VES-1616FE/1624FT-55A

Transcription

1 VES-1616FE/1624FT-55A 16/24-port VDSL2 remote IP DSLAM Support Notes Version /2008 Edition 2

2 Table of Contents TABLE OF CONTENTS...1 IPQOS...4 WHAT IS IPQOS?...4 IPQOS PARAMETERS...4 IPQOS EXAMPLES...6 In the VDSL mode...6 ADSL mode: Multiple PVC in SPQ...13 ADSL mode: Multiple PVC in WRR...23 DOUBLE TAGGING (DT)...33 DOUBLE TAGGING OVERVIEW...33 HOW TO CONFIGURE DOUBLE TAGGING?...33 A DOUBLE TAGGING EXAMPLE...34 DOUBLE TAGGING RESTRICTION...35 COMPARISON BETWEEN DT & TLS...35 N1MAC...37 N1MAC OVERVIEW...37 A N1MAC EXAMPLE...37 ADVANTAGE OF N1MAC...37 HOW TO CONFIGURE N1MAC...38 CHECK THE N1MAC STATUS...38 UPSTREAM/DOWNSTREAM BROADCAST...40 UPSTREAM BROADCAST OVERVIEW...40 UPSTREAM BROADCAST EXAMPLE...41 DOWNSTREAM BROADCAST OVERVIEW...41 DOWNSTREAM BROADCAST EXAMPLE...41 U/S BROADCAST VS. D/S BROADCAST...42 ACL (ACCESS CONTROL LOGIC)...43 ACL OVERVIEW...43 ACL PACKET PROCESS...43 HOW TO CONFIGURE ACL?...43 CHECK THE ACL PORT MAP...45 All contents copyright (c) 2008 ZyXEL Communications Corporation. 1

3 PROTOCOL VLAN...46 WHAT IS PROTOCOL VLAN?...46 HOW DOES PROTOCOL VLAN WORK?...46 PROTOCOL VLAN EXAMPLE...47 COMPARISON BETWEEN PROTOCOL VLAN AND ACL...53 DIFFERENCE IN RULE...53 DIFFERENCE IN ACTION...54 DOT3AD...55 WHAT IS DOT3AD?...55 RESTRICTION ON LACP...56 LACP EXAMPLE...57 HOW TO CONFIGURE DOT3AD?...58 DHCP RELAY (AND OPTION 82)...60 WHAT IS DHCP RELAY?...60 WHAT IS DHCP RELAY AGENT INFORMATION OPTION 82?...60 HOW DOES DHCP REPLAY (AND OPTION 82) WORK?...61 PRIVATE FORMAT...62 TR-101 FORMAT...63 BENEFITS OF DHCP RELAY...63 OPTION 82 EXAMPLE (IN TR-101 FORMAT)...64 DHCP RELAY (AND OPTION 82) SETTINGS...65 PPPOE INTERMEDIATE AGENT...67 WHAT IS PPPOE INTERMEDIATE AGENT?...67 HOW DOES PPPOE INTERMEDIATE AGENT WORK?...68 PRIVATE FORMAT...69 TR-101 FORMAT...70 PPPOE INTERMEDIATE AGENT EXAMPLE (IN PRIVATE FORMAT)...71 PPPOE INTERMEDIATE AGENT SETTINGS...72 IMPULSE NOISE PROTECTION (INP)...73 UPSTREAM POWER BACK-OFF (UPBO)...74 WHAT IS UPBO?...74 MODES OF UPBO...75 METHODS OF UPBO...77 SYSTEM MANAGEMENT AND MAINTENANCE...78 All contents copyright (c) 2008 ZyXEL Communications Corporation. 2

4 FIRMWARE UPGRADE...78 RESTORE A CONFIGURATION FILE...80 BACK UP A CONFIGURATION FILE...82 RESTORE DEFAULT CONFIGURATION...83 FAQ...86 All contents copyright (c) 2008 ZyXEL Communications Corporation. 3

5 IPQoS What is IPQoS? IPQoS Overview Quality of Service (QoS) refers to both a network s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested. This can cause a reduction in network performance and make the network inadequate for time-critical application such as video-on-demand. A layer-2 classifier groups traffic according to the Ethernet type, VLAN group, MAC address and /or port number. A layer-3 classifier groups traffic according to the IP address and/or TCP/UDP protocol number. Configure IPQoS on the IP DSLAM to group and prioritize application traffic in queues for downstream direction (toward CPE devices) and fine-tune network performance. Notes IPQoS is applied to the downstream traffic only. Limit IP data rate of the traffic flowing through a physical queue. IPQoS supports 1, 2, 4, and 8 queues. Used, instead of ATM QoS, when falling back to ADSL2+ mode. IPQoS Parameters Setting up IPQoS involves four parameters. All contents copyright (c) 2008 ZyXEL Communications Corporation. 4

6 PIR (Peak Information Rate): This is the maximum data rate allowed for the downstream traffic flowing through the IP DSLAM. Enter the maximum data rate (512~ kbps) allowed to flow through this device at peak hour. (You must enter the number which is a multiple of 256.) CIR (Committed Information Rate): This is the guaranteed data rate for the downstream traffic flowing through the IP DSLAM. Enter the maximum data rate (256~65536 kbps) guaranteed to flow through this device all the time. CIR < PIR two times of CIR in a queue. (You must enter the number which is a multiple of 256.) PBS (Peak Burst Size): This is the maximum burst size allowed for the downstream traffic flowing through the IP DSLAM when the burst data rate is between the predefined PIR and CIR. Enter the maximum packet size (3072~65536 bytes) allowed to flow through this device at peak hour. (You must enter the number which is a multiple of 256.) CBS (Committed Burst Size): This is the guaranteed burst size for the downstream traffic flowing through the IP DSLAM when the burst data rate is smaller than the predefined CIR. Enter the maximum packet size (3072~65536 bytes) guaranteed to flow through this device all the time. The CBS should be equal or less then PBS in a queue. (You must enter the number which is a multiple of 256.) Level: Enter the priority level (0~7) for each queue. 0 is the lowest priority level and 7 is the highest. Weight: Enter the queue weight (1~127) for each queue. The IP DSLAM services queues based on their priority level and queue weight rather than a fixed amount of bandwidth. Queues with larger weights would get more services than queues with smaller weights. This All contents copyright (c) 2008 ZyXEL Communications Corporation. 5

7 queue mechanism is highly efficient in which it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied. IPQoS Examples In the VDSL mode FTP VOD tag: p = 0 tag: p = 7 p = 0 p = 7 PORT1 (100 Mbps) 40 Mbps 60 Mbps In this example, we allocate 60 Mbps (at maximum) to the video stream (VOD) and 40 Mbps (at maximum) to the data traffic (FTP). Besides, as VOD is a time-critical application, we tag the stream 802.1p priority = 7 on the upper switch, and let the stream flow through the highest queue of PORT1 of the All contents copyright (c) 2008 ZyXEL Communications Corporation. 6

8 VES-1624FT-55A. Configure the VES-1624FT-55A 1. xdsl Profiles Setup a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Then it displays the xdsl Profile panel. b. Type 100M_50M in the Name field. c. Type in the Max Rate field for Up Stream and for Down Stream. d. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 7

9 2. Configure IPQoS Profile a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. b. Click the IPQoS Profile tab to open the IPQoS Profile panel. c. Type FTP_VOD in the Name field. d. Select 2 from the Number of Queues drop-down list box. e. Type in the PIR field and in the CIR field for Queue 0. f. Type in the PIR field and in the CIR field for Queue 1. g. Type 0 in the Level field for Queue 0. h. Type 7 in the Level field for Queue 1. i. Click the Apply button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 8

10 3. Apply xdsl Profile and IPQoS Profile to PORT 1 a. In the navigation panel, click Basic Setting > xdsl Port Setup. Then it displays the xdsl Port Setup panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 9

11 b. Click the index of Port 1. c. Select 100M_50M from the Profile drop-down list box. d. Select FTP_VOD from the IPQoS Profile drop-down list box. e. Click the Apply button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 10

12 4. Save the Settings a. In the navigation panel, click Config Save > Config Save. b. Click the Save button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 11

13 All contents copyright (c) 2008 ZyXEL Communications Corporation. 12

14 ADSL mode: Multiple PVC in SPQ FTP VOD 0/33 0/36 PORT1 (20 Mbps) 5.12 Mbps Mbps All contents copyright (c) 2008 ZyXEL Communications Corporation. 13

15 In this example, we configure two PVCs, 0/33 and 0/36, on PORT1. 0/33 is for the data traffic, and 0/36 is for the video stream Mbps (at maximum) is allocated to FTP (data), and Mbps (at maximum) is allocated to VOD. As VOD is a time-critical application, we let the video stream flow through the highest queue. Settings on PORT1 are listed as below. Traffic Type PVC PIR CIR Level Data (FTP) 0/ Mbps 2.56 Mbps 0 Video (VOD) 0/ Mbps 5.12 Mbps 7 Configure the VES-1624FT-55A 1. xdsl Profile Setup a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Then it displays the Port Profile panel. b. Type 20M_1M in the Name field. c. Type 1000 in the Max Rate field for Up Stream and for Down Stream. d. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 14

16 2. Configure IPQoS Profile for VOD (Video) a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Click the IPQoS Profile tab to open the IPQoS Profile panel. b. Type CBR in the Name field. c. Type in the PIR field. d. Type 5120 in the CIR field. e. Type 7 in the Level field. f. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 15

17 3. Configure IPQoS Profile for FTP (Data) a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Click the IPQoS Profile tab to open the IPQoS Profile panel. b. Type UBR in the Name field. c. Type 5120 in the PIR field. d. Type 2560 in the CIR field. e. Type 0 in the Level field. f. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 16

18 4. Apply xdsl Profile to PORT1 a. In the navigation panel, click Basic Setting > xdsl Port Setup. Then it displays the xdsl Port Setup panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 17

19 b. Click the index of Port 1. It displays the xdsl Port Setting panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 18

20 c. Select 20M_1M from the Profile drop-down list box. d. Select adsl2+ from the Mode drop-down list box. e. Click the Apply button. 5. Apply IPQoS profile to the PVC of 0/33. a. In the navigation panel, click Basic Setting > xdsl Port Setup. b. Click the VC Setup tab. It displays the VC Setup panel. c. Click the index of 0/33 of Port 1. d. Select UBR from the IPQoS Profile drop-down list box. e. Click the Apply button. 6. Create the PVC of 0/36, and apply the CBR profile to it. All contents copyright (c) 2008 ZyXEL Communications Corporation. 19

21 a. In the navigation panel, click Basic Setting > xdsl Port Setup. b. Click the VC Setup tab. c. Select 1 from the Port field. d. Type 0 in the VIP field and 36 in the VCI field. e. Select CBR from the IPQoS Profile field. f. Select 7 from the Priority drop-down list box. g. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 20

22 7. Save the Settings a. In the navigation panel, click Config Save > Config Save. b. Click the Save button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 21

23 All contents copyright (c) 2008 ZyXEL Communications Corporation. 22

24 ADSL mode: Multiple PVC in WRR FTP VOD 0/33 0/36 PORT1 (20 mbps) WRR = 40 WRR = 60 All contents copyright (c) 2008 ZyXEL Communications Corporation. 23

25 In this example, we configure two PVCs, 0/33 and 0/36, on PORT1. 0/33 is for the data traffic, and 0/36 is for the video stream. As VOD is a time-critical application, we set WRR = 60 on 0/36 and WRR = 40 on 0/33. Settings on PORT1 are listed as below. Traffic Type PVC PIR CIR Level WRR Data (FTP) 0/ Mbps 2.56 Mbps 0 40 Video (VOD) 0/ Mbps 2.56 Mbps 0 60 Configure the VES-1624FT-55A 1. xdsl Profile Setup a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Then it displays the Port Profile panel. b. Type 20M_1M in the Name field. c. Type 1000 in the Max Rate field for Up Stream and for Down Stream. d. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 24

26 2. Configure IPQoS Profile for 0/33 a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Click the IPQoS Profile tab. Then it displays the IPQoS Profile panel. b. Type WRR_40 in the Name field. c. Select 1 from the Number of Queues drop-down list box. d. Type 5120 in the PIR field. e. Type 2560 in the CIR field. f. Type 0 in the Level field. g. Type 40 in the Weight field. h. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 25

27 3. Configure IPQoS Profile for 0/36 a. In the navigation panel, click Basic Setting > xdsl Profiles Setup. Click the IPQoS Profile tab. Then it displays the IPQoS Profile panel. b. Type WRR_60 in the Name field. c. Select 1 from the Number of Queues drop-down list box. d. Type 5120 in the PIR field. e. Type 2560 in the CIR field. f. Type 0 in the Level field. g. Type 60 in the Weight field. h. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 26

28 4. Apply xdsl Profile to PORT 1 a. In the navigation panel, click Basic Setting > xdsl Port Setup. Then it displays the xdsl Port Setup panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 27

29 b. Click the index of Port 1. It displays the xdsl Port Setting panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 28

30 c. Select 20M_1M from the Profile drop-down list box. d. Select adsl2+ from the Mode drop-down list box. e. Click the Apply button. 5. Apply IPQoS profile to the PVC of 0/33. a. In the navigation panel, click Basic Setting > xdsl Port Setup. b. Click the VC Setup tab. It displays the VC Setup panel. c. Click the index of 0/33 of Port 1. d. Select WRR_40 from the IPQoS Profile drop-down list box. e. Click the Apply button. 6. Create the PVC of 0/36, and apply the CBR profile to it. All contents copyright (c) 2008 ZyXEL Communications Corporation. 29

31 a. In the navigation panel, click Basic Setting > xdsl Port Setup. b. Click the VC Setup tab. c. Select 1 from the Port field. d. Type 0 in the VIP field and 36 in the VCI field. e. Select WRR_60 from the IPQoS Profile field. f. Select 7 from the Priority drop-down list box. g. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 30

32 7. Save the Settings a. In the navigation panel, click Config Save > Config Save. b. Click the Save button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 31

33 All contents copyright (c) 2008 ZyXEL Communications Corporation. 32

34 Double Tagging (DT) Double Tagging Overview Translate untagged packets into double-tagged ones before forwarding them. With Double Tagging (DT) enabled, the IP DSLAM can add two tags (C-tag and S-tag) of the VLAN ID and priority level for untagged packets received from a private network to those used in the service provider s network. Once DT is enabled on a port, the port is called as a DT access port. The IP DSLAM adds VLAN tags for untagged traffic but drops tagged traffic flowing through the DT access ports. How to configure Double Tagging? Add two tags of the VLAN ID and priority level for untagged packets received on a DT access port C-tag: Customer Tag (Inner Tag) C-VID: Enter the C-tag VLAN ID from 1 to C-Pri: Enter the C-tag priority level from 0 to 7. S-tag: Service Tag (Outer Tag) S-VID: Enter the S-tag VLAN ID from 1 to S-Pri: Enter the S-tag priority level from 0 to 7. All contents copyright (c) 2008 ZyXEL Communications Corporation. 33

35 A Double Tagging Example In this example, we add double tags to the uplink traffic flowing through PORT 3 of the VES-1624FT-55A. The corresponding settings are listed below. C-tag C-VID: 203 C-Pri: 5 S-tag: S-VID: 10 S-Pri: 7 Follow the steps below to configure the VES-1624FT-55A. a. In the navigation panel, click Advanced Application > DT. Then it displays the DT panel. b. Select 3 from the Port drop-down list box. c. Type 10 in the S-tag VID field. d. Select 7 from the S-tag Priority drop-down list box. e. Type 203 in the C-tag VID field. f. Select 5 from the C-tag Priority drop-down list box. g. Click to check the DT Enable checkbox. h. Click the Apply button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 34

36 Double Tagging Restriction For upstream packets only Tagged packets (including double-tagged packets) received on the DT access ports are dropped IGMP-related features & DHCP Relay cannot work with DT Cannot configure DT and TLS settings on the same port Comparison between DT & TLS TLS adds one VLAN tag for incoming packets and removes one tag for outgoing packets. DT adds two VLAN tags for incoming packets and removes two tags for All contents copyright (c) 2008 ZyXEL Communications Corporation. 35

37 outgoing packets. TLS accepts tagged packets, while DT drops the packets. TLS cannot add the VLAN ID which is the same as any PVID for incoming packets, but DT is allowed to use these VLAN IDs. DT adds two VLAN tags of the VLAN ID and priority level for incoming packets according to the DT settings TLS adds VLAN ID for incoming tagged packets according to the TLS settings, but adds priority value using the 802.1p priority of the incoming tagged packets. Use the priority value of the inner tag All contents copyright (c) 2008 ZyXEL Communications Corporation. 36

38 N1MAC N1MAC Overview N1MAC is multiple-to-one MAC address conversion. N1MAC allows the IP DSLAM to replace the MAC addresses of subscriber xdsl modems with the IP DSLAM s MAC address in upstream packets. This removes the demand to maintain a big MAC address table and prevents MAC spoofing attacks on central devices behind the IP DSLAM. A N1MAC Example In this example, N1MAC is enabled on ports 1, 3 and 5 for traffic forwarded from these VDSL modems. A (IP DSLAM) replaces subscriber xdsl modem MAC addresses (MAC1, MAC2 and MAC3) with its MAC address (MAC-A) on a frame forwarded to the backbone network (B). Backbone devices only see a frame from A and record only A s MAC address in their MAC tables. Advantage of N1MAC Security All contents copyright (c) 2008 ZyXEL Communications Corporation. 37

39 Devices on the network behind the IP DSLAM only see and record the IP DSLAM s MAC address. Reduce the MAC flapping on the Internet. How to configure N1MAC Enable N1MAC on specified port(s). N1MAC replaces the subscriber s source MAC address with the System MAC (= Inband MAC address + 2). Inband MAC address Check the N1MAC Status Click Advanced Applications > N1MAC > N1Mac Status to check the N1MAC status Use this panel to check the multiple-to-one MAC mapping table for port(s). PPPoE/PPPoA connection: Record the PPP session with the MAC address IPoA/IPoE: Record the IP with the MAC address All contents copyright (c) 2008 ZyXEL Communications Corporation. 38

40 All contents copyright (c) 2008 ZyXEL Communications Corporation. 39

41 Upstream/Downstream Broadcast Upstream Broadcast Overview Upstream Broadcast allows you to define the maximum data transmission rate for upstream broadcast traffic allowed to pass through the IP DSLAM. Reduce the incoming broadcast packets and system load. Upstream Broadcast limits the bandwidth of upstream broadcast packets received on each VDSL port (or ADSL PVC). The upstream broadcast packets includes the broadcast packets and the unknown unicast packets. DHCP and ARP packets are unlimited and can pass through the ports (or PVCs). All contents copyright (c) 2008 ZyXEL Communications Corporation. 40

42 Upstream Broadcast Example : Broadcast + Unknown Unicast traffic (a) 32kbps 16kbps 32kbps (a) (b) (c) 64kbps 16kbps 128kbps (b) (c) Downstream Broadcast Overview Downstream broadcast allows you to block downstream broadcast packets from being sent to specified VLANs on specified ports. Downstream Broadcast Example All contents copyright (c) 2008 ZyXEL Communications Corporation. 41

43 U/S Broadcast vs. D/S Broadcast Once U/S Broadcast is enabled, it is applied to all the subscriber ports; D/S Broadcast is enabled for per VLAN per Port. Users can specify bandwidth for the U/S broadcast traffic, but for the D/S broadcast traffic, users are only allowed either to block all the D/S broadcast traffic or not to. All contents copyright (c) 2008 ZyXEL Communications Corporation. 42

44 ACL (Access Control Logic) ACL Overview An ACL profile allows the IP DSLAM to classify and perform actions on the upstream traffic. Each ACL profile consists of a rule and an action, and you could assign ACL profiles to ports/pvcs. ACL Packet Process Rx Packet Packet Process flow: Receive packet from DSL port Port Filter Classifier Deny Flow# Packet passes through the enabled bridge port filters which are depend on the applying of the ACL profiles for the bridge port. Check if the contents of the packet classifier fields are matched with those in ACL profiles Forward Packets ACL filter process flow: If the comparison is matched, the packet will be dropped or forwarded depending on the action rule of the ACL profiles. How to Configure ACL? a. Click Advanced Application > ACL > ACL Profile to create an ACL All contents copyright (c) 2008 ZyXEL Communications Corporation. 43

45 profile. In this example, we create an ACL profile, cso, to replace the VLAN tag of the packets of which the VLAN tag is 30 and the MAC address is 00:13:49:03:02:91 with the new VLAN tag 3. b. Apply the ACL profile on a DSL port. In this example, we apply the cso profile to port 1. All contents copyright (c) 2008 ZyXEL Communications Corporation. 44

46 Check the ACL Port Map Click Advanced Application > ACL > ACL Port Map to check all the ACL profiles and the ports/pvcs to which each one is assigned. All contents copyright (c) 2008 ZyXEL Communications Corporation. 45

47 Protocol VLAN What is Protocol VLAN? Overview With protocol-based VLAN (PVLAN), 802.1Q untagged packet will be tagged a VLAN ID based on its protocol. Enable this feature on a port when you want to convert the VLAN untagged packets, sent from the connected CPE device, to VLAN-tagged packets which are then allowed to flow into a VLAN-tagged switch network for specified traffic. You can set different VLANs for different kinds of application traffic on a port. Notes PVLAN (Protocol VLAN) adds a tag of the VLAN ID and priority level for the incoming packets based on the protocol. For untagged packets only. Tagged packets received on the port(s) are dropped. With PVLAN, you can set different VLANs for different kinds of application traffic on a port. How does Protocol VLAN Work? Ethernet Type: 4 digits in hexadecimal, which specify the protocol traffic. For example: 0x0800: IP 0x0806: ARP All contents copyright (c) 2008 ZyXEL Communications Corporation. 46

48 According to the Ethernet type of incoming packets, PVLAN adds a tag. Uplink port and the DSL port must join the VLAN to forward these tagged packets. Protocol VLAN Example In this example, we define 0806 (ARP) and 0800 (IP) on port 1 to tag the untagged ARP and IP packets with the VLAN ID of 200 and the 802.1p priority of 2. The other untagged packets will be tagged with the PVID. Configure the VES-1624FT-55A 1. Make certain the VLAN that you will set has been created properly. a. In the navigation panel, click Advanced Application > VLAN > Static VLAN Settings. Then it displays the Static VLAN Settings panel. b. In Static VLAN Settings, check if the VLAN ID of 200 has been created properly. All contents copyright (c) 2008 ZyXEL Communications Corporation. 47

49 2. Protocol VLAN Settings: Define 0800 (IP) on port 1 a. In the navigation panel, click Advanced Application > Protocol VLAN. b. Select 1 from the Port drop-down list box. c. Click to select the VDSL Frame Mode checkbox. (In this example, the port 1 is assumed to be a VDSL port). d. Type 200 in the VID field. e. Type 0800 in the Ether Type field. f. Select 2 from the Priority drop-down list box. g. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 48

50 3. Protocol VLAN Settings: Define 0806 (ARP) on port 1 a. In the navigation panel, click Advanced Application > Protocol VLAN. b. Select 1 from the Port drop-down list box. c. Click to select the VDSL Frame Mode checkbox. (In this example, the port 1 is assumed to be a VDSL port). d. Type 200 in the VID field. e. Type 0806 in the Ether Type field. f. Select 2 from the Priority drop-down list box. g. Click the Add button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 49

51 4. Save the Settings a. In the navigation panel, click Config Save > Config Save. b. Click the Save button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 50

52 5. Check the Outcome We use a network traffic analyzer, e.g. Wireshark, to check the outgoing packets on the uplink port. With the previous settings, we can see that an incoming untagged ARP packet is tagged by Protocol VLAN with VLAN ID = 200 and 802.1p Priority = 2 as below. All contents copyright (c) 2008 ZyXEL Communications Corporation. 51

53 All contents copyright (c) 2008 ZyXEL Communications Corporation. 52

54 Comparison between Protocol VLAN and ACL According to the Ethernet type, either Protocol VLAN or ACL can add tags for incoming untagged packets, but there still are some differences between Protocol VLAN and ACL: Rule Action Difference in Rule PVLAN checks the Ethernet type only. ACL checks the Ethernet type with vlan, smac or dmac. All contents copyright (c) 2008 ZyXEL Communications Corporation. 53

55 Difference in Action Both PVLAN and ACL can add VLAN ID and priority level for incoming untagged packets. ACL can, moreover, limit the rate and drop the packets. All contents copyright (c) 2008 ZyXEL Communications Corporation. 54

56 Dot3ad What is Dot3ad? IEEE 802.3ad link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link. Link Aggregation Control Protocol (LACP) is part of an IEEE specification (802.3ad) that allows you to bundle several physical ports together to form a single logical channel. LACP allows a switch to negotiate an automatic bundle by sending LACP packets to the peer. There might be misunderstanding about the LACP function. Some people may think that when there is some traffic coming from PC1 (See the following figure.), the traffic will be separated into two paths. This is wrong! Because the link aggregation type is load sharing, not load balance. PC 2 The distribution of traffic is based on the Source and Destination MAC addresses of Ethernet frames The traffic flow of a pair of clients will be transmitted through one of the connection of the Trunk Group only Link Aggregation Ports PC 1 All contents copyright (c) 2008 ZyXEL Communications Corporation. 55

57 While the destination and source of pair of clients traffic flow will be transmitted only through one of the paths of the trunk group. If there is another possible destination or source the traffic flow will be transmitted through another path. Notes Dot3ad bonds several physical Ethernet connections as one logical connection to get higher bandwidth. Dot3ad allows port redundancy. Trunk Group: ENET1 + ENET2. You don t have available ports after aggregating the two Ethernet ports on the IP DSLAM. Restriction on LACP LACP must be supported on both end LACP only works on full-duplex links Both end must have the same media type Speed duplex mode flow control settings All contents copyright (c) 2008 ZyXEL Communications Corporation. 56

58 LACP Example Aggregated Links Set the priority for an Ethernet member link, AKA an Ethernet port, in an IEEE 802.3ad link aggregation group (LAG) bundle. The member link with the lowest numerical priority value has the highest priority. The Ethernet member link with the highest priority would be first selected to join the LAG bundle. LACP System Priority is used to determine link aggregation group (LAG) membership and to identify this device for other switches during LAG negotiations. (Range: ; Default: 0) Ports must be configured to the same system priority to join the same LAG. System priority is combined with the switch's MAC address to form the LAG identifier. This identifier is used to indicate a specific LAG during LACP negotiations with other systems. Configure trunk groups or LACP before connecting the switch to avoid causing network topology loops. All contents copyright (c) 2008 ZyXEL Communications Corporation. 57

59 How to Configure Dot3ad? Dot3ad Mode Select Disable to disable link aggregation on the IP DSLAM. Select LACP to dynamically create and manage the trunk group. Select Static to have the IP DSLAM add the two Ethernet ports into a trunk group. LACP Priority Type a number among 1 and for the LACP system priority. The IP DSLAM with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP server. The LACP server controls the operation of LACP setup. All contents copyright (c) 2008 ZyXEL Communications Corporation. 58

60 LACP Timeout LACP timeout is the time interval between the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up. If a port does not respond after three tries, then it is deemed to be down and is removed from the trunk. Set a short timeout (one second) for busy trunked links to ensure that disabled ports are removed from the trunk group as soon as possible. Short: 1 second Long: 30 seconds All contents copyright (c) 2008 ZyXEL Communications Corporation. 59

61 DHCP Relay (and Option 82) What is DHCP Relay? DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a DHCP server. You can configure the IP DSLAM to relay DHCP requests to one or more DHCP servers and the server s responses back to the clients. You can specify default DHCP servers for all VLAN, and you can specify DHCP servers for each VLAN. What is DHCP Relay Agent Information Option 82? The IP DSLAM can add information to DHCP requests that it relays to a DHCP server. This helps provide authentication about the source of the requests. You can also specify additional information for the IP DSLAM to add to the DHCP requests that it relays to the DHCP server. The DHCP relay agent information feature adds an Agent Information field to the option 82 field of the DHCP headers of client TCP/IP configuration request frames that the IP DSLAM relays to a DHCP server. The IP DSLAM supports two formats for the DHCP relay agent information: Private and TR-101. Notes DHCP Relay is used for passing messages between DHCP client and server Relay Agent Information Option (Option 82) is an option inserted and removed by DHCP relay agent All contents copyright (c) 2008 ZyXEL Communications Corporation. 60

62 The option is used for DHCP server to provide different services to DHCP clients How does DHCP Replay (and Option 82) work? DHCP Client Router DHCP Relay Agent DHCP Server DHCP Request DHCP Request Option DHCP Request Option DHCP Reply DHCP Reply Option DHCP Reply Option Here is the process of how the DHCP Relay Agent Information Option works. First, the client sends out the DHCP request to the DHCP Relay Agent. Then the DHCP Relay Agent will add the option into the packet and send it to the DHCP server. The DHCP server will provide different services for different users based on the option and give a DHCP reply to the client through the DHCP Relay Agent. The DHCP Relay Agent will remove the option and send the DHCP reply to the client. All contents copyright (c) 2008 ZyXEL Communications Corporation. 61

63 Private Format Code Len Agent Information Field 82 N i1 i2 i3 i4 in SubOpt Len Sub option Value Sub option 1 stands for Agent Circuit ID Sub option Sub option 2 stands for Agent Remote ID Sub option This above is private format; it is very easy to understand why it is called DHCP Relay Agent Information Option 82. It uses number 82 as an option code number in the head of the DHCP Option packet field. Each option 82 packet carries many sub-option fields with many sub-values. The sub-value is used for providing information to DHCP server. The initial assignment of DHCP Relay Agent Sub-options includes two sub-option codes. That is 1 stands for Agent Circuit ID Sub-option and 2 for Agent Remote ID Sub-option. Agent Circuit ID Sub-option encodes an agent-local identifier of the circuit from which a DHCP client-to-server packet was received. It is intended to be used by agents in relaying DHCP responses back to the proper circuit. Since the Circuit ID is only to a particular relay agent local, a circuit ID should be qualified with the gateway address value that identifies the relay agent. IP DSLAM uses this Sub-option. All contents copyright (c) 2008 ZyXEL Communications Corporation. 62

64 TR-101 Format Code Len Agent Information Field 82 N i1 i2 i3 i4 in SubOpt Len Sub option Value VDSL ADSL TR 101 uses the same remote ID sub option format as the private format This figure above shows the format of the TR-101 Agent Circuit ID sub-option. The 1 in the first field identifies this as an Agent Circuit ID sub-option. The hostname field displays the system name, if it has been configured. The extra information field displays (A), if the hostname was not configured. Or the IP address in dotted decimal notation (w.x.y.z), if neither the system name nor the extra information field was been configured. A 1-byte Slot ID field specifies the ingress slot number, and a 1-byte Port No field specifies the ingress port number. Next, the VPI and VCI denote the virtual circuit that received the DHCP request message from the subscriber. Benefits of DHCP Relay There are two main benefits of DHCP Relay: One DHCP server supports more than one subnet Limits the number of clients getting the IP under specific condition All contents copyright (c) 2008 ZyXEL Communications Corporation. 63

65 VLAN 10 DHCP Server VLAN 20 Router DHCP Relay Agent Option 82 Example (in TR-101 Format) Circuit ID 07: Length of Circuit ID value f e Circuit ID Agent Info: aaa VPI/VCI Slot 10 port 5 All contents copyright (c) 2008 ZyXEL Communications Corporation. 64

66 DHCP Relay (and Option 82) Settings Primary Server IP Enter the IP address of one DHCP server to which the switch should relay DHCP requests for the selected VLAN. Secondary Server IP Enter the IP address of a second DHCP server to which the switch should relay DHCP requests for the selected VLAN. Enter if there is only one DHCP server. Relay Mode All contents copyright (c) 2008 ZyXEL Communications Corporation. 65

67 Select Auto to have the system send DHCP requests to the active DHCP server first. If the active DHCP server does not respond, the system sends the DHCP request to the other DHCP server which then becomes the active DHCP server. Select Both to have the switch send DHCP requests to both the primary and secondary DHCP servers. Active Server This field has no effect if the Relay Mode is Both. If the Relay Mode is Auto, select which DHCP server (the primary one or the secondary one) to which the IP DSLAM should relay DHCP requests for the selected VLAN. All contents copyright (c) 2008 ZyXEL Communications Corporation. 66

68 PPPoE Intermediate Agent What is PPPoE Intermediate Agent? Similar to DHCP relay option 82, you can set the switch to insert line information into client PPPoE active Discovery Initialization (PADI) packets. This allows a PPPoE termination server to identify and authenticate a PPPoE client based on the specified information, such as the ISP name or line card number. Gives additional information to PPPoE termination server about identification and authenticate of a PPPoE client i1 and i2 are PPPoE intermediate agent sub-options Two formats: Private and TR 101 Tag_Type Tag_Len Value i1 i2 All contents copyright (c) 2008 ZyXEL Communications Corporation. 67

69 How does PPPoE Intermediate Agent Work? PADI (PPPoE Active Discovery Initialization) PADR (PPPoE Active Discovery Request) PPPoE Intermediate Agent PADI / PADR PADI / PADR + PPPoE IA PPPoE Client PADI / PADR PADI / PADR + PPPoE IA BRAS PPPoE Client There are two PPPoE clients connected to the IP DSLAM. The BRAS will do authentication to the PPPoE clients. If the PPPoE Intermediate Agent is enabled on the IP DSLAM, it adds a vendor-specific tag to PADI (PPPoE Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from the PPPoE clients. All contents copyright (c) 2008 ZyXEL Communications Corporation. 68

70 Private Format SubOpt 1: Vendor-Specific Tag Format SubOpt 2: Remote ID Sub-option Format This is the private format. Two types of sub-option: Agent Circuit ID Sub-option and Agent Remote ID Sub-option are displayed in this figure. The IP DSLAM adds the slot ID of the PPPoE client, the port number of the PPPoE client, the VLAN ID on the PPPoE packet, and any extra information (for example the device name) into the Agent Circuit ID Sub-option. In addition, the IP DSLAM puts the PPPoE client s MAC address into the Agent Remote ID Sub-option. The slot ID is zero for VES-1624FT-55A. All contents copyright (c) 2008 ZyXEL Communications Corporation. 69

71 TR-101 Format VDSL ADSL Unlike the private format for PPPoE intermediate agent, the TR 101 format for PPPoE intermediate agent does not include the Remote ID Sub option. This slide shows the format of the TR-101 Agent Circuit ID sub-option. The 1 in the first field identifies this as an Agent Circuit ID sub-option. The hostname field displays the system name, if it has been configured. The extra information field displays (A), if the hostname was not configured. Or the IP address in dotted decimal notation (w.x.y.z), if neither the system name nor the extra information field was been configured. A 1-byte Slot ID field specifies the ingress slot number, and a 1-byte Port No field specifies the ingress port number. Next, the VPI and VCI denote the virtual circuit that received the PPPoE request message from the subscriber. All contents copyright (c) 2008 ZyXEL Communications Corporation. 70

72 PPPoE Intermediate Agent Example (in Private Format) Vendor-id Remote ID Circuit ID Circuit ID 0c: Length of Circuit ID value Slot 4 VLAN 1 Added line info: test1205 Port 1 Remote ID 06: Length of Remote ID value 00 0f 20 6f a9 02: MAC address of the PPPoE Client All contents copyright (c) 2008 ZyXEL Communications Corporation. 71

73 PPPoE Intermediate Agent Settings Info (Circuit ID) Enter any extra information the IP DSLAM adds to PADI and PADR packets in the specified VLAN. You can enter up to 23 printable ASCII characters or spaces. The Remote ID sub-option is not provided for PPPoE Intermediate Agent in TR-101 Format, so no field is offered to specify the extra information of Remote ID. All contents copyright (c) 2008 ZyXEL Communications Corporation. 72

74 Impulse Noise Protection (INP) The impulse noise generator is required to prove the burst noise immunity of the VDSL transceiver. The noise shall consist of bursts of additive white Gaussian noise (AWGN) injected onto the line with sufficient power to ensure effective erasure of the data for the period of the burst, i.e., the bit error ratio during the burst shall be approximately 0.5 (assuming FEC is not applied). The noise burst shall be applied regularly at a repetition rate of at least 1 Hz. The duration of the burst is variable; at least values of 10, 50, 100, 250, and 500 μs shall be supported. The AWGN shall be generated with crest-factor of 5 and flat PSD up to 12 MHz, and further continuously declined with a roll-off equal to or steeper than 12 db per octave. The PSD of the AWGN shall be variable in the range from 70 dbm/hz to 140 dbm/hz. Interleaving shall be used for protecting the data against bursts of errors by spreading the errors over a number of Reed-Solomon code words. Interleaving can be programmable by software. Sudden strike noise can cause packet error. A buffer is to protect ADSL Physical connection. Error ratio during the burst shall be approximately 0.5 (assuming FEC is not applied). The noise burst shall be applied regularly at a repetition rate of at least 1 Hz. The duration of the burst is variable; at least values of 10, 50, 100, 250, and 500 μs shall be supported. The AWGN shall be generated with crest-factor of 5 and flat PSD up to 12 MHz, and further continuously declined with a roll-off equal to or steeper than 12 db per octave. The PSD of the AWGN shall be variable in the range from 70 dbm/hz to 140 dbm/hz. All contents copyright (c) 2008 ZyXEL Communications Corporation. 73

75 Upstream Power Back-Off (UPBO) What is UPBO? Upstream Power back-of (UPBO) helps to run services over loops with different length co-located in the same cable binder ( mixed length deployments), especially in FEXT-dominated noise environment. Strong FEXT generated by short loops can significantly degrade the performance of long loops if UPBO is not applied. On the other hand, UPBO reduces the transmit power of short loops and thus degrades their performance as well. PSD PSD PSD f f f PSD f PSD f Enable UPBO to allow the system to adjust the transmit PSD of all lines based on a reference line length so that the PSD at the receiving end is the same. All contents copyright (c) 2008 ZyXEL Communications Corporation. 74

76 PSD f PSD f PSD f PSD PSD f f The followings are general conclusions for applying UPBO in real network. Non-FEXT dominated environment: Do not apply UPBO! It only causes SNR reduction in short loops with no SNR improvement in long loops. FEXT-dominated environment: Apply UPBO for all loops shorter than the longest one! It always could be found an appropriate UPBO value avoiding any SNR reduction and even improving the SNR in either long or short loops (because of lower FEXT coupling in short loops). Modes of UPBO Define the goal of the UPBO for the particular deployment. This goal usually allows avoiding performance degradation in some loops at expenses of another loop. The appropriate mode for particular deployment is supposed to be set by the network operator. All contents copyright (c) 2008 ZyXEL Communications Corporation. 75

77 Standards should specify the recommended modes. 1. Protection of the long loop Performance of the selected service over the selected Long loop is kept with no degradation (or with a controlled small degradation) relatively to the equal length scenario on the expense of shorter loops. Performance degradation for loops either shorter or longer than the Long loop is NOT restricted. POZ: Don t require any knowledge in the noise environment. The implementation is straightforward. NEG: Protect actually only one loop (one dedicated service) 2. Equal maximum degradation for all loops Loop of any length may be degraded relatively to the equal length scenario. The maximum value of degradation (usually expressed in SNR margin) is equal to all loops. POZ: Penalize all services equally (theoretically, by 3 db of SNR margin). NEG: Require exact knowledge of the noise environment. The UPBO needs to be updated for any change in FEXT and non-fext (the worst case solution for both usually brings rather poor results). 3. Improved performance of short loops The goal of this mode is to maximize the performance of short loops keeping performance degradation of the Long loops limited. NEG: Could be implemented for only one short loop. With more than one short loop performance degradation of long loops can t be limited. 4. Spectral mask compatibility with other services A specific PSD mask is specified for each loop length with no reference on the performance degradation in the particular loop. The initial definition of PSD All contents copyright (c) 2008 ZyXEL Communications Corporation. 76

78 mask could be based on any of the modes 1-3 or on spectral compatibility with other xdsl. POZ: Predict all spectral compatibility problems with existing and future services. And be selected as the UPBO mode in ITU. NOTE: The exact implementation technique for this method is under discussion. Methods of UPBO Method of UPBO specifies how to reach the goal defined by the mode. Sometimes the same goal could be reached by different methods. Compatibility of different methods should be taken in account. The following PBO methods are widely discussed: Reference PSD Reference Length Multiple Reference Length Equalized FEXT Reference Frequency Reference Noise All contents copyright (c) 2008 ZyXEL Communications Corporation. 77

79 System Management and Maintenance Firmware Upgrade Using the Web Configurator a. Download (and unzip) the correct model firmware to your computer. b. Click Management > Maintenance in the navigator panel to display the following panel. c. Click the Click Here link for Firmware Upgrade to display the following panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 78

80 d. In the File Path field, click Browse to locate the firmware file. e. Click Upgrade to start the firmware upgrade process. Using the Console Port a. Download (and unzip) the correct model firmware to your computer. b. Connect to the console port and launch Terminal Emulation software c. Restart the switch to enter the debug mode via the terminal. d. Enter ATUR. e. Use the X-modem protocol to transfer (Send File) the firmware. f. Enter ATGO to restart the switch after the file transfer is complete and the firmware upgrade process is done. All contents copyright (c) 2008 ZyXEL Communications Corporation. 79

81 Restore a Configuration File Using the Web Configurator a. Click Management > Maintenance in the navigator panel to display the following panel. b. Click the Click Here link for Restore Text Configuration to display the following panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 80

82 c. In the File Path field, click Browse to locate the firmware file. d. Click Restore to start restoring configuration. Using the Console Port a. Connect to the console port and launch Terminal Emulation software. b. Restart the switch to enter the debug mode via the terminal. c. Enter ATLC d. Use X-modem protocol to transfer (Send File) the configuration file (with a.rom file extension). e. Enter ATGO to restart the switch after file transfer and the configuration restore processes are completed. All contents copyright (c) 2008 ZyXEL Communications Corporation. 81

83 Back Up a Configuration File Using the Web Configurator a. Click Management > Maintenance in the navigator panel to display the following panel. b. Click the Click Here link for Backup Text Configuration to display the following panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 82

84 c. Click Save to display the File Download dialog. Then, click Save to back up the configuration text file to the location you specify on your computer. Using the Console Port a. Connect to the console port and launch Terminal Emulation software. b. Restart the switch to enter the debug mode via the terminal. c. Enter ATTD. d. Use X-modem protocol to transfer (Receive File) the configuration file (with a.rom file extension). e. Enter ATGO to restart the switch after file transfer and the configuration backup processes are completed.. Restore Default Configuration Using the Web Configurator a. Click Management > Maintenance in the navigation panel to display the following panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 83

85 b. Click Click Here link for Load Factory Default. c. A dialog box pops up with the Are you sure you want to load factory defaults? prompt. d. Click OK. e. Click OK again to start the configuration reset process. f. Please note that the IP address of the switch is now Using the Console Port All contents copyright (c) 2008 ZyXEL Communications Corporation. 84

86 a. Connect to the console port and open the Terminal Emulation Software. b. Enter the administrator login password to log into the CLI. Enter ras> config restore to load the factory default configuration. All contents copyright (c) 2008 ZyXEL Communications Corporation. 85

87 FAQ 1. What are the default IP parameter settings? Ethernet: IP address: IP Mask: VLAN ID: 1 Priority: 0 Outband IP address: IP Mask: What is the default login Name and Password to log into the Web Configurator? ID: admin Password: How to access the IP DSLAM through the console port? Connect the male 9-pin end of the console cable to the console port of the switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. Launch terminal emulation software configured to the follow settings: Terminal emulation: VT100 All contents copyright (c) 2008 ZyXEL Communications Corporation. 86

88 Baud rate: 9600 bps Data bits: 8 Parity: none Stop bit: 1 Flow control: none 4. What is the default login password for console and telnet login? Password: How to change the password? You can change the administrator login password in the web configurator. Follow the steps below to change. a. In the navigation panel, click Basic Setting > User Account > User Account. Then it displays the User Account panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 87

89 b. Click the index 1 of admin. c. Type the new password in the Password field. d. Retype the new password in the Retype Password to confirm field. e. Click the Modify button. All contents copyright (c) 2008 ZyXEL Communications Corporation. 88

90 6. How to access the Command Line Interface (CLI)? There are two ways to access the Command Line Interface: through the console port or Telnet. If you want to access through the console port, Refer to the How to access the IP DSLAM through the console port? section above for more information. If you want to access through Telnet, type telnet <IP DSLAM IP Address> in Windows Command Prompt. 7. If I have forgotten the password, how to reset the password to the default setting? If you have changed and forgotten the password, you will need to reload the factory default configuration. Note that all of your previous configuration will be lost. a. Connect the console cable to your computer and launch a terminal All contents copyright (c) 2008 ZyXEL Communications Corporation. 89

91 emulation program. b. Restart the switch, and press any key to enter the debug mode at the Press any key to enter Debug Mode within 3 seconds prompt. c. Enter atlc. d. When the starting XMODEM upload message displays, start XMODEM upload of the default configuration (rom) file to the switch. e. After the file upload process is complete, enter atgo to exit from the debug mode. f. The system will automatically restart. Wait until the system has restarted before you log in again. The default IP address is and the default password is How to configure the IP address? You can use the Web Configurator to configure the system IP address. Click Basic Setting > IP Setup in the navigation panel to display the configuration panel. All contents copyright (c) 2008 ZyXEL Communications Corporation. 90

92 9. How to restart device from the Web Configurator? a. Click Management > Maintenance in the navigation panel to display the panel below. All contents copyright (c) 2008 ZyXEL Communications Corporation. 91

93 b. Click the Click Here button next to Reboot System will restart the IP DSLAM. 10. How to check the current running firmware version? Access the console and enter the ras> sys info show command. This will display the firmware version which the IP DSLAM is currently using. All contents copyright (c) 2008 ZyXEL Communications Corporation. 92