Chapter14AccessSecurityConguration
Context
TheLIOeldincludesCID,andprovidestheinformationsuchastheshelfnumber,slot
number,andportnumber.
lOnlywhenNDP-LIOisenabled,theLIOeldcanbeadded/strippedto/fromtheNDP
packets.
lWhenNDP-LIOisdisabled,thesystemtransparentlytransmitsordirectlyforwards
theNDPpacketswithoutanyprocessing.
TheglobalNDP-LIOfunctionandVLANNDP-LIOfunctionaremutuallyexclusive.
CongurationData
Table14-5liststhecongurationdataofNDP-LIO.
Table14-5CongurationDataofNDP-LIO
ItemData
NDP-LIOVLANlVLAN:100
lStatus:enable
NDP-LIOinterfacelInterface:gpon-onu_1/5/1:1
lVirtualport:1
lNDP-LIOstatus:enable
lPolicy:trustandreplace
Steps
1.EnableNDP-LIOonVLAN.
ZXAN(config)#ndp-liovlan100enable
//VLAN100istheservicevlanaftervlan-translation.
2.InGPON-ONUinterfacemode,congureNDP-LIOonthevirtualport.
ZXAN(config)#interfacegpon-onu_1/5/1:1
ZXAN(config-if)#ndp-lioenablevport1
ZXAN(config-if)#ndp-liotrusttruereplacevport1
ZXAN(config-if)#exit
3.(Optional)QueryeithertheglobalNDP-LIOstatusorNDP-LIOstatusonvlan.
ZXAN(config)#showndp-liovlanall
vlantotal:1
vlanlist:100
4.(Optional)QuerytheinterfacecongurationofNDP-LIO.
ZXAN(config)#showndp-lioportgpon-onu_1/5/1:1vport1
OnuVportndp-liostatusTrustPolicy
gpon-onu_1/5/1:11enabletruereplace
–EndofSteps–
14-7
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential