Chapter14AccessSecurityConguration
Steps
1.EnabletheglobalPPPoE-IA.
ZXAN(config)#pppoe-intermediate-agentenable
2.InGPON-ONUinterfacemode,enablePPPoE-IAontheinterface.
ZXAN(config)#interfacegpon-onu_1/5/1:1
ZXAN(config-if)#pppoe-intermediate-agentenablevport1
3.CongurethePPPoE-IApolicyontheinterface.
ZXAN(config-if)#pppoe-intermediate-agenttrusttruereplacevport1
4.(Optional)QueryeithertheglobalDHCPv4L2RAstatusorDHCPv4L2RAstatuson
VLAN.
ZXAN(config)#showpppoe-intermediate-agentglobal
pppoe-intermediate-agentstatus:enable
5.(Optional)QuerytheinterfacePPPoE-IAconguration.
ZXAN(config)#showpppoe-intermediate-agentportgpon-onu_1/5/1:1vport1
OnuVportPppoe-intermediate-agentstatusTrustPolicy
gpon-onu_1/5/1:11enabletruereplace
–EndofSteps–
Result
WhenthesubscribersendsPPPoEprotocolpackets,thesystemaddsthefollowingelds
tothepackets:
Circuit-id:ZXA10-C300/ZTEeth5/1/1/0/1:10
Remote-id:REMOTE-ID
//where,10isoriginaluserVLAN.
14.1.4ConfiguringtheDHCPv6Layer-2RelayAgent(DHCPv6L2RA)
WhenDHCPv6L2RAisenabled,theZXA10C300addsDHCPv6L2RAOption18and
Option37eldstotheupstreamDHCPpackets.
Context
Theoption18eldincludesCID,andtheoption37eldincludesRID,whichprovidesthe
physicalinformationsuchastheshelfnumber,slotnumber,andportnumber.
lOnlywhenDHCPv6L2RAisenabled,theoption18eldandoption37eldcanbe
added/strippedto/fromDHCPv6packets.Foroption37,theremoteIDstatusshould
beenabledandremoteIDnameshouldbeconguredinaddition.
lWhenDHCPv6L2RAisdisabled,thesystemtransparentlytransmitsordirectly
forwardsDHCPv6packetswithoutanyprocessing.
TheglobalDHCPv6L2RAfunctionandVLANDHCPv6L2RAfunctionaremutually
exclusive.
14-5
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential