highest) to 7 (lowest) and accepts CoS of
incoming frames.
• Egress QoS—Defines the QoS capabilities at the egress port.
• NIM—Defines the port network interface management type based on Metro Ethernet Forum
specifications. Ports can be defined as UNI (user-to-network interface) or NNI (network-to-network
interface).
• MAC Learning—MAC Address learning to facilitate switch processing.
• VLAN tagging provided according to the IEEE 802.1Q standard.
Note When the GE_XP and 10GE_XP cards are provisioned in a MXP or TXP mode, only the following
parameters are available: Port Name, State, MTU, Mode, Flow control, and Bandwidth.
8.11.6 Security
GE_XP and 10GE_XP card ports can be provisioned to block traffic from a user-defined set of MAC
addresses. The remaining traffic is normally switched. You can manually specify the set of blocked MAC
addresses for each port. Each port of the card can receive traffic from a limited predefined set of MAC
addresses. The remaining traffic will be dropped. This capability is a subset of the Cisco IOS “Port
Security” feature.
8.11.7 Y-Cable Protection
The GE_XP card supports Y-cable protection when it is provisioned in 10GE or 20GE MXP card mode.
The 10GE_XP supports Y-cable protection when it is provisioned in 10GE TXP card mode. Two cards
can be joined in a Y-cable protection group with one card assigned as the working card and the other
defined as the protection card. This protection mechanism provides redundant bidirectional paths. See
the “8.13.1 Y-Cable Protection” section on page 8-75 for more detailed information. The Y-protection
mechanism is provisionable and can be set ON or OFF (OFF is the default mode). When a signal fault
is detected (LOS, LOF, SD, or SF on the DWDM receiver port in the case of ITU-T G.709 mode) the
protection mechanism software automatically switches between paths.
8.11.8 Layer 2 Over DWDM Protection
When the GE_XP and 10GE_XP are in Layer 2 (L2) over DWDM card mode, protection is handled by
the hardware at the Layer 1 and Layer 2 levels. Fault detection and failure propagation is communicated
through the ITU-T G.709 frame overhead bytes. For protected VLANs, traffic is flooded around the
10GE DWDM ring. To set up the Layer 2 protection, you identify a node and the GE_XP or 10GE_XP
port that is to serve as the master node and port for the VLAN ring on the card view Provisioning >
Protection tab (Figure 8-26). If a failure occurs, the node and port are responsible for opening and
closing VLAN loops.
Note The Forced option in the Protection drop-down list converts all the SVLANs to protected SVLANs
irrespective of the SVLAN protection configuration in the SVLAN database. This is applicable to a
point-to-point linear topology. The SVLAN protection must be forced to move all SVLANs, including
protected and unprotected SVLANs, to the protect path irrespective of provisioned SVLAN attributes.
To Next Page
Loading...
Need help?
General
