ae ont config guide r20

Active Ethernet ONT Configuration Guide, R2.0

November 2010

#220-00372, Rev 10

Proprietary Information: Not for use or disclosure except by written agreement with Calix. © Calix. All Rights Reserved.

Contents

About this Guide .................................................................... 10

Chapter 1: Active Ethernet Overview .................................. 13

AE Topology ............................................................................................................ 13

Key AE Attributes ........................................................................................... 14 AE Components ............................................................................................. 15

AE Features ............................................................................................................. 16

Voice Services ............................................................................................... 17 Ethernet Data Services .................................................................................. 20 IPTV ............................................................................................................... 23 T1 Services via PWE3 ................................................................................... 26 ONT Inventory ................................................................................................ 29

Calix ONTs ............................................................................................................... 31

ONT Models ................................................................................................... 31 ONT Optics Characteristics ............................................................................ 32 AE Optical Links ............................................................................................. 33

Chapter 2: AE Configuration ................................................ 35

ONT Operational Overview .................................................................................... 35

AE Configuration Overview ................................................................................... 36

AE Architecture Overview .............................................................................. 37 Configuration Example ................................................................................... 38

Network Component Overview .............................................................................. 39

4


AE Services Overview ............................................................................................ 42

AE Deployment Scenarios ..................................................................................... 43

Unmanaged Pass-through ONT ..................................................................... 43 Unmanaged Single VLAN Mapping ................................................................ 45 Managed ONT Basic Service - VLAN per Port ............................................... 46 ONT Basic Multi-service - VLAN per Service ................................................. 48

Chapter 3: Configuring an AE System ................................ 49

AE System Requirements ...................................................................................... 49

Notes on Configuring the DHCP Server ................................................................ 50

About DHCP................................................................................................... 51 Configuring the CMS Server for DHCP Service (Red Hat Linux) ................... 53

Notes on Configuring the NTP Server ................................................................... 58

Configuring the CMS Server as the NTP Source (Red Hat Linux) ................. 58

Notes on Configuring the Syslog Server .............................................................. 62

Notes on Configuring the SIP Server .................................................................... 63

Notes on Configuring FTP ..................................................................................... 64

File Permission Basics ................................................................................... 64 About the umask Command ........................................................................... 67

Chapter 4: Understanding AE ONT Configuration Files .... 69

Active Ethernet Provisioning ................................................................................. 69

About Configuration Files ...................................................................................... 70

AE ONT Turn-up Pre-Requisites ............................................................................ 71

Configuration File Structure .................................................................................. 72

Configuration File Locations ................................................................................. 73

Synchronizing AE ONT Configuration Files ......................................................... 74

Configuration File Characteristics ........................................................................ 75

Configuration File Hierarchy .................................................................................. 76

Sample Configuration File ..................................................................................... 77

5


Configuration File Processing ............................................................................... 80

Creating a Configuration File ................................................................................. 81

Building Cascading Configuration Files .......................................................... 81 Building Monolithic Configuration Files .......................................................... 81

About VoIP and the VoIP Configuration File ........................................................ 82

Creating the VoIP Configuration File .............................................................. 83 ONT SIP Configuration File Parameters ........................................................ 84

Chapter 5: Turning Up an AE ONT via CMS ........................ 89

CMS Appliance ........................................................................................................ 90

Configuring Primary and Secondary TFTP Servers ............................................. 91

Synchronizing AE ONT Configuration Files ......................................................... 92

Local Provisioning Persistence ...................................................................... 93

ONT Creation ........................................................................................................... 95

Configuring the Management VLAN ...................................................................... 95

Pre-provisioning an AE ONT .................................................................................. 97

ONT Discovery ........................................................................................................ 98

CLI Cut-Through ................................................................................................... 100

Chapter 6: Provisioning Services on an AE ONT via CMS101

About the Provisioning Screens.......................................................................... 101

Provisioning an ONT Ethernet Port for Data ...................................................... 102

Provisioning an ONT Ethernet Port for Video .................................................... 103

Provisioning DS0 Voice Ports ............................................................................. 103

About Voice Port Configuration Files ........................................................... 103 Provisioning a CTG Voice Port ..................................................................... 104 Provisioning a SIP Port ................................................................................ 105

6


Chapter 7: Managing AE ONTs through CMS ................... 107

Performing AE ONT Searches ............................................................................. 108

Moving an AE ONT in the Navigation Tree ......................................................... 113

Working in Map View ............................................................................................ 114

Removing AE ONT Services ................................................................................ 116

Resetting an AE ONT ............................................................................................ 117

Chapter 8: Turning Up an AE ONT via CLI ........................ 119

Network Pre-requisites ......................................................................................... 120

Additional Considerations ................................................................................... 120

Configuring the Management VLAN .................................................................... 122

ONT Boot Process ................................................................................................ 123

Establishing a Link to the Switch .................................................................. 124 Obtaining an IP Address .............................................................................. 124 Provisioning the AE ONT ............................................................................. 124 About Auto-Detect Behavior on the ONT ..................................................... 125 Configuring Option-82 .................................................................................. 125

Monitoring the ONT .............................................................................................. 126

About Syslog Events .................................................................................... 126 About Alarms ................................................................................................ 127

Creating SNMP Trap Receivers ........................................................................... 128

Bridging ................................................................................................................. 128

VLAN per Port Bridge ................................................................................... 129 VLAN per Service Bridge ............................................................................. 129 IGMP Snoop VLAN per Service ................................................................... 130 IP Host ......................................................................................................... 130

Remote Management Interface Script ................................................................. 131

Retrieving Current Alarms ............................................................................ 132 Resetting an ONT by Serial Number ............................................................ 132

Creating a Layer-2 Pipe for HPNA Maintenance and Monitoring ...................... 133

Configuring the AE ONT for HPNA Deployment .......................................... 133

7


Chapter 9: AE Deployment Options ................................... 135

Residential Gateway Characteristics .................................................................. 136

Non-Residential Gateway Characteristics .......................................................... 137

External Router Characteristics .......................................................................... 138

Metering and Traffic Shaping .............................................................................. 138

Subscriber-VLAN to WAN-VLAN Mapping Overview ......................................... 140

Level 1: L2 Mapping Filter Table .................................................................. 143 Level 2: L2 Mapping/Filtering Table ............................................................. 143 VLAN Tagging Mapping and Conversion for Multicast Streams................... 143

Chapter 10: Command Line Interface (CLI) ....................... 145

Overview ................................................................................................................ 145

Telnet Interface ..................................................................................................... 146

Command Line Help ............................................................................................. 146

Command Line Conventions ............................................................................... 148

Chapter 11: Remote ONT Activation .................................. 151

RONTA Overview .................................................................................................. 151

Master Reset ................................................................................................ 152 Assigning a Registration ID to an ONT (AE Mode) ...................................... 153 Assigning a Management VLAN to an AE ONT ........................................... 154 Assigning an ONT to Unmanaged Mode ...................................................... 155 Assigning a Registration ID to an AE ONT ................................................... 157

ONT Provisioning Persistence ............................................................................ 158

ONT Inventory Management (Option-43) ............................................................ 159

8


Chapter 12: System Maintenance and Troubleshooting . 161

Configuration File Back-up .................................................................................. 161

Download Failures ................................................................................................ 162

TFTP Server Not Responding ...................................................................... 163 TFTP Server Responds "File not Found" ..................................................... 163 Download Transfer Interrupted ..................................................................... 163

Serviceability Characteristics .............................................................................. 164

ONT Retry Behavior ..................................................................................... 165

Viewing ONT Alarms and Events in CMS ........................................................... 167

Channel and Drop Testing ................................................................................... 168

Pinging AE ONTs .................................................................................................. 169

Diagnostic Commands ......................................................................................... 171

CMS Performance Monitoring and Alarm Aggregation ..................................... 172

SNMP Monitoring: PM and Statistical MIBs ........................................................ 172

Troubleshooting AE ONT Ethernet Issues - CLI ................................................. 173

Troubleshooting AE ONT Ethernet Issues - CMS .............................................. 177

Sample Configuration Files - AE ONT ................................................................. 178

Cascading CF .............................................................................................. 179 Sample SIP Configuration File ..................................................................... 193

Sample Configuration Files - CMS ...................................................................... 205

AE ONT CF .................................................................................................. 205 Common CF ................................................................................................. 206 Data Service CF ........................................................................................... 207 Bandwidth Profile CF ................................................................................... 208 Video CF ...................................................................................................... 210

9


Appendix A ........................................................................... 211

Glossary ................................................................................................................ 211

Command Reference ............................................................................................ 214

Viewing Commands ..................................................................................... 215 Config Commands ....................................................................................... 215 IfTable Commands ....................................................................................... 220 Ethert Commands ........................................................................................ 223 Meter Commands ......................................................................................... 224 Bridge Commands ....................................................................................... 232 DHCP Relay - Option-82 Commands ........................................................... 259 pwe3 e1port ................................................................................................. 273 pwe3 service create ..................................................................................... 274 pwe3 service delete ..................................................................................... 275 PWE3 PM Statistics ..................................................................................... 276 Pseudowire Commands ............................................................................... 282 PWE3 Provisioning Example ........................................................................ 287 IPTV Commands .......................................................................................... 291 Troubleshooting Commands ........................................................................ 302 Channel and Drop Testing (vtst test) ............................................................ 304 VoIP Commands .......................................................................................... 308 DHCP Option-43 Configuration Process ...................................................... 328 Message Posting Protocol Commands ........................................................ 331 Miscellaneous Serviceability Commands ..................................................... 335

10


About this Guide

The Calix Active Ethernet (AE) ONT Configuration Guide includes information on the following:

AE System Overview - Includes information on AE versus GPON topology, and details the features and characteristics of the Calix GX ONT.

AE System Configuration - Details ONT operation, various AE configurations, AE network components, AE services, and various AE deployment scenarios.

Configuring an AE System - Includes information on system requirements, and requirements for DHCP, NTP, Syslog, and SIP server configuration.

Understanding AE ONT Configuration Files - Details provisioning characteristics, hierarchy, processing, and creation of configuration files.

Turning up an AE ONT - Provides a step by step process for turning up an AE ONT. Includes configuring the Management VLAN, controlling the ONT boot process, and monitoring of the ONT after boot-up. This section also describes various management tools designed to allow the ONT to communicate with a variety of hosts or devices.

AE ONT Deployment Options - Includes information on deploying in a residential gateway, subscriber to WAN mapping, and in Unmanaged mode (pass-through).

Command Line Interface (CLI) - Details the CLI, the syntax used, and various conventions used for provisioning an AE ONT.

System Troubleshooting - This section describes various TFTP errors, ONT Retry behavior if boot-up is unsuccessful, and the Viewing of AE ONT alarms in CMS.

Appendix - Includes a glossary of terms, an AE CLI Command Reference, as well as sample configuration files that may be used as templates.

Intended Audience

This document is intended for personnel responsible for turning up carrier network systems and services. This guide assumes that users are familiar with computer systems and software and have some knowledge of telecommunications and engineering standards. Familiarity with the Calix E5-400 Ethernet Transport and Aggregation Platform, other standards based third party Ethernet switching platforms, as well as knowledge of Small Form-factor Pluggable (SFP) fiber technology is highly recommended.

11


Related Documentation

You can access the complete set of Calix user documentation from the Calix Resource Center, accessible online at www.calix.com.

The Calix Active Ethernet ONT documentation set includes:

Calix 700GX SFU ONT Installation Guide Calix 700GE SFU ONT Installation Guide Calix ONT Maintenance and Troubleshooting Guide Calix Customer Premises Equipment Grounding Guide Calix ONT Battery Calculator Guide Calix Management System (CMS) Guide Calix 700GX Active Ethernet Quick Start Guide

12



Chapter 1

Active Ethernet Overview

AE Topology Active Ethernet is a point-to-point architecture that connects an Ethernet aggregation switch and an ONT. This point-to-point topology uses dedicated fiber and bandwidth for each element in the system.

AE terminology in this document is intended to differentiate this technology from the GPON technology where ONTs freely share bandwidth over a fiber access network. The Active terminology implies a point-to-point architecture with intelligent devices located at each endpoint.

With AE release 2.0, all Calix 700GX, 700GE, and 760GX ONTs receive broadband data, VoIP (SIP or TDM) telephone service, and IP based video (IPTV) using point-to-point fiber links within the network.

14


Key AE Attributes The Calix AE 2.0 fiber access solution offers the following attributes:

Symmetrical Gigabit Ethernet data services using 700GX, 700GE, and 760GX ONTs Fully compliant IEEE 802.3ah standard AE technology Integrated GE and 10GE aggregation and transport using C-Series (C7) and E-Series (E5,

E5-400) platforms Single family (SFU) and Multi-Dwelling (MDU) services Small business, multi-tenant, and mobile backhaul applications Indoor and outdoor mountable ONTs with auto-detect GPON/AE adaptive optics Loop start and ground start voice services SIP and H.248 VoIP services with integrated ONT clients GR-303, GR-57, and TR-08 Model II TDM voice switch interfaces using the Calix C7

TDM Voice Gateway Ethernet data services, including high speed Internet access and ME-compliant E-Line

and E-LAN (TLS) services IGMP multicast switching, multicast address mapping and multicast VLAN registration

(MVR) T1 and E1 leased line and private line services ONT Port Security, MAC Forced Forwarding and ARP Proxy Support for BIDI SFP modules and Compact SFP modules for single fiber and high

density AE applications 60 Km network reach on a single fiber link MAC Forced Forwarding (MFF) allowing for additional network security

15


AE Components Each subscriber on an AE network is connected to the optical network via a single fiber at pre-determined aggregation points. A typical AE network consists of the following components:

700GX, 760GX and 700GE ONTs: The ONTs mount at the subscriber's premises. It provides subscriber interfaces for POTS, Ethernet High Speed Data, IPTV and T1/E1 services from the network. Indoor, outdoor, and rack-mount configurations are deployable.

E7 GPON-4 Card: The Calix E7 GPON-4 card provides multi-service capability over eight GE ports for high-bandwidth, point-to-point Ethernet services to individual subscribers, as well as four GPON ports that can subtend up to 64 ONTs each for a card capacity of 256 GPON ONTs (512 per E7 1 RU chassis). The card can also be used to aggregate other Ethernet devices including the Calix E5 platform. Four 10GE ports per card provide integrated transport and uplink capability. The GPON-4 card is used when supporting AE applications that require projecting synchronized timing to ONTs in support of T1 or E1 circuits.

E7 10GE-4 Card: The 10GE-4 card includes twelve GE ports and four 10GE ports for use as uplinks and transport for the local E7 system, or the card can subtend additional E7 chassis's from the primary E7 system. Multiple E7's can be linked together using 10GE SFP+ copper cables creating a high-speed 10Gbps ring with aggregated, high-density point-to-point Ethernet services.

E7 GE-12 Card: Provides twelve GE interfaces, as well as two integrated 10GE ports for supporting up to 24 AE ONTs per chassis. The card delivers residential, point-to-point 1GE service drops in 12 port increments with integrated, standards-based, 10GE transport on the same line card. The GE-12 supports bi-directional single fiber GE optics modules designed for use with any Calix GX or GE ONT.

C7 with TDM Gateway: The C7 is a Multi-Service Access Platform (MSAP) that can be used for subscriber access services as well as Ethernet aggregation. It also provides gateway functionality for both voice and T1/E1 data services. For GR303/TR-08 voice services over AE links, the subscriber calls are terminated via the C7 TDM gateway at a C7 VIPR or Ethernet Gateway (EGW) card.

CMS Appliance: CMS Appliance is a Unified Access service management platform that bundles all the hardware and software necessary for turn-key deployments. Features include dual power and four Ethernet connections with redundant hard drives. CMS Appliance is pre-configured with software templates that enable AE activation using Calix Remote ONT Activation (RONTA) simplifying residential and commercial fiber deployments.

16


AE Features With AE Release 2.0, Calix ONTs provide T1 services over point-to-point GE links using pseudowire emulation technology. IETF RFC 3985 and RFC 4197 define the pseudowire edge-to-edge emulation (PWE3) architecture and provide a standards-based approach to T1 services delivery over a packet switched network (PSN).

A pseudowire connects two TDM circuits over a packet switched Ethernet network. In the most basic example, two T1 endpoints are connected together, converting a T1 signal into Ethernet frames and transported over an asynchronous Ethernet network. On the receiving end, the Ethernet frames are converted back to TDM T1 signaling. This technology is often referred to as pseudowire End-to-End Emulation, or PWE3.

The 766GX and 767GX-R ONTs support unstructured, asynchronous T1s on a per port basis with port independence.

Note: Only SAToP unstructured service with asynchronous timing on each port is supported is this release.

TDM transport benefits from its inherent internal signal timing mechanism. Ethernet packet networks however do not have this same timing mechanism (asynchronous delivery) so PWE3 must accommodate this disparity via other methods. The Calix PWE3 solution supports both adaptive and differential timing for PWE3 T1s. It also supports line timing on the WAN interface (optical link) and loopback timing on the T1 interface. The ONTs have an internal Stratum 3 clock reference and reverts to the internal clock during a holdover condition. The solution meets the T1 timing requirements of G.824.

Please refer to the Calix Application Note T1 Pseudowire Applications for MDU ONTs for complete information on PWE3 support.

17


Voice Services AE Release 2.0 packet-voice services are supported by SIP and GR303/TR-08/GR-57 voice using the Calix C7 TDM voice gateway. POTS ports look like GR-909 compliant ports and support all CLASS services. Calix AE voice services use the GPON SIP service and provisioning model which requires generating a SIP configuration file for each SIP Interface Group (IG) and loading these files on a TFTP server.

Session Initiated Protocol (SIP)

Provisioning SIP voice services requires the definition of a configuration file which details basic voice service parameters in the ONT. Detailed VoIP provisioning is done in a separate VoIP configuration file and is called out in the ONT configuration file. Information includes the name of the VoIP configuration file, the VoIP configuration file server, and a secondary VoIP configuration server (if desired).

Note: Because the SIP service works identically in both GPON and AE mode, the same VoIP configuration file can be used to provision SIP services on either GPON or AE ONTs simultaneously.

Note: SIP services are implicitly associated to an ONT IP-Host object. The IP-Host object specifies a svc-tag-action, which provides the VLAN association.

SIP Provisioning Persistence

AE Release 2.0 supports SIP provisioning persistence within the AE ONT. After initial VoIP configuration and provisioning, any ONT reboot causes the ONT to look to its SIP TFTP provisioning server for current and/or revised configuration information. If the AE ONT’s request for a new configuration file times out, it uses the most recent configuration file retained in the ONT’s flash memory for service provisioning. When re-provisioning an ONT in the field, Remote ONT Activation (RONTA) can be used to clear configuration information.

A more complete description of the provisioning persistence feature is found in the ONT provisioning section of this document.

18


Calix TDM Gateway (CTG)

The Calix C7 TDM gateway provides a gateway to the circuit-switched PSTN for TDM over Ethernet lines on subtended Calix platforms. Calix service platforms that support a TDM gateway client include the E-Series platforms and the 700 family of ONTs operating in GPON or AE mode. These units interface to the C7 via an Ethernet link, and the C7 in turn provides a GR-303, TR-08 or GR-57 switch interface to the PSTN for the subtended VoIP lines.

To support TDM gateway applications, the C7 must be equipped with at least one Voice over IP Resource (VIPR) or Ethernet Gateway (EGW) plug-in card. The C7 VIPR card hosts a gateway interface — provisioned as a SIP voice concentration group (SIP VCG) — to perform the concentration and format conversion of voice traffic from the subtended unit. The VIPR card receives encapsulated TDM over Ethernet packets from the E-Series platform or ONT (via a C7 Ethernet downlink interface) and converts the voice content to TDM format for delivery to a C7 GR-303, TR-08 or GR-57 switch interface. The C7 passes ABCD signaling events (including ringing and loop-current events) between the VIPR and E-Series platform or ONT via RFC 2833 packets.

Note: CTG services are implicitly associated to an ONT IP-Host object. The IP-Host object specifies a svc-tag-action, which provides the VLAN association

Note: For complete instructions on provisioning SIP or TDM Gateway services on an AE ONT, refer to the Calix VoIP Services Guide.

19


Ground Start POTS Service

In AE 2.0, 700GX and 760GX ONTs support ground start signaling. Ground start is a POTS signaling technique that is used to produce dial tone by momentarily grounding one side of a two-wire circuit. The ring side of a wire pair is usually the side that is grounded. Ground start signaling is often used for telephone lines connected to a PBX as well as many pay phones use ground start signaling. The alternative to ground start is loop start.

Note: 700GE ONTs do not currently support ground start signaling.

SIP and C7 TDM gateway-based VoIP services support ground start, settable by a line in the VoIP configuration file (establishing a choice between loop start and ground start POTS).

To set up ground start, the linemode command is used at the AE CLI: -linemode=GroundStart

or -linemode=LoopStart

The following AE CLI commands support the linemode option:

voip add (on page 310)

ctg add (on page 312)

voip setup (on page 308)

ctg setup (on page 312)

Note: Linemode syntax is case sensitive (uppercase "L", "G", and "S" must be used).

Note: In order to eliminate the need for updating existing ONTs using loopstart service, the linemode command can be omitted and ONTs continue to default to loopstart.

An example voip add script is included elsewhere in this document for reference.

20


Ethernet Data Services AE 2.0's Ethernet Data Service model is based on either VLAN per service or VLAN per port. When connected to the network, Calix ONTs support bandwidth management and Quality of Service (QoS). Whether connected to a C7, E5, or E7 OLT, the network provides up to a 1 Gigabit of data to the ONT. In addition, DHCP relay agent and PPPoE user agent are supported at the source (switch) and any 700GE ONT.

Business service, IPTV, and HSD services are supported simultaneously on any Calix ONT. AE business data services deliver high bandwidth with traffic marking to prioritize business traffic relative to residential service. Q-in-Q VLANs and TLS are used for business grade services.

The tagging behavior and packet processing rates on the 700GE and 760GX ONTs assure that the ONTs meet MEF 9 and 14 requirements independent of the OLT.

Active Ethernet supports features that allow a service provider using an E-Series platform to aggregate traffic into a specific S-Tag VLAN. Enabling features include:

MAC address OUI (included in Release 1.0) C-Tag (incoming outer tag) (included in Release 1.0) p-bit value (included in Release 1.0) MAC Forced Forwarding (included in Release 1.1)

New features in AE Release 2.0 include (described in detail below):

Add or remove S-Tag VLAN-ID on any Ethernet port Layer 2 marking based on MAC SA or MAC DA Layer 3 priority marking based on Access Control Lists Data throughput in AE Mode of 1 Gbps on 700GE and 760GX ONTs

Add/Remove S-Tags

With AE Release 2.0, the service provider has the ability to add and remove S-Tag VLAN-IDs on any Ethernet port in order to provide clear traffic aggregation based on customer defined conditions.

21


MAC SA or MAC DA

The Calix AE platform uses a Layer 2 filtering/mapping table based on MAC SA and DA. This Layer 2 table operates on the subscriber side of the WAN Bridge for each Ethernet port.

This Level 1 Layer 2 filtering/mapping table is typically used in the absence of managed switches or RGs at the subscriber network. The table currently supports filtering/mapping by MAC DA or MAC SA. The primary operations defined for the Level 1 table include:

Filter on MAC SA, Add a single VID, with Explicit PBIT setting and defined Output TPID, for example ethertype (result = single tag). This feature allows for mapping STBs and external IADs to network provider VLANs.

Filter on MAC SA or MAC DA offers the ability to drop unwanted traffic (packets) at the ONT.

Filter on upstream treatment VID, Remove 1 Tag (For downstream inverse of operation 1 above) (result = no tag)

Note: MAC DA/SA was part of an earlier AE software release.

MTU Frame Size

In AE Release 2.0, the Maximum Transmission Unit (MTU) for ONT services has been increased to 1600 Bytes (1626 Bytes when factoring in Ethernet header and two tags). This increase is designed to support applications such as mobile backhaul and business services.

Note: With E7 Software Release 1.1, the platform system default MTU size was increased to 2000 bytes in anticipation of future MTU increases on ONTs. With AE R2.0, the maximum MTU remains 1600 Bytes, the change to the E7 MTU system default does not result in changes to any currently provisioned MTU on existing GE Ethernet interfaces.

Data Throughput

760GX and 700GE ONTs support sustained 1 Gbps full duplex throughput simultaneously on a single or multiple Ethernet ports.

760GX ONT Process up to 2.6 million packets per second (pps) in aggregate Provide upstream and downstream policing of 1,000 Mbps per ONT Support 64 kbps bi-directional traffic shapers up to 2 Mbps and 1 Mbps traffic shapers

after 2 Mbps, 8 Mbps traffic shapers above 100 Mbps Support per VLAN metering and statistics

22


700GE ONT Process up to 2.7 million pps (line rate) in aggregate Support downstream policing of up to 1,000 Mbps Support 64 kbps bi-directional traffic shapers up to 2 Mbps and 1 Mbps traffic shapers

after 2 Mbps, 8 Mbps traffic shapers above 100 Mbps Support per VLAN metering and statistics

AE Data Rate Limiting and Traffic Shapers

AE R 2.0 implementation allows configuration of "per UNI" rate limiters or per VID rate limiters in both the upstream and the downstream direction.

Number of rate limiters 700GE - 16 700GX - 32 760GX - 64

700GE and 760GX UNI Rate Limiting Granularity

Range Granularity

0-2 MB 64 Kb

2-100 MB 1 MB

100 MB - 1 GB 8 MB

700GE and 760GX per VID Rate Limiting Granularity

Range Granularity

0-8 MB 64 Kb

8-255 MB 1 MB

256-511 MB 2 MB

512 MB - 1 GB 4 MB

The 700GX ONTs use shaping to rate-limit up to 200 Mb/sec. The 700GE and 760GX ONTs use policing and both can rate limit from 0-1Gb/sec. Shaping is actually a storing and forwarding technique which smoothes delivery of packets and does not force TCP to lose packets as policing does. When shaping is employed, TCP does not exhibit a saw-tooth behavior during file transmissions.

Note: Calix internal studies of LAN TCP traffic show only a 5% increase per TCP flow due to re-transmission loss when policing. However, Calix has not extensively studied WAN TCP behavior and has not seen such numbers published. If a 5% increase holds across the WAN, this does not seem like a significant network overhead to use policing rather than shaping. Shaping is a much less scalable technique.

23


IPTV Active Ethernet supports IPTV with multiple VLANs per port, VLAN per service or VLAN per subscriber models. Current features specific to IPTV include:

IGMP snooping support for IPTV Multicast to Unicast IPTV flow conversion (not supported by the 700GE ONTs)

With the support of MAC SA, Calix ONTs can support mapping untagged traffic on the subscriber side. An example of this filter/mapping operation is to identify by OUI the set-top boxes used for IPTV service. All other untagged traffic is mapped to the data VLAN defined for the ONT. Thus, the ONT supports triple-play service mapping of untagged subscriber traffic without L3 mapping.

New features added to AE Release 2.0 include:

Multicast VLAN Replication (MVR) IPTV provisioning enhancements including per port multicast-to-unicast control Defined Multicast Ranges to "allow" and filter IGMP joins Single Multicast VLAN ID for upstream and downstream IGMP packets, downstream

multicast, and STB control traffic Per port multicast-to-unicast Isolation of broadcast/multicast traffic distribution of unicast IPTV traffic.

IPTV Video Profiles

AE Release 2.0 adds additional provisioning capabilities to the video profiles and enables per port multicast-to-unicast control. The video profile now contains attributes to control per-port channel limits, query interval and multicast-to-unicast control.

For a detailed description of video profile commands, refer to IPTV Commands the Command Line Reference section of this guide.

24


Multicast VLAN Registration (MVR)

Multicast VLAN Registration (MVR) is designed for distribution of multicast traffic on a dedicated multicast VLAN across segregated access networks, while allowing subscribers who are on different VLANs to join and leave the multicast groups carried in the Multicast VLAN. MVR isolates the network multicast VLAN used to facilitate efficient transport of multicast data from the subscriber. Typical applications include:

Distribution of multicast VLAN and merging multicast traffic into subscribers untagged "single service" associated with a residential gateway

Distribution of multicast VLAN and converting to a common "Video VLAN" pre-configured on all STB

Distribution of multiple multicast VLANs (e.g. high definition IPTV, standard definition IPTV, and digital audio) and merge into a single subscriber service

MVR works in conjunction with IGMP. Subscribers join and leave multicast groups via IGMP. However, both the IGMP messages and multicast content are mapped from the subscriber’s service into the isolated network side multicast VLAN. AE R2.0 allows ONTs to support the ability to map the subscriber’s IGMP and multicast traffic into multiple network multicast VLANs.

For a given video VLAN, up to 4 MVR VLANs can be defined. Each MVR VLAN can further contain up to 4 multicast ranges. An upstream IGMP has its VLAN changed based on matching any one of these MVR multicast ranges. In order to support MVR, separate bridges must be created for each MVR VLAN. IGMP snooping must be enabled on MVR VLAN bridges.

Refer to the IPTV Commands section of this guide for MVR provisioning syntax.

About MVR Multicast VLAN Registration (MVR) is designed for applications using wide-scale deployment of multicast traffic across a ring-based Ethernet service-provider network (for example, the broadcast of multiple television channels over a service-provider network). MVR allows a subscriber on a port to subscribe (join) and unsubscribe (leave) to a multicast stream on the network-wide multicast VLAN. It allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. MVR provides the ability to continuously send multicast streams in the multicast VLAN, while at the same time isolating the streams from the subscriber VLANs for bandwidth and security reasons.

MVR assumes that subscriber ports join and leave these multicast streams by sending out IGMP messages. These messages originate from an IGMP compatible host with an Ethernet connection. MVR operates in conjunction with IGMP snooping with both MVR and IGMP snooping operating together on the AE ONT. MVR reacts only to join and leave messages from multicast groups configured under MVR. Join and leave messages from all other multicast groups are managed by IGMP snooping.

25


The host processor on the AE ONT identifies the MVR IP multicast streams and their associated IP multicast group in the switch forwarding table, intercepts the IGMP messages, and modifies the forwarding table to include or remove the subscriber as a receiver of the multicast stream, even though the receivers might be in a different VLAN from the source. This forwarding behavior selectively allows traffic to cross between different VLANs.

In a multicast television application, a PC or a television with a set-top box receives the multicast stream. Multiple set-top boxes or PCs can be connected to one subscriber port, which is a switch port configured as an MVR receiver (see the illustration below). DHCP assigns an IP address to the set-top box or the PC. When a subscriber selects a channel, the set-top box or PC sends an IGMP report to the ONT to join the appropriate multicast. If the IGMP report matches one of the configured IP multicast group addresses, the host processor on the AE ONT modifies the hardware address table to include this receiver port and VLAN as a forwarding destination of the specified multicast stream when it is received from the multicast VLAN.

26


When a subscriber changes channels or in some cases powers down the STB sending it into standby mode, the set-top box sends an IGMP leave message for the multicast stream. The router sends a group-specific query and the ONT forwards that frame through the receiver port VLAN. If there is another set-top box in the VLAN still subscribing to this group, that set-top box must respond within the maximum response time specified in the query. If the AE ONT does not receive a response, it eliminates the receiver port as a forwarding destination for this group. If the AE ONT never receives a leave, the channel pruned from the receiver port as a forwarding destination for the group based on the pre-configured query interval.

MVR eliminates the need to duplicate television channel multicast traffic for subscribers in each VLAN. Multicast traffic for all channels is only sent around the VLAN trunk once (and only on the multicast VLAN). The IGMP leave and join messages remain in the VLAN to which the subscriber port is assigned. These messages dynamically register for streams of multicast traffic in the multicast VLAN on the AE ONT. The AE ONT modifies the forwarding behavior to allow the traffic to be forwarded from the multicast VLAN to the subscriber port in a different VLAN, selectively allowing traffic to cross between two VLANs.

IGMP reports are sent to the same IP multicast group address as the multicast data. The AE ONT captures all IGMP join and leave messages from receiver ports and forwards them to the multicast VLAN of the source (uplink) port, based on the MVR profile.

Additional Notes on MVR Profiles Receiver ports can only be access ports (for example, the Ethernet interface on an

ONT).

Receiver ports must be in a different VLAN than the ONT WAN interface.

MVR does not currently support IGMP v3 messages.

The maximum number of multicast entries (or MVR group addresses) on an ONT is 128.

Refer to the provisioning examples (on page 295) for additional information on MVR.

T1 Services via PWE3 With AE Release 2.0, Calix ONTs provide T1 services over point-to-point GE links using pseudowire emulation technology. IETF RFC 3985 and RFC 4197 define the pseudowire edge-to-edge emulation (PWE3) architecture and provide a standards-based approach to T1 services delivery over a packet switched network (PSN).

A pseudowire connects two TDM circuits over a packet switched Ethernet network. In the most basic example, two T1 endpoints are connected together, converting a T1 signal into Ethernet frames and transported over an asynchronous Ethernet network. On the receiving end, the Ethernet frames are converted back to TDM T1 signaling. This technology is often referred to as pseudowire End-to-End Emulation, or PWE3.

27


The 766GX and 767GX-R ONTs support unstructured, asynchronous T1s on a per port basis with port independence.

Note: Only SAToP unstructured service with asynchronous timing on each port is supported is this release.

TDM transport benefits from its inherent internal signal timing mechanism. Ethernet packet networks however do not have this same timing mechanism (asynchronous delivery) so PWE3 must accommodate this disparity via other methods. The Calix PWE3 solution supports both adaptive and differential timing for PWE3 T1s. It also supports line timing on the WAN interface (optical link) and loopback timing on the T1 interface. The ONTs have an internal Stratum 3 clock reference and reverts to the internal clock during a holdover condition. The solution meets the T1 timing requirements of G.824.

Note: T1 PWE3 services are implicitly associated to an ONT IP-Host object. The IP-Host object specifies a svc-tag-action, which provides the VLAN association.

Please refer to the Calix Application Note T1 Pseudowire Applications for MDU ONTs for complete information on PWE3 support.

Note: Provisioning of PWE3 services on Calix ONTs via CMS is not currently supported. Calix recommends manually creating configuration files for ONTs supporting PWE3. Refer to the configuration examples as required.

Timing over Ethernet

With the E7 Platform Release 1.1 which is independent of AE Release 2.0, the E7 synchronizes the GE ports on the GPON-4 line card to the same internal clock reference used by the E7. For AE, the eight GE ports can therefore be synchronized and differential timing clock recovery is extended from ONT to ONT without regard for whether the optical layer is GE or GPON.

In this scenario, the E7 may be using its local Stratum 3 clock or an external BITS input as its timing reference. Up to ten E7 shelves can be connected together to share a local BITS input. A BITS Chaining Cable available from Calix includes connectors to attach the redundant BITS output pins from one E7 shelf to the redundant BITS input pins on a second E7 shelf, and so on.

28


The figure below shows a model for building synchronous networks using the E7 and Calix 766GX ONT. All E7 units are synchronized using the E7’s BITS IN/OUT pins on the back of the unit to create a traceable network clock reference between the E7 systems and the ONTs. The E7 systems can be tied to a local BITS clock or allowed to free run on the E7’s STRATUM 3 local oscillator. The remote subscriber ONT may be configured for differential clock recovery. The CO network end can use either loopback (lowest jitter) or differential (lowest delay) clock recovery.

T1 PWE3 Planning

Before implementing PWE3 services in an AE network, keep the following general guidelines in mind:

When delivering SATOP service, the AE Release 2.0 solution supports RFC 5087 (TDMoIP), PWE3 RFC 5086 (CESoPSN) and Layer 2 (CESoETH) provisioning. In a properly configured system, the combination of the IP address and UDP port number uniquely identifies the pseudowire path (the associate pseudowire "label"). TDMoIP, CESoPSN, and CESoETH are three unique provisioning methods used to associate the terminal one T1 port and UDP port number in order to direct the pseudowire payload to the associated end-point port. The UDP port number must be agreed upon by both ends of the pseudowire in order to identify the bi-directional T1 payload.

Within a Layer-2 network, PWE3 services from an ONT are typically placed in a single VLAN for transport between the remote pseudowire devices and the IP gateway. Multiple remote locations may be split into separate VLANS for ease of network planning and operation.

29


Transport of T1 services over a packet network requires a CoS priority and sufficient bandwidth allocation within the packet network to reduce latency and packet loss. T1 service VLANS should be given a high IEEE 802.1p priority "p-bit" value.

Each Calix ONT is provisioned with a static IP address for the SAToP interworking function (an IP host). Each T1 pseudowire end point thus has a unique source and destination IP address corresponding to the ONT with a UDP port ID for the individual T1 circuit on the ONT.

T1 pseudowire can be transported through an open IP network or closed E7 Ethernet network. If two pseudowire ONT end points are within the same IP subnet and Layer 2 broadcast domain (VLAN), they discover each other using Address Resolution Protocol (ARP). The T1 service will not transit through the IP default gateway and no manual configuration is required for each end point to discover their respective destinations.

If two pseudowire circuits have IP addresses in different IP subnets, the data path between the end points must transit through a router external to the E7 network even if there is a direct Layer-2 path between the two ONTs confined within the E7 network.

ONT Inventory

DHCP Option-43

Calix ONTs currently populate DHCP Option-60 and 61. Option-60 identifies the ONT as a Calix ONT with the model number included in brackets. Option-61 includes the FSAN serial number and if available, the RONTA ID. When registering with the CMS, AE ONTs include additional information such as model number and firmware revision. Including this information in the DHCP options is beneficial to companies that use their DHCP server to analyze their ONT inventory. DHCP Option-43 is commonly used to carry detailed inventory information about a device.

Calix ONTs have integrated host components such as VOIP and PWE3 which require an IP address. Correlating these ONT integrated components to the ONT through the DHCP server makes troubleshooting easier for the service provider. To accomplish this, Calix defines a different DHCP Option-43 for the IADs and identifies the ONT MAC address as part of this structure. The advantage of the Option-43 approach is that it enables the use of relay treatment upstream of the ONT.

Note: AE R2.0 (GX and GE) supports firmware upgrade through CLI and DHCP Option-43.

Note: In AE Rev 2.0, there are 3 ONT firmware image types, GX SFU, GX MDU and GE.

Refer to the AE Rev 2.0 Release Notes for specific upgrade instructions using either CLI or Option-43.

30


ONT Firmware Upgrades using Option-43

The use of Option-43 can be used for firmware upgrades during the ONT ranging sequence. To enable this feature the operator must populate the DHCP server with Option-43 entries listing Calix ONT firmware image filenames. During ONT boot-up, the DHCP client on the ONT requests Option-43 structure. If DHCP Option-43 structure is available, the ONT pulls the image header for each Option-43 firmware entry until it finds the right ONT type match. Once the ONT finds an image with the right type match but with a version mismatch, it proceeds to pull the entire firmware image file and upgrade itself. If the version of the matching image is equal or lower to the ONT running version, the ONT continues through the configuration process by pulling down the assigned configuration file.

Note: The default Option-43 setting is <Upgrade Only> however this feature can be disabled.

During configuration file processing the ONT reacts differently to the firmware upgrade CLI command depending on the prior processed DHCP Option-43. If a DHCP Option-43 firmware entry is dictating the ONT firmware version (entry with matching firmware type), the ONT simply ignores the firmware upgrade CLI command; DHCP Option-43 firmware upgrade takes precedence over the CLI command. If no DHCP Option-43 firmware entry with matching firmware type, the ONT executes the firmware matching/upgrade as instructed by the CLI command.

For additional details see the DHCP Option-43 (on page 244) section in Command Reference section of this guide.

31


Calix ONTs ONT Models

The AE Release 2.0 is a platform independent software release that supports Calix 760GX and 700GE ONTs. In release 2.0, new ONT types are supported as well as adding voice ground start, enhanced Ethernet services, and T1 support using PWE3 technology.

The following ONT models are supported as part of this release

SFU ONTs 711GE ONT (2 POTS, 2 GE) 721GE ONT (2 POTS, 2 GE, 1 RF*) 716GE ONT (2 POTS, 4 GE) 726GE ONT (2 POTS, 4 GE, 1 RF*) 717GE ONT (4 POTS, 4 GE) 727GE ONT (4 POTS, 4 GE, 1 RF*)

The listed SFU ONTs offer the following AE features:

Adaptive AE Optics

All AE features supported by 700GX ONTs (except m2u)

1 Gbps symmetrical throughput

Upstream and Downstream policing up to 1 Mbps per ONT

64 Kbps bi-directional traffic shapers up to 2,048 Mbps

32


MDU ONTs 760GX ONT (8 POTS, 4 GE, 4 SFU RF*, 1 MDU RF*) 762GX ONT (8 POTS, 8 GE, 4 SFU RF*< 1 MDU RF*) 763GX ONT (8 POTS, 8 GE, 8 SFU RF/RF RETURN*)** 766GX ONT (8 POTS, 4 GE, 8 T1/E1, 4 SFU RF*, 1 MDU RF*)** 766GX ONT (8 POTS, 4 GE, 8 T1/E1, 4 SFU RF*, 1 MDU RF*) 24 VDC 767GX ONT (8 POTS, 4 GE, 8 T1/E1, 3 SFU RF/RF RETURN*)

* - RF overlay and RF Return services are not supported in AE mode. ** - Also available in rack mount versions.

The listed MDU ONTs offer the following AE features:

T1 support via PWE3 on 766GX and 767GX-R ONTs

Adaptive, Differential, and Line Timing on AE uplinks

Unstructured per port with port independence

RFC 5086 UDP/IP PWE3 provisioning (CESoPSN)

MEF8 Layer-2 PWE3 provisioning (CESoETH)

Upstream and Downstream policing up to 1 Mbps per ONT

64 Kbps bi-directional traffic shapers up to 2,048 Mbps

ONT Optics Characteristics The 700GX or 700GE ONT exhibits the same optical capabilities and characteristics whether in AE or GPON mode.

The ONT optics are rated for a Class B+ PON and support either diplexer or triplexer applications.

Note: In AE mode, the WAN side optical interface supports 1000Base-T, single strand, and single mode fiber optical connections. It does not support 10/100 Ethernet applications.

Downstream digital data content is received on a wavelength of 1490 nm. In a triplexer application in which downstream analog video is supported, this content is received on the 1550 nm wavelength. Upstream data is transmitted at a wavelength of 1310 nm.

33


AE Optical Links Calix GX ONTs communicate in the network via a single fiber that attaches to a Small Form-Factor Pluggable (SFP) optics module installed in the upstream device, such as the Calix E5-400 Ethernet Transport and Aggregation Platform.

Calix GE ONTs communicate in much the same way however the optics can now co-exist with 10 GE GPON wavelengths.

When these ONTs are operating in AE mode (without the optical loss associated with splitters and combiners as is often the case in GPON deployments), the point to point system's optical transmitter may require additional attenuation. Adding attenuation avoids over-saturating the optical receivers when ONTs are located close to the upstream device.

For additional information on optical link power levels and recommendations for the amount of attenuation that may be needed, refer to Managing AE Optical Link Power Levels (on page 248) located in the Appendix of this guide. Information on SFP installation and best practices is available in the Calix E5-400 Installation Guide.

34



Chapter 2

AE Configuration

ONT Operational Overview The AE ONT obtains an IP address through a DHCP server and is configured and managed remotely via an AE configuration file.

Services provided by the AE ONT include voice via SIP, IPTV, High Speed Internet (HSI), and business Ethernet.

Note: An ONT running in AE mode does not support legacy RF video services.

36


AE Configuration Overview All 700GX provisioning is accomplished via preset configuration files.

Note: This method of provisioning is hereafter referred to as Remote Management Interface (RMI) configuration.

Prior to coming on-line, each ONT must download a configuration file from a remote TFTP server.

Note: An ONT may also be configured via the buttset interface. For additional information, refer to the chapter entitled Remote ONT Activation. (on page 151)

In addition to the ONT configuration files, there are several services that must be provided by the Service Providers network to fully support an AE ONT deployment. These services must be directly accessible on the management Virtual Local Area Network (VLAN). These services include the following:

DHCP Server(s)

Required for ONT initialization (provides IP address and the like)

Required for VoIP port initialization

TFTP Server(s)

Required for ONT download of the appropriate runtime image

Required for ONT download of the specific configuration file to use

Required for ONT download of VoIP configuration file (softswitch dependent) NTP Server: Required for ONT's accurate time of day clock Syslog Server: Optional for logging alarms, events, and system errors SNMP Trap Receiver: Optional for monitoring alarms and events generated by the ONT SIP Server: Required for VoIP support

Important: AE requires that each ONT have its own IP control address. ONTs are assigned their IP address via the DHCP server. DHCP is also used to provide initial provisioning information such as the location and name of the ONT's configuration file.

The ONT provisions itself each time it boots based on the parameters established above. As a result, modifications to the configuration file only take effect when the ONT is reset. A utility is provided to reset a single ONT or all ONTs associated with a given configuration server. ONTs may also be reset using Simple Network Management Protocol (SNMP).

37


AE Architecture Overview The following diagram provides a high-level view of a basis AE network:

38


Configuration Example All AE deployments tend to be unique as there are sure to be differing platforms for multicast video, VoIP services, DHCP server functions, and the like (not to mention redundant configurations). It would be prohibitive to document every possible configuration option so this document focuses on a few specific examples that cover the breadth of options that are most likely to be encountered.

The illustration below depicts a complete AE deployment using a single platform:

The management VLAN ID is re-configurable using a buttset. For additional information, refer to the chapter entitled, Remote ONT Activation (on page 151).

39


Network Component Overview Several components are required, regardless of deployment topology, to effectively manage an AE network.

Note: Each AE ONT typically communicates with management services (for example, DHCP and TFTP servers) through a dedicated Management VLAN on the Wide Area Network (WAN) side of the connection. For security purposes, any subscriber side access to the management VLAN is filtered out by the AE ONT. The ONT ships from the factory configured to automatically create a default management VLAN with VLAN ID of 85.

Remote Management Interface (RMI) Station

The Remote Management Interface (RMI) is used to send commands collectively to the ONT via a configuration file. The configuration file may be a flat ASCII file or a hierarchical set of files that contain all the provisioning commands necessary to set up any ONT for voice, data, and IP video traffic.

At a minimum, the RMI interface requires a DHCP Server, a TFTP Server, a SYSLOG Server, and an NTP Server (see definitions below).

Important: This provisioning is downloaded every time the ONT boots – no provisioning is retained in the ONTs memory.

The RMI offers a flexible and expandable configuration file model that provides the following capabilities:

Configuration File Naming: The ONT configuration file name is based on the FSAN serial number (the same number appears on the external label of the ONT) or the assigned Registration ID. The DHCP server can optionally override the configuration file name.

Hierarchical File Structure: A hierarchical file structure allows any number of ONT configuration files to reference one or more global configuration file(s). Up to 3 levels of file nesting are provided. This allows global provisioning to be kept in a single file; and all ONTs of the same service class refer to that file. Example: global configuration files that are Bronze, Silver or Gold service profiles.

Separate VOIP Configuration: The same VOIP configuration file approach that is used for GPON is used for AE ONTs. This allows a mixed GPON/AE ONT deployment to use the same VOIP configuration file.

The provisioning commands in the configuration file are one per line but they support commands that span multiple lines. The ONT processes the commands one at a time. If a command fails due to syntax errors or during the application of the provisioning action, the ONT sends a message to the Syslog server and CMS describing the error and then reboots. If the ONT successfully processes all commands without errors, it sends a message to the Syslog server and CMS declaring the completion of the ONT configuration as it moves into the operational state.

40


The Calix AE ONT communicates with the RMI platform across a dedicated management VLAN. The ONT software comes from the factory configured to automatically create a default management VLAN with VLAN ID of 85. The service provider has the option of changing this VLAN ID on the ONT during installation using a buttset device (explained later in this guide).

For additional information, refer to Remote Management Interface Script (on page 130) in chapter 5.

DHCP Server

The Calix AE network supports Linux and Solaris platforms running their standard DHCP server software.

The system requires a default DHCP configuration file which specifies various DHCP Options or an alternate TFTP address for the ONTs use. By default, the ONT uses the DHCP Server address to request its configuration file. To specify a different DHCP configuration file or TFTP server address, simply update the DHCP configuration file with the information.

For example, on a Linux system, you define the configuration file name and TFTP address in the /etc/dhcp.conf file as shown below.

filename "CXNK00012345.cfg"; next-server 192.168.7.100;

For additional information on DHCP, refer to About DHCP (on page 51).

TFTP Server

The TFTP Server hosts all configurations files for the AE network. Any Linux or Solaris server can be used provided it has sufficient space to hold the ONT image (one for each ONT type), as well as all ONT Configuration files and VoIP Configurations files.

Note: AE ONTs download their configuration file from the DHCP server that delivered the IP address to the ONT. However, the DHCP server must be configured to provide a different IP address if the TFTP Server resides elsewhere (dedicated TFTP Server).

Note: Prior to configuring FTP server information into CMS, you must first set up appropriate file transfer permissions. For additional information, see Notes on Configuring FTP (on page 63).

41


NTP Server

The 700GX ONT requires an external resource to maintain an accurate time of day clock. This is important for time stamping alarms and error messages. In AE mode the ONT uses the standard Network Time Protocol to provide this function. The NTP protocol requires an NTP server. The ONT requests time reference from the NTP Server during the configuration process and adjusts its local time accordingly. Periodic requests and adjustments keep the ONT’s clock from drifting.

SYSLOG Server

The 700GX ONT requires a server resource for notifying the service provider when issues arise that may impact the operation of the ONT. In AE mode the ONT uses the standard network logging facility Syslog to log alarms, events, or errors detected by the ONT.

Note: The system operator must monitor the Syslog log file to determine if alarms, events, or errors have been reported by any ONT.

The ONT uses SNMP traps and standard Syslog to notify the service provider when issues arise that may impact the operation of the ONT. By default, the AE ONT sends alarm, event, and informational messages to a Syslog server address. In addition, the customer has the option of configuring up to 4 SNMP trap receivers as well to receive alarm and event notification.

Note: All event and alarm messages are also forwarded to CMS provided the ONT has the CMS IP address configured as an SNMP trap receiver.

SIP Server

A network based SIP server is required to complete the VoIP subsystem and provide voice services.

42


AE Services Overview Voice Capability

Two types of voice ports are supported on AE ONTs.

Session Initiation Protocol (SIP) voice port

By selecting the appropriate profile, CMS automatically displays the appropriate fields required to provision the service.

AE deployments support VoIP (SIP) to provide voice service off the ONT. Provisioning of the voice service is done by defining the basic voice service parameters in the ONT configuration file. Detailed VoIP provisioning is done in a separate VoIP configuration file. Basic VoIP provisioning contained in the ONT configuration file includes the name of the VoIP configuration file, the VoIP configuration file server, and a secondary VoIP configuration server (if desired).

Note: Because the SIP service works identically in either GPON or AE mode, the same VoIP configuration file can be used to provision SIP services on either GPON or AE ONTs simultaneously.

Calix TDM Gateway (CTG) voice port

The Calix C7 TDM gateway solution provides a gateway to the circuit-switched PSTN for VoIP lines on subtended Calix platforms. Calix service platforms that support a TDM gateway client for VoIP include the E5-111, E5-121, and 700-series ONTs operating in AE mode. These units interface to the C7 via an Ethernet link, and the C7 in turn provides a GR-303 or GR-8 switch interface to the PSTN for the subtended VoIP lines.

To support TDM gateway applications, the C7 must be equipped with at least one Voice over IP Resource (VIPR) plug-in card. The C7 VIPR card hosts a gateway interface —provisioned as a SIP voice concentration group (SIP VCG) — to perform the concentration and format conversion of voice traffic from the subtended unit. The VIPR card receives AAL5-encapsulated VoIP packets from the E5 or ONT (via a C7 Ethernet downlink interface) and converts the voice content to TDM format for delivery to a C7 GR-303 or GR-8 switch interface. The C7 passes ABCD signaling events (including ringing and loop-current events) between the VIPR and E5 or ONT via RFC 2833 packets.

Note: For complete instructions on provisioning SIP or TDM Gateway services on an AE ONT, refer to the Calix VoIP Services Guide.

43


Data Capability

A wide variety of data service capability is provided in the AE ONT. The AE ONT has been designed to be deployed in subscriber networks that may or may not have residential gateways, tagged or untagged traffic, stringent QoS, VLAN per service or port, TLS hair pinning, DoS protection, and full “triple play service” out of a single Ethernet port.

IPTV Capability

Multicast support for IPTV is supported with IGMP snooping. In addition, Calix's multicast to unicast IPTV flow conversion is provided as well.

AE Deployment Scenarios Due to the inherent flexibility of AE design, the number of possible network topologies and configuration options are far too numerous to mention. This section describes possible customer deployment scenarios presented as the most basic to the most complex.

The following deployment scenarios are outlined below:

Unmanaged Pass-through ONT Unmanaged Single VLAN Mapping Managed ONT Basic Service - VLAN per Port Managed ONT Basic Multi-service - VLAN per Service

Unmanaged Pass-through ONT In an unmanaged pass-through deployment, the design is simplistic in nature in that it does not require a management station or configuration files to provide data services.

Deployment Characteristics

The characteristics of an unmanaged pass-through configuration include:

Management VLAN to monitor the ONT is optional ONT has no configuration file Simple turn-up for quick demonstration or for a simple deployment model Requires buttset device only for ONT activation No filtering, classification, mapping or metering (QoS)

44


In this scenario, the ONT passes all data traffic (tagged and untagged) between the fiber WAN interface and the base Ethernet port. Note that only one ONT Ethernet port is supported in this configuration. For additional information, refer to Remote ONT Activation. (on page 151)

To configure the ONT to pass all traffic between the WAN and LAN interfaces, follow

the procedure in the Remote ONT Activation (on page 151) section. Once the VLANs have been defined using the buttset device and the ONT is attached to

the headend switch, the ONT passes data through the ONT and out the single GE port. If the VLAN IDs for all subscriber Ethernet ports are configured to be zero, then the

ONT automatically reverts back to operating in default boot-up mode (using a Management VLAN and configuration files).

45


Configuration Rules

Follow the rules listed below when configuring Ethernet ports in pass-through mode:

The 1st Ethernet port on any ONT can be disabled, assigned to a single VLAN, or configured for pass-through mode.

If the 1st Ethernet port is set to pass-through, the 2nd Ethernet port is disabled (in other words, the RONTA prompting stops after the 1st Ethernet port is set to pass-through)

If the 1st Ethernet port is not set to pass-through, the 2nd Ethernet port can be set to disabled, or assigned to a single VLAN, provided the VLAN IDs are not identical at each ONT).

Unmanaged Single VLAN Mapping In an unmanaged single VLAN mapping deployment, a single VLAN may be assigned to each ONT Ethernet port (the base GE and the expansion Ethernet port). VLAN traffic is then mapped between the fiber WAN interface and one or both ONT Ethernet ports. Only one VLAN may be assigned per ONT Ethernet port.

46


If the ONT has two subscriber Ethernet ports, each port must be configured for a different VLAN; however no two Ethernet ports can be configured for the same VLAN. To assign a VLAN to a specific ONT port, follow the procedure in the Remote ONT Activation (on page 151) section.

Once the VLANs have been defined using the buttset device and the ONT is attached to the headend switch, the ONT passes data through the ONT and out one or both Ethernet ports.

If the VLAN IDs for all subscriber Ethernet ports are configured to be zero, then the ONT automatically reverts back to operating in default boot-up mode (using a Management VLAN and configuration files).

Managed ONT Basic Service - VLAN per Port In this next example, only high speed internet (HSI) is provided to the subscriber using a single VLAN per port model. The ONT is managed by a single RMI station with no redundancy.

Deployment Characteristics

The characteristics of this model include:

Only HSI service is being delivered The system is managed from a single RMI station Each subscriber is provided service on separate VLANs DHCP server for ONT management is separate from DHCP server for subscriber's

premises equipment (note that the need for separate DHCP servers can be avoided by using a DHCP relay agent)

This configuration supports tagged or untagged traffic

DHCP Handling

In this configuration DHCP IP address assignments are required on both the ONT management VLAN and the subscriber's HSI VLAN. One approach is to have two discrete DHCP servers - one for the management VLAN and one for the HSI VLAN.

In reality, you need not deploy individual DHCP servers. One method is to configure a DHCP relay agent on the DHCP server which is designed to forward any DHCP request to the actual DHCP server. This is typically accomplished by use of a managed switch at the headend or central office. Another method is to configure the DHCP server to be on multiple VLANs directly. See Notes on Configuring the DHCP server (on page 57) for additional information.

47


Supported Features

The features available over the managed ONT include:

Quality-of-Service (Traffic Shaping) Rate limiting upstream and downstream bandwidth 802.1p QoS support Security

Multicast filtering

Multicast/Broadcast upstream shaping

Station filtering

DHCP L2 relay using Option-82

An example of this model is illustrated below.

48


ONT Basic Multi-service - VLAN per Service In this example, both high speed internet and IPTV service is provided to the subscriber on separate VLANs.

Deployment Characteristics The characteristics of this model include: HSI and IPTV are provided on separate VLANs Subscriber premise may have a gateway device (RG) or unmanaged switch Separate Management VLAN, VoIP VLAN, and TLS VLANs are implemented

Supported Features The features available over the VLAN per service model include: IGMP snooping (only channels being viewed by subscriber are delivered) QoS per VLAN (rate limiting and traffic shaping per service) Multicast and Multicast-to-Unicast conversion Subscriber to subscriber hair pinning for TLS (from the ONT to the switch to the ONT) If the subscriber has an unmanaged switch, the device is classified via Organizationally

Unique Identifier (OUI) for set-top box identification) If the subscriber has a Residential Gateway (RG), the device is classified via tagging An example of this model is illustrated below.


Chapter 3

Configuring an AE System

AE System Requirements The foundation for the Calix AE solution incorporates a simple operational model:

Obtain an IP address from a DHCP server Obtain a configuration file from a TFTP server Provide subscriber service

In addition, when an AE ONT comes on line, the ONT looks for two other services specified in its configuration file:

The NTP server in order to obtain its time-of-day The SYSLOG server in order to send any generated alarms, operational messages, or

alarms to SNMP Trap Receivers (optional)

All services used by the AE ONT can be provided on a single management station (RMI) if desired because the actual overhead required to support these services is quite small. However, there is no requirement that a single management platform be used. In fact, each of the services used by the ONT could exist on independent, geographically separated platforms.

Important: Each service must be available on the management VLAN that the AE ONT is using. The ONT configuration file defines the location and address of each service.

50


Notes on Configuring the DHCP Server Calix supports the following RMI platforms:

Linux: ISC DHCP (open source DHCP server) Solaris: Standard Solaris DHCP server.

The user may specify alternate configuration file names or TFTP addresses that the ONT should use to obtain its provisioning. By default, the ONT uses the DHCP's address to request its configuration file.

Note: Calix recommends using the ONT serial number or registration ID for identifying AE ONT configuration files.

Note: If you find it necessary to deviate from the naming convention above, contact Calix TAC for additional information on updating the DHCP configuration file.

As an alternative, the CMS server can be configured for DHCP services to support AE ONTs. Refer to Configuring the CMS Server for DHCP Service (Red Hat Linux) (on page 52) for additional information.

DHCP Options

The AE ONT uses DHCP Option-60 (Vendor Class Identifier) and Option-61 (Client Identifier) to facilitate custom configuration by the DHCP server. The DHCP server uses the information in these option fields to look for DHCP messages that come from Calix AE ONTs and uniquely identify each ONT individually.

Option-60: The AE ONT assigns the value "CALIX AE [model]" to the DHCP Option-60 string in the DHCP Discovery message and the DHCP Request message. For example, "CALIX AE 710GX".

Option-61: The AE ONT assigns the value "[serial number]" to the DHCP Option-61 in the DHCP Discovery message and the DHCP Request message. For example, "CXNK11900001".

Note: If a Registration ID has been provisioned on the ONT, an 8 bit value is appended to the Registration ID indicating length followed by the Registration ID value (numeric up to 10 characters).

51


Configuration File Server

A TFTP server provided on a Linux or Solaris platform is required on the system. The minimum configuration specifications are:

Space for ONT Images: 4MB - 6MB for each ONT type (SFU and MDU)

Space for ONT Configuration Files: 1 Kb for each ONT configuration

Space for VoIP Configuration Files: 6 Kb for each unique VoIP configuration

Note: All SFU ONTs (for example 710GX, 711GX, 712GX, and 714GX) use the same image. By default, the AE ONT attempts to download its configuration file from the DHCP server that sent the ONT its IP address. However, the DHCP server is configured to provide the ONT a different IP address to use as its TFTP server.

About DHCP From the client's perspective, DHCP is an extension of the BOOTP mechanism. This behavior allows existing BOOTP clients to interoperate with DHCP servers without requiring any change to the clients' initialization software. RFC 1542 [2] details the interactions between BOOTP and DHCP clients and servers.

The format of a DHCP message is shown below with associated field definitions for a DHCP message. The numbers in parentheses indicate the size of each field in octets.

0 1 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

op (1) htype (1) hlen (1) hops (1)

xid (4)

secs (2) flags (2)

ciaddr (4)

yiaddr (4)

siaddr (4)

giaddr(4)

chaddr (16)

sname (64)

file (128)

options (variable)

52


DHCP Message Field Definitions

Field Octets Description

op 1 Message op code/message type. Example: 1=BOOTREQUEST, 2=BOOTREPLY

htype 1 Hardware address type. Example: 1 = 10 mb Ethernet

hlen 1 Hardware address length. Example: 6 = 10 mb Ethernet

hops 1 Client sets to zero, optionally used by relay agents when booting via a relay agent.

xid 4 Transaction ID, a random number chosen by the client, used by the client and server to associate messages and responses between a client and a server.

secs 2 Populated by client, seconds elapsed since client began address acquisition or renewal process.

flags 2 Used to enable acceptance of IP unicast stream.

ciaddr 4 Client IP address; only populated if client is in BOUND, RENEW, or REBINDING state and can respond to ARP requests.

yiaddr 4 Client IP address

siaddr 4 IP address of next server to use in bootstrap; returned in DHCPOFFER, DHCPACK by server.

giaddr 4 Relay agent IP address, used in booting via a relay agent.

chaddr 16 Client hardware address.

sname 64 Optional server host name, null terminated string.

file 128 Boot file name, null terminated string; "generic" name or null in DHCPDISCOVER, fully qualified directory-path name in DHCPOFFER.

options var Optional parameters field.

With the latest release of software, AE ONTs support DHCP Option 66 and 67. These two options are defined below:

TFTP Server Name (Option 66)

This option is used to identify a TFTP server when the "sname" field in the DHCP header has been used for other DHCP options. Option 66 has a minimum length of 1 and allows you to assign TFTP server IP addresses to the message header for packet routing.

TFTP Bootfile Name (Option 67)

This option is used to identify a bootfile when the "file" field in the DHCP header has been used for other DHCP options. Option 67 has a minimum length of 1 and allows you to assign TFTP server IP addresses to the message header for packet routing.

53


Configuring the CMS Server for DHCP Service (Red Hat Linux) The CMS server can be configured for DHCP service for Calix Active Ethernet (AE) ONTs.

This topic covers these high-level steps:

Verify that you have the Red Hat DHCP package. Configure an Ethernet port for use by the DHCP server. Enable the Calix AE ONTs to use the CMS server for DHCP service.

Verifying that the DHCP package is installed

The procedures in this section assume that you have the Red Hat DHCP package installed on the CMS server. By default the DHCP package is installed on CMS2GO–Dell servers running Red Hat ES 5.

Installing the DHCP package (Red Hat Enterprise System 5)

Tip: If your host server is running Red Hat 4, search on the Internet for instructions on how to install the Yum installation utility.

To verify DHCP is installed, log in to the host server as the root user and run the command:

yum info dhcp

If DHCP is not yet installed, you can install the latest version by running the command:

yum install dhcp

If DHCP is already installed, you can update to the latest version by running the command:

yum update dhcp

Configuring an Ethernet port for use

Before enabling DHCP service on the host server, you may need to configure an Ethernet port (such as eth1) for the DHCP server. A separate Ethernet port is recommended, for example, if your CMS deployment manages more than 250 AE ONTs.

Consult with an IT professional to determine your port setup and requirements.

Tip: To determine what interface to use, you can run the ifconfig command to view all configured Ethernet interfaces, and select the appropriate interface based on the IP address.

If you have not yet created a port for this purpose and your circumstances require one, complete the following procedure.

54


Adding a second port for the DHCP server

1. On the Linux server monitor, close any open Terminal windows.

2. On the menu bar, open the Network Configuration dialog box:

(Red Hat 4) On the menu bar, click Applications > System Tools > Network Device Controls.

(Red Hat 5) On the menu bar, click System > Administration > Network. In the Network Setup screen, click Change Network Configuration.

3. In the Devices tab, Create a new Ethernet device:

In the tool icon bar, click New.

In the Select Device Type dialog box, the Ethernet Connection option is highlighted by default. Click Forward.

Select the Ethernet card to use for the DHCP server (for example, if eth0 is already created, select eth1), and then click Forward.

4. In the Configure Network Settings dialog box, accept the default setting (radio button selected to the left of Automatically Obtain IP Address Settings with, and DHCP displaying in the drop-down list):

Click Forward.

In the Create Ethernet Device dialog box, click Apply.

The Ethernet device displays in the Network Configuration dialog box Devices tab with an Inactive status.

5. In the top right corner of the dialog box, click the Close button (or in the menu bar, click File > Quit) to close the Network Configuration dialog box.

6. Open a terminal window, and verify the correct Ethernet port has been assigned to the DHCP server in the sysconfig/dhcpd file. If necessary, add the Ethernet port to the end of the line that begins DHCPDARGS=

In the following example, vi is used to open and edit the file.

Example

[root@cmshost1 ~]# cd /etc [root@cmshost1 etc]# vi sysconfig/dhcpd # Command line options here DHCPDARGS=eth1 . :wq [root@cmshost1 etc]#

55


Enabling Calix devices to use the CMS server for DHCP service

Enabling Calix devices to use the CMS server as the DHCP service requires editing the dhcpd.conf file, restarting the dhcp daemon, and turning on the DHCP service. You can then verify that DHCP service is running.

For instructions on how to configure the DHCP server options at the network element level, refer to the Calix user guide for the device.

The following procedure is applicable for Red Hat ES5.

To configure the CMS server for DHCP service

1. Log in on the host server as the root user. For tips and examples, see Accessing the Host Server.

2. Navigate to the /etc directory.

Example

[root@cmshost1 ~]# cd /etc [root@cmshost1 etc]#

56


3. Edit the dhcpd.conf script:

Tip: For a list of basic vi commands, see vi Editor Commands.

a. At the command prompt, type: vi dhcpd.conf to open the script file.

b. Specify the subnet and mask, broadcast address, and pool range.

Note: Recommended settings for the default and maximum lease times are shown in the following example. Adjust these settings for your setup.

c. (Conditional, when routing to an outside network) Specify the IP address of the router. If this step is not required for your setup, remove or uncomment the option routers line (as shown in the following example).

d. (Conditional, for processing syslog messages) Specify the location for sending syslog messages.

e. Press <Esc> to finish editing.

f. Type :wq and press <enter> to save the changes and close the script file.

Example

[root@cmshost1 etc]# vi dhcpd.conf # DHCP Server Configuration file. # see /usr/share/doc/dhcp*/dhcpd.conf ddns-update-style interim; ignore client-updates; # If this DHCP server is the official DHCP server for the local # network, uncomment the authoritative directive. authoritative; # Use this to send dhcp log messages to a different log file. # Use syslog.conf to complete the redirection). log-facility local7; #AE-ONT Directly connected Mgmt Network subnet 172.26.31.0 netmask 255.255.255.0 { # option routers 172.26.31.1; option broadcast-address 172.26.31.255; default-lease-time 3600; max-lease-time 7200; range 172.26.31.100 172.26.31.199; } :wq [root@cmshost1 etc]#

57


4. After editing the file, restart the DHCP server. At the command prompt, type: service dhcpd restart

5. Configure the daemon to run on startup. At the command prompt, type: chkconfig dhcpd on

Example

[root@cmshost1 etc]# service dhcpd restart [root@cmshost1 etc]# chkconfig dhcpd on Starting dhcpd: [root@cmshost1 etc]#

6. Verify that DHCP service is running:

a. Navigate to the /etc/init.d directory.

b. Run the command: ./dhcpd status

Example

[root@cmshost1 ~]# cd /etc/init.d [root@cmshost1 init.d]# ./dhcpd status dhcpd (pid 2210) is running...

58


Notes on Configuring the NTP Server A standards based NTP server provided on a Linux or Solaris platform is required on the system for providing timing to the AE ONTs. The NTP server address is provided to the ONT in the ONT configuration file. The service provider may add redundancy by adding a backup NTP server and specifying a second address in the ONT's configuration file. The AE ONT provides for primary and secondary NTP servers.

Note: Any loss of communication with the NTP server results in a warning message logged to the Syslog server(s). However, failure to get NTP updates is not considered critical in which case no further action is required.

As an alternative, the CMS server can be configured for DHCP services to support AE ONTs. Refer to Configuring the CMS Server as the NTP Source (Red Hat Linux) (on page 58) for additional information.

Configuring the CMS Server as the NTP Source (Red Hat Linux) The CMS server can be configured as the NTP source for Calix E5-100 and Calix E5-400 nodes and Calix Active Ethernet (AE) ONTs, enabling these elements to function as SNTP clients.

The procedure in this section assumes that you have the Red Hat NTP package installed on the CMS server. By default the NTP package is installed on CMS2GO–Dell servers running Red Hat ES5.

Installing the NTP package

Tip: If your host server is running Red Hat 4, search on the Internet for instructions on how to install the Yum installation utility.

To verify NTP is installed, log in to the host server as the root user and run the command:

yum info ntp

If NTP is not yet installed, you can install the latest version by running the command:

yum install ntp

If NTP is already installed, you can update to the latest version by running the command:

yum update ntp

59


Enabling Calix devices to receive NTP service from the CMS server

Enabling Calix devices to receive time updates via the CMS server requires editing the ntp.conf file to add the IP subnets for the managed devices, configuring the ntp daemon to run on startup, and starting the NTP service. You can then verify that NTP service is running.

For instructions on how to configure the NTP server options at the network element level, refer to the Calix user guide for the device.

The following procedure assumes that you are running Red Hat ES5.

To configure the CMS server as the NTP source

1. Log in on the host server as the root user. For tips and examples, see Accessing the Host Server.

2. Navigate to the /etc directory.

Example

[root@cmshost1 ~]# cd /etc [root@cmshost1 etc]#

3. Edit the ntp.conf script, if required:

Tip: For a list of basic vi commands, see vi Editor Commands.

a. At the command prompt, type: vi ntp.conf to open the file.

b. Verify that the file contents are similar to the contents in the example below.

If you are running a version of Red Hat other than ES5, consult with your IT system administrator or resource for the required file settings.

To restrict access to specific SNTP clients, insert one or more lines below the line beginning with # restrict 191.162.0.0 mask 255.255.255.0. For example, to enable hosts on the subnet 10.2.11.x to use CMS as an NTP source, insert the following line: restrict 10.2.11.0 mask 255.255.255.0 nomodify notrap

c. Press <Esc> to finish editing.

d. Type :wq and press <enter> to save the changes and close the script file.

60


Example

[root@cmshost1 etc]# vi net.conf

# Permit time synchronization with our time source, but do not # permit the source to query or modify the service on this system. restrict default kod nomodify notrap nopeer noquery

# Permit all access over the loopback interface. This could # be tightened as well, but to do so would affect some of # the administrative functions. restrict 127.0.0.1

# Hosts on local network are less restricted. # restrict 191.162.0.0 mask 255.255.255.0 nomodify notrap notrust

# Use public servers from the pool.ntp.org project. # Please consider joining the pool (http://www.pool.ntp.org/join.html). server 0.rhel.pool.ntp.org server 1.rhel.pool.ntp.org server 2.rhel.pool.ntp.org

# Undisciplined Local Clock. This driver is intended for backup # and when no outside source of synchronized time is available. server 127.127.1.0 fudge 127.127.1.0 stratum 10

"ntp.conf" 34L, 1259C

:wq

[root@cmshost1 etc]#

1. Configure the daemon to run on startup. At the command prompt, type: chkconfig ntpd on

2. Start up the NTP service. At the command prompt, type: service ntpd start

61


Example

[root@cmshost1 etc]# chkconfig ntpd on [root@cmshost1 etc]# service ntpd start Starting ntpd: [root@cmshost1 etc]#

3. Verify that NTPD service is running:

a. Log in to the SNTP client as the root user.

b. From a command line, run the command: ntpdate cmsserver

where cmsserver is the CMS server name.

A date time stamp is returned, indicating NTP service is successfully running.

Example

# ntpdate cmsserver 27 Jan 20:21:13 ntpdate[7056]: adjust time server 172.23.43.16 offset 0.000254 sec

62


Notes on Configuring the Syslog Server At least one Syslog server address must be provided to support ONT logging. The service provider may specify a second Syslog server address in the ONT configuration file if redundancy is required.

Note: In a dual Syslog server environment, the AE ONT sends every log message to both server locations.

The ONT uses Syslog (per RFC3164 specifications) for reporting information events as well as warnings or errors. Syslog messages are sent asynchronously as best effort UDP packets to a designated server on the management VLAN. At boot-up, the ONT recognizes the DHCP server as the Syslog server (prior to receiving any of its provisioning information).

63


Notes on Configuring the SIP Server Note: The actual configuration of a SIP server is dependent on the softswitch chosen and is beyond the scope of this document.

The initial configuration of the ONT is a single line in the ONT's configuration file that contains the following VoIP service information:

ONT voice port to be enabled for SIP The name of the VoIP configuration file (contains detailed SIP configuration information

specific for the softswitch, calling services to be supported, and the like) The primary and secondary IP addresses of the TFTP server that is storing the VoIP

configuration file. Username and password URI string

Note: Because the SIP service works identically in either GPON or AE mode, the same VoIP configuration file can be used to provision SIP services on either GPON or AE ONTs simultaneously.

64


Notes on Configuring FTP Prior to setting up the CMS to TFTP connection, ensure that files transferred across the network via FTP have the appropriate permissions.

File Permission Basics Permissions are assigned by the system whenever you create a new file or directory. Permissions for a particular file can be viewed by running the "ls -l" command from the system command line:

ls -l Command Output

Permissions Includes information on type of file and the current permissions settings for that file. If the first digit = d: The entry is a directory b: The entry is a block special file. c: The entry is a character special file. l: The entry is a symbolic link p: The entry is a first-in, first-out (FIFO) special file. s: The entry is a local socket -: The entry is an ordinary file.

Links Displays the number of links to this file. Owner Account Name Displays the Owner Account Name for the file. Group Account Name Displays the Group Account Name for the file. Size of File Displays the size of the file in bytes. Date/Time of File Displays the date and time of last update to the file. File Name Includes the file name and any permission file changes (umask).

The permissions string in any file is based on file type, owner permissions, group permissions, and other user permissions.

65


Unless setup by yourself or the system administrator, your default umask setting is 000 which means that new files that are created have read and write permissions for everyone (666 or -rw-rw-rw). New directories have read, write and execute permissions for everyone (777 or drwxrsxrwx).

Permissions are numerically controlled within the system using a 3-digit umask number. Each digit sequentially removes permissions for each of the three classes of owner, group, and others. The values for any one digit are derived from adding the value of the permissions from the following list:

0 = no permission (-) 1 = execute permission only (x) 2 = write permission only (w) 4 = read permission only (r)

By adding all three digits together, the result is 7. This represents read, write, and execute permissions for the group the digit is applied to. Therefore, a umask value of 777 would give full read, write, and execute permissions to all owners, groups, and others.

The number given as a parameter to the umask command "masks" permissions as opposed to granting them. That is, the digits in the umask number are subtracted for files (666) when creating initial permissions. For example, suppose you enter:

umask 022

66


Files created using this umask have default permissions of 644 (666 - 022, or -rw-r--r--). New directories have default permissions of 755 (drwxr-xr-x). if the umask value is set to 077, your default file permissions would be 600 (-rw------) and your default directory permissions would be 700 (drwx------).

You can change the default permissions by using the umask command.

67


About the umask Command Applying a mask to limit permissions is accomplished by removing permissions based on the umask value.

A summary of the most frequently used umask commands is included here for reference:

umask000 - Assigns permissions such that all files have full read/write access for everyone.

umask002 - Assigns permissions such that only you and members of your group have read/write access to files, and read/write/search access to directories you own. All others have read access only to your files, and read/search to your directories.

umask011 - No affect on files, but sets the create directories xbit for group and everyone else.

umask022 - Assigns permissions such that only you have read/write access for files, and read/write/search for directories you own. All others have read access only to your files, and read/search access to your directories.

umask077 - Assigns permissions such that you have read/write access for files, and read/write/search for directories you own. All others have no access permissions to your files or directories.

To view current umask settings

1. From the command line, navigate to the directory where the files exist.

2. Type the word "umask" at the command line: [root@cmshost01 ae]# umask 0022

The current umask setting being applied to this directory is displayed (022).

To update umask settings

1. From the command line, navigate to the directory where the vsftpd.conf file is located.

2. Insert the following comments and commands into the file: # Change default file permissions via the umask command - from 077 to 022. local_umask=022

Note: Read permissions must always be applied to the OTHERS group in order to ensure that the ONTs TFTP request for the .cfg file has permission.

68



Chapter 4

Understanding AE ONT Configuration Files

Active Ethernet Provisioning The Calix AE ONT supports subscriber configuration and management via a Command Line Interface (CLI) or CMS. You access the ONT CLI by telneting directly to the ONT command shell across the point to point fiber WAN interface.

Note: Accessing a specific ONT is only supported across the secure management VLAN (default VLAN 85).

When accessing the CLI, all commands must be entered manually and one at a time. In addition, any provisioning done using the CLI is not persisted (stored in memory) meaning the ONT loses all provisioning if it resets.

Important: Because commands must be entered sequentially (one at a time), it is highly recommended that the CLI interface be avoided as a primary provisioning interface. The use of configuration files allows you to fully configure an ONT with only a few keystrokes.

Information on building configuration files is discussed in a following chapter.

70


CMS Interface

In this release, the following CMS features are included in support of AE provisioning:

Inventory (ONT) Tracking Creation, Movement, Deletion, and Resetting of an ONT Video, Data, and Voice Provisioning to an individual ONT Primary and Secondary TFTP Server Configuration ONT Search Capability Alarm and Event Logging CLI cut-through to CMS Google Maps

Note: CMS Alarms are currently integrated provided the CMS is configured as a trap receiver.

About Configuration Files AE ONTs rely on a configuration file for providing all management and provisioning instructions. Configuration files are flat ASCII text consisting of CLI command strings containing provisioning information necessary to set up ONT voice, data, and IP video services. This provisioning is automatically downloaded each time the ONT boots.

There are two primary methods for obtaining Configuration files:

Configuration file templates included with the AE ONT firmware. These configuration files are accessible through the Command Line Interface and can be modified using any commercially available text editor. For additional information on managing Configuration files through the CLI, refer to Calix 700GX AE ONT Configuration Guide.

Configuration files are set up by your system administrator on the CMS server. In this case, pre-provisioning, discovery, and service provisioning are accomplished through CMS desktop.

Note: Calix highly recommends user the configuration file approach for any provisioning.

Configuration files can be developed as a set of multiple configuration file pieces that are assembled into one common configuration file (cascading configuration files). In these scenarios, a top-level file calls out sub-tending configuration files and executes each file in sequence.

As an alternative, a single configuration file can be created containing all required commands in a "monolithic" approach. In this case, the configuration file executes each command in sequence.

71


All configuration files are flexible and scalable for any deployment size and offer the following capabilities:

Serial Number Naming: ONT configuration file names are based on the FSAN serial number (this number is displayed on the external label of each ONT). Alternatively, the assigned Registration ID can be used provided the Registration ID is assigned to that ONT. The DHCP server can also over-ride the configuration file name.

Hierarchical File Structure: A hierarchical file structure that allows any number of ONT configuration files to reference one or more global configuration file (up to 3 levels of file nesting is supported). This allows global provisioning to be kept in a single file with all ONTs providing the identical class of service referencing that same file.

Separate VoIP Configuration File: The same VoIP configuration file approach that is used for GPON systems is used for AE ONTs. This allows a mixed GPON/AE ONT deployment using the same VoIP configuration file.

The provisioning commands in the configuration file consume one line per command and support commands that span multiple lines. The ONT processes the CLI commands one at a time. If a command fails due to syntax errors or during the application of the provisioning action, the ONT sends a message to the Syslog server describing the error and then reboots.

If the ONT successfully processes all commands without errors, it sends a message to the Syslog server declaring the completion of the ONT configuration as it moves into operational state.

AE ONT Turn-up Pre-Requisites In order for an AE ONT to be successfully brought on-line, the following "pre-provisioning" steps must have already been completed:

1. The CMS server must be on-line with all configuration files in their proper locations (on page 72).

2. The provided voice, video, and data configuration file templates have been edited to meet the needs of your particular deployment.

Note: Calix recommends creating a new file in notepad and copy/paste the template information into this new file. This minimizes the risk of introducing errors into your "live" configuration files. Once changes are complete, upload the file to the "live" location.

3. The FTP server has been provisioned and manually "synced" with the CMS server. This insures the required drop down boxes within CMS are populated with the edited configuration file template information. This also FTP's the edited files to the TFTP server location.

Once the above steps have been completed, the CMS generates a master configuration file for each ONT (for example, "CXNKxxxxxxxx.cfg) and be synchronized automatically.

72


Note: An ONT master configuration file is not generated until at least one piece of provisioning has been applied.

Configuration File Structure With each distribution of software, a full complement of configuration file templates are provided. These templates can be modified as required based on the service offerings being deployed.

Note: CMS expects that certain configuration files follow a specific naming convention (as highlighted in bold below). The remaining configuration files can have any file name you chose, provided they reside in the directories as shown below.

The following configuration files are provided:

File Location/Name Description

inc\common.cfg Specifies Syslog, TFTP, SNMP trap, NTP server, ONT firmware image locations (IP address)

inc\video_oui.cfg Adds an entry for video set top box Organizationally Unique Identifier (OUI).

inc\data_setup.cfg Creates a data profile with varying bandwidth parameters.

inc\VoipConfig.txt Specifies VoIP service location and appropriate service options.

inc\video\*.cfg Creates a video profile with varying VLAN IDs.

inc\voice\*.cfg Creates a SIP or TDM Gateway profile with varying VLAN IDs. Also specifies C7 TDM gateway IP address, TFTP server address (for SIP), and SIP configuration filename (SIP only).

73


Configuration File Locations AE ONTs rely on a series of configuration files (config files) located on a TFTP server. These configuration files provide necessary instructions to the ONT for all service functions and provisioning.

AE config files are stored on the CMS at:

<cms install directory> \ ae \ inc

When installed, the config files folder structure is as follows:

Note: Executing the Sync All command within CMS synchronizes the files located in the CMS install directory with the TFTP server's "\" folder.

An example configuration file is installed at the root directory: <cms install directory> \ae\CXNK0EXAMPLE.cfg)

Note: This configuration file is for your use as a template. Changes to this file are not captured during a Sync All command.

The top level AE ONT configuration file is installed at the root directory (for example, <cms install directory> \ae\CXNK0002B633.cfg)

Common set-up config files are installed at: <cms install directory> \ae\inc Data service profile config files are installed at: <cms install directory> \ae\inc\data Video service profile config files are installed at: <cms install directory> \ae\inc\video Voice service profile config files are installed at: <cms install directory> \ae\inc\voice

Important: When the contents of the "inc" folder on the CMS server are changed/updated, you must re-synchronize the connection between the CMS server and the TFTP server.

74


Synchronizing AE ONT Configuration Files Synchronizing AE ONT configuration files is required in either of the following circumstances:

The common configuration files or service configuration files on the CMS server are modified or added (typically performed by the CMS system administrator).

A new TFTP primary or secondary server is configured. See Configuring Primary and Secondary TFTP Servers.

The synchronization process ensures configuration files located on the CMS are identical to configuration files on the TFTP server. When you perform the synchronization, the system does the following:

Regenerates the AE ONT configuration files and updates the TFTP servers. Makes new service configuration files available to use in CMS Desktop (using the Services

subscriber activation screen). Populates the profile/IG drop down boxes on the AE ONT provisioning page with the

appropriate configuration file name.

Important: If you make a provisioning change to a single ONT that is active within CMS, the file for that ONT is immediately changed on the CMS server. This same configuration file is FTP'd to the TFTP server where a reset command is immediately sent to the ONT.

To synchronize AE ONT configuration files

1. On the Navigation Tree, click CMS.

2. In the Work Area, click System > AE ONT.

3. At the top of the work area, click Sync All.

A prompt displays indicating the status of the synchronization process.

75


Configuration File Characteristics A configuration files is an ASCII based text file incorporating a series of commands and comments. ONT configuration files can be edited with any commercially available text editor.

Keep the following in mind when working with configuration files:

Lines in a configuration file are terminated only after pressing the Enter key. Use the back slash key to continue a line that extends past the visible screen area.

Any line beginning with a "#" symbol denotes a comment and is not interpreted as a provisioning command at the ONT.

Specify the ONT's image name early. The name of the ONT's software image should always be specified in the configuration file and should be one of the first provisioning statements. This allows the ONT to always verify that it is running the correct version of software early in the boot process. An example ONT image name: CALIX_AE_ONT:R1]

The "include" command is used to call sub-tending configuration files (cascading) The configuration file name must be the provisioned Calix FSAN Serial Number or the

Registration iD followed by the ".cfg" file extension (for example, CXNK0002B70E.cfg).

Note: If the input value for an ONT on the network begins with a number, it is assumed to be a Registration ID and is validated as having up to 10 numeric digits. If the input value starts with an alphabetic character, it is assumed to be an FSAN Serial Number, and is validated to consist of the prefix "CXNK" followed by exactly 8 alphanumeric characters.

76


Configuration File Hierarchy Each ONT requires its own configuration file that uses either the FSAN serial number or the Registration ID as the root of the configuration file name.

If using the serial number method, it is displayed as shown (see below). For example, a 714GX ONT that has the serial number CXNK0002B70E expects (requires) a config file by the name CXNK0002B70E.cfg on the TFTP file server.

In order to simplify the management of a large number of ONTs, a config file may reference another config file (nesting) which instructs the ONT to apply the provisioning that is contained in another config file. This allows the service provider to define a global configuration file that may have a common set of provisioning that applies to a number of ONTs of a specific type or service class.

77


Sample Configuration File The samples shown below explain how configuration files are created for common system elements and reference these elements in cascading configuration files. This helps simplify the management of a large number of ONTs, where any given configuration file may reference another configuration file, providing service parameters specific to that ONT.

The configuration file show below defines the management configuration being used by the ONT, defines a custom label, and assigns voice, video, and data profile parameters to ONT CXNK0002B70E.

Note: For additional information on the commands shown in the configuration files, refer to the Appendix in the back of this guide.

78


internet_gold.cfg

This configuration file establishes upstream and downstream bandwidth.

Note this configuration file also calls the internet_common.cfg file that establishes upstream and downstream traffic parameters for the Ethernet port.

79


video_gold.cfg

This configuration file establishes a VLAN per service model and creates service authentication filters for set-top boxes attached to this port.

voice_setup.cfg

This configuration file establishes a VLAN Host Bridge for SIP services on the ONT.

80


In the examples shown above, the relationship of one configuration file to another is portrayed as shown below. Two nesting levels are used (three are allowed) where the internet_gold.cfg file is using a global internet_common file for establishing data bandwidth.

Configuration File Processing All Calix ONTs support recursive scripting (code that is used to perform basic maintenance functions within the system) by implementing the include keyword followed by the configuration file name. For example:

include common.cfg

The include common.cfg command instructs the ONT to retrieve the common.cfg file from the TFTP server and process it.

Parameters are added to any command in the include file. Parameter values are specified after the include filename. Parameters must be space or double quote delimited. Parameters are referenced based on the numeric positioning of their appearance within the include command (starting at zero). Up to 10 parameters can be defined from $0 to $9.

For example: include management.cfg "200 Lake Street" ont_firmware.img config label set label=$0 config upgrade -prisvr=192.168.0.1 filename=$1

In the code above, "200 Lake Street" is parameter $0 and is named label while ont_firmware.img is parameter $1 and is named filename. Notice the space delimiter between the two parameters. You can include up to 8 additional parameters before executing another include statement.

81


Creating a Configuration File Building Cascading Configuration Files

In an AE environment, a hierarchy of configurations files is established to allow craftpersons to pick and choose which configuration files to use for a given ONT.

Cascading configuration files routinely share the following attributes:

1. Top level files are unique to each ONT on the system ("ONT serial number".cfg or "Registration ID".cfg).

2. Sub-files are specific in addressing an individual service type. For example, you might expect to have a number of separate video configuration files based on the various tiers of service that are available.

3. Sub-files should be generic enough where one configuration file is used for many individual ONTs.

4. Template files are created to facilitate making minor changes to an ONT configuration.

5. Each Configuration file can call up to three additional levels of configuration files.

An example Cascading Configuration File (on page 179) templates is included in the Appendix section of this guide. Service providers can use these templates as a starting point and modify the template by “uncommenting” the line that provides the specific level of service for that subscriber. For example, the “gold” configuration in the hsi_setup.cfg file may provide 40 Mbps of high speed data and the “bronze” configuration may only provide 5 Mbps.

Note: The names gold, silver, bronze are only examples. The actual file names, levels of service, and any other specific information are entirely up to the service provider to define.

Building Monolithic Configuration Files In contrast to a cascading configuration file approach, the monolithic method employs a single configuration file for defining all parameters within an ONT. In this case, all management and ONT service parameters are defined in a single file.

For an example of this type of file, refer to Monolithic Configuration File (on page 188) in the Appendix of this guide.

82


About VoIP and the VoIP Configuration File Calix VoIP service is an integrated, multi-service IP network based telephony system designed for use with the AE or GPON system. Calix VoIP supports a full range of advanced voice features and simplifies management of the system.

VoIP, by design, bypasses legacy TDM networks and allows customers to begin phasing out Class 5 switches and moving to an all Ethernet (AE) environment. SIP complaint VoIP delivers high quality, uninterrupted static-free voice service as TDM along with typical calling features including caller ID, call waiting, and three-way calling.

The VoIP Configuration file details the variables necessary for setting up voice services to the ONT. A single configuration file is used for multiple ONT ports provided all ports deliver identical service options.

AE deployments support VoIP (Session Initiation Protocol) exclusively to provide voice service from the ONT. Provisioning of the voice service is done by defining the basic voice service parameters in the ONT configuration file. As is the case with GPON deployments, the detailed VoIP provisioning is done in a separate VoIP configuration file. Required VoIP provisioning parameters includes the name of the VoIP configuration file, the VoIP file server, and a redundant VoIP configuration server if desired.

Important: Note that the same VoIP configuration file can be used to provision SIP services on either GPON or AE ONTs simultaneously.

Calix GX and GE ONTs come equipped to deliver VoIP services. All ONTs provide built-in Integrated Access Device (IAD) functionality to perform call handling and IP packetization for VoIP functions. At the ONT, VoIP calls are carried over existing in-home wiring and phone sets with standard GR-909 interfaces (POTS).

Note: In the current release of Calix 700GE ONTs, only the SIP T0 model of VoIP service is supported.

VoIP from Calix is fully inter-operable with the following switch vendors:

BroadSoft MetaSwitch Nortel PGI (DMS10) Nortel CS2K Nortel CS1500 Taqua T7000 GenBand M6 (M6 sold to BroadSoft) CopperCom Sonus XCAST (GTT)

83


Unsupported Switches

Calix provides a standard VoIP test plan to service providers for testing interoperability with unsupported switches. This test plan should be run prior to turning up end users. Contact your Calix sales engineer for additional information.

Creating the VoIP Configuration File VoIP Configuration Files share the following basic attributes:

A single Configuration File can be used for multiple ONT ports provided all ports deliver identical service options.

For customers that have unique service offerings, a separate Configuration File is required.

The Configuration File can be created using a supplied template on the software CD and then customized for your particular deployment and service offerings.

After all changes have been made to the Configuration File, the file is placed on the TFTP server which is identified during ONT provisioning.

Most of the options in the Configuration File are common defaults and should not be changed but each field should be examined and modified as required.

The ONT VoIP port TFTP downloads a Configuration File upon creation, after reset, and when requested by the system.

84


ONT SIP Configuration File Parameters The table below shows the required configuration file variables and respective descriptions. For a sample of a completed VoIP Configuration file, see The VoIP CF in the back of this guide.

ONT SIP (VoIP) Configuration Parameters

Version of VoIP config file

Version of the VoIP config file. Displays the config file version number. Example: Version 1.14

ONT SIP Port Enter the UDP Port address of the ONT. Example: OntPort: 5060

Outbound Proxy Option

Sets a flag to capture all SIP messages to the SIP Proxy IP Address server. Example: OutboundProxy: 1

Sip Proxy Server IP Address

Enter the UDP or IP address for the Border Controller or the SIP Proxy server. Example: SipProxyIP: 172.26.31.16

SipPort Enter the UDP/IP Port # of the ONT SIP Port. Example: SipPort: 5060

Sip Proxy Domain

The SipProxyDomain can be an IP address or a Fully Qualified Domain Name (FQDN). Example: SipProxyDomain: 172.26.31.16 Example: davinci.datcon.co.uk (Metaswitch interop server)

DNS IP Address

Enter the primary (required) and secondary (optional) DNS IP Address for the ONT Port being provisioned: Example: DNSPrimaryIP: x.x.x.x DNSAlternateIP: x.x.x.x IMPORTANT: These values must be changed to the appropriate network IP address prior to implementing SIP Service.

SIP Timers (msecs)

Enter SIP Timer time-out values in milliseconds (required parameter per RFC 3261). Example: SipT1Timer: 500 SipT2Timer: 4000

SIP Registration Enter 0 if you want to disable Sip Registration, enter 1 to enable. Calix recommends keeping this enabled unless you have a totally secure network. Example: SipRegistration: 1

SIP Registration Period

Enter the maximum registration period for the SIP connection. Example: SipRegPeriod: 3600 Note: Calix recommends you accept the above default values as the SIP Server over-ride (the above value if pre-provisioned on the SIP Server).

SIP Registration User

Required parameter for several SIP switch vendors including Nortel, Broadsoft, and Metaswitch. Enter 0 if Registration ID comes from the URI field, enter 1 if from the UserID field. (Default = 0) Example: SipRegisterUser: 0

SIP E.164 Format to add the country code to all SIP messages. Enter 0 to use local format, enter 1 to use E.164 global format (All of North America except Mexico [52]). This setting is rarely used or required. Example: SipE164: 1

QoS Type of Service (RtpTOS)

Enter the TOS bits for RTP packet stamping (0-255 bits) Example: RtpTOS: 160 Important: It is recommended that you set your QoS to a relatively high priority in order to avoid potential voice service degradation.

85



RTP Voice base port number (RtpBasePort)

Input the starting port number of a specified range of ports that are allowed access to the RTP service. Each ONT VoIP port requires two RTP port numbers. Example: RtpBasePort: 16384 Important: Failure to properly identify this range of ports causes the firewall to reject transmissions.

RTPCodec (voice encoding)

Enter the voice encoding option. This should always be set to zero (µlaw). (Default = 0) Example: RtpCodec: 0

RTP Packet Rate Input the expected RTP packetization rate sent by the ONT. Choose between 10, 20, or 30 msecs. Example: RtpPacketRate: 10

Ring Tone Definitions

The configuration file contains options for setting the following ring tone characteristics: Dial Tone, Busy Tone, Reorder Tone (fast busy), Ringback Tone, Call Waiting Tone, Warning Tone, Alert Tone, CAS Tone, and Stutter Dial Tone. Options are entered in the following order: 1st Frequency(in hertz), 2nd Frequency, Volume Level of 1st Frequency (in dbm), Volume Level of 2nd Frequency, Time tone is on (in milliseconds), time tone is off and continuous tone on (1) or off (0) Examples:

VoipDialTone 2 350 440 -13 -13 1 0 1

VoipBusyTone 2 480 620 -24 -24 500 500 1

VoipReorder Tone 2 480 620 -24 -24 250 250 1

VoipRingback Tone 2 440 480 -19 -19 2000 4000 1

VoipCallWait1 Tone 1 440 0 -13 0 330 0 0

VoipWarning Tone 2 1400 2600 0 0 100 100 1

VoiPAlertTone 1 440 0 -13 0 2000 10000 1

VoipCASTTone 2 2130 2750 -18 -18 80 0 1

VoipStutter Dialtone 2 350 440 -13 -13 100 100 1

Important: Unless you are thoroughly trained on Tone provisioning, it is recommended you accept the default values.

Note: Ring Tone Definition names do not include any spaces. Spaces may appear here for document formatting purposes only.

86



Ring Cadence Definitions

Enter Ringtone Cadences as required. Up to 8 discrete ring tones can be provisioned per configuration file. Options are entered in the following order: Ring frequency (0 = 20 hertz), Shape (0-trapazoidal, 1=sinusoidal), ring period 1 on time, ring period 1 off time, ring period 2 on time, ring period 2 off time, ring period 3 on time, ring period 3 off time (all values in milliseconds)

VoipRing CycleR1 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle2 0 0 800 400 800 4000 0 0

VoipRing Cycle3 0 0 400 200 400 200 800 4000

VoipRing Cycle4 0 0 300 200 1000 200 300 4000

VoipRing Cycle5 0 0 500 0 0 0 0 0

VoipRing Cycle6 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle7 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle8 0 0 2000 4000 2000 4000 2000 4000

Important: Unless you are thoroughly familiar with ring cadence provisioning, it is recommended you accept the default values. Ring Cadence Definitions 1 through 5 are Telcordia defined and should not be changed. Cadences 6 through 8 are user definable.

Note: Ring Cadence Definition names do not include any spaces. Spaces may appear here for document formatting purposes only.

Distinctive Ringing Alert

Enter a value for distinctive ring alerting if required by the switch or application server. This field is used for creating a pattern match between the Alert Header for distinctive ring. The Bellcore standard syntax used by many switches is "Bellcore-dr1" through "Bellcore-dr5". Please note that the Bellcore syntax is case and blank-space sensitive and must match the string format coming from the switch. Example: VoipDRmessage: Bellcore-drX where X is any value between 1 and 5. Note: The Nortel CS2000, CS1500 and DMS-10/PGI allow the use of non-Bellcore syntax in the Alert Header for distinctive ring. The CS2000 sends the pattern match as "dst_ring_x" or may be set to a site specific syntax. The CS1500 can be configured with different brand types that define the Alert Header syntax, including "bellcore-drx", "Bellcore-rx", and "bellcore-drx". Please verify the Distinctive Ring Alert Header syntax being used at the customer switch. If distinctive ring is not functional, please examine the "SIP Alert Info" packets coming from the switch to verify distinctive ring Alert Header format.

Softswitch Distinctive Ring (Call Waiting)

Enter the softswitch signaling pattern for call waiting (Broadsoft BroadWorks switch). This field is used for creating a pattern match for the Distinctive Ring Call Waiting Tone being sent down from the switch. This command is ignored on other switch types. Example: VoipCWmessage: CallWaitingTone

Reorder Delay

Enter the delay in seconds before playing a fast busy tone after far end hang up or far end off hook. Example: VoipReorderDelay: 10

Warning Delay Enter the delay in seconds before playing a warning tone "howler" if phone is off hook Example: VoipWarningDelay: 60

Period Enter the amount of time (in seconds) to play the warning "howler" after the Warning Delay parameter above has elapsed. Example: VoipWarningTimeout: 600

87



Dial Plans Enter the types of dialing plans you wish to enable. Dial Plan syntax: ^ = match from start of string | = rule separator for multiple rules per plan [n-m] = match a range of digits {n} = match n digits * = wildcard match - for a variable number of digits T = timeout send of dial string S = star phone key (*) match character in dial plan c = Confirmation tone is played when dialing star code plans ^S72c[0-9][0-9]{6}| r = Recall tone is played during a call forwarding sequence ^S72r[2-9][0-9]{6}| d = Dial tone is played during a call forwarding sequence ^S72d[2-9][0-9]{6}| , (comma) = Outside dial tone is played during a preceding "9" sequence ^9,1[2-9][0-9]{9} *T = Represents the time in seconds before digits are sent. Required for slow dialers. Example: ^01[2-9][0-9]{4}*T|\ ^911 = 911 service ^411 = Directory Assistance Service ^S[0-9]{2} = Star hotkey service (i.e. *69) ^1[0-9]{10} = Traditional Long Distance Dialing ^[2-9][0-9]{9} = Traditional Local Dialing with toll free area code capability ^011[0-9]*T = Traditional Overseas Dialing Example: ^911|^411|^S[0-9]{2}|^1[0-9]{10}|^2[2-9][0-9]{9}|^011[0-9]*T Note: To dial the operator, enter 0 and wait for the Dial timeout feature to send the zero digit to the switch where the switch then forwards the call to the operator. Alternatively, avoid the delay by dialing 0#.

Area Code Exceptions

For multi-area code communities, enter the list of toll free area codes to provision without dialing a one first. Example: VoipIntroLATA: 952 763 651 612 507 218

Dial Plan Timeout

Enter (in seconds), the input delay timeout before sending the string to the switch. Example: VoipDialTimeout: 8

Dial Plan Short Timeout

This is a delay timer (seconds) for a partial match "pause" until all digits have been collected. Slow dialers may need this feature. Example: VoipDialShortTimeout: 8

Embedded 7 Digit Dial Plan

The ONT SIP Client currently has a 7-digit dial rule. This command allows you to over-ride the rule. (Default = rule in effect [0]. Example: Embedded7DigitRule: 0

SIP INFO Message

For Flash Hook messages, you can send a SIP INFO message. Variables: 1 = send INFO, 0 = use Call Hold re-INVITE. Default = 0. Applies to Metaswitch and Broadsoft only. Example: VoipFlashINFO: 1

E911 Called Party Hold

An option exists to specify whether a caller may hang up during an E911 call. Variables: 0 = no special treatment, 1 = Hold 911 call if On Hook, don't send SIP BYE command; provide local power RING back. Example: E911CalledPartyHold: 1

88



Disable Call Waiting

Need to execute hunt groups on certain softswitches. Variables: 1 = Disable Call Waiting, 0 - Call Waiting enabled (default). Example: VoipCallWaitDisabled: 0

Disable ONT Caller ID

Needed to disable Caller ID display feature at the ONT. Variables: 1 = Caller ID display disabled, 0 = Caller ID enabled (default). Example: VoipCallIDDisabled:0

Three Way Calling

Allows for configuring 3-way calling as an optional service. Example: ThreewayCallEnabled: 1 (Default = 0)

DTMF Key Send Genband M6 requires OOB (SIP INFO) messaging. DTMF Key Send allows you to toggle between inband audio [0] and SIP INFO [1]. Example: VoipDTMFmode: 0

DTMF Key Receive

Can enable or disable the playing of the DTMF SIP INFO message. [0] = playout SIP INFO message. [1] = Disable playout. Genband M6 only. Example: dTMFTonefromiNFOdisabled:1

Stutter Dial Tone Call On Hold disconnect stutter dial tone can be enabled [1] or disabled [0]. Example: StutterOnhOldDisconnect: 0


Chapter 5

Turning Up an AE ONT via CMS

The Calix CMS supports turn-up and basic management of AE ONTs.

Topics Covered

This chapter covers the following:

CMS Appliance Creating an ONT Configuring the Management VLAN Pre-provisioning of AE ONTs prior to turn-up ONT Discovery

90


CMS Appliance CMS Appliance is a Unified Access service management platform for fiber access service. The system ships complete with all software necessary for turn-key deployments on a single, fault tolerant, rack-mountable Dell PowerEdge™ R410 Server. Features include:

Redundant power supplies Four Ethernet connections Redundant hard drives

CMS Appliance can be deployed in pairs, providing ultimate system redundancy. The Appliance supports all peripheral AE devices including DHCP servers, TFTP servers, Syslog servers and NTP servers.

91


Configuring Primary and Secondary TFTP Servers

Prior to coming on-line, each ONT must download its configuration file from a remote TFTP server.

In an AE deployment, the TFTP server manages the following functions:

Stores the appropriate ONT runtime image (downloaded at boot-up)

Stores ONT specific configuration files

Stores ONT service specific VoIP configuration files (softswitch dependent)

The minimum configuration specifications for a dedicated TFTP server are:

Space for ONT Images: 4MB to 6MB for each ONT type (SFU and MDU)

Space for ONT Configuration Files: 1 Kb for each ONT configuration

Space for VoIP Configuration Files: 6 Kb for each unique VoIP configuration

The TFTP Server hosts all configurations files for the AE network. Any Linux, or Solaris server can be used provided it has sufficient space to hold the ONT image (one for each ONT type), as well as all ONT Configuration files and VoIP Configurations files.

Note: AE ONTs download their configuration file from the DHCP server that delivered the IP address to the ONT. However, the DHCP server must be configured to provide a different IP address if the TFTP Server resides elsewhere (dedicated TFTP Server).

To configure primary and secondary TFTP servers in CMS

1. On the Navigation Tree, select the top-level CMS.

2. In the Work Area, click System > AE ONT. The TFTP Configuration screen is displayed.

3. Enter a name in the Default SNMP Community field.

4. Click the Enable check box under TFTP #1 to configure the primary TFTP server information:

a. Enter the appropriate field transfer protocol: FTP, SFTP

Note: FTP is not enabled by default on CMS2GO servers.

b. Enter the IP address of the server location.

c. Optional: Enter a Username and Password for accessing the server.

d. Enter a TFTP Folder location where CMS searches for synchronized files.

e. Optional: Configure a secondary TFTP server by repeating steps 4a through 4d.

92


5. Click Test. If successful, a "This server is alive" message is displayed.

6. Click Apply. CMS displays the status of each TFTP server as it is updated and provides a Pass/Fail indication as changes are applied.

7. Synchronize the ONT configuration files (using the procedure in the preceding topic).

Note: If you receive an invalid directory error when specifying the primary TFTP server location, check to make sure you have the appropriate permissions set on the FTP server before troubleshooting.

Synchronizing AE ONT Configuration Files Synchronizing AE ONT configuration files is required in either of the following circumstances:

The common configuration files or service configuration files on the CMS server are modified or added (typically performed by the CMS system administrator).

A new TFTP primary or secondary server is configured. See Configuring Primary and Secondary TFTP Servers (on page 90).

The synchronization process ensures configuration files located on the CMS are identical to configuration files on the TFTP server. When you perform the synchronization, the system does the following:

Regenerates the AE ONT configuration files and updates the TFTP servers. Makes new service configuration files available to use in CMS Desktop (using the Services

subscriber activation screen).

To synchronize AE ONT configuration files

1. On the Navigation Tree, click CMS.

2. In the Work Area, click System > AE ONT.

3. At the top of the work area, click Sync All.

A prompt displays indicating the status of the synchronization process.

93


Local Provisioning Persistence With AE release 2.0, local provisioning of ONTs is persisted in the system to allow for immediate retrieval of stored information in the event of a power failure or loss of signal. This feature is applied when the ONT is provisioned through RONTA or remotely provisioned via RMI or CMS. During a loss of power or loss of AE link, the configuration state is retained in the ONT's flash memory. Upon restoration of power or AE link the ONT first performs a DHCP discover to obtain its IP address.

Note: The IP address is not persisted and a DHCP server needs to be available on the network.

Assuming the ONT has obtained its IP address, the ONT then compares the locally stored configuration with the TFTP server and updates if necessary.

The configuration recovery steps the ONT uses to determine the proper provisioning recovery state after loss of power or link is as follows:

The ONT first attempts to access its ONT specific configuration file (FSAN serial number or RONTA ID number) from the primary TFTP server. If the file is found it is used to provision the ONT; however if the TFTP server is not available or the file is not provided before the time-out cutoff is reached, the secondary TFTP server is accessed and the process is repeated. If the secondary TFTP server is not available or the configuration file is not provided before the time-out cutoff, the ONT uses its cached configuration file to bring it back into service.

If during the first attempt the TFTP server reports to the ONT that the ONT’s specific configuration file "cannot be found" (servers are considered to be in sync so there is no need to try both servers if the specific ONT file is not on the primary server), the ONT attempts to retrieve a generic configuration file ("Calix-ONT.cfg"). If the ONT experiences a time-out condition on the TFTP server, it continues to try the same TFTP server until it succeeds, receives an error or timeout cutoff is reached. After a minute the ONT re-initiates the process with the primary TFTP server.

94


Notes on Local Provisioning Persistence For ONT configuration files, the system attempts to determine the ONTs

configuration every 10 seconds (by pinging the TFTP server), and repeats this process at 10, 20, and 30 second intervals until a response is received. If no response is received, this process is repeated 5 times, alternating between the primary and secondary TFTP server.

If the ONT fails to retrieve its specific TFTP configuration file, it uses the last-known good configuration file (cached locally by the ONT). The ONT makes five attempts to retrieve its specific configuration file at each TFTP server. This results in a two-minute per-server delay before using the cached file.

The ONT removes its saved configuration if it is forced to factory defaults through the RONTA process

In the case where there is no locally cached configuration, or the TFTP server IP address has changed, the ONT uses a 5 minute re-attempt timer after it reaches the cutoff timeout value for the second TFTP server

The ONT generates a SYSLOG and SNMP trap when it uses the cached configuration file

The ONT generates a SYSLOG and SNMP trap when it uses the generic configuration file

For VoiP configuration files, the system attempts to determine the ONTs VoIP configuration every 10 seconds however the process is repeated indefinitely until the configuration is acquired. Retry intervals occur at 14, 18, 22, 26, 30, and every 30 seconds thereafter Assuming both primary and secondary TFTP servers are present, the ONT alternates between the two after each retry cycle.

95


ONT Creation ONTs are created by completing the following tasks:

A Management VLAN is configured to support the AE ONTs. The ONT is pre-provisioned by entering the ONT serial number into the New AE ONT

dialogue box or via Remote ONT Activation (RONTA).

Note: For information on pre-provisioning an ONT via RONTA, refer to the Calix 700GX AE ONT Configuration Guide

The ONT is discovered on the AE network.

Note: CMS must be accessible from the ONT management network in order to properly manage ONTs.

Note: The CMS IP address must be configured as an SNMP Trap Receiver before AE ONTs become visible on the CMS.

Configuring the Management VLAN As the ONT completes the boot-up sequence, it configures a management VLAN and immediately attempts to obtain an IP address from a DHCP server. By default, the ONT uses VLAN 85.

The VLAN ID on the ONT can be changed in the field during installation using a buttset device.

Note: The Management VLAN ID value must be between 1 and 4094.

Note: Unless there is a definite conflict in your network with VLAN 85, there is no need to change the management VLAN on the ONT.

To change the management VLAN

1. Disconnect power to the ONT.

2. Verify the network fiber (pigtail) is disconnected from the ONT.

3. Connect an RJ-11 terminated buttset to the first (LINE ONE) voice port on the ONT.

Note: For buttset devices using alligator clips, back-out the tip and ring screws and clip the buttset leads to the T and R posts (black to Tip, red to Ring).

4. Reconnect power to the ONT.

5. Listen for a click sound coming from the buttset (about 10 seconds after power has been re-applied).

96


6. Press “*”, “*”, “*” and “1” (star, star, star, 1) on the buttset key pad. The buttset sounds DTMF tones as the keys are pressed. A voice prompt is heard, "Management VLAN is 'VLAN ID NUMBER'. If correct, enter 1, otherwise enter 0".

7. Skip to step 9 if MVLAN is correct.

8. If 0 was pressed, a voice prompt is heard, "Please enter Management VLAN followed by #". After entering the new VLAN ID, a voice prompt is heard, "You entered 'VLAN ID NUMBER'. If correct, enter 1, otherwise enter 0".

9. At the confirmation voice prompt, press 1 if correct. The system responds with “Management VLAN saved”.

Note: At this point the newly entered VLAN ID is saved to the ONT flash memory.

10. Re-connect the network fiber to the ONT and wait for the ONT to come on line.

97


Pre-provisioning an AE ONT An AE ONT can be added to a network group in CMS (pre-configured) by entering the Registration ID or FSAN Serial Number, selecting the location in the Navigation tree where you want it to appear, and selecting the specific ONT profile.

To create an AE ONT

The newly created ONT is displayed in the Network Details list and comes up as Disconnected:

1. On the Navigation Tree, select the AE ONT Network Group

2. In the top menu bar, click Create. The New AE ONT dialogue box opens.

3. Enter the Registration ID or the 12-digit FSAN serial number for the AE ONT.

Note: If the input value for an ONT on the network begins with a number, it is assumed to be a Registration ID and is validated as having up to 10 numeric digits. If the input value starts with an alphabetic character, it is assumed to be an FSAN Serial Number, and is validated to consist of the prefix "CXNK" followed by exactly 8 alphanumeric characters.

4. From the drop down list, select which Network Group you want to add the AE ONT to.

5. Assign an ONT profile by selecting from the list.

6. Click OK.

98


The AE ONT is displayed in the network structure as being disconnected. Clicking the Provisioning tab shows the newly created ONT has failed to obtain an IP Address, MAC Address, or FSAN Serial Number. This will be rectified once the ONT is physically connected.

ONT Discovery Using the newly created ONT as an example, the ONT must now be physically attached to the AE network.

ONT autodiscovery

1. Physically install the ONT at the intended location.

2. Connect the fiber pigtail (SC-APC) coming from the Ethernet switch to the bulkhead receptacle on the ONT.

3. Since the ONT is already present on the system, wait several minutes for the ONT to be discovered.

4. In the Navigation Tree, scroll down to the autodiscovered Network Group.

Note: To customize the default network group used for newly discovered ONTs, at the CMS level in the Navigation Tree click System > AE ONT. In the Default Network Group drop-down list, select the location where you want newly discovered ONTs to be placed.

5. Expand the group then click on the recently installed ONT Serial number in the list.

6. The ONT now shows itself as being connected.

99


7. Move the ONT to the desired network group by using the following procedure:

a. On the Navigation Tree, click the root region, the parent region, or the network group of the AE ONT.

b. In the Work Area, click Network Details.

c. In the AE ONT list, click the device(s) to move. For selecting multiple items, use Ctrl+Click to select one item at a time, or Shift+Click to select a range.

d. In the Edit row, click Network Group and then select the new parent network group.

e. Click Apply, and then click OK to save the new settings.

8. Once the ONT is located in the proper network group, view the provisioning tab. Notice the ONT has now obtained an IP and MAC address from the DHCP server.

100


CLI Cut-Through Beginning with CMS version 10.1, multiple CLI sessions can be launched for side by side comparison of ONTs in the network.

To open multiple CLI sessions

1. Navigate to the Network Group where the ONTs reside and click the network group.

2. From the work area, select Network Details > AE ONT

3. Shift-click multiple ONTs from the list and right click this multiple line selection.

4. Hover your mouse over CUT-THROUGH TELNET and click.

5. Separate CMS Cut-Through windows open.

Note: CLI cut-through windows may be hidden behind other open windows on your desktop. Check the Windows Quick Launch toolbar (normally on the bottom of your screen) for additional cut-through windows.


Chapter 6

Provisioning Services on an AE ONT via CMS

About the Provisioning Screens Services Tab

AE ONT voice, data, and video services are activated via the Services tab within CMS. The ONT is recognized within CMS via the following four generic attributes:

ID - Corresponds to the ID (Registration ID or FSAN Serial Number) specified at the time the AE ONT was created.

Profile - Corresponds to the ONT profile specified at the time the AE ONT was created. Subscriber ID - This optional field corresponds to a character string used to set the

default subscriber ID for each ONT port. Subscriber Description - This optional field corresponds to a character string used to set

the default Subscriber Description for each ONT port. This value is used to set the ONTs Label attribute.

Note: If you choose not to use the Subscriber ID and Subscriber Description functionality, these fields can be hidden by clicking the Less Settings link on the right hand side of the Services tab.

All ONT services can be provisioned through CMS by selecting a check box at the port level on the services tab. Selecting any checkbox expands the selection to display fields appropriate for that specific provisioning process.

Note: Many of the provisioning fields associated with ONT services require mandatory input during the provisioning process. If a checkbox is selected, and the fields associated with that checkbox are not populated as required, provisioning changes will not be completed as expected. Required fields with invalid or missing data are highlighted in red.

Tip: If you are not provisioning all services at once, clear any boxes relating to other services in order to minimize errors returned due to missing data.

102


Provisioning Tab

You can view the IP address, MAC address, user description, version, model, FSAN serial number, registration number, and the ONT profile of each AE ONT.

Viewing AE ONT provisioning information requires Min (Minimum) CMS Configuration Management privileges.

To view AE ONT provisioning information

1. On the Navigation Tree, expand the network group and click the AE ONT.

2. In the Work Area, click Provisioning to view the details.

Note: If the AE ONT Connection State displays as Disconnected, the details on screen represents the last saved information.

Provisioning an ONT Ethernet Port for Data To provision an AE ONT Ethernet port for Data services, a data services profile and VLAN must be established:

To provision an AE ONT Ethernet port for data service

1. Select the AE ONT to configure using one of the following methods:

On the Navigation Tree, expand a network group to view the network elements, and then click the AE ONT.

On the Navigation Tree, click a network group, and then click Network Details > AE ONTs. From the list, double-click an AE ONT.

Use the CMS Search feature to find and navigate to an AE ONT. See Performing a Search (on page 107).

2. From the Services pane, check the Data box for the first Ethernet Port.

3. From the drop down list, select a pre-defined Data Service profile (for example, HSD_Tier_A)

4. Enter the Data VLAN ID number for upload.

5. Click Apply. A dialogue box is displayed detailing the progress of the provisioning changes.

103


Provisioning an ONT Ethernet Port for Video To provision an AE ONT Ethernet port for Video services, a video profile and VLAN must be established:

To provision an AE ONT Ethernet port for video service




Use the CMS Search feature to find and navigate to an AE ONT. See Performing a Search.

2. From the Services pane, check the Video box for the first Ethernet Port.

3. From the drop down list, select a pre-defined Video Service profile (for example, Premium_Tier_A)

4. Enter the Video VLAN ID number for upload.

5. At the top of the Service Work Area, click Apply. A dialogue box is displayed detailing the progress of the provisioning changes.

Provisioning DS0 Voice Ports Two types of voice ports are supported on AE ONTs:

Calix TDM Gateway (CTG) Voice port Session Initiation Protocol (SIP) Voice port

By selecting the appropriate profile, CMS automatically displays the appropriate fields required to provision the service.

About Voice Port Configuration Files In order for the system to recognize the appropriate configuration file for the voice service being implemented, the following naming conventions must be strictly adhered to:

SIP profiles must always include the substring "SIP" within the profile name (for example, SIP_Template_CF.cfg.

CTG profiles are recognized by an Interface Group IAD and this IAD must be included as part of the profile name (for example, GR303_N1-2-IG3_Example.cfg).

104


Provisioning a CTG Voice Port Note: This task assumes that you have already established the TDM switch interface—that DS1 links are installed and wired, and the GR-303 or GR-8 interface group is provisioned. If you have not yet established the TDM switch interface, do so before continuing. See the C7 Voice Services Guide for instructions.

To establish TDM voice service for subtended VoIP lines, create DS0 cross-connects between the GR-303 or GR-8 interface group and the SIP VCG. The DS0 cross-connects are provisioned as Call Reference Values (CRVs) for GR-303 or as channels for GR-8.

The CRV/channel IDs you assign at the GR-303/GR-8 interface group must match the assignments at the switch and at the subtended service unit. (The cross-connect endpoints at the SIP VCG use index numbers that have no significance outside of the SIP VCG.)

To provision an AE ONT voice port for CTG service





2. From the Services pane, select the check box for the first DS0 Port.

3. From the drop down list, select a CTG profile (for example, GR303_N1-2-IG3)

4. Enter the CRV number for the CTG voice service.

Note: Prior to provisioning CTG voice services on an AE ONT, an Interface Group and CRV must exist in the system.

5. Click Apply. A dialogue box is displayed detailing the progress of the provisioning changes.

Note: To complete the end-to-end service provisioning, you must configure the subtended Calix service unit for operation in 'TDM gateway' mode. For example, on an AE ONT, set the VoIP mode to C7 TDM Gateway and configure the VoIP ports accordingly (including the CRV/channel ID (e.g., N1-1-IG1-224) as the 'VoIP Tel Number').

Note: If the VoIP mode is C7 TDM Gateway, enter the CRV or channel ID for the subscriber line, as provisioned on the C7 GR-303 or GR-8 interface group (for example, N1-1-IG1-224; format is case sensitive).

105


Provisioning a SIP Port

To provision an AE ONT voice port for SIP service





2. From the Services pane, select the check box for the first DS0 Port.

3. From the drop down list, select a SIP voice profile (for example, SIP_Rev_DialPlan)

4. Enter a user name for the SIP user account.

5. Enter a password for the SIP user account.

6. Enter the SIP URI (for example, 555-555-1212).

7. Enter the Caller ID string to be displayed for this service.

106



Chapter 7

Managing AE ONTs through CMS

The Calix CMS supports basic management of AE ONTs.

Topics Covered

This chapter covers the following tasks:

Searching for AE ONTs in CMS Moving AE ONTs in the Navigation Tree Viewing AE ONTs in Google Maps Removing AE ONT Services Resetting AE ONTs

108


Performing AE ONT Searches Within CMS, you can run a global search to create a report of all AE ONT Nodes. The data returned in the report is based on the latest synchronized data.

Global searches are permission-based; screens and report filters show only those resources that you have permission to view.

Members of any default user group have permission to view all resources. Running a global search requires Minimum (Min) CMS Administration privileges. Users in custom user groups with one or more permissions set to None can use the Basic Search feature.

For complete information on global searches, refer to the Calix CMS Guide.

To perform an AE ONT search in CMS

1. From the Tools menu, click Search > AE ONT.

Note: Selections with right-pointing triangles have submenus.

An inventory screen is displayed where you set the filter criteria, additional criteria, sort criteria, and report parameters.

Optionally, set one or more of the report parameters described in Steps 2 through 6.

2. Define the Region Name where the AE ONTs reside. Under Filter Criteria > Region, click the arrow to the right of the Region topology list to view all available Regions.

109


Note the following:

To include multiple Regions in a filter criterion list, use Ctrl+click to select one item at a time, or Shift+click to select a range of items. (To de-select an item, Ctrl+click it again.)

The Region list includes both regions and network groups.

3. To define additional filters, click the arrow to the right of Additional Criteria to view the available element filters:

In most cases you specify a match option (Equals, Contains, Not Equals, Starts With,

or Ends With), then type a text string in the box to the right. Optionally, select the Case Sensitive check box to only return results matching the case you used). For example, in a node inventory query, to return all nodes named AEONT, set the AID criterion list to Equals and type AEONT (with the Case Sensitive check box selected) in the box.

SID indicates the System ID or node name. Type all or part of a node name.

For card and port inventory queries, you can filter based on service states and card types. Service states have a Not check box option for searching all inventory that is not in the selected state(s). For example, you can set up a card query to only return ADSL-24 cards that are not out-of-service.

Note: Selecting more than one service state includes the cards or ports that match all of the selected states. Selecting more than one card type includes any of the selected types.

110


4. Specify how to sort the search report. Click the arrow to the right of Sort Criteria, then do the following:

a. In the Column Name list, click the filter to use as the primary sort.

b. In the Sort Order list, click Ascending or Descending to specify the sort order.

c. Click More to list a secondary sort criterion, and then repeat Steps 4a and 4b.

111


5. Change the default report output options. Click the arrow to the right of Report Parameters. You have these options:

Save the file in CSV format by clicking CSV.

Tip: You can also generate a CSV report after generating the HTML search report (Step 6), however, if you anticipate the search report to be large, using the option here eliminates the processing required to generate the HTML report.

Change the number of lines per HTML page (or the number of lines to include in the CSV file) from the default of 50. Type a different number in the Lines Per Page box, or click the Show All Rows check box.

Note: A maximum of one million lines can be returned. If you specify a number over 999, do not use a comma as a thousands separator.

112


6. At the bottom of the screen, do one of the following:

Use advanced search options to customize the columns displayed in the report and the sort order, as well as set further filter criteria, by clicking Advanced.

At the bottom of the Web page or screen, click Submit. The search report displays on screen, or if you selected CSV format in Step 5, the Downloading dialog box opens with options to open the search report directly in your default spreadsheet application, or save the file open to a location on your PC or workstation.

Clear the Search screen of all search criteria you have set by clicking Reset.

7. In the report screen, you have these options:

Scroll through multiple search results pages. Use the Next, Last, First, and Prev above or below the list.

Return to the Search screen and modify the criteria. Above the report buttons, click Back.

Above the list results, toggle the parameters on screen to display those from a different CMS work area (not available on all searches). The link for the currently-selected set of parameters displays largest.

In the report table, for one of the lines in the search report:

Open a Table View by clicking the Row # hyperlink.

Jump to the Work Area by clicking an ID hyperlink.

Note: After clicking an ID hyperlink, you cannot return to the search report without regenerating the report.

Save the results displayed on the current screen only in CSV format. Above the report results, click CSV Export. The Downloading dialog box opens with options to open the search results directly in your default spreadsheet application, or save the file to you local hard drive. In CMS, you can run a global search to create a report of all AE ONT Nodes. The data returned in the report is based on the latest synchronized data.

Global searches are permission-based; screens and report filters show only those resources that you have permission to view.

Members of any default user group have permission to view all resources. Running a global search requires Minimum (Min) CMS Administration privileges. Users in custom user groups with one or more permissions set to None can use the Basic Search feature.

For complete information on global searches, refer to the Calix CMS Guide.

113


Moving an AE ONT in the Navigation Tree Upon discovery, a Calix AE ONT is initially added to the Autodiscovered system network group on the CMS Navigation Tree. You can move the ONT to a different network group to place it where needed.

Modifying a parent network group requires Full CMS administration privileges.

Note: You can modify the destination folder of autodiscovered AE ONTs by navigating to CMS > System > System Settings > AE ONT > Default Network Group

To move an AE ONT on the Navigation Tree

1. On the Navigation Tree, click any of the following options for the AE ONT:

a. the root region

b. the parent region

c. network group of the AE ONT

2. In the Work Area, click Network Details.

3. In the AE ONT list, click the device(s) to move. For selecting multiple items, use Ctrl+Click to select one item at a time, or Shift+Click to select a range.

4. In the Edit row, click Network Group and then select the new parent network group.

5. Click Apply, and then click OK to save the new settings.

114


Working in Map View In CMS you can customize your network and node topologies with a background map using Google Maps.

Using Google Maps

Google Maps uses a hosted service on a Calix server domain. In order to access Google Maps in Map View, your CMS Desktop client machine must be connected to the Internet.

Note: To access Google Maps, your client machine cannot use a proxy server for the Internet connection. Check your Web browser settings or consult with your system administrator to be sure that the PC or workstation does not use a proxy server.

When you first view the Map View Work Area in CMS, each network element displays as a red pin or icon on a background map of the United States. You have several options:

Enter either an address or latitude and longitude coordinates to associate with each network element.

Use the navigation buttons at the upper-left corner of the screen to pan up or down and zoom in or out, and then drag the map in any direction using your cursor.

Use the options in the upper-right corner of the screen to change the display to a map, satellite, or hybrid view.

To view network elements in Map View

1. On the Navigation Tree, click one of the following:

A network group

A network element (network, service unit or platform, or an ONT)

2. In the Work Area, click Map View.

Tip: Minimize the Alarm Table to view more of the map.

115


3. Use one or more of these methods to zoom to a specific map location and place the network elements:

Pan and zoom: Zoom to a map level or in the text box above the navigations buttons, type a location, and click Goto. Alternatively, right-click anywhere on the map to zoom in or out or center the map at a specific location.

Goto list (to the right of the Goto button): Select a network element to jump its map location.

Click and drag: Use your cursor to drag each pin or icon to a location on the map. As you select and move a pin, it changes to an icon representing the network element type (for ONTs, if a GoogleMap location has not been specified, the network element changes to a blue pin.)

Enter a physical location or latitude and longitude coordinates in one of two ways:

In the upper-right corner of the map, type in the Goto box.

Click an icon to view a popup menu, click Move To, and type in the box.

Tip: A physical location can be a full street address (with city and state) or partial address (such as a city and state). Latitude and longitude coordinates are entered in the following format: LAT,LON. For example, 38.27,-122.66. Location information is saved with the network element object in CMS.

4. (Optional) From Map View, you can jump to any network element in the Navigation Tree. To do so, click an icon to open a popup menu, and then click Open.

5. In the Navigation Tree or Work Area, click Apply, and in the Confirmation dialog box, click OK to save the changes.

116


Removing AE ONT Services Removing AE ONT service using the Services screen in CMS Desktop requires Full CMS Administration privileges.

To remove services from an AE ONT





In the Work Area, the Services work area for the selected AE ONT displays by default.

Video, data, or voice service that has been activated appears expanded on screen with a check box to the left of the service.

2. Clear the check box to the left of the service(s) that you are removing.

3. At the top of the Services work area, click Apply.

A confirmation dialog box opens for verifying that you are ready to reset to AE ONT and save the changes. Click Yes to confirm.

117


Resetting an AE ONT Resetting AE ONTs requires Full CMS Administration privileges. Additionally, the AE ONT must be in a “Connected” status in CMS.

To reset a Calix Active Ethernet (AE) ONT

1. From the Navigation Tree, select one or more AE ONTs using one of the following methods:

Expand the network group and select an AE ONT.

Select the root region, another region, or a network group. In the Work Area, click Network Details > AE ONTs and select an AE ONT from the list.

To reset multiple AE ONTs, use Ctrl+click to select one ONT at a time, or Shift+click to select a range of ONTs.

2. In the Work Area, click Action > Reset.

A Task Progress window opens showing the progress of the action.

118



Chapter 8

Turning Up an AE ONT via CLI

AE ONTs can be managed through a Command Line Interface (CLI). All functions of AE ONTs can be added or modified via CLI.

Topics Covered

This chapter covers the following tasks:

Network Pre-Requisites and Considerations Configuring the Management VLAN The ONT Boot Process Monitoring the ONTs Status via CLI Creating an SNMP Trap Receiver for Capturing Alarms and Events AE ONT Network Bridging Options The Remote Management Interface (RMI) Script Creating a layer 2 Pipe for HPNA Maintenance and Monitoring

120


Network Pre-requisites As part of any AE network set-up, it is assumed that the following components and software have already been installed and are connected to the network:

A DHCP server running Linux or Solaris A primary and secondary TFTP server for managing AE Configuration files

Note: TFTP server set-up is managed via CMS. For additional information, refer to Configuring Primary and Secondary TFTP Servers

A TFTP server for managing VoIP Configuration files (which resides on a separate VLAN).

An NTP server for providing network timing services A Syslog server for capturing SNMP trap information and various ONT logging features A SIP server for handling VoIP set-up and options

Additional Considerations With configuration files defined, the following information must be available prior to bringing up a Calix ONT in AE mode.

Management VLAN ID that the ONT uses to communicate with DHCP, TFTP, NTP, and Syslog servers (default VLAN ID = 85)

IP address on Management VLAN for NTP and Syslog server VLAN IDs for other services such as high speed data, IPTV, and VoIP

Prior to turning up the ONT, keep the following information in mind:

Ensure a DHCP server is configured to respond to DHCP discovery requests on the ONTs management VLAN.

Make sure the TFTP server is configured to respond to requests on the management VLAN and has the ONT configuration file(s) in its search directory.

Make sure that DHCP servers and relays are properly configured on each of the service VLANs (HSI, IPTV, and VoIP). These may be shared or separate DHCP servers depending on the network provider’s configuration.

About the ONT Runtime Image

A required component of the ONT configuration file is the specification for the name and optionally the location of the ONT runtime image. On a new deployment, the ONT automatically downloads this file and then resets to start executing the image. On any other power cycle or reset by the ONT, the ONT validates the image that it is currently running against the image that is specified in the configuration file. This ensures that the ONT is always running the correct version of software.

121


In the event that a new AE ONT runtime image is released, a new image must be specified in the ONT configuration file. For convenience, this can be specified in one configuration file and all ONT configuration files refer to that file for the name and location of the latest runtime image.

The AE ONT maintains the concept of a committed and uncommitted runtime image. When the ONT downloads a new image, the image is copied into an unused region of flash memory. If the ONT is able to switch to the new image and obtain its IP address from the DHCP server, then the image is committed and is executed whenever the ONT resets (reboots). If the ONT fails to establish communication with a DHCP server, it resets and “reverts” back to the previously committed image.

This process protects the ONT from downloading an improper image (service affecting issue requiring a truck roll. In addition, the runtime image is validated with a Cyclic Redundancy Check (CRC) before it is written to flash. This further validates that the image has not been corrupted on the RMI station or during the image transfer.

122


Configuring the Management VLAN As the ONT completes the boot-up sequence, it configures a management VLAN and immediately attempts to obtain an IP address from a DHCP server. By default, the ONT uses VLAN 85.

The VLAN ID on the ONT can be changed in the field during installation using a buttset device.


Note: Unless there is a definite conflict in your network with VLAN 85, there is no need to change the management VLAN on the ONT.














123


ONT Boot Process The Calix AE ONT boot process is accomplished in three phases:

1. Establish Link to Switch

2. Obtain an IP Address

3. Provision the AE ONT

The AE ONT must complete all phases successfully before reaching the operational state providing services to the subscriber. If an unrecoverable error occurs at any point after the second phase of the boot up process (see below), the ONT reports the error to the Syslog server and then reboots. Prior to the completion of the second phase, the ONT is not connected to the Syslog server and only takes recovery actions such as a looping reboot sequence.

124


Establishing a Link to the Switch The ONT establishes a link with the switch. If this is the first time the ONT has been turned up on this network, the ONT goes through the autosensing sequence in order to determine the correct transport protocol for the headend device (GPON or AE). Once it determines that it is an AE device, subsequent resets default to AE mode which results in a much faster link and boot time.

Once the link has been established, the ONT creates its control/management VLAN on the WAN interface. Unless changed by buttset provisioning, the default VLAN ID (VID) is 85. It is assumed that this VLAN is private and secured by the Network Service Provider (NSP) to prevent un-authorized access to ONT management.

Note: The ONT does not allow any subscriber network traffic on the management VLAN.

Obtaining an IP Address The ONT initiates a DHCP Discover on the management network. If the ONT obtains an IP address from a DHCP server, it proceeds to Phase 3. If the ONT fails to receive an IP address or gets rejected by the DHCP server, it reboots and restarts Phase 1 again (establishing a link to the switch).

Provisioning the AE ONT The ONT initiates a TFTP GET command for the proper ONT configuration file. While obtaining an IP address during phase 2:

If the ONT does not receive the file name from the DHCP server, the ONT uses the registration ID (for example, 3453453459.cfg)

If the registration ID is not set, the serial number is used. (for example, CXNK11900011.cfg)

It also assumes that the TFTP server is running on the same computer as the DHCP server host. Alternatively, if the DHCP server included the information in the DHCP Response message, the ONT uses the TFTP server address and configuration file name provided by the DHCP server.

The AE ONT downloads its configuration file and processes the commands one at a time in the CLI. Failures in the provisioning process result in the ONT generating an error message to the Syslog server with as much description as possible. Once the syslog error is sent, the ONT attempts to reboot. If the ONT successfully processes all commands without errors, it sends a message to the Syslog server declaring the completion of the ONT configuration and provisioning and switches to operational state.

125


About Auto-Detect Behavior on the ONT When an auto-detect 700GX ONT ships from the factory, or the ONT is switched from one OLT type to another (GPON versus AE), it does not contain a "runtime image". This software image exists to provide subscriber services based on the headend type that it is attached to. The runtime image must be downloaded from the headend that the ONT finds itself attached to when it is first powered up.

In the AE ONT case, phase 3 is slightly different in that the ONT is instructed to download the configuration file in order to obtain the file name and address of the proper runtime image. The ONT then downloads the runtime image, verifies the image, stores it into flash memory, and then resets. The process starts over again by attempting to establish a link to the switch.

Configuring Option-82 Option-82 is used to facilitate ONT management and is inserted by the headend switch the ONT is attached to.

If the ONT is deployed on a switch that supports Option-82 insertion, there is an alternative approach to identifying an ONT configuration file and IP address to the ONT each time it boots.

Using Option-82, you specify the switch MAC address, the switch port number, and the Management VLAN ID to be inserted for all DHCP traffic originating from subtending ONTs. The DHCP server then uses that information to specify to the ONT the same IP address each time it boots as well as the configuration file to use.

With Option-82 configured, when an ONT is replaced at a customer premises, it receives the same IP address and configuration file as the previous ONT.

126


Monitoring the ONT The AE ONT uses SNMP traps and standard Syslog messaging to notify the service provider when operational issues arise. By default, the AE ONT sends alarms, events, and informational messages to a Syslog server address. Up to 4 SNMP trap receivers are configurable in order to receive alarm and event notification.

Note: If SNMP traps are not configured (only the Syslog), you must manually check the Syslog log file to determine if alarms, events, or errors have been reported by an ONT.

In an AE system, SNMP alarming is defined with the following capability: The AE ONT sends an SNMP alarm trap to each receiver when an alarm condition is

raised or cleared SNMP GET is supported for retrieving standing alarms on the ONT SNMP GET is supported for obtaining additional information such as ONT model type,

software version, and the like.

About Syslog Events The complete list of Syslog events reported by an AE ONT is listed in the table below.

Syslog Events

Type Event Description Info Use Default config filename:

FILENAME DHCP server did not supply configuration filename. As a result the ONT used a default name which is serial number based for its configuration file request.

Warning Failed to retrieve current time from an NTP server

ONT failed to retrieve the current time from an NTP server due to incorrect server address or server timeout

Info Retrieving file FILENAME from server IP_ADDRESS

ONT was attempting to retrieve the named ONT configuration file at the specified TFTP server

Error Cannot retrieve config file FILENAME ONT failed to retrieve the ONT configuration file from the TFTP server

Error Configuration file FILENAME is over the size limit of 16384 characters

ONT configuration file was over the size limit

Error Command at line NUMBER in configuration file FILENAME is longer than the 1024 characters limit

Command in the ONT configuration file is too long

Error Configuration file FILENAME is not found at the TFTP server

ONT configuration file is not available on the TFTP server

Error Cannot retrieve firmware image FILENAME from server IP_ADDRESS

ONT failed to retrieve the ONT firmware image from the TFTP

Info Firmware upgrade complete. Booting to new version

ONT completed the upgrade of firmware image. ONT would soon reboot to the new firmware.

Error FILENAME is not a configuration file ONT configuration file did not have the correct format. The file signature was not found at the first line.

Error Configuration script error at file FILENAME line NUMBER

A command in the ONT configuration file failed due to parameter error or processing error.

Error Configuration file include level exceeded limit

ONT configuration file is recursively including other configuration files at more than 3 levels deep.

Info ONT reboots shortly due to configuration failure

Error occurred during the processing of the ONT configuration file. ONT would reboot in a few seconds.

Info ONT has been configured successfully ONT completed the processing of the configuration file and was configured successfully.

Error Cannot create SNMP session on trap sink IP_ADDRESS

ONT Failed to configure SNMP trap sink address.

127


About Alarms The table below details all alarms reported via the SNMP trap receivers.

Note: These alarms are also captured by the Syslog server.

AE Alarms

Alarm Name Description

UDP_ALARM_ON_BATTERY The AC power is disconnected. The ONT is currently on UPS battery power.

UDP_ALARM_NO_BATTERY There is no battery installed in the UPS.

UDP_ALARM_BAD_BATTERY The battery is not functioning properly in the UPS.

UDP_ALARM_TX_LASER The transmit laser is near End-of-Life.

UDP_ALARM_VIDEO_SIG_BAD The received RF Video signal level is too low.

UDP_ALARM_RF_RETURN_LASER_EOL The RF Return Laser is near End-of-Life (Model 725GX).

UDP_ALARM_LOW_BATTERY The UPS battery power level is too low.

UDP_STATUS_ENET_DOWN The ONTs Ethernet port is disconnected.

UDP_ALARM_UPS_MISSING The UPS is missing.

UDP_ALARM_MGMT_DHCP_RENEWAL The ONT failed to renew the DHCP lease on the Management VLAN for the management interface.

UDP_ALARM_VOIP_CONFIG_TFTP_FAILURE The VoIP host failed to retrieve a VoIP configuration file from any TFTP server(s).

UDP_ALARM_VOIP_REG_AUTH_FAILURE The VoIP host failed to authenticate with the VoIP server.

UDP_STATUS_ENET_0_OOS Ethernet port 1 is configured but the link is down.

UDP_STATUS_ENET_1_OOS Ethernet port 2 is configured but the link is down.

UDP_ALARM_VOIP_REGISTRATION The VoIP server timed out.

Note: If SNMP trap receivers are not provisioned, alarms may be viewed by opening the current Syslog file.

128


Creating SNMP Trap Receivers The AE ONT allows SNMP-based element management systems to become aware of ONTs using registration traps. These traps are sent to all receivers specified in the ONT’s configuration file. The registration notification trap is disabled in the ONT configuration file by setting the notification frequency to zero (0):

config trap sink –freq=0

Important: If the customer is not running the Calix CMS, it is recommended that this capability be disabled.

Note: The AE ONT supports the SNMP SET command for resetting the ONT.

For information on displayed alarms in the CMS, refer to Viewing ONT Alarms in CMS (on page 166).

Bridging Bridges are used on the AE ONT to transfer data between the AE WAN port (fiber interface), the subscriber Ethernet ports, the AE ONT control processor, and the SIP ports. Each ONT bridge is always associated with a single VLAN and associates this VLAN with a VLAN ID on the WAN side of the AE ONT.

Note: More than one bridge can be configured on each Ethernet port if the subscriber port trunks multiple VLANs or if the ONT is mapping untagged traffic to multiple WAN VLANs.

The ONT supports data flow mapping from subscribers to the various VLANs defined on the WAN trunk. The Ethernet subscriber side (customer premises) of the ONT may define a different set of VLANs or untagged traffic which is then mapped to the carrier side VLANs via classification mechanisms. The AE ONT supports both Layer-2 and Layer-3 mapping (classification) functions to map subscriber traffic on VLANs to the various WAN VLANs defined by an ONT WAN bridge. See the section Subscriber VLAN to WAN VLAN Mapping (on page 139) for a description of these functions.

The ONT supports creation of several different bridge types:

VLAN per Port Bridge VLAN per Service Bridge IGMP Snoop VLAN per Service Bridge IP Host Bridge

129


VLAN per Port Bridge The VLAN per port (1:1 VLAN implementation) model is used when each subscriber port on the ONT is associated with a separate, single WAN VLAN. The ONT does not perform a "learning bridge" function when operating in this mode. Instead, it maps and forwards data between the WAN port and a single subscriber port.

Note: Provisioning is provided in that the bridge is configured to "learn" MAC addresses on each side for debugging purposes.

VLAN per Service Bridge The VLAN per Service (N:1 VLAN implementation) model is used when more than one Ethernet port is associated with a single WAN side VLAN. The scope of this VLAN may be either within the ONT or spread across multiple subscribers (ONTs). An example of this usage within the ONT might be IPTV services where the ONT must multicast a single downstream channel to more than one Ethernet port. Another example of this may be a Transparent LAN Service (TLS) in a multi-dwelling unit where the ONT must hair-pin between two separate subscriber ports which are members of the same carrier VLAN. This service model is used to configure multiple subscribers into an N:1 service, meaning more than one subscriber is a member of the VLAN, possibly outside the ONT. This type of configuration simplifies subscriber provisioning but requires "MAC forced forwarding" at some level above the ONT, preventing subscribers from directly communicating via Layer-2 in the VLAN.

The first and last case described above does not allow hair-pinning between the subscriber ports. Each VLAN per-service bridge in the ONT may optionally be configured to support learning or hair-pinning between subscriber ports. In the default mode, the VLAN per-service bridge never forwards data directly between subscriber ports. If a packet is received upstream from a subscriber with a MAC destination that is routed out another subscriber port, the packet is dropped unless the "hair-pin" option is enabled.

Note: The AE ONT always performs a learning bridge function on VLAN per-service bridge types.

130


IGMP Snoop VLAN per Service The AE ONT enables IGMP V2 snooping on the Ethernet ports in this bridge type. This capability insures that only multicast channels joined by a particular STB appear on the subscriber network. Channels not joined are dropped at the WAN port of the ONT.

When a VLAN-per-service bridge is created with this option the ONT transfers data on the subscriber network as Layer-2 multicast or unicast traffic. Unmanaged Layer-2 switches propagate multicast traffic to all ports on the subscriber's network (by default, the ONT sends multicast as Layer-2 multicast packets). The ONT supports the sending of multicast as Layer-2 unicast packets, replicating the unicast traffic to only those STBs that have joined a particular channel on the subscriber's network.

IP Host IP Host ports on the ONT are pseudo-devices allowing bridge port paths for IP Host termination at the ONT. These types of bridges are used to define data paths for SIP and future services such as T1 over Ethernet (PWE-3). In this configuration, each IP Host interface is configured with a unique IP address, subnet mask, and gateway address (or the host obtains its DHCP client protocol).

Note: Each IP Host must have a dedicated MAC address.

The ONT creates a default IP Host bridge (iph-0) on the Management VLAN that is used for the ONT control path and also may be used to attach SIP ports. Additional IP Host bridges are also provisioned if needed to isolate VoIP data or other services. Typically, a single bridge is used for all SIP ports if all of the POTs ports are serviced by the same SIP provider.

The creation of the Layer-3 attributes of an IP host is accomplished via provisioning options in the ONT configuration file. In order to terminate a path between the WAN interface and an IP host, a bridge must be created with one or more associated IP Host ports.

131


Remote Management Interface Script The Remote Management Interface Script is provided to address basic system management tasks. This script runs on Linux and Solaris platforms and provides the following basic capabilities:

List all ONTs active on the service provider’s management network Reset one or all of the active ONTs Display a summary status of one or all active ONTs Display all active alarms on one or all active ONTs Display diagnostic information, error messages, or post-mortem crash information from

the ONT(s)

This script reads the Internet Systems Consortium (ISC) DHCP Server lease database for the current inventory of ONTs on the network.

Note: In order for the script to be executed properly, the workstation must have access to the Management VLAN.

The name of the ISC DHCP server’s database file is provided on the command line.

Note: The script has been written to work with the open ISC DHCP server log format. However, it can be modified to work with any other DHCP server log file format.

The management script MUST be run on the DHCP platform. The syntax for the script is shown below:

Usage calix_ae_ont [-a|-s serial_num|-i regex|-p ip] [-l|-r|-m|-d|-x command] ONT selection methods -a select all Calix ONTs -s select single Calix ONT given a serial number -b select ONTs based on regular expression matching on ONT Labels -p select single Calix ONT given the management interface IP address Operations -l display info summary (ONT type, firmware version, etc) -r reboot ONTs -m list currently active alarms -g dump recent log events -d display service diagnostic info -u display post-mortem crash info -x execute CLI command

132


In the following examples, one ONT is currently active on the network, and another ONT was previously on the network but is no longer active.

Retrieving Current Alarms The following command requests that all outstanding alarms from all active ONTs be reported.

DHCP_desktop./calix_ae_ont -a -m

Serial Num Assigned IP FW Ver ONT Label ------------- -------------- -------- ----------

CXNK000004E5 177.0.0.58 6.0.Z.101 16306 36th Ave N CXNK11900002 177.0.0.59 <NOT CURRENTLY ACTIVE>

The following ONTs are selected: CXNK000004E5 Dispatching command to ONT CXNK000004E5 at 177.0.0.58 ... config alarms All currently ACTIVE alarms: [ 58] UPS Missing CXNK000004E5 Done

In this example, all ONTs (-a) on the system were scanned and filtered for ONTs with outstanding (active) alarms (-m).

Resetting an ONT by Serial Number The following command resets a single ONT identified by its serial number.

DHCP_desktop ./calix_ae_ont -s CXNK000004E5 -r Serial Num Assigned IP FW Ver ONT Label CXNK000004E5 177.0.0.58 6.0.z.101 16306 36th Ave N * CXNK11900002 177.0.0.59 <NOT CURRENTLY ACTIVE>

Upon executing the script, the following ONTs are selected: CXNK000004E5 Resetting ONT CXNK000004E5 at 177.0.0.58 ... Done

In the example above, a single ONT (-s) was specified in the script and was ordered to reboot (-r).

133


Creating a Layer-2 Pipe for HPNA Maintenance and Monitoring

For downloading new firmware and for performance monitoring of HPNA devices, you must create a Layer-2 pipe from the ONT to the subscriber’s network. With this pipe, third party HPNA vendor tools (such as Coppergate or ReadyLinks) allows downloads of new firmware or reading of HPNA statistics on HPNA devices connected to the subscriber’s network (referred to as "in network" upgrades).

These upgrades are accomplished using a layer 2 pipe from a control computer (on the provider’s network) to the ONT(s) equipped with a HPNA option card.

Note: The control computer may also run HPNA network diagnostic tests across the Layer-2 pipe.

The download/diagnostic utility is provided by the manufacturer of the HPNA interface device.

Configuring the AE ONT for HPNA Deployment The following configuration specifies the setup required to test that the third party HPNA utility functions when the HPNA device and the Windows based PC are located on the same AE VLAN network.

Note: External clients must be attached to the ONT HPNA option card for this configuration to function properly. If zero clients are recognized, the link operation state switches to “DOWN” with no packets being passed across the interface. In this case, a shell command must be executed to override the operational state such that the HPNA utility communicates with the HPNA expansion card.

The Layer-2 pipe needed for the support of HPNA upgrade and diagnostic utilities through the AE ONT is achieved using TLS services on the AE ONT. This TLS Layer-2 pipe and its associated VLAN ID must NOT be used to provide end user services.

For the sample configuration below, the VLAN ID of 4002 is dedicated to the TLS VLAN used for constructing the Layer-2 pipe.

Important: The example shown is NOT a complete AE ONT configuration. In order for this Layer-2 pipe to function properly, the filtering rules used to set up the Layer-2 pipe must not be superseded by other filtering rules, and as such, may also conflict with normal end user services.

134


To configure the AE ONT for HPNA

1. A VLAN per service bridge must be created to transport the TLS service for the Layer-2 pipe matching the Layer-2 pipes VLAN ID (for example, 4002). In this deployment, the wan-0 instance of the Layer-2 pipe is tagged with the Layer-2 VLAN ID.

Note: The HPNA port must always be the second Ethernet port (“eth-1” given that “eth-0” is the actual Ethernet port).

2. A filtering rule must be created to map all tagged traffic and packets to the Layer-2 pipes VLAN ID.

3. A filtering rule must be created to map all untagged traffic/packets to the Layer-2 pipes VLAN ID.

A sample configuration of an AE ONT bridge with appropriate filtering rules: #create a TLS VLAN per service for all traffic on eth-1 bridge add -snoop=ena vid=4002 bridge portadd vid=4002 dev=eth-1 #map all tagged traffic to common TLS vlan on eth-1 lev2l2tag add -filtinpri=8 -filtintpidde=5 -treatoutpri=8 -treatoutvid=4002 -treatinpri=8 -treatinvid=4096 eth-1 #map all untagged traffic to common TLS vlan on eth-1 lev2 add -treatinpri=0 -treatinvid=4002 dev=eth-1


Chapter 9

AE Deployment Options

There are three primary deployment scenarios supported by the AE ONT:

Customer premises network containing a residential gateway (RG) Customer premises network without an RG Customer premises network managed with an external Router for VLAN mapping with

Quality of Service (QoS)

136


Residential Gateway Characteristics In deployment scenarios that include a residential gateway in the subscriber network, the RG provides VLAN mapping and QoS functions. In this configuration, the ONT acts as a pipe between the WAN and subscriber network. VLAN mapping still occurs between the subscriber VLANs and the WAN interface VLANs as pictured below:

137


Non-Residential Gateway Characteristics In deployment scenarios that do not include a residential gateway in the subscriber network, the ONT provides VLAN mapping and QoS functions. In this configuration, the ONT acts as the RG on the subscriber network for partitioning traffic, shaping, QoS, VLANs, and the like.

138


External Router Characteristics In this deployment scenario, the service provider manages the subscriber traffic via an external router. In this case, the ONT may provide a single VLAN per port and either tagged or untagged traffic is passed between the WAN and LAN interfaces.

The diagram below illustrates the case of a single customer VLAN managing multiple services via an external router. It also shows alternate data service models are supported on each ONT Ethernet port independently.

Metering and Traffic Shaping Support is provided for the following options:

802.1p QoS traffic shaping QoS per subscriber data rate shaping QoS per VLAN Id data rate shaping

An AE ONT supports a specific number of independent traffic shapers. Each traffic shaper consists of 8 upstream and 8 downstream 802.1p queues (in other words, 8 priorities in each direction). Packets are queued to the shaper queues based on the outer 802.1p pbit field of each WAN packet. Packets are removed from the queue from the highest priority to the lowest in each shaper direction. All 700 AE ONTs support 16 bi-directional traffic shapers.

Note: 802.1p priority ranges from binary 000 (0) for low priority to binary 111 (7) for high priority

139


Each direction of a traffic shaper is programmed to provide a specific rate for the shaper. Two values are specified to designate the rate:

Committed information rate (CIR). The CIR value is the minimum guaranteed rate the ONT limits flows for each direction of the shaper.

Peak information rate (PIR). The PIR is reserved for future use. It allows peak rates up to this value if bandwidth is unused or available.

Note: PIR must always be greater than or equal to CIR.

Note: The minimum metered rate is 0 Kbps (disabled), the maximum metered rate is 200000000 (200 Mbps).

Traffic flows are attached to a traffic shaper based on the classification of the flow. One of three classification options are chosen for each direction of a traffic shaper. Attachment mechanisms are as follows:

By subscriber Ethernet device name (eth-0, eth-x)

One or more devices are attached to a given shaper direction. By the WAN side outer VLAN ID value

One or more VIDs are attached to a given shaper direction. By PON portId (applies to GPON mode only)

One or more PortId flows are attached to a given shaper.

Note: Only one mechanism at a time is used per shaper direction.

Upstream multicast and broadcast rate limiting support is provided. In addition to the traffic flows described above, the administrator may optionally attach an additional upstream shaper to separate outgoing broadcast or multicast traffic and limit those discrete flows from the subscriber premises unicast upstream traffic. This is a security feature limiting DoS attacks on an IPTV or HSI network. It also limits the rate of multicast joins entering an IPTV network.

140


Subscriber-VLAN to WAN-VLAN Mapping Overview

The Layer-2 (L2) mapping functions of the ONT are an important feature for isolating services or subscribers into separate VLANs on the network provider's side of the network. This allows the network provider to manage these services and subscribers independently.

The ONT supports mapping to WAN VLANs both with and without a RG:

Upstream mapping of RG VID/Classification to outer WAN VID occurs on the subscriber side ingress via L2 classification/marking and Layer-3 (L3) classification/marking tables.

Automatic inverse downstream re-mapping from outer WAN Tag to RG/Subscriber side occurs on subscriber side egress based on the upstream table entries.

Note: The automatic inverse mapping operations are generally more forgiving in terms of filtering criteria (important for minimizing issues with configuring upstream routers).

The ONT supports mapping of traffic via the MAC SA to facilitate initial support for mapping untagged traffic on the subscriber side. An example of this filter/marking operation would be to identify by OUI the set-top boxes used for IPTV service. All other untagged traffic is mapped to the HSI VLAN defined for the ONT. Thus, the ONT supports triple-play service mapping of untagged subscriber traffic without L3 mapping in the initial release of software.

The L2 mapping operations are used to form the resultant VID for the WAN bridging (upstream) or the resultant VID for the subscriber network (downstream). This VID must match the VID used in one of the VLAN Bridges created for the AE ONT. The TPID (for example, 0x8100) associated with the VIDs are configurable for each network.

There are two L2 mapping/filtering tables defined that are operated on the subscriber side of the WAN bridge for each Ethernet port.

Level 1 L2 Filtering/Mapping Table

This table is primarily used in the absence of managed switches or RGs at the subscriber network. This table currently supports mapping/filtering by MAC DA/SA. The following commands are supported in Level 1:

Action lev1l2tag add -filtmac=sa -filtmacmask=ff:f:f:ff:00:00:00 -filtmacmatch=00:01:04:00:00:00 -treatinpri=4 -treatinvid=100 dev=eth-0

Result

Adds single tag (lev1l2tag), with filter on source address SMAC OUI (-filtmac=sa), adds VID=100, with explicit PBIT value (4)

141


Action lev1l2tag add -filtmac=da -filtmacmask=ff:f:f:ff:00:00:00 -filtmacmatch=00:01:07:00:00:00 -treatinpri=4 -treatinvid=100 dev=eth-0

Result

Adds single tag (lev1l2tag), with filter on destination address DMAC OUI (-filtmac=da), adds VID=100, with explicit PBIT value (4)

Action lev1 add -filtmac=da -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:01:05:00:00:00 -treattagremdrop=3 eth-0

Result

Drops all frames matching DMAC OUI (-filtmac=da), fully qualified DMAC can be specified as well

Action lev1 add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:01:07:00:00:00 -treattagremdrop=3 eth-0

Result

Drops all frames matching SMAC OUI (-filtmac=da), fully qualified SMAC can be specified as well

Level 2 L2 Filtering/Mapping Table

The second table processed is called the Level 2 L2 filtering/mapping table. It is used in the presence of managed switches or RGs at the subscriber network. This table supports the ability to re-map VLAN tags on the subscriber side or to add additional tags for TLS, as well as many other operations. The following commands are supported in Level 2:

Action lev2l2tag add -filtinpri=5 -filtinvid=100 -treatinpri=4 -treatinvid=210 eth-0

Result

Adds single tag, with VID translation from VLAN 100/PBIT=5 to VLAN 210/PBIT=4, uses default output Tpid

Action lev2l2tag add -filtinpri=8 -filtinvid=300 -treatinpri=8 -treatinvid=400 eth-0

142


Result

Adds single tag, VID translation from VLAN 300 to VLAN 400, propagates incoming PBIT from incoming tag, uses default outputTpid

Action lev2l2tag add -filtinpri=8 -filtinvid=600 -treatoutpri=8 -treatoutvid=500 -treatinpri=8 -treatinvid=4096 eth-0

Result

Adds double tag, Adds VID (500) from incoming VID match (600), propagates incoming PBIT from incoming tag, uses default outputTpid

Action lev2l2tag add -filtinpri=8 -filtinvid=700 -treatoutpri=4 -treatoutvid=800 -treatinpri=8 -treatinvid=4096 eth-0

Result

Adds double tag, Adds VID (800) from incoming VID match (700), explicit PBIT, uses default outputTpid

Action lev2l2tag add -filtetype=0x8863 -treatinpri=5 -treatinvid=200 eth-0

Result

Adds single tag, Adds tag if etype = 0x8863 , sets explicit PBITs, uses default TPID

Action lev2l2tag add -treatinpri 5 -treatinvid 200 eth-0

Result

Adds single tag, Adds tag, sets explicit PBITs, uses default TPID

143


Level 1: L2 Mapping Filter Table The Level 1 L2 Mapping/Filtering table is the first table processed on the subscriber ingress/egress. A separate table with 8 entries exists in the downstream and upstream direction for each Ethernet port. Entries are added to the table one at a time using data contained in the ONT configuration file. When an entry is added, the system constructs an automatic "inverse" operation for the downstream processing if the action requires it. The interface supports no-tag, 1 tag, and 2 tag operations however only no-tag, and 1 tag operations are currently supported for the level 1 table.

Important: The terminology used to describe a tag is either "inner" or "outer". The inner tag filter rules are for single or double tag packets. The outer tag filter rules are only used on double tagged frames coming from or to a subscriber. With respect to the treatment side, the inner tag refers to the first tag on a single tag or no tag frames. On a double tag frame, it is the inner tag, in other words, the second tag. Examples are provided later in this guide clarifying these conventions.

Level 2: L2 Mapping/Filtering Table If no match occurs in the Level 1 L2 Mapping/Filtering table the Level 2 L2 Mapping/Filtering table is processed. The Level 2 L2 Mapping/Filtering table is the second table processed on the subscriber ingress/egress. This second table is used exactly the same way as the Level 1 table.

VLAN Tagging Mapping and Conversion for Multicast Streams The AE ONT performs the associated tag conversion on downstream multicast packets if the Level 1 and Level 2 L2 Mapping tables are populated with entries. Currently, there is a limitation in that all tagging must be the same on each Ethernet port if multiple ports are present on the ONT. That is, if IPTV is tagged on the subscriber side it must be tagged the same way (same VID) on all Ethernet ports. Similarly, if data is untagged on the subscriber side it must be untagged on all subscriber ports.

144



Chapter 10

Command Line Interface (CLI)

Overview Provisioning and operational commands are input into the system using the Command Line Interface (CLI) that is included with the Linux, Solaris, and Windows operating systems. The configuration shell is accessible via the Management VLAN path. This shell is automatically invoked when a user telnets to the 23 port of any AE ONT. When the user exits the CLI via the "exit" command, the telnet session ends.

This document describes both commands to configure subscriber services and display managed entities within the AE ONT. The scope of the CLI commands described here is limited to what is required by Network Service Providers (NSP) of the CLI for AE ONT applications. The CLI provides features which are relevant to network system engineers and customer service personnel for AE ONTs as well as GPON/BPON ONTs. Although the scope of this document focuses strictly on the AE ONT, commands do appear in the list that may be specific to GPON/BPON deployments exclusively.

Note: CLI commands not discussed in this document must be avoided to prevent potential service interruptions at the ONT.

146


Telnet Interface The CLI interface is accessed through any Telnet program using special port 23 through the WAN fiber interface. Login is required for Telnet CLI access.

Login: admin

password: fiber1ttx

Note: Both login and passwords are case sensitive.

Command Line Help The CLI provides a help facility to aid in understanding or formatting CLI input. The user may enter a "?" at any point in the command sequence to understand a particular command, similar to a wild card selection. For example, if the user enters the "?" at the highest level of the CLI, a list of all base-level shell commands is displayed:

CXNK03010101>? add ... bridge ... delete ... disable Disable maintenance mode enable Enable maintenance mode explicit Turn on/off CLI explicit mode help Display shell help history Display command history. hpna ONT HPNA support shell iphost ... lev1l2tag ... lev2l2tag lll log Logger filter controls meter ... mpp ... multi ... ntp ... omci ... opt82 ... ping ICMP Ping pingstop Stop the previously started ping re set ... show ... snmp SNMP Agent shell commands tp ONT Transport Commands trm ONT Transport Manager Commands voip ...

147


The "…" notation indicates that there are additional parameters following a command (which may or may not be optional).

Context Sensitive Help

To determine the definition of additional parameters of a specific command, the "help" may be invoked as in the following example:

CXNK03010101>add ? conntable Add conn group connTable row iparptable Add ipArp group ipArpTable row ipconfigtable Add ipConfig group ipConfigTable row routetable Add route group routeTable row voip ...

To understand additional parameters associated with the command the help may be additionally invoked such as:

CXNK03010101>add ipconf ?

Command Recognition

Note that, in the previous example, the entire command "ipconfigtable" did not have to be entered. The CLI only requires that the token be "un-ambiguous" to resolve it. For example, if the user enters the following, the system returns:

CXNK03010101> add ip add ip ^ Ambiguous command

Thus, the output of the "add ipconf ?" would be as follows: add ipconf ? Usage: add ipconfigtable [-crossconnectid=<n>] <ifindex=<ifname> <address=<ipaddr> <netmask=<ipmask> Add ipConfig group ipConfigTable row Options: -crossconnectid <n> ... type: Integer Parameters: ifindex=<ifname> ... type: Interface Name address=<ipaddr> ... type: IP Address netmask=<ipmask> ... type: IP Mask (0,32)

Note: Parameters enclosed in [ .. ] are optional.

148


Command Line Conventions When using the CLI interface, the following conventions apply:

Integer parameters may be entered in decimal or hexadecimal. A hexadecimal value must be preceded by 0x. Values without a preceding 0x are assumed to be decimal.

Interface names are always designated by a prefix-XX where XX is a zero relative instance value. For example, eth-0 is the first subscriber Ethernet interface, eth-1 is the second subscriber interface, and so on. See "iftab" in section Show iftab for a complete list of devices.

IP addresses and IP Masks are always designated in IP dot notation (for example, 192.168.100.1)

MAC addresses are designated by the dash notation, e.g., 00-01-02-03-05-03.

Some commands list explicit literal values for parameter types. For example, the "fw" parameter requires the type: enable, disable in a bridge add command.

CXNK0002ACDE> bridge add ?

vlan bridge add

Usage

bridge add [-lb=<enum>] [-mf=<enum>] [-fw=<enum>] [-snoop=<enum>] [-sv=<enum>] [-macff=<enum>] vid=

Add a Subscriber Port VLAN Bridge

Options

-lb=<enum> learning bridge - enable/disable. (This is for debug ONLY and negatively impacts ONT performance at rates > 60 Mbps. Default = disable

type: enable, disable

-mf=<enum> Enable/Disable multicast filtering in the UPSTREAM direction, default = disable


-fw=<enum> subscriber2subscriber forwarding - enable/disable, default =disable


-snoop=<enum> Turn on IGMP snooping, default = disable


-sv=<enum> Station validation - enable/disable DHCP station validation, default = disable


-macff Enable/Disable MAC forced forwarding support, default = disable


Parameters

vid= WAN side VLAN Id for this VLAN (0 - 4094), 0 == untagged

type: Unsigned

149


An example bridge creation command is as follows: CXNK03010101>bridge add -fw=enable vid=100

Optional Parameters

Optional parameters are denoted by an "-xxx=<xval>" notation. For example:

meter attach downstream

Usage

meter attach downstream [-dev=<fname>] [-vid=] [-portid=] shaper=

Attach downstream shaper to flow

Options

-dev=<fname> eth device name flow (eth-0 - eth-n)

type: Interface Name

-vid= WAN VLAN ID value flow (0 - 4094)

type: Unsigned

-portid= WAN GEM PortId value flow (0-4094)

type: Unsigned

Parameters

shaper= Downstream shaper number (0-31)

type: Unsigned

Note: The parameters -vid, -dev, and -portid are all optional.

Multiple Repeating Parameters

Some commands require multiple repeating parameters at the end of the command. For example in the previous section, the <pmap> parameter is a list of subscriber interface names at the end of the command, as in pmap=eth=0 pmap=eth-1. A repeating parameter at the end must always be denoted by the "<>…" notation.

150



Chapter 11

Remote ONT Activation

RONTA Overview The Calix Remote ONT Activation (RONTA) feature simplifies the installation and turn-up of any Calix ONT. Commands are entered via buttset at the customer premises, which allows the craftsperson to configure an ONT in a variety of environments, without assistance from the central office or the need for special equipment.

The RONTA feature is used to reset the ONT to its factory defaults, locally provision service, or assign an AE subscriber ID as part of the pre-provisioning process. The RONTA feature is activated when the ONT is powered with the drop fiber disconnected. The ONT leaves the RONTA mode as soon as an optical signal is detected.

The following features are available:

AE ONT RONTA Commands

Function Command Keystrokes

Master Reset for an AE ONT (on page 152) ***#

Assigning a Registration ID (GPON Mode) ***0

Assigning a Registration ID (AE Mode) ***0

Assigning an AE Management VLAN to an ONT (on page 154)

***1

Placing an AE ONT in Unmanaged mode (on page 155)

***2

Note: Attempts to configure a non-AE capable ONT for Management VLAN, Unmanaged Mode, or AE RONTA (Subscriber ID) are ignored by the ONT.

152


Configuration Rules




If the 1st Ethernet port is not set to pass-through, the 2nd Ethernet port can be set to disabled, or assigned to a single VLAN, provided the VLAN IDs are not identical at each ONT).

Master Reset The AE ONT buttset master reset procedure returns the ONT settings to the factory default, meaning the ONT operates in managed mode using VLAN 85 as the default Management VLAN and the AE Subscriber ID is deleted.

To reset the ONT to factory default





4. Verify the network fiber is disconnected from the ONT.

5. Re-apply power to the ONT.


7. Press "*", "*", "*" and "#" (star, star, star, pound) keys on the buttset key pad. The buttset sounds DTMF tones as the keys are pressed.

8. A voice prompts to acknowledge your selection of requesting an ONT master reset.

9. After the confirmation prompt, press '1' to confirm the reset. A voice prompt replies, "ONT Master Reset is completed".

10. Press '0' to abort. A voice prompt replies, "ONT Master Reset is cancelled".

11. Continue entering new RONTA commands as required.


153


Assigning a Registration ID to an ONT (AE Mode) Buttset provisioning via the remote ONT registration feature allows the craftsperson to install any Calix ONT from inventory at the subscriber site. Conversely, pre-provisioning an ONT serial number requires a craftsperson to install a specific ONT from inventory at the subscriber site. After using the management interface to assign a Registration ID and pre-provision services to the ONT, the remote ONT registration feature is used to install and turn-up a Calix ONT at the subscriber site. Using a buttset, the craftsperson enters the same Registration ID into the ONT allowing the installation and the service activation to be under the complete control of the installer at the subscriber site.

Note: The Registration ID must be unique per PON.

The Registration ID is inserted into the DHCP Option-61 field (Client Identifier) by the ONT and used by the DHCP server to send the ONT the correct configuration file. A configuration file named with the Registration ID is sent to the ONT.

Important: You must enter the Subscriber ID into the ONT before it is connected to the fiber and detected on the network.

To turn up an AE ONT using RONTA

Note: Ensure you listen to the entire voice prompt prior to pressing any keys on the buttset.




Note: For buttset devices using alligator clips, back-out the Tip and Ring screws and clip the buttset leads to the T and R posts (black to Tip, red to Ring).Verify that the network fiber is disconnected from the ONT.

4. Listen to the butt-set, wait for a click sound (about 10 seconds after power has been re-applied).

5. Press "*", "*", "*”,"0" (star, star, star, zero) keys on the butt-set key pad. The buttset sounds DTMF tones as the keys are pressed.

6. A voice prompt is heard: "Please enter [PON or AE] Registration ID followed by pound".

7. Enter a Registration ID of your choosing (up to 10 alpha numeric characters in length) followed by the # (pound) key.

Note: When using the RONTA technique for turn-up, make sure all Registration ID numbers are unique.

8. The voice prompts: "You entered 'xxxx'. If correct, enter 1, otherwise enter 0".

154


9. If you pressed 1, the voice prompt responds: "Registration ID saved".

10. If you pressed 0, the system returns to step 6 above.

Once complete, the following operational behavior is expected:

The Registration ID is persisted in flash memory. The Registration ID is erased only when the ONT is re-set to factory default via a buttset. The Registration ID is included in Option-61 searches during DHCP discover requests. If the DHCP server does not respond with a configuration file name, the ONT requests

its configuration file using the following name: "<registrationID>.cfg"

With the Registration ID now embedded, pre-provisioning is allowed without knowing the ONT serial number.

Assigning a Management VLAN to an AE ONT The ONT, as shipped, is configured with a default VLAN ID of 85. If you need to change the default VLAN ID, use a buttset device to change the Management VLAN:

155






Assigning an ONT to Unmanaged Mode Using a buttset device, the 700GX ONT can be configured without requiring a dedicated management server to provide data service. In this mode, one or both subscriber Ethernet ports are configured to pass data on a particular VLAN on the WAN side. If the ONT has two subscriber Ethernet ports, each port is configured for a different VLAN.

Note: The same VLAN may not be assigned to both subscriber ports.

The first subscriber Ethernet port can also be configured as a simple pass-through pipe. In this case, the ONT passes all tagged and untagged traffic between the WAN interface and the subscriber GE port. The only exception is for Management VLAN traffic that is terminated within the ONT. In this case, the second (expansion) Ethernet port is disabled. See the section WAN to LAN Pass-through for an example.

Configuration Rules




If the 1st Ethernet port is not set to pass-through, the 2nd Ethernet port can be set to disabled, or assigned to a single VLAN, provided the VLAN IDs are not identical at each ONT)

To provision AE ONT unmanaged mode via buttset






156


4. Re-apply power to the ONT.


6. Press "*", "*", "*" and "2" keys (star, star, star, 2) on the buttset key pad. The buttset sounds DTMF tones as the keys are pressed.

7. A voice prompt is heard: "The ONT is in Managed Mode".

Note: AE ONTs from the factory default to Managed mode.

8. The voice prompt confirms the current state of each Ethernet port: "Unmanaged mode VLAN for Ethernet port 1 is disabled. To confirm, press 1. Otherwise press zero".

Note: Pressing 1 keeps the Ethernet port in Managed mode ("Unmanaged mode for Ethernet port 1 saved"). Pressing 0 provides options for setting the Unmanaged mode VLAN ID (see step 9).

Note: Non-AE capable ONTs always remain in Managed mode. Attempts to configure a non-AE ONT for Management VLAN, Unmanaged Mode, or AE RONTA are ignored.

9. After pressing zero, the following prompt is heard: "Please enter Unmanaged mode VLAN for Ethernet port 1 followed by the # (pound) sign".

10. Enter the desired VLAN ID using the buttset keypad, followed by the "#" key. The voice prompt replies: "You entered 'xxxx'. If correct, enter 1, otherwise enter 0".

11. If you pressed 1, the voice prompt responds: "Unmanaged mode VLAN for Ethernet port 1 saved". If you pressed 0, you are returned to step 9.

Note: If you enter 4095 as the Unmanaged mode VLAN ID, the voice prompt responds: "You entered 4095 to use pass-through. If correct, enter 1, otherwise enter 0".

12. Repeat steps 8 through 11 for configuring the 2nd Ethernet port (if present).

Note: Enter VLAN ID value zero (0) if you want to disable Unmanaged mode for the Ethernet port.

Note: You cannot enter a duplicate value for Ethernet ports 1 and 2: "You entered an out of range value". In addition, if you attempt to provision the 2nd Ethernet port to 4095 (pass-through), the same voice prompt is returned.

Note: The Unmanaged Mode VLAN cannot be the same as the Management VLAN ("You entered an out of range value".)


14. Connect the network fiber to the ONT. The ONT begins the boot up process.

Note: If the VLAN IDs for all subscriber Ethernet ports are configured to be zero, the ONT uses the default boot-up process (Managed mode) requiring a Management VLAN and configuration files.

157


Assigning a Registration ID to an AE ONT Buttset provisioning via the remote ONT registration feature allows the craftsperson to install any Calix ONT from inventory at the subscriber site. Conversely, pre-provisioning an ONT serial number requires a craftsperson to install a specific ONT from inventory at the subscriber site. After using the management interface to assign a Registration ID and pre-provision services to the ONT, the remote ONT registration feature is used to install and turn-up a Calix ONT at the subscriber site. Using a buttset, the craftsperson enters the same Registration ID into the ONT allowing the installation and the service activation to be under the complete control of the installer at the subscriber site.

Note: The Registration ID must be unique per PON.

The Registration ID is inserted into the DHCP Option-61 field (Client Identifier) by the ONT and used by the DHCP server to send the ONT the correct configuration file. A configuration file named with the Registration ID is sent to the ONT.

Important: You must enter the Subscriber ID into the ONT before it is connected to the fiber and detected on the network.

To turn up an AE ONT using RONTA





Note: For buttset devices using alligator clips, back-out the Tip and Ring screws and clip the buttset leads to the T and R posts (black to Tip, red to Ring).Verify that the network fiber is disconnected from the ONT.

4. Listen to the butt-set, wait for a click sound (about 10 seconds after power has been re-applied).

5. Press "*", "*", "*”,"0" (star, star, star, zero) keys on the butt-set key pad. The buttset sounds DTMF tones as the keys are pressed.

6. A voice prompt is heard: "Please enter [PON or AE] Registration ID followed by pound".

7. Enter a Registration ID of your choosing (up to 10 alpha numeric characters in length) followed by the # (pound) key.

Note: When using the RONTA technique for turn-up, make sure all Registration ID numbers are unique.

8. The voice prompts: "You entered 'xxxx'. If correct, enter 1, otherwise enter 0".

158


9. If you pressed 1, the voice prompt responds: "Registration ID saved".

10. If you pressed 0, the system returns to step 6 above.

Once complete, the following operational behavior is expected:

The Registration ID is persisted in flash memory. The Registration ID is erased only when the ONT is re-set to factory default via a buttset. The Registration ID is included in Option-61 searches during DHCP discover requests. If the DHCP server does not respond with a configuration file name, the ONT requests

its configuration file using the following name: "<registrationID>.cfg"

With the Registration ID now embedded, pre-provisioning is allowed without knowing the ONT serial number.

ONT Provisioning Persistence AE Release 2.0 now includes local provisioning persistence. This feature is applied when the ONT is provisioned through RONTA, or remotely provisioned via RMI or CMS. During a loss of power or loss of network connectivity (AE link), the configuration state is retained in the ONT’s flash memory. Upon restoration of power or AE link, the ONT compares the locally stored configuration with the TFTP server and updates if necessary.

Determining the ONT recovery method

1. The ONT first attempts to access its ONT specific configuration file (FSAN serial number or RONTA Id number) from the primary TFTP server.

2. If the file is found it is used to provision the ONT.

3. If the TFTP server is not available or the file is not provided before the time-out cutoff is reached, the secondary TFTP server is accessed and the process is repeated.

4. If the secondary TFTP server is not available or the configuration file is not provided before the time-out cutoff, the ONT uses its cached configuration file to bring it into service.

5. If the first attempt to connect to the ONT's configuration file on the returns "cannot be found" (servers are considered to be in sync so there is no need to try both servers if the specific ONT file is not on the primary server), the ONT attempts to retrieve a generic configuration file ("Calix-ONT.cfg").

6. If the ONT experiences a time-out condition on the TFTP server, it continues to try the same TFTP server until it succeeds, receives an error or timeout cutoff is reached.

7. After a minute the ONT re-initiates the process with the primary TFTP server.

159


As additional background information, the following characteristics apply to local provisioning persistence:

If the ONT fails to retrieve its specific TFTP configuration file, it uses the last-known good configuration file (cached locally by the ONT). The ONT makes five attempts to retrieve its specific configuration file at each TFTP server. This results in a two-minute per-server delay before using the cached file.

The ONT removes its saved configuration if it is forced to factory defaults through the RONTA process

In the case where there is no locally cached configuration, or the TFTP server IP address has changed, the ONT uses a 5 minute re-attempt timer after it reaches the cutoff timeout value for the second TFTP server

The ONT generates a SYSLOG and SNMP trap when it uses the cached configuration file

The ONT generates a SYSLOG and SNMP trap when it uses the generic configuration file

The CMS supports provisioning persistence for voice, data, video and T1 services after initial Configuration File download and set-up. It also supports provisioning persistence for SIP Configuration Files after initial SIP Configuration File download.

ONT Inventory Management (Option-43) From an ONT inventory perspective, Calix has implemented several options for managing ONT inventory remotely.

Calix ONTs currently populate DHCP Option-60 (model number) and Option-61 (FSAN serial number and RONTA ID [if known]). When registering with the CMS, AE ONTs include additional information such as model number and firmware revision. Including this information in the DHCP options is beneficial to companies that use their DHCP server to analyze their ONT inventory. DHCP Option-43 is commonly used to carry detailed inventory information about a device.

Calix ONTs have integrated host components such as VoIP and PWE3, both of which require an IP address. Correlating these ONT integrated components to the ONT through the DHCP server makes troubleshooting easier for the service provider. To accomplish this, Calix defines a different DHCP Option-43 for the IADs and identifies the ONT MAC address as part of this structure. The advantage of this approach is that it enables the use of relay treatment upstream of the ONT.

160


The use of Option-43 can also be used for firmware upgrades during the ONT ranging sequence. To enable this feature the operator must populate the DHCP server with Option-43 entries listing Calix ONT firmware image filenames. During ONT boot-up, the DHCP client on the ONT requests Option-43 structure. If DHCP Option-43 structure is available, the ONT pulls the image header for each Option-43 firmware entry until it finds the right ONT type match. Once the ONT finds an image with the right type match but with a version mismatch, it proceeds to pull the entire firmware image file and upgrade itself. If the version of the matching image is equal or lower to the ONT running version, the ONT continues to the configuration process by pulling down the assigned configuration file.

Note: The default Option-43 setting is <Upgrade Only> however this feature can be disabled.

During configuration file processing the ONT reacts differently to the firmware upgrade CLI command depending on the prior processed DHCP Option-43. If a DHCP Option-43 firmware entry is dictating the ONT firmware version (entry with matching firmware type), the ONT simply ignores the firmware upgrade CLI command.

Note: DHCP Option-43 firmware upgrade takes precedence over the CLI command.

If no DHCP Option-43 firmware entry with matching firmware type, the ONT executes the firmware matching/upgrade as instructed by the CLI command.


Chapter 12

System Maintenance and Troubleshooting

Configuration File Back-up When considering the back-up needs for your deployment, two types of configuration files need to be addressed:

Configuration File Templates AE ONT Configuration Files generated by the system

Configuration File Templates

These configuration files include files that were provided as part of the AE ONT Software as well as any additional configuration files you created in support of service delivery. These files are installed in specific locations on the CMS server and are replicated on the TFTP server (assuming they are located in the right spot).

Because these files are automatically replicated, no additional back-up strategies need be implemented. If desired, the folder location where these files are stored on the TFTP server could be added to your normal nightly back-up routine.

To restore these configuration files to their proper location, move the back-up set from its current location to the "live" folder on the TFTP server.

162


AE ONT Configuration Files These system created configuration files (for example, "CXNK45567788.cfg") are treated as objects in the database and can be recovered through the CMSWEB utility.

1. Launch the CMSWEB Interface.

2. Navigate to Administration > Import > CMS Objects

3. Enter the filename for the back-up file to restore.

4. Click Submit.

Download Failures There are several possible download failure cases that must be handled by the AE ONT upgrade process: Primary and secondary TFTP servers do not respond (on page 163) TFTP server responds with file not found (on page 163) Download transfer is interrupted (on page 163) Download image is corrupted By default, any configuration action that is not executed properly stops the boot process. This includes the ability to download a new runtime image or verify the current runtime image against the image contained on the TFTP server. It is possible to circumvent this process by setting a flag in the ONT’s configuration file instructing the ONT to continue to boot. The ONT continues to boot if it has a valid runtime image (even if it is unable to validate the embedded image against the one stored on the TFTP server).

In all image download cases, the AE ONT attempts to access the download image 3 times from the primary TFTP server before attempting to download from the secondary server (if a secondary TFTP server is specified in the configuration file). The following reboot process continues indefinitely until the ONT obtains operational status:

1. Attempt to retrieve runtime image 3 times from Primary TFTP server

2. Error logged to Syslog if unsuccessful

3. Attempt to retrieve runtime image 3 times from Secondary TFTP server

4. Error logged to Syslog if unsuccessful

5. Checks flag to see if continue-on-error has been set. If yes:

a. The ONT continues to process the configuration file and attempts to become operational

6. Checks flag to see if continue-on-error has been set. If no:

a. Message to indicate that ONT is resetting

b. Reset ONT (boot process starts over)

When attempts to resolve the download failure prove unsuccessful, ONT replacement may be required.

163


TFTP Server Not Responding In this case, the ONT is booting and attempting to download a runtime image from the TFTP server. In this scenario, one of the following occurs:

The boot process pauses until both the new image is downloaded and the ONT switches The ONT determines that the image it is currently running is the same version as the image

stored on the TFTP server.

Note: In the latter case, the ONT is unable to communicate with the TFTP server.

TFTP Server Responds "File not Found" The "File not Found" error is generated under the following conditions:

If the ONT is given an incorrect image name The ONT is given an incorrect TFTP server address The TFTP server is unable to find the file

Download Transfer Interrupted If the ONT begins the TFTP transfer of a new runtime image and then loses communication, the TFTP request times out.

164


Serviceability Characteristics Serviceability and truck-roll prevention is addressed in all Calix ONTs focusing on the following primary areas:

Inaccessible ONT: an ONT that becomes inaccessible from the service provider for other reasons besides a catastrophic hardware failure or fiber cut.

ONT that faulted: an ONT that took an exception, software panic, or failed a sanity test ONT with incorrect operation: an ONT that is running but not providing service as

expected

In order to prevent an inaccessible ONT, the 700GX, at a minimum, resets and returns to the phase 1 boot state (on page 123) defined in the ONT Boot Process Section. In the case of a fault, exception, software panic, or sanity test failure, the ONT collects information about the state of the ONT, saves the information into memory, and then reset. In the case of Operations, Administration and Maintenance (OAM) failures, an attempt is made to send error information to the Syslog server prior to resetting.

Below is a list of conditions in which the ONT protects itself from requiring a truck roll to recover. In each case, the ONT returns to a known state where it attempts to re-provision itself and recover to a valid service state:

Loss of WAN link after the link has been established Hardware watchdog expiration Software watchdog expiration (postmortem dump saved) Software exception (postmortem dump saved) Hardware exception (postmortem dump saved) Explicit reset via control path Loss of DHCP control address In-ability to successfully complete configuration

A few cases exist where the ONT is operational but is exhibiting incorrect or unexpected behavior. The 700GX provides the ability for customer service or engineering personnel to log directly to the ONT via telnet. From the password-protected telnet command shell, debug commands are issued, logs dumped, tracing turned on, and console debug messages monitored.

Important: To gain access to the ONT command shell, the user name is "admin" and password is "fiber1ttx".

165


ONT Retry Behavior Although catastrophic events such as a direct lightning strike cannot be entirely avoided, (events that would indeed require a truck roll), it is a primary goal of the hardware and software design to avoid this action in all but the most extreme cases.

As a rule, if the ONT detects that it is in a state that it cannot recover from "gracefully", it collects information about its current state and then resets to get back to a known, recoverable state.

There exists a class of failures that are external to the ONT that are still manageable by the ONT. In these cases (for example, if the RMI is unavailable), the ONT may retry requests, try an alternate server, or finally reset in an attempt to recover or complete an action.

Below are the scenarios in which the ONT attempts to gracefully recover without a reset or panic:

Phase 1 boot sequence - failure to obtain the DHCP management IP address

Retry Count: DHCP client retries up to 5 times at incrementing intervals

Retry Interval: Interval increase for each retry: 4/8/16/32/64 seconds

Secondary Server: Service provider may add resiliency by adding backup DHCP servers

Final Action: Reset

Comment: The standard DHCP client protocol is followed for maintaining the control path IP address lease. This standard is followed for retries, discovery, loss of lease, and lease expiration.

TFTP Requests - unable to contact TFTP file server for ONT image download or SIP configuration files

Retry Count: 3 times

Retry Interval: 10 seconds

Secondary Server: Service provider may add resiliency by adding backup DHCP servers that specify alternative TFTP configuration servers. The AE ONT provides for primary and secondary TFTP servers for SIP configuration files and ONT runtime download images.

Final Action: Reset

Tip: If the ONT goes into a permanent retry loop state, disable the TFTP Server such that the ONT cannot be re-discovered. At this point, you may gain access to the ONT through a TELNET or similar connection.

Comment: The ONT resets in the case that the provider accidentally put the wrong TFTP information in the configuration file. Resetting after some interval allows the ONT to get the latest configuration file. For SIP recovery, a different count, interval and recovery mechanism is used and defined elsewhere.

166


NTP Requests - unable to contact NTP time server to obtain ONT time-of-day

Retry Count: 3 times

Retry Interval: 10 seconds

Secondary Server: Service provider may add resiliency by adding a backup NTP server and specifying the second address in the ONT's configuration file. The AE ONT provides for primary and secondary NTP servers.

Final Action: Retry indefinitely

Comment: Any loss of communication with the NTP server results in a warning message logged to the Syslog server(s). Failure to get NTP updates is not considered critical and therefore no further action is required.

Syslog Messages - since logged messages are User Datagram Protocol (UDP) based and therefore no guarantee of delivery. The service provider may specify a second Syslog server address. The AE ONT sends each log message to both locations.

SNMP Traps - traps are UDP based and therefore no guarantee of delivery. The current list of outstanding alarms may be retrieved from the ONT using an SNMP GET operation.

DHCP Renewal - unable to renew an IP lease (DHCP server not responding)

The ONT makes periodic attempts to renew its IP address until its lease expires. In the event that the lease expires:

Retry Count: DHCP client retries up to 5 times at incrementing intervals

Retry Interval: Interval increase for each retry: 4/8/16/32/64 seconds

Secondary Server: Service provider may add resiliency by adding backup DHCP servers

Final Action: Reset

Comment: The standard DHCP client protocol is followed for maintaining the control path IP address lease. The standard is followed for retries, discovery, loss of lease, and lease expiration

167


Viewing ONT Alarms and Events in CMS In this release of the AE ONT software, GX ONTs can be viewed within CMS with any associated alarms or events that are generated.

To view an ONT in CMS

1. From the Navigation tree, drill down to the Network Group where the switch is known to reside.

2. Click the Network Group name to display an image of the Ethernet device (for example, E5-400).

3. From the Work Area menu, click Network Details.

4. From the Work Area menu, click AE ONT Nodes.

The work area displays ONTs connected (or previously connected) to the network group device as well as any alarms in the standing alarm panel.

Note: Clicking the Events tab in the Alarm Menu Bar displays events rather than alarms.

168


Channel and Drop Testing The channel and drop test feature provides a means of testing for line faults on a POTS or UVG line. The test also determines whether that fault is within the service provider's network or at the subscriber's location.

The Calix 700GX and 700GE ONT is the point of demarcation between the service provider's network and the subscriber's premises wiring. The purpose of the channel test is to verify that the service provider’s equipment and network is operational between the voice switch and the ONT. The purpose of the drop test is to verify the subscriber's wiring and telephone equipment.

The test is initialized from the CLI using the vtst test command. For additional information, refer to Channel and Drop Testing (on page 303) in the Command Reference section of this guide.

169


Pinging AE ONTs To verify an AE ONT with a single host (iph-0) is communicating on the network, use the "ping" command to confirm communications with the ONT. The ping command has the following options:

ping

Usage

ping <ipaddr>

Send a packet to an IP address and validate response

Options

-t Ping until stopped via pingstop command. type: . . .

-n=<n> Number of ping requests to send type: Integer

-l=<n> Bytes of data to send type: Integer

=w=<n> Timeout in milliseconds to wait for each reply type: Integer

-src=<ipaddr> Source iP Address type: IP Address

Parameters

destination=<ipaddr> destination IP Address

type: IP Address

Sample Output CXNK000025F7B> ping <ipaddr> Pinging <ipaddr> with 32 bytes of data: Reply from <ipaddr>: bytes=32 time<1ms TTL=63 Reply from <ipaddr>: bytes=32 time<1ms TTL=63 Reply from <ipaddr>: bytes=32 time<1ms TTL=63 Reply from <ipaddr>: bytes=32 time<1ms TTL=63 Ping statistics for <ipaddr>: Packets; Sent = 4, received = 4, Lost = 0 (0% loss)< Approximately round trip times in milli-seconds: Minimum = 0ms, maximum = 1ms, Average = 0ms

For AE ONTs with more than one host, you must specify the Gateway address associated with the ONT in order to verify a connection.

170


To ping a multi-host ONT

From the command line, run "vf rpif" CXNK00030F7B> vf rpif

The "vf rpif" command shows per-interface routing entries: Route Per IF Info: name re localIP subMask Gateway rtePtr ----- -- ----------------- ----------------- ----------------- -------- iph-0 0 10.100.100.200 255.255.255.0 10.100.100.1 a9ad68 iph-1 0 66.231.10.55 255.255.255.192 66.231.10.1 dddff0 0 0.0.0.0 0.0.0.0 0.0.0.0 0 0 0.0.0.0 0.0.0.0 0.0.0.0 0 0 0.0.0.0 0.0.0.0 0.0.0.0 0

The "show route" command shows routing entries that are used when the source interface is not specified:

CXNK00030F7B> show route

IpDest IpMask IpNextHop I/F Type Proto --------------- --------------- --------------- ------ ------ ---------- 10.100.100.0 255.255.255.0 10.100.100.200 iph-0 local local 66.231.10.0 255.255.255.192 66.231.10.55 iph-1 local local 127.0.0.0 255.0.0.0 127.0.0.1 loop-0 local local

After you have checked these tables, re-ping the ONT using the -src command:

CXNK00030F7B> ping -src=10.100.100.200 64.33.247.229 Pinging 64.33.247.229 with 32 bytes of data: Reply from 64.33.247.229: bytes=32 time<10ms Reply from 64.33.247.229: bytes=32 time<10ms Reply from 64.33.247.229: bytes=32 time<10ms Reply from 64.33.247.229: bytes=32 time<10ms Ping Statistics for 64.33.247.229: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms

Note: iph-0 in AE mode is always the management IP host and it is always bridged to the management VLAN. NTP, Syslog and SNMP Traps also uses iph-0. The AE ONT software binds to the iph-0 interface while transmitting.

171


Diagnostic Commands When executed, the config diag command displays a number of AE system parameters that can be analyzed for possible corrective action. This command runs a series of scripts that are often requested by Calix Service Engineers during the troubleshooting process.

The config diag command outputs the following in sequence:

ver (on page 336) - displays information on the AE ONT being queried.

config history (on page 219) - displays all previously performed "config" commands for the AE ONT.

show iftab (on page 220) - displays interface, administrative state, and operational state information for the AE ONT.

show ifstats (on page 221) - displays data flow, lost packets, and the like for serviceability and debugging by the operator.

mpp rates (on page 331) - displays data (in Mb/sec granularity) and packet rates (in packets per second) on each interface as observed over the last 5 seconds of operation.

show ethert (on page 223) - displays basic Layer-2 information about the AE ONT Ethernet port.

bridge show bridge (on page 240) - displays detailed information about all bridges (or a single bridge [-bid=x]) configured at the ONT.

bridge show drops (on page 240) - displays all dropped packet counters associated with the Layer-2 bridging functions configured on the ONT.

bridge glob (on page 236) - displays forwarding statistics not attributed to any particular bridge.

meter show info (on page 231) - This command summarizes information on each traffic shaper. It is used as a debugging or sanity check mechanism.

iphost show (on page 245) - This command is used to display current information about IP Hosts.

mpp ess (on page 331) - displays the ingress and egress Ethernet port statistics by MAC Address

show voip mib (on page 315) - displays pertinent information for the VoIP service by port.

voipreg (on page 323) - displays the VoIP addressing parameters for each VoIP port.

voiprtp (on page 323) - displays the RTP Packet and error information.

voipcc (on page 325) - displays the current call state by port.

172


lev1l2tag show eth-0 (on page 261) - displays upstream and downstream tagging history for each Ethernet port.

lev2l2tag show eth-0 (on page 269) - displays upstream and downstream tagging history for each Ethernet port if no history is returned from the level1 Layer 2 tag.

Note: mpp queues and mpp show commands are also processed as part of the config diag script. The outputs of these two commands are for use by system developers only and are not included here.

CMS Performance Monitoring and Alarm Aggregation

AE Release 2.0 supports autonomous alarm generation through SNMP for all 700GX, 760GX, and 700GE ONTs. The system presents the alarm to the SNMP manager as Critical, Major or Minor alarms. The default value is set to OFF.

CMS deployed with 700GX, 760GX and 700GE ONTS supports ONT PM Counters, Ethernet PM Counters, and PWE3 PM Counters.

Performance Management and Fault Management are supported with SNMPv2 traps. Performance Monitoring SNMP MIBs are listed below and available upon request. None are supported by the CMS. The only external access is through a MIB Browser/Viewer. They are also visible at the ONT Debug Shell.

SNMP Monitoring: PM and Statistical MIBs AE 2.0 provides SNMP support for PM collection and monitoring of interface statistics. The following information is available through all standard management interfaces.

Ethernet Interface (Data/IPTV)

Interface RFC-1213 (compatible with 2233)

RFC-1213 interfaces and ifTable – both status and running counters [although these stats are in GPON ONTs, they are not accessible through OMCI]

RMON etherStats RFC-2819 - etherStatsTable – running counters

RMON etherStatsHighCapacity RFC-3273 - etherStatsHighCapacityTable - running counters

Voice Services

aeVoiceStatus – Calix Enterprise Voice (VoIP) Status

aeVoiceCounters - Calix Enterprise Voice (VoIP) Counters - running counters w/reset

aeVoiceErrors - Calix Enterprise Voice (VoIP) Errors - running counters w/reset

173


T1/E1 (PWE3) Services

T1/E1 Line fault statistics – Calix Enterprise PWE3 T1/E1 Line fault - binned PM counters

PWE3 aggregate statistics - Calix Enterprise PWE3 aggregate - binned PM counters

PWE3 bundle statistics - Calix Enterprise PWE3 bundle – binned PM counters

RFC-1406 DSX1 – binned PM counters dx1Current, dx1Interval, dx1Total

Troubleshooting AE ONT Ethernet Issues - CLI Use the following commands to assist in isolating AE ONT Ethernet issues.

config history

The command "config history" is used to review the commands issued to the ONT in sequence. This is helpful when troubleshooting basic ONT configuration file problems or if a parameter was changed inadvertently and the ONT did not automatically reboot.

CXNK0002B723> config history 1 config syslog setup -prisvr=10.21.12.100 2 config trap sink -s1=10.21.0.18 -s2=172.22.93.3 -s3=172.23.43.11 -community=public 3 config upgrade -prisvr=10.21.12.100 filename=Build-11b7-090810/img/g_nhmont_ae.rto 4 config ntp update -prisvr=10.21.60.2 -freq=300 offset=-28800 5 config label set label=Jane_AE_ONT3 6 bridge create vlanps vid=250 -mf=enable -snoop=disable pmap=eth-0 7 set iftab adminstatus index=eth-0 adminstatus=up 8 set iftab adminstatus index=eth-1 adminstatus=up 9 bridge add vid=600 10 bridge portadd vid=600 dev=eth-1 11 lev2 add -treatinvid=600 dev=eth-1 12 config regid display 13 config regid display

bridge show bridges

The "bridge show bridges" displays:

All of the configured bridges on an AE ONT Unicast and multicast statistics for the bridge Additional settings for the bridge.

174


This information is particularly valuable when passing routing protocol updates via multicast (by setting the upstream multicast filter to false). This and other parameters that apply to various applications can also be verified here.

CXNK000370EE> bridge show bridges Bridge: 00c815b8-1f Type: VLANIPH Members: 2 VID: 0x0055 (0085) PBIT: (5) learningInd: TRUE sub2subFwInd: FALS igmpSnoopInd: FALS filtUpMcastInd: FALS EthMcastUnkCnt: 0 filtUpMcastCnt: 0 dhcpUpstreamSnoopHits: 0 dhcpDnstreamSnoopHits: 0 option82ProcessErrors: 0

Idx SID Ecp FCS BkUn UP DP ucast_in ucast_out mcast_in mcast_out --- --------- --- --- ---- -- -- ---------- ---------- ---------- ---------- 0 wan NUL NUL TRUE 5 5 48114 63518 1326207 199879 0 iph NUL NUL TRUE 40 40 63538 48126 199879 1033868 Bridge: Type: VLAN Members: 2 VID: 0x0fa0 (4000) PBIT: (0) learningInd: FALS sub2subFwInd: TRUE igmpSnoopInd: FALS filtUpMcastInd: FALS EthMcastUnkCnt: 0 filtUpMcastCnt: 0 dhcpUpstreamSnoopHits: 0 dhcpDnstreamSnoopHits: 0 option82ProcessErrors: 0 Idx SID Ecp FCS BkUn UP DP ucast_in ucast_out mcast_in mcast_out --- --------- --- --- ---- -- -- ---------- ---------- ---------- ---------- 0 eth NUL NUL TRUE 0 0 66 554375 87883 455314 0 wan NUL NUL TRUE 0 0 554375 66 455314 87883

175


Resolving Configuration Errors

If end devices are not configured correctly, you can use the following commands:

For example, to find tagging errors, you can look at the individual queues to spot packets with that particular tag.

mpp q

This command displays all memory locations for all interfaces: CXNK000370EE> mpp q MPP Ingress List Info: List Begi End Push Pop popCount HWM Pendi overF under --------- ---- ---- ---- ---- ---------- ----- ----- ----- ----- FREE 4096 8191 4232 4236 143 3835 4095 0 0 ETH0Rx 512 767 626 626 114 2 0 0 0 ETH1Rx 768 1023 1014 1014 246 4 0 0 0 WAN0Rx 1024 1279 1215 1216 194 255 0 6 0 MPP Egress List Info: List Begi End Push Pop popCount HWM Pendi overF under --------- ---- ---- ---- ---- ---------- ----- ----- ----- ----- ETH0Tx 1 255 45 45 38 21 0 0 0 ETH1Tx 256 511 496 496 240 54 0 0 0 WAN0TxQ0 1280 1535 1525 1527 249 7 0 0 0 ETHTXREP0 1536 2047 1658 1658 122 1 0 0 0 ETHTXREP1 1536 2047 0 1658 122 2 0 0 0

mpp packet

Next, you can begin dumping packets while going through the queue to see whether a packet tagged with the expected tag is present. Consulting the table above, I am focusing on the 1st ethernet port (ETH0Rx) and looking for a packet with a value of 512 9first packet).In the case below, the first queue entry for what is being received on eth-0 of the ONT is displayed using the mpp packet command:

176


CXNK000370EE> mpp packet 512 MPP Packet number 512 at Ptr 0x597 at Address 0x01acb800 80440079 10000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 ffffffff 00119291 00119291 8a1c0013 80efc911 8100038c 08004500 00679198 40007d06 4cf00ab0 018c0ac0 080d0d19 008beecd e19b4f6e 9efc5018 fc90185b 00000000 003bff53 4d422e00 00000018 07c80000 021c6bf2 6ad96b03 000006a0 fffe0220 01af0cff 00dede0f c0000000 00b810b8 10ffffff ffb81000 00000000 00000000 00ad044e 434e3d50 43435044 4330312c 434e3d53 65727665 72732c43 4e3d5043 432d5075 65626c6f 2c434e3d 53697465 732c434e 3d436f6e 66696775 72617469 6f6e2c44 433d6363 6f66632c 44433d65 64753084 00000057 30840000 0051040f 73657276 65725265 66657265 6e636531 84000000 3a043843 4e3d5043 43504443

This same command can be used on any of the locations identified in the output of "mpp q." As shown above, the ONT received a tagged packet with a value of 908.

Practically speaking, there may be hundreds of packets (typical in a TLS environment) with hundreds of VLANs. Implementing a more automated method is needed. By using the "lev2 show <dev>" command, you can determine how many hits each tag entry is taking on a specified interface:

CXNK000370EE> lev2 show eth-0 Level 2 Upstream Tagging Entry Table: unit = 0 upstream_filter_drops = 0 outputTpid = 8100 inputTpid = 8100 I ac fop fov fotp fip fiv fitp feth tr top tov totp tip tiv titp hits - -- --- ---- ---- --- ---- ---- ---- -- --- ---- ---- --- ---- ---- ---- 0 9 15 4096 0 8 4096 5 0 0 8 4000 6 8 4096 6 158d 1 0 15 4096 0 15 4096 0 0 0 15 0 6 0 4000 6 7c Level 2 Downstream Tagging Entry Table: unit = 0 dnstream_filter_drops = 0 outputTpid = 8100 inputTpid = 8100 I ac fop fov fotp fip fiv fitp feth tr top tov totp tip tiv titp hits - -- --- ---- ---- --- ---- ---- ---- -- --- ---- ---- --- ---- ---- ---- 0 7 8 4000 6 8 4096 6 0 1 15 0 6 15 4096 6 11f7 1 6 15 0 6 0 4000 6 0 1 15 0 6 15 4096 6 0

177


Troubleshooting AE ONT Ethernet Issues - CMS Use the Action menu to launch specific dialogs to assist in troubleshooting and diagnostics.

Actions Menu Options

Menu Item Underlying CLI Command

Description

RESET not applicable Resets all statistics for the selected ONT.

SYNCALARM not applicable When initiated, the system clears all alarms pertaining to the ONT and then displays a list of current standing alarms via SNMP GET.

CUT-THROUGH TELNET not applicable Opens a CLI (telnet) window for the selected ONT.

LAYER 2 INTERFACE TABLE l2l (el - 2 - el) Full definitions here (on page 257).

SHOW BRIDGE SUMMARY bridge show summary Displays a summary of all bridges configured on an ONT. Full definitions here (on page 239).

SHOW ETHERTABLE show ethertable Displays the status of all Ethernet ports associated with the ONT. Full definitions here (on page 223).

SHOW INTERFACE STATISTICS show ifstats Displays statistics for Ethernet interfaces associated with the ONT. Full definitions here (on page 221).

SHOW INTERFACE TABLE show iftable Displays statistics for ONT interfaces. Full definitions here (on page 220).

SHOW IP HOST iphost show Displays the physical location of the current VLAN associated with the ONT. Full definitions here (on page 245).

SHOW MAC FORCED FORWARDING macff show Displays statistics for MAC forced forwarding addressing. Full definitions here (on page 251).

SHOW METERS meter show info Displays a summary of all traffic shapers. Full definitions here (on page 231).

UNLINK FROM E5-400/E7 not applicable Deletes any association of this ONT with the uplinked E5-400 or E7.

178


To access ONT diagnostics in CMS

1. In the Navigate Tree, select the ONT to display statistics

2. From the Action Menu (Work Area), select the appropriate category that you want to view.

3. A CLI Cut-Through window opens and displays the appropriate data.

Sample Configuration Files - AE ONT When managing your AE network, configuration files are used to specify service offerings on AE ONTs. Sample Configuration Files (CF) are shown here and can be used as templates for designing your own set of configuration files.

Note: Make sure you adhere to the CF location (on page 72) and structure (on page 72) instructions for CMS based systems.

The configuration files included here are included with the AE ONT software distribution.

Topics Covered

This chapter includes CF Templates for the following:

Top-level AE ONT CF using embedded sub-configuration files (710X ONT). Provisions triple play services.

Common CF for identifying system management tasks including:

Syslog Server iP address

SNMP Trap address

NTP Server IP address

ONT firmware update location

High Speed Internet (HSI) Global parameters

IPTV Service Global parameters

Voice Service VLAN IP Host parameters HSI detailed parameters CFs Transparent LAN Service (TLS) CF STB map OUI CF Generic Video CF SIP Voice Port CF STB map OUI CF VoIP CF A Monolithic CF file (no embedded CF files)

179


Cascading CF The cascading configuration file approach employs several files which are "nested" together under a top level main configuration file.

[CALIX_AE_ONT:R1] # # This configuration file example sets up triple play services on a # Calix 710GX ONT. The following WAN VLANs are defined in this example: # # VLAN 85 - ONT Control/Configuration VLAN (default from factory) # VLAN 900 - Transparent LAN Services # VLAN 3001 - VOIP/SIP VLAN # VLAN 4001 - Per subscriber High Speed Internet VLAN (HSI) # VLAN 4090 - IPTV VLAN # # === High Speed Internet service setup === # # All available service package levels are listed below. # Only one can be active at a time. The ones that are not # currently active are prefixed with leading "# ". # To enable a different service level, simply append the # leading "#” to the line referring to the current service # level, and remove the leading "#” from the line referring # to the desired service level. # # Script parameters: # $0 = HSI VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Shaper profile 0=40Mb/s 1=20Mb/s 2=10Mb/s (defined in common.cfg) # # First Ethernet port (eth-0) # include hsi_setup.cfg 4001 eth-0 0 # include hsi_setup.cfg 4001 eth-0 1 # include hsi_setup.cfg 4001 eth-0 2 # Second Ethernet port (eth-1) # # include hsi_setup.cfg 4002 eth-1 0 # include hsi_setup.cfg 4002 eth-1 1 # include hsi_setup.cfg 4002 eth-1 2 #

180


# === Transparent LAN Services setup === # # # Bridge creation for TLS VLAN (carrier tag 900), hair-pin enabled # in case another port on the same ONT is added in the same TLAN # # bridge add -fw=enable vid=900 # # Add subscriber Ethernet port to the TLS VLAN # # Script parameters: # $0 = TLS VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Shaper profile 0=40Mb/s 1=20Mb/s 2=10Mb/s (defined in common.cfg) # # include tls_setup.cfg 900 eth-0 0 # include tls_setup.cfg 900 eth-1 0 # # === TLS with Q in Q === # # This script sets up the VLAN bridge for TLS and the appropriate traffic # filtering # # Script parameters: # $0 = TLS VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Attach subscriber Ethernet port to VLAN bridge # bridge portadd vid=$0 dev=$1 # The following is a filter command which would be used for Q in Q TLS. # Any frame arriving with a tag of 0x8100 gets another tag added to it # (carrier tag). The incoming PBITs are propagated to the carrier tag. # QOS in the ONT is enforced at all blocking points based on PBIT priority. # result = double tag, Add VID ($1) from incoming ANY VID (with a # ethertype default InputTPID (0x8100)), propagate incoming PBIT # from incoming tag, use default outputTpid (0x8100)

181


lev2l2tag add \ -filtinpri=8 \ -filtintpidde=5 \ -treatoutpri=8 \ -treatoutvid=$0 \ -treatinpri=8 \ -treatinvid=4096 \ dev=$1 # # Attach service profile to TLS VLAN # meter attach downstream -vid=$0 shaper=$2 meter attach upstream -vid=$0 shaper=$2 # === Video service setup === # # Configure the subscriber Ethernet ports participating in # video service. The ports that are disabled are prefixed # with leading "# ". # # To enable a subscriber Ethernet port for video service, # simply remove the leading "# " from the line referring # to the subscriber Ethernet port. # # Script parameters: # $0 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # include video_setup.cfg eth-0 # include video_setup.cfg eth-1 # # === Voice service setup === # # Add voice service to port 0 # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = VOIP port label, alphanumerical label # $2 = VOIP registration username # $3 = VOIP registration password # $4 = URI # include voice_add.cfg 0 Name_Line1 7635551011 password 7635551011 # # Add voice service to port 1 # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = VOIP port label, alphanumerical label # $2 = VOIP registration username # $3 = VOIP registration password

182


# $4 = URI # include voice_add.cfg 1 Name_Line2 7635551013 password 7635551013 # # === Ethernet port enabling === # # All Ethernet ports are administratively disabled by default. # Each Ethernet port needs to be specifically enabled before any # data traffic passes through. # Enable eth-0 set iftable adminstatus index=eth-0 adminstatus=up # Enable eth-1 # set iftable adminstatus index=eth-1 adminstatus=up

The table below provides a visual reference as to the configuration files needed to support this network and how each configuration file interacts.

Sample Cascading Configuration File Definitions

Configuration File Name

Hierarchy Included Configuration Files

Defined Parameters

"serialnumber.cfg" or "registrationid.cfg"

Main common.cfg hsi_setup.cfg video_setup.cfg voice_add.cfg

ONT Control VLAN (Default 85) TLS VLAN 900 SIP/VoIP VLAN 3001 HSI VLAN 3001 IPTV VLAN 4090 Assigns Label to ONT Enables two Ethernet ports

common.cfg Included in Main Configuration File

None Configures SYSLOG Server Defines Trap Receivers Configures NTP Server Defines TFTP server addresses if firmware upgrade is

required Defines HSI Bandwidth allocation Defines Traffic shaper for VLAN Security (HSI VLAN) Creates VLAN bridge for IPTV Creates VLAN IP Host Bridge for both voice ports

hsi_setup.cfg Included in Main Configuration File

None Creates VLAN bridge for HSI and appropriate traffic filtering

Attaches ONT Ethernet port to VLAN bridge Adds Level 2 filtering for untagged traffic (maps to

VLAN bridge) Defines upstream mcast traffic shaper for VLAN

Security Attaches service profile for HSI VLAN

183


Sample Cascading Configuration File Definitions

video_setup.cfg Included in Main Configuration File

video_oui.cfg Sets up IPTV service on ONT Ethernet port Adds ONT Ethernet port to IPTV VLAN Bridge Sets up OUI filtering

video_oui.cfg Included in video_setup.cfg

None Adds desired filter for STB - routes to appropriate IPTV VLAN

voice_setup.cfg Included in Main Configuration File

None Adds VoIP service to a port

VoIPConfig.txt Called out in voice_setup.cfg file

None Defines all VoIP service parameters

Common CF

The cascading configuration file above includes the following common attributes which apply to virtually all ONTs on this network (common.cfg).

[CALIX_AE_ONT:R1] ###################################################################### # Management tasks ###################################################################### # # Configure Syslog server address # # Since all script errors and warnings are piped to the Syslog server, # this needs to be the first command in the overall configuration to # capture any possible problems in the scripts. # # TODO: Update primary and secondary (optional) Syslog server addresses # config syslog setup \ -prisvr=172.26.31.3 \ -secsvr=172.26.31.4 # # SNMP trap sinks # config trap sink \ -s1=172.26.31.3 \ -s2=172.26.31.4 # # Configure NTP server address # # TODO: Update primary and secondary (optional) NTP server addresses #

184


config ntp update \ -prisvr=172.26.31.3 \ -secsvr=172.26.31.4 \ offset=-18000 # # Upgrade ONT firmware if needed # # # TODO: Update primary and secondary (optional) TFTP server addresses # config upgrade \ -prisvr 172.26.31.3 \ -secsvr 172.26.31.4 \ filename=calix_ae.rto ###################################################################### # High Speed Internet (HSI) Service ###################################################################### # # Common service profiles setup # # Gold level # 40 Mbps upstream, 40 Mbps downstream on all traffic on an Ethernet port meter set upstream shaper=0 cir=40000000 pir=40000000 meter set downstream shaper=0 cir=40000000 pir=40000000 # Silver level # 20 Mbps upstream, 20 Mbps downstream on all traffic on an Ethernet port meter set upstream shaper=1 cir=20000000 pir=20000000 meter set downstream shaper=1 cir=20000000 pir=20000000 # Bronze level # 10 Mbps upstream, 10 Mbps downstream on all traffic on an Ethernet port meter set upstream shaper=2 cir=10000000 pir=10000000 meter set downstream shaper=2 cir=10000000 pir=10000000 # # Low speed shaper for upstream broadcast as security for the HSI VLAN # meter set upstream shaper=10 cir=10000 pir=10000 ######################################################################

185


# IPTV service ###################################################################### # # Create VLAN bridge for IPTV service on VLAN 4090 # bridge add -snoop=ena vid=4090 # # (optional) set up the option82 format string for the IPTV bridge # # opt82 set string vid=4090 format="%sn - %vlan - %clab - %iftype-%ontport - %desc" # # (optional) enable option82 on IPTV bridge # The following option82 would be produced... # CXNK03010101 - 4090 - 16305 36th Ave N Plymouth - eth-0 - John Doe # # opt82 enable remote vid=4090 -frame=1stag -desc="John Doe" ###################################################################### # Voice service ###################################################################### # # Create a VLAN IP Host Bridge for both voice ports using iph-1, mark # PBITs with 5 on VLAN 3001 # bridge addiph -pbit=5 vid=3001 bridge portadd vid=3001 dev=iph-1 # # Create the IP Host (iph-1) to use the default DHCP method of getting # an address # iphost create dev=iph-1

186


HSI CF

The cascading configuration file above includes the following high speed internet configuration file (hsi_setup.cfg).

[CALIX_AE_ONT:R1] # # Example setup script for High Speed Internet (HSI) Services # # It sets up the VLAN bridge for HSI and the appropriate traffic # filtering. # # Script parameters: # $0 = HSI VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Shaper profile 0=40Mb/s 1=20Mb/s 2=10Mb/s (defined in common.cfg) # # # Create VLAN Per port HSI (High speed Internet Service Bridge) on VLAN $0 # - $1, for debugging enable learning bridge and filter all upstream # multicast # bridge add -lb=enable -mf=enable vid=$0 # # (optional) set up the option82 format string for the HSI bridge # # opt82 set string vid=$0 format="%sn - %vlan - %clab - %iftype-%ontport - %desc" # # (optional) enable option82 on IPTV bridge # The following option82 would be produced...where $0 = eth-x and $1 = VLAN id # CXNK03010101 - $1 - 16305 36th Ave N Plymouth - $0 - John Doe # # opt82 enable remote vid=$0 -frame=1stag -desc="John Doe" # # Attach subscriber Ethernet port to VLAN bridge # bridge portadd vid=$0 dev=$1 # # Add a Level 2 filter such that all other untagged traffic from subscriber

187


# is mapped to HSI, VLAN $1 on $0 # lev2 add -treatinpri=0 -treatinvid=$0 dev=$1 # # Attach low speed shaper for upstream multicast as security # meter attach mcastup vid=$0 shaper=10 # # Attach silver level service profile to HSI VLAN # meter attach downstream -vid=$0 shaper=$2 meter attach upstream -vid=$0 shaper=$2

Video Services CF

The cascading configuration file above includes the following video services parameters (video_setup.cfg).

[CALIX_AE_ONT:R1] # # Setup IPTV service on subscriber Ethernet port # # Script parameters: # $0 = Ethernet port eth-0, eth-1 . . eth-x depending on ONT type # # Add subscriber port to IPTV VLAN bridge bridge portadd vid=4090 dev=$0 # Set up appropriate OUI filtering for set top boxes include video_oui.cfg 4090 $0

188


Video Set-top Box OUI Filter The following configuration file sets up the proper filtering for video set-top boxes and is called out in the video_setup.cfg file.

[CALIX_AE_ONT:R1] # # Add Level 1 layer 2 filter for OUI (STBs) map to IPTV VLAN # # Script parameters: # $0 = IPTV VLAN # $1 = Ethernet port eth-0, eth-1 . . eth-X depending on ONT type # # Example: # # 00:02:02 Amino MAC Prefix # lev1 add \ -filtmac=sa \ -filtmacmask=ff:ff:ff:00:00:00 \ -filtmacmatch=00:02:02:00:00:00 \ -treatinpri=4 \ -treatinvid=$0 \ dev=$1

189


Monolithic CF for a Single ONT

The monolithic method employs a single configuration file for defining all parameters within an ONT.

Note: The monolithic method is recommended for deployments where ONT services are nearly identical from one ONT to another.

[CALIX_AE_ONT:R1] # # This configuration file example sets up triple play services on a # Calix 710GX ONT. The following WAN VLANs are defined in this example: # # VLAN 85 - ONT Control/Configuration VLAN (default from factory) # VLAN 900 - Transparent LAN Services # VLAN 3001 - VOIP/SIP VLAN # VLAN 4001 - Per subscriber High Speed Internet VLAN (HSI) # VLAN 4090 - IPTV VLAN # # # Common housekeeping tasks and service VLAN bridge setup # include common.cfg # # Assign a custom label to this ONT # config label set label="16305 36th Ave N Plymouth" # # === High Speed Internet service setup === # # All available service package levels are listed below. # Only one can be active at a time. The ones that are not # currently active are prefixed with leading "# ". # To enable a different service level, simply append the # leading "#” to the line referring to the current service # level, and remove the leading "#” from the line referring # to the desired service level. # # Script parameters: # $0 = HSI VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Shaper profile 0=40Mb/s 1=20Mb/s 2=10Mb/s (defined in common.cfg) #

190


# First Ethernet port (eth-0) # include hsi_setup.cfg 4001 eth-0 0 # include hsi_setup.cfg 4001 eth-0 1 # include hsi_setup.cfg 4001 eth-0 2 # Second Ethernet port (eth-1) # # include hsi_setup.cfg 4002 eth-1 0 # include hsi_setup.cfg 4002 eth-1 1 # include hsi_setup.cfg 4002 eth-1 2 # # === Transparent LAN Services setup === # # # Bridge creation for TLS VLAN (carrier tag 900), hair-pin enabled # in case another port on the same ONT is added in the same TLAN # # bridge add -fw=enable vid=900 # # Add subscriber Ethernet port to the TLS VLAN # # Script parameters: # $0 = TLS VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Shaper profile 0=40Mb/s 1=20Mb/s 2=10Mb/s (defined in common.cfg) # # include tls_setup.cfg 900 eth-0 0 # include tls_setup.cfg 900 eth-1 0 # # === TLS with Q in Q === # # This script sets up the VLAN bridge for TLS and the appropriate traffic # filtering # # Script parameters: # $0 = TLS VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Attach subscriber Ethernet port to VLAN bridge # bridge portadd vid=$0 dev=$1

191


# The following is a filter command which would be used for Q in Q TLS. # Any frame arriving with a tag of 0x8100 gets another tag added to it # (carrier tag). The incoming PBITs are propagated to the carrier tag. # QOS in the ONT is enforced at all blocking points based on PBIT priority. # result = double tag, Add VID ($1) from incoming ANY VID (with a # ethertype default InputTPID (0x8100)), propagate incoming PBIT # from incoming tag, use default outputTpid (0x8100) lev2l2tag add \ -filtinpri=8 \ -filtintpidde=5 \ -treatoutpri=8 \ -treatoutvid=$0 \ -treatinpri=8 \ -treatinvid=4096 \ dev=$1 # # Attach service profile to TLS VLAN # meter attach downstream -vid=$0 shaper=$2 meter attach upstream -vid=$0 shaper=$2 # === Video service setup === # # Configure the subscriber Ethernet ports participating in # video service. The ports that are disabled are prefixed # with leading "# ". # # To enable a subscriber Ethernet port for video service, # simply remove the leading "#” from the line referring # to the subscriber Ethernet port. # # Script parameters: # $0 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # include video_setup.cfg eth-0 # include video_setup.cfg eth-1 # # === Voice service setup === # # Add voice service to port 0 # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = VOIP port label, alphanumerical label # $2 = VOIP registration username # $3 = VOIP registration password # $4 = URI

192


# include voice_add.cfg 0 Name_Line1 7635551011 password 7635551011 # # Add voice service to port 1 # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = VOIP port label, alphanumerical label # $2 = VOIP registration username # $3 = VOIP registration password # $4 = URI # include voice_add.cfg 1 Name_Line2 7635551013 password 7635551013 # # === Ethernet port enabling === # # All Ethernet ports are administratively disabled by default. # Each Ethernet port needs to be specifically enabled before any # data traffic passes through. # Enable eth-0 set iftable adminstatus index=eth-0 adminstatus=up # Enable eth-1 # set iftable adminstatus index=eth-1 adminstatus=up

193


Sample SIP Configuration File The Calix SIP configuration file template is shown below. You can modify the configuration settings as needed to suit your application requirements.

Note: Use a text editor only (such as Notepad) to edit a configuration file. Do not use a word processing program such as MS Word, which adds font formatting that corrupts the configuration file.

The following file provides the detail and structure of the actual VoIP configuration file (VoipConfig.txt).

Note: For additional information, refer to the ONT SIP Configuration File Settings topic below.

;Agile Document Part P/N: 600675-0002 Rev 13 ; SPECIFICATION, GPON ONT VOIP CONFIGURATION FILE ; ;Revision Date Description :-------- ---------- ------------------------------ ; 1.10 2/15/2007 added Nortel and Sonus support ; 1.11 4/05/2007 added Agile Part Number ; 1.12 4/05/2007 added edit warning ; 1.13 5/01/2009 added Nortel DMS-10/PGI options ; 1.14 4/23/2010 added Dial Plan enhancements ; 1.15 8/18/2010 added VoIP Stutter Count option ; ;IMPORTANT: ;DO NOT USE MICROSOFT WORD TO EDIT THIS FILE ;Only use a text editor (like Notepad) that does not add ;additional formatting. ;At a minimum you must edit: ;1. Either the SipProxyIP or the SipProxyDomain fields with your site's ; values (dependent on whether you are using DNS or IP schema). ;2. DNSPrimaryIP, DNSAlternateIP with your site's values. ;3. VoipIntraLATA with your site's IntraLATA area codes. ; ; CALIX_VOIP_Config.txt ; ------------------- ;============================================================= ;Configuration file to initialize the Calix VOIP application ;============================================================= ;Syntax definition: ;Parameter: Value ;1) Please note - the parameter's names as well as values are ; case sensitive.

194


;2) Semi-colon at start of line (column 1) is a comment/remark ; line only ;3) Parameter must start at column 1 (no leading spaces allowed) ;4) Whitespace allowed between Parameter: Value ;Version of VOIP config file Version: 1.14 ;ONT UDP SIP Port Address (default = 5060) OntPort: 5060 ;Outbound Proxy option (default = 1) ;1=enabled, 0=disabled OutboundProxy: 1 ;Border Controller or SIP Proxy Server ;UDP,IP address, or domain name server address SipProxyIP: x.x.x.x SipPort: 5060 SipProxyDomain: your.SipProxy.com ;Primary (required) and secondary (optional) DNS IP address ; for the ONT Port being provisioned DNSPrimaryIP: x.x.x.x DNSAlternateIP: x.x.x.x ;SIP Timers (in msec) SipT1Timer: 500 SipT2Timer: 4000 ;SIP Registration (default = 1) ;1=registration enabled, 0=disabled SipRegistration: 1 ;SIP Registration Period (in seconds). Maximum registration ; period for the SIP connection SipRegPeriod: 3600 ;SIP Register User (default = 0) ;Required for Nortel DMS-10/PGI, CS1500, and CS2000 (1) ;Required for Broadsoft BroadWorks (1) ;Required for Metaswitch (1) ;1=use UserID field, 0=use URI field SipRegisterUser: 0 ;SipE164 Adds country code to SIP messages (default = 0) ;1=use E.164 global format for SIP msgs, ;0=use local format

195


SipE164: 0 ;ToS bit for RTP packet stamping (0-255 bits) ;Recommend setting QoS to high priority (default = 160) RtpTOS: 160 ;RTP base port. Starting port number for range of ports ; for allowed RTP access (ONT RTPBasePort = 16384) RtpBasePort: 16384 ;Rtp Codec (default = 0) ;0=G.711 u-law, 1=G.711 a-law RtpCodec: 0 ;RTP Packet Rate (default = 10) ;Select 10, 20, or 30 msec packetization rate RtpPacketRate: 10 ;Ring Tone Definitions ;Table Format below consists of: ; number of frequency components (single or dual tone) ; 1st frequency (Hz) ; 2nd frequency (Hz) ; volume level tone 1(dbm) ; volume level tone 2(dbm) ; time tone is on (msec) ; time tone is off (msec) ; continuous tone flag definition: ; 1 = on ; 0 = off (one-shot) Used for Call Waiting Only ; 2-10 = (stutter count) ;Below are recommended default values ;Note: Enter with space between values VoipDialTone: 2 350 440 -13 -13 1 0 1 VoipBusyTone: 2 480 620 -24 -24 500 500 1 VoipReorderTone: 2 480 620 -24 -24 250 250 1 VoipRingbackTone: 2 440 480 -19 -19 2000 4000 1 VoipCallWait1Tone: 1 440 0 -13 0 330 0 0 VoipWarningTone: 2 1400 2600 0 0 100 100 1 VoipAlertTone: 1 440 0 -13 0 2000 10000 1 VoipCASTone: 2 2130 2750 -18 -18 80 0 1 VoipStutterDialTone: 2 350 440 -13 -13 100 100 10 ;Ring Cadence Definitions ;Up to 8 discrete ring tones can be provisioned ;Format consists of frequency and time components: ; Ringing Frequency: 0 = 20 Hz

196


; Shape: 1=sinusoidal 0=trapazoidal ; ringing period 1 ontime (msec) ; ringing period 1 offtime (msec) ; ringing period 2 ontime (msec) ; ringing period 2 offtime (msec) ; ringing period 3 ontime (msec) ; ringing period 3 offtime (msec) ; VoipRingCycleR1: 0 0 2000 4000 2000 4000 2000 4000 VoipRingCycleR2: 0 0 800 400 800 4000 0 0 VoipRingCycleR3: 0 0 400 200 400 200 800 4000 VoipRingCycleR4: 0 0 300 200 1000 200 300 4000 VoipRingCycleR5: 0 0 500 0 0 0 0 0 VoipRingCycleR6: 0 0 2000 4000 2000 4000 2000 4000 VoipRingCycleR7: 0 0 2000 4000 2000 4000 2000 4000 VoipRingCycleR8: 0 0 2000 4000 2000 4000 2000 4000 ;Distinctive Ringing Alert ;Required for Broadsoft BroadWorks only (default Bellcore-dr1) ;Sends ring alert in SIP INFO VoipDRmessage: Bellcore-dr ;Voip Call Waiting signaling pattern ;Required for Broadsoft Broadworks only VoipCWmessage: CallWaitingTone ;Reorder Delay (default = 10) ;Delay (seconds) before playing fast busy tone VoipReorderDelay: 10 ;Warning Delay (default = 60) ;Delay (seconds) before playing warning (howler) tone VoipWarningDelay: 60 ;Warning Timeout (default = 600) ;Period (seconds) to play warning (howler) tone VoipWarningTimeout: 600 ;Dial Plan ;The dial plan can be customized for each switch type ;See SIP VoIP Configuration Parameters for details ;Note: Use the "\" character to extend values over multiple lines ; Syntax: ; ^ Match from start of dial string ; | Rule separator for multiple rules per plan ; [n-m] Match a range of digits ; {n} Match n digits ; * Matching a variable number of digits

197


; T Variable digit timeout ; S Star phone key (*) match character ; c Confirmation tone is played when dialing star code ; plans: ^S72c[0-9][0-9]{6}| ; r Recall tone is played during a call forwarding ; sequence: ^S72r[2-9][0-9]{6}| ; d Dial tone is played during a call forwarding ; sequence: ^S72d[2-9][0-9]{6}| ; , Comma) - outside dial tone is played during a ; preceding "9" sequence: ^9,1[2-9][0-9]{9}| ; ^911 Emergency 911 Service ; ^411 Directory Assistance Service ; ^S[0-9]{2} Star hotkey service (for example, *69) ; ^1[0-9]{10} Traditional long distance dialing ;^2[2-9][0-9]{9} Traditional local dialing with toll free area code ; capability ; ^011[0-9]*T Traditional overseas dialing ;Example dial plan: ^911|^411|^S[0-9]{2}|^1[0-9]{10}\ ;^2[2-9][0-9]{9}|^011[0-9]*T ;Below are recommended dial plan default values VoipDialPlan: ^911^411|\ ^S67[2-9][2-9][0-9]{9}|\ ^S72[2-9][0-9]{9}|\ ^S74[2-9][2-9][0-9]{9}|\ ^S75[2-9]{2}[2-9][0-9]{9}|\ ^S90[2-9][0-9]{9}|\ ^S92[2-9][0-9]{9}|\ ^S3[0-9]{2}|\ ^S15|^S23|^S27|\ ^S91|^S93|^S7[3-9]|\ ^S[5-6][0-9]|\ ^S8[0-9]|\ ^1[0-9]{10}|\ ^[2-9][0-9]{9}|\ ^011[0-9]*T ;Area code exceptions, intra-LATA dialing ;List codes that do not need a preceding "1" ;Note: Enter values with a space between codes VoipIntraLATA: 952 763 651 612 507 218 ;Dial Plan Digit timeout (default = 16) ;Delay timeout (seconds) before sending string to switch. In ; effect when there are no partial matches in the dial ; string digits dialed so far VoipDialTimeout: 16

198


;Dial Plan Interdigit Short Timeout (default = 8) ;Sets the delay timer (seconds) for partial match ; of incomplete dial strings (slow dialers). In effect when there ; are partial matches in the dial string digits dialed so far. VoipDialShortTimeout: 8 ;Embedded 7 digit dial plan rule. (default = 1) ;Used to over-ride the standard ONT 7 digit dial plan. ;1=enabled, 0=disabled Embedded7DigitRule: 1 ;SIP INFO Message (default = 0) ;Required for Metaswitch and Broadsoft BroadWorks (1) ;Option to send a required SIP INFO message on a flash-hook ;1=Send INFO, 0=use Call Hold Re-Invite VoipFlashINFO: 0 ;E911CalledPartyHold option (default = 1) ;No SIP BYE message sent, provides local power RING back ;0=No special treatment, 1=Hold 911 call if Onhook E911CalledPartyHold: 1 ;Call Waiting Disable (default = 0) ;Required for support of Hunt Groups (1) ;1=disable Call Waiting, 0=Call Waiting enabled VoipCallWaitDisabled: 0 ;Caller ID Disable (default = 0) ;Disables Caller ID feature on a per ONT basis ;1=Caller ID display disabled, 0=Caller ID enabled VoipCallIDDisabled: 0 ;ONT Controlled Three Way Calling (default = 0) ;Required for switches that do not support audio mixing ;For Nortel DSM10/PGI, CS1500, and CS2000 (1 or 0) ;1=Enabled, 0=Disabled ThreeWayCallEnabled: 0 ;DTMF Key Send Method (default = 0) ;Required for GENBAND M6 Application Server only (1) ;0=inband audio, 1=SIP INFO msg VoipDTMFmode: 0 ;DTMF Key Receive Method (default = 0) ;Required for GENBAND M6 Application Server only ;0=play DTMF from SIP INFO msg, 1=disable DTMFtonefromINFOdisabled: 1

199


;Call on Hold disconnect stutter dial tone (default = 0) ;1=play Stutter Dial Tone, 0= do not play Stutter Dial tone StutterOnHoldDisconnect: 0

ONT SIP Configuration File Settings

The table below shows the required configuration file variables and respective descriptions.

ONT SIP (VoIP) Configuration Settings

Version of VoIP config file

Version of the VoIP config file. Displays the config file version number. Example: Version 1.15

ONT SIP Port Enter the UDP Port address of the ONT. Example: OntPort: 5060

Outbound Proxy Option

Sets a flag to capture all SIP messages to the SIP Proxy IP Address server. Example: OutboundProxy: 1

Sip Proxy Server IP Address

Enter the UDP or IP address for the Border Controller or the SIP Proxy server. Example: SipProxyIP: 172.26.31.16

SipPort Enter the UDP/IP Port # of the ONT SIP Port. Example: SipPort: 5060

Sip Proxy Domain

The SipProxyDomain can be an IP address or a Fully Qualified Domain Name (FQDN). Example: SipProxyDomain: 172.26.31.16 Example: davinci.datcon.co.uk (Metaswitch interop server)

DNS IP Address

Enter the primary (required) and secondary (optional) DNS IP Address for the ONT Port being provisioned: Example: DNSPrimaryIP: x.x.x.x DNSAlternateIP: x.x.x.x IMPORTANT: These values must be changed to the appropriate network IP address prior to implementing SIP Service.

SIP Timers (msecs)

Enter SIP Timer time-out values in milliseconds (required parameter per RFC 3261). Example: SipT1Timer: 500 SipT2Timer: 4000

SIP Registration Enter 0 if you want to disable Sip Registration, enter 1 to enable. Calix recommends keeping this enabled unless you have a totally secure network. Example: SipRegistration: 1

SIP Registration Period

Enter the maximum registration period for the SIP connection. Example: SipRegPeriod: 3600 Note: Calix recommends you accept the above default values as the SIP Server over-ride (the above value if pre-provisioned on the SIP Server).

SIP Registration User

Required parameter for several SIP switch vendors including Nortel, Broadsoft, and Metaswitch. Enter 0 if Registration ID comes from the URI field, enter 1 if from the UserID field. (Default = 0) Example: SipRegisterUser: 0

SIP E.164 Format to add the country code to all SIP messages. Enter 0 to use local format, enter 1 to use E.164 global format (All of North America except Mexico [52]). This setting is rarely used or required. Example: SipE164: 1

QoS Type of Service (RtpTOS)

Enter the TOS bits for RTP packet stamping (0-255 bits) Example: RtpTOS: 160

200



Important: It is recommended that you set your QoS to a relatively high priority in order to avoid potential voice service degradation.

RTP Voice base port number (RtpBasePort)

Input the starting port number of a specified range of ports that are allowed access to the RTP service. Each ONT VoIP port requires two RTP port numbers. Example: RtpBasePort: 16384 Important: Failure to properly identify this range of ports causes the firewall to reject transmissions.

RTPCodec (voice encoding)

Enter the voice encoding option. This should always be set to zero (µlaw). (Default = 0) Example: RtpCodec: 0

RTP Packet Rate Input the expected RTP packetization rate sent by the ONT. Choose between 10, 20, or 30 msecs. Example: RtpPacketRate: 10

Ring Tone Definitions

The configuration file contains options for setting the following ring tone characteristics: Dial Tone, Busy Tone, Reorder Tone (fast busy), Ringback Tone, Call Waiting Tone, Warning Tone, Alert Tone, CAS Tone, and Stutter Dial Tone. Options are entered in the following order: Number of Frequency components in this definition, 1st Frequency(in hertz), 2nd Frequency, Volume Level of 1st Frequency (in dbm), Volume Level of 2nd Frequency, Time tone is on (in milliseconds), time tone is off and continuous tone on (1) or off (0)*. Examples:

VoipDialTone 2 350 440 -13 -13 1 0 1

VoipBusyTone 2 480 620 -24 -24 500 500 1

VoipReorder Tone 2 480 620 -24 -24 250 250 1

VoipRingback Tone 2 440 480 -19 -19 2000 4000 1

VoipCallWait1 Tone 1 440 0 -13 0 330 0 0

VoipWarning Tone 2 1400 2600 0 0 100 100 1

VoiPAlertTone 1 440 0 -13 0 2000 10000 1

VoipCASTTone 2 2130 2750 -18 -18 80 0 1

VoipStutter* Dialtone 2 350 440 -13 -13 100 100 10

* - For the VoipStutterDialTone command, the continuous tone flag definition includes the following options:

1 = continuous tone (no stutter) 0 = one-shot tone stutter tone (used for call waiting only) 2-10 = stutter count - the number of stutter tones to play before returning to normal dialtone (default = 10) Important: Unless you are thoroughly trained on Tone provisioning, it is recommended you accept the default values. Note: Ring Tone Definition names do not include any spaces. Spaces may appear here for document formatting purposes only.

201



Ring Cadence Definitions

Enter Ringtone Cadences as required. Up to 8 discrete ring tones can be provisioned per configuration file. Options are entered in the following order: Ring frequency (0 = 20 hertz), Shape (0-trapazoidal, 1=sinusoidal), ring period 1 on time, ring period 1 off time, ring period 2 on time, ring period 2 off time, ring period 3 on time, ring period 3 off time (all values in milliseconds)

VoipRing CycleR1 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle2 0 0 800 400 800 4000 0 0

VoipRing Cycle3 0 0 400 200 400 200 800 4000

VoipRing Cycle4 0 0 300 200 1000 200 300 4000

VoipRing Cycle5 0 0 500 0 0 0 0 0

VoipRing Cycle6 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle7 0 0 2000 4000 2000 4000 2000 4000

VoipRing Cycle8 0 0 2000 4000 2000 4000 2000 4000

Important: Unless you are thoroughly familiar with ring cadence provisioning, it is recommended you accept the default values. Ring Cadence Definitions 1 through 5 are Telcordia defined and should not be changed. Cadences 6 through 8 are user definable.

Note: Ring Cadence Definition names do not include any spaces. Spaces may appear here for document formatting purposes only.

Distinctive Ringing Alert

Enter a value for distinctive ring alerting (For Broadsoft and MetaSwitch). This field is used for creating a pattern match between the Alert Header for distinctive ring. Choose between Bellcore-dr1 through Bellcore-dr5 Example: VoipDRmessage: Bellcore-dr Note: The Nortel CS2000 does not support Bellcore syntax and sends the pattern match as "dst_ring_x".

Softswitch Distinctive Ring (Call Waiting)

Enter the softswitch signaling pattern for call waiting (Broadsoft BoradWorks switch). This field is used for creating a pattern match for the Distinctive Ring Call Waiting Tone being sent down from the switch. This command is ignored on other switch types. Example: VoipCWmessage: CallWaitingTone

Reorder Delay

Enter the delay in seconds before playing a fast busy tone after far end hang up or far end off hook. Example: VoipReorderDelay: 10

Warning Delay Enter the delay in seconds before playing a warning tone "howler" if phone is off hook Example: VoipWarningDelay: 60

Period Enter the amount of time (in seconds) to play the warning "howler" after the Warning Delay parameter above has elapsed. Example: VoipWarningTimeout: 600

202


Dial Plans Enter the types of dialing plans you wish to enable.

Dial Plan syntax: ^ = match from start of string | = rule separator for multiple rules per plan [n-m] = match a range of digits {n} = match n digits * = wildcard match - for a variable number of digits T = timeout send of dial string S = star phone key (*) match character in dial plan c = Confirmation tone is played when dialing star code plans ^S72c[0-9][0-9]{6}| r = Recall tone is played during a call forwarding sequence ^S72r[2-9][0-9]{6}| d = Dial tone is played during a call forwarding sequence ^S72d[2-9][0-9]{6}| , (comma) = Outside dial tone is played during a preceding "9" sequence ^9,1[2-9][0-9]{9} *T = Represents the time in seconds before digits are sent. Required for slow dialers. Example: ^01[2-9][0-9]{4}*T|\ ^911 = 911 service ^411 = Directory Assistance Service ^S[0-9]{2} = Star hotkey service (i.e. *69) ^1[0-9]{10} = Traditional Long Distance Dialing ^[2-9][0-9]{9} = Traditional Local Dialing with toll free area code capability ^011[0-9]*T = Traditional Overseas Dialing Example: ^911|^411|^S[0-9]{2}|^1[0-9]{10}|^2[2-9][0-9]{9}|^011[0-9]*T Note: To dial the operator, enter 0 and wait for the Dial timeout feature to send the zero digit to the switch where the switch then forwards the call to the operator. Alternatively, avoid the delay by dialing 0#.

Area Code Exceptions

For multi-area code communities, enter the list of toll free area codes to provision without dialing a one first. Example: VoipIntroLATA: 952 763 651 612 507 218

Dial Plan Timeout

Enter (in seconds), the input delay timeout before sending the string to the switch. Example: VoipDialTimeout: 8

Dial Plan Short Timeout

This is a delay timer (seconds) for a partial match "pause" until all digits have been collected. Slow dialers may need this feature. Example: VoipDialShortTimeout: 8

Embedded 7 Digit Dial Plan

The ONT SIP Client currently has a 7-digit dial rule. This command allows you to over-ride the rule. (Default = rule in effect [0]. Example: Embedded7DigitRule: 0

SIP INFO Message

For Flash Hook messages, you can send a SIP INFO message. Variables: 1 = send INFO, 0 = use Call Hold re-INVITE. Default = 0. Applies to Metaswitch and Broadsoft only. Example: VoipFlashINFO: 1

E911 Called Party Hold

An option exists to specify whether a caller may hang up during an E911 call. Variables: 0 = no special treatment, 1 = Hold 911 call if On Hook, don't send SIP BYE command; provide local power RING back. Example: E911CalledPartyHold: 1

203


Disable Call Waiting

Need to execute hunt groups on certain softswitches. Variables: 1 = Disable Call Waiting, 0 - Call Waiting enabled (default). Example: VoipCallWaitDisabled: 0

Disable ONT Caller ID

Needed to disable Caller ID display feature at the ONT. Variables: 1 = Caller ID display disabled, 0 = Caller ID enabled (default). Example: VoipCallIDDisabled:0

Three Way Calling

Allows for configuring 3-way calling as an optional service. Example: ThreewayCallEnabled: 1 (Default = 0)

DTMF Key Send Genband M6 requires OOB (SIP INFO) messaging. DTMF Key Send allows you to toggle between inband audio [0] and SIP INFO [1]. Example: VoipDTMFmode: 0

DTMF Key Receive

Can enable or disable the playing of the DTMF SIP INFO message. [0] = playout SIP INFO message. [1] = Disable playout. Genband M6 only. Example: dTMFTonefromiNFOdisabled:1

Stutter Dial Tone Call On Hold disconnect stutter dial tone can be enabled [1] or disabled [0]. Example: StutterOnHoldDisconnect: 0

GR-303 Voice Port CF [CALIX_AE_ONT:R1] # # Example GR303 Voice profile # # Add GR303 voice service to a port # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = LINEAID # ctg setup \ -pbit=5 \ -linemode=GroundStart \ board=i-pots \ port=$0 \ ctgsvr=172.26.203.17 \ lineaid=$1 \ vid=3001

204


SIP Voice Port CF [CALIX_AE_ONT:R1] # # Example SIP Voice profile # # Add SIP voice service to a port # # Script parameters: # $0 = POTS port number (0, 1, .. etc) # $1 = DISPLAY # $2 = User # $3 = Password # $4 = URI # voip setup \ -pbit=5 \ vid=3001 \ board=i-pots \ port=$0 \ display=$1 \ file=inc/VoipConfig.txt \ prisvr=172.26.203.16 \ secsvr=172.26.203.16 \ user=$2 \ password=$3 \ uri=$4

STB Mapping OUI CF [CALIX_AE_ONT:R1] # # Add Level 1 layer 2 filter for OUI (STBs) map to IPTV VLAN # # Script parameters: # $0 = IPTV VLAN # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Example: # # 00:02:02 Amino MAC prefix # lev1 add \ -filtmac=sa \ -filtmacmask=ff:ff:ff:00:00:00 \ -filtmacmatch=00:02:02:00:00:00 \ -treatinpri=4 \ -treatinvid=$0 \ dev=$1

205


Sample Configuration Files - CMS When managing your AE network, configuration files are used to specify service offerings on AE ONTs. Sample Configuration Files (CF) are shown here and can be used as templates for designing your own set of configuration files.

Note: Make sure you adhere to the CF location (on page 72) and structure (on page 72) instructions for CMS based systems.

The CF file examples listed below are included in CMS.

Topics Covered

This chapter includes CF Templates for the following:

Top-level AE ONT CF using embedded sub-configuration files Common CF for identifying system wide parameters Data service CF Gold, Silver, Bronze Bandwidth CF A default Video CF A GR-303 TDM Gateway Voice Port CF SIP Voice Port CF STB map OUI CF VoIP CF

AE ONT CF [CALIX_AE_ONT:R1] # # This configuration file example sets up triple play services on an # Calix GX ONT. # include inc/common.cfg config label set label="16305 36th Ave N Plymouth" include inc/data/Gold.cfg 4002 eth-0 include inc/data/Silver.cfg 4002 eth-1 include inc/video/Default.cfg 4090 eth-0 include inc/video/Default.cfg 4091 eth-1 set iftable adminstatus index=eth-0 adminstatus=up set iftable adminstatus index=eth-1 adminstatus=up include inc/voice/GR303_N1-2-IG3_Example.cfg 0 N1-2-IG3-4 include inc/voice/SIP_Example.cfg 1 "caller id" "user" "password" "7075551212"

206


Common CF [CALIX_AE_ONT:R1] ###################################################################### # Common Management tasks ###################################################################### # # Configure Syslog server address # # Since all script errors and warnings are piped to the Syslog server, # this needs to be the first command in the overall configuration to # capture any possible problems in the scripts. # # TODO: Update primary and secondary (optional) Syslog server addresses # config syslog setup \ -prisvr=172.26.31.3 \ -secsvr=172.26.31.4 # # SNMP trap sinks # config trap sink \ -s1=172.26.31.3 \ -s2=172.26.31.4 # # Configure NTP server address # # TODO: Update primary and secondary (optional) NTP server addresses # config ntp update \ -prisvr=172.26.31.3 \ -secsvr=172.26.31.4 \ offset=-18000 # # Upgrade ONT firmware if needed # # # TODO: Update primary and secondary (optional) TFTP server addresses # config upgrade \ -prisvr 172.26.31.3 \ -secsvr 172.26.31.4 \ filename=calix_ae.rto

207


Data Service CF [CALIX_AE_ONT:R1] # # Common setup script for data service # # This CF sets up the VLAN bridge for data service and the appropriate traffic # filtering. # # Script parameters: # $0 = HSI VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Downstream committed bandwidth in bits per second # $3 = Downstream peak bandwidth in bits per second # $4 = Upstream committed bandwidth in bits per second # $5 = Upstream peak bandwidth in bits per second # # # Create VLAN Per service data service on VLAN $0 - port $1, filter all upstream multicast # and enable MAC forced forwarding # bridge setup -mf=enable -macff=enable -dcir=$2 -dpir=$3 -ucir=$4 -upir=$5 vid=$0 dev=$1 # # Add a Level 2 filter such that all other untagged traffic from subscriber # is mapped to data service, VLAN $0 on port $1 # lev2 add -treatinpri=0 -treatinvid=$0 dev=$1

208


Bandwidth Profile CF Customers often offer varying levels of bandwidth for data services. Follows are three data service bandwidth profiles:

Bronze CF [CALIX_AE_ONT:R1] # # Example "Bronze" level data service profile # 10Mbits/sec upstream and downstream direction # # Script parameters: # # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Setup the VLAN bridge for data service and the appropriate traffic # filtering. # # data_setup.cfg script parameters: # # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Downstream committed bandwidth in bits per second # $3 = Downstream peak bandwidth in bits per second # $4 = Upstream committed bandwidth in bits per second # $5 = Upstream peak bandwidth in bits per second include inc/data_setup.cfg $0 $1 10000000 10000000 10000000 10000000

Silver CF [CALIX_AE_ONT:R1] # # Example "Silver" level data service profile # 20Mbits/sec upstream and downstream direction # # Script parameters: # # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Setup the VLAN bridge for data service and the appropriate traffic # filtering. # # data_setup.cfg script parameters:

209


# # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Downstream committed bandwidth in bits per second # $3 = Downstream peak bandwidth in bits per second # $4 = Upstream committed bandwidth in bits per second # $5 = Upstream peak bandwidth in bits per second include inc/data_setup.cfg $0 $1 20000000 20000000 20000000 20000000

Gold CF [CALIX_AE_ONT:R1] # # Example "Gold" level data service profile # 40Mbits/sec upstream and downstream direction # # Script parameters: # # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # Setup the VLAN bridge for data service and the appropriate traffic # filtering. # # data_setup.cfg script parameters: # # $0 = Data VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # $2 = Downstream committed bandwidth in bits per second # $3 = Downstream peak bandwidth in bits per second # $4 = Upstream committed bandwidth in bits per second # $5 = Upstream peak bandwidth in bits per second include inc/data_setup.cfg $0 $1 40000000 40000000 40000000 40000000

210


Video CF [CALIX_AE_ONT:R1] # # Example "Default" Video profile # # Configure the subscriber Ethernet ports participating in # video service. # # Script parameters: # $0 = Video VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # # # Setup VLAN bridge for video service on VLAN $0 port $1, enable # IGMP snooping and MAC forced forwarding # bridge setup -snoop=enable -macff=enable vid=$0 dev=$1 # # Set up appropriate OUI filtering for set top boxes # include inc/video_oui.cfg $0 $1


Appendix A

Appendix

Glossary Glossary of Terms

Term Definition

Active Ethernet (AE)

The term “Active Ethernet” (AE) refers to a point-to-point Ethernet topology between an ONT and an aggregation switch. The „Active. term is used to differentiate the technology from the FSAN „Passive. optical network technology in which a number of Optical Network Terminals (ONTs) share bandwidth over a fiber network. The „Active. implies active components in the field, a point-to-point network topology, and an intelligent termination point.

ARD Architecture Requirements Document – Defines a piece of the architecture for the product. The ARD also provides a response to the PSA.

ARP Address Resolution Protocol – The protocol TCP/IP uses to map an IP address to a MAC address.

BRAS Broadband Remote Access Server – A IP network element that aggregates user sessions from the access network, provides policy management, and provides QoS.

E5 Calix’s remote IP DSLAM platform.

C7 Calix’s multi-service, multi-protocol DSLAM/BDLC platform.

CPE Customer Premise Equipment – The device in the end-user’s premise which terminates the local loop. The CPE typically bridges xDSL to/from an IP LAN.

DHCP Dynamic Host Configuration Protocol – Manages the assignment of IP addresses within a network.

Downstream The direction of traffic flow from the central office and the customer premise.

EPG Electronic Programming Guide – These represent the multicast channel data generated by a middleware server. It contains the information necessary for channel lineup and STB boot up.

ERD Engineering Requirements Document – A document that describes the engineering specifications of a product or part of a product. The ERD also contains a response to the PSA and/or ARD.

FE Fast Ethernet – 100 Mbps Ethernet (SMII or 100base-T)

FTTP Fiber to the Premise – A fiber transmission scheme to deliver broadband access between the central office and customer premise.

212


Glossary of Terms

GBIC Gigabit Interface Converter – A high speed transceiver that interfaces electrical/digital signals with optical/fiber signals.

GE Gigabit Ethernet

IGMP Internet Group Management Protocol – A protocol that allows for multicasting.

IPOTS Integrated POTS – A method within the E5 for integrating voice and data service onto a single digital network.

IPTV Internet Protocol Television – Video delivery for televisions using the Internet Protocol

LLDP Link Layer Discovery Protocol – IEEE 802.1ab draft standard defines a protocol used to do device discovery using Ethernet.

LACP Link Aggregation Control Protocol – Provides the control protocol that allows for multiple physical connections to be shared and treated as a single Ethernet link (802.3ad).

MAC Media Access Control – MAC address is the physical address of a network element.

MEF Metro Ethernet Forum.

MPEG-X Motion Picture Experts Group – Video compression/encoding formats.

MC Multicast – A packet that has a Multicast Ethernet address

PHY Physical Interface – In a DSLAM, the xDSL interface.

PPPoX Point-to-Point Protocol – A protocol used to connect 2 points in a network. Often used to connect a modem onto a service provider’s network.

PSTN Public Switched Telephone Network – A voice-band telephone network.

POTS Plain Old Telephone System – A voice-band telephone network (PSTN).

PSA Product Specifications Agreement – Defined the market requirements for the product.

QoS Quality of Service

RED Random Early Discard – A method of discarding packets during network congestion.

RTSP Real Time Streaming Protocol – A protocol used as the data packetization method for VOIP packets.

SerDes Serializer/Deserializer – Converts between parallel and serial data. Extra bits are added/removed from the serial stream to embed/synthesize a clock.

SFP Simple Form Factor Pluggable – A pluggable module that interfaces digital circuitry to optical fiber.

SIP Session Initiation Protocol – A protocol used to establish, modify, or terminate multimedia applications, such as voice-over-IP and video conferencing.

SLIC Subscriber Line Interface Circuit – Provides the analog POTS interface on the local telephone loop.

SMII Serial Media Independent Interface – An interface definition to transport 10/100 Ethernet.

SGMII Serial Gigabit Media Independent Interface – An interface definition to transport Gigabit Ethernet.

SONET Synchronous Optical Network – An ANSI standard, fiber optic transmission system.

STB Set Top Box – The device which terminates video service at a customer premise.

Tail-Drop A method of discarding packets during network congestion.

TDMoIP Time Division Multiplexed over Internet Protocol – A method for trunking raw voice data over an IP connection.

213


Glossary of Terms

TLAN Transparent Local Access Network – Provides a single LAN (or VLAN) between multiple end-points on different xDSL connections.

Upstream The direction of traffic flow from the customer premise to the central office.

Utopia Universal Test and Operations Interface for ATM. A synchronous physical interface bus used to transport fixed-length packets.

VLAN Virtual Local Access Network – A logical grouping of LAN devices.

VoD Video on Demand – Unicast video for television.

VoIP Voice over Internet Protocol – A real-time protocol that allows voice delivery over IP networks (e.g. SIP).

xDSL Any number of DSL flavors. In this case, xDSL primarily implies ADSL, ADSL2, ADSL2+, VDSL2, which are different physical layer standards for delivering broadband service across “last mile” networks.

214


Command Reference A complete list of CLI commands is provided here for reference. Each command is listed with the appropriate usage, any available options or required parameters, and an example if needed for further clarification.

Note: Beginning with CMS version 11.1, multiple CLI sessions can be launched for side by side comparison of ONTs in the network. In addition, Action menus have been added that launch specific dialogs to assist in troubleshooting and diagnostics.

To open multiple CLI sessions

1. Navigate to the Network Group where the ONTs reside and click the network group.

2. From the work area, select Network Details > AE ONT

3. Shift-click multiple ONTs from the list and right click this multiple line selection.

4. Hover your mouse over CUT-THROUGH TELNET and click.

5. A separate CMS Cut-Through windows open.

Note: Windows may be hidden behind other open windows on your desktop. Check your Windows Quick Launch window for additional CLI windows.

215


Viewing Commands

Config Commands A single command is provided which is used to configure basic ONT operation. This command is called config.

Config syslog setup

By default, the ONT assumes that the DHCP server and the Syslog server are located on the same machine. The config syslog command overrides the default setting and assigns a new Syslog server address.

config syslog setup

Usage

config syslog setup [-prisvr=<ipaddr> -secsvr=<ipaddr>] [-facility=<n>]

Syslog client setup

Options

-prisvr=<ipaddr> Primary Syslog server IP address

type: IP Address

-secsvr=<ipaddr> Secondary Syslog server IP address

type: IP Address

-facility=<n> Syslog local facility number

type: integer (0,7)

216


Config ntp update

This command performs time updates with an NTP server. The NTP server is identified by an IP address. By default, the ONT repeats time update every 24 hours. config ntp update resets the NTP configuration and performs a time update.

config ntp update

Usage

config ntp update [-prisvr=<ipaddr>] [-secsvr=<ipaddr>] [-freq=<n>] offset=<n>

Reset NTP configuration and perform time updates

Options

-prisvr=<ipaddr> Primary NTP server IP address

type: IP Address

-secsvr=<ipaddr> Secondary NTP server IP address

type: IP Address

-freq=<n> Initial time update frequency in seconds (0 to disable)

type: integer (0,86400)

Parameters

offset=<n> Time offset (in seconds ± from UTC, -43199 to +43200)

type: Integer (-43199, 43200)

Config label

This command provides for the addition of a label to an ONT. The label can be a street address or any value useful for identifying the ONT. The label value is displayed by the calix_ae_ont script for each ONT along with their serial numbers and IP addresses. The ONT does not store the label value in its flash memory so it must be set inside the ONT configuration file.

config label

Usage

config label set label=<str>

Assign label to the ONT

Parameters

label=<str> ONT Label

type: Integer (-43199, 43200)type: Character String (32)

Note: There is also a command for displaying the current label (config label display)

217


Config upgrade

config upgrade

This command performs firmware version checking and upgrade. It initiates a TFTP GET command on a firmware image file. It assumes the firmware image file is located at the same TFTP server that is holding the ONT configuration file. It compares the image header against the running firmware version. If the firmware image file is newer, it proceeds to retrieve the entire firmware image. After successful data validation and flash programming, it reboots the ONT and starts running the new firmware.

config upgrade

Usage

config upgrade [-prisvr=<ipaddr>] [-secsvr=<ipaddr>] [-downok][-nofail] filename=<str>

Upgrade firmware image

Options

-prisvr=<ipaddr> Primary TFTP server IP address

type: IP Address

-secsvr=<ipaddr> Secondary TFTP server IP address

type: IP Address

-downok Downgrade allowed

-nofail Continue configuration process despite upgrade failure

Parameters

filename=<str> firmware image filename

type: Character String (80)

Example CXNK11900002> config upgrade g_nhmont_ae.rto retrieving firmware image g_nhmont_ae.rto from server 177.0.0.161 version of new image 6.0.z.4 version of running image 6.0.z.3 downloading to FLE0xBC060000L0x00780000 download completed downloaded image is valid Set FPGA config address 0xBCB20200 sys_boot_one_shot: boot one-shot image = b

218


Config vlan

This command modifies the Management VLAN ID. The value is stored in the ONT flash memory. An ONT reboot is needed for the new VLAN ID to take effect. This command should not be used in the ONT configuration script as it overwrites the default VLAN ID of 85 prior to broadcasting the ID to the system.

config vlan

Usage

config vlan set vlanid=<n>

Assign Management VLAN ID

Parameters

vlanid=<n> VLAN ID

type: Integer (0-4094)

Note: There is also a command for displaying the current Management VLAN ID value (config vlan display).

Config trap sink

This command configures up to 4 SNMP trap receiver (sink) addresses for receiving Registration, Alarm and Event traps.

config trap sink

Usage

config trap sink [-community=<str>] [-s1=<ipaddr>] [-s2=<ipaddr>] [-s3=<ipaddr>] [-s4=<ipaddr>] [-freq=<n>]

Configure SNMP trap sink address

Options -community=<str> SNMP community string


-s1=<ipaddr> Trap sink #1 IP address type: IP Address

-s2=<ipaddr> Trap sink #2 IP address type: IP Address

-s3=<ipaddr> Trap sink #3 IP address

type: IP Address

-s4=<ipaddr> Trap sink #4 IP address

type: IP Address

-freq=<n> Initial registration frequency in seconds (0 to disable)

type: Integer (0,3600)

219


Config history

This command displays all previously performed config commands for the AE ONT. The file also captures any commands entered from the command line shell.

config history

Executing command "config history"

1 config syslog setup -prisvr=172.26.31.3 -secsvr=172.26.31.4

2 config trap sink -s1=172.26.31.65 -s2=10.83.1.4

3 config ntp update -prisvr=172.26.31.3 -secsvr=172.26.31.4 offset=-18000

4 config upgrade -prisvr 172.26.31.3 -secsvr 172.26.31.4 filename=calix_ae_sfu.rto

5 meter set upstream shaper=0 cir=40000000 pir=40000000

6 meter set downstream shaper=0 cir=40000000 pir=40000000






12 bridge add -snoop=ena vid=4090

13 bridge addiph -pbit=5 vid=3001

14 bridge portadd vid=3001 dev=iph-1

15 iphost create dev=iph-1

16 config label set label="16305 36th Ave N Plymouth"

17 bridge add -lb=enable -mf=enable vid=2501

18 bridge portadd vid=2501 dev=eth-0

19 lev2 add -treatinpri=0 -treatinvid=2501 dev=eth-0

20 meter attach mcastup vid=2501 shaper=10

21 meter attach downstream -vid=2501 shaper=0

22 meter attach upstream -vid=2501 shaper=0

23 bridge portadd vid=4090 dev=eth-0

24 lev1 add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:02:02:00:00:00 -treatinpri=4 -treatinvid=4090 dev=eth-0

25 lev1 add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:14:F8:00:00:00 -treatinpri=4 -treatinvid=4090 dev=eth-0

26 m2u age 1

27 voip add board=i-pots port=0 iphost=1 display=Name_Line1 file=VoipConfig.txt prisvr=172.26.203.16 secsvr=172.26.203.16 user=7635551012 password=password uri=7635551012

28 voip add board=i-pots port=1 iphost=1 display=Name_Line2 file=VoipConfig.txt prisvr=172.26.203.16 secsvr=172.26.203.16 user=7635551014 password=password uri=7635551014

29 set iftable adminstatus index=eth-0 adminstatus=up

30 show iftab

31 show ifstats

32 mpp rates

33 show ethert

34 bridge show bridge

35 bridge show drops

220


config history

36 mpp queues

37 bridge glob

38 meter show info

39 meter show count

40 iphost show

41 mpp ess

42 mpp show

43 show voip mib

44 voipreg

45 voiprtp

46 voipcc

47 lev1l2tag show eth-0

48 lev2l2tag show eth-0

49 config diag

50 show iftab

51 show ifstats

52 mpp rates

53 show ethert

IfTable Commands The AE ONT supports the standard MIB-II (RFC 1213) ifTable. Both physical (Ethernet ports and WAN uplink port) and logical interfaces are defined by the AE ONT. They include the IP loop-back device and the logical IP Host devices which terminate IP interfaces for use by VoIP on the ONT. The table is displayed through the sh iftab CLI command.

Show iftable

The following CLI capture shows the display on a 714GX ONT: CXNK03010101> show iftable

I/F Type MTU Speed PhysAddress Admn Oper LastChg ---- ----- ----- -------- --------------- -------- ------ ---------

eth-0 ether 1500 0 00-01-02-03-99-00 up up 100 eth-1 ether 1500 0 00-01-02-03-99-01 up up 100 loop-0 loop 1500 0 00-00-00-00-00-00 up up 100 iph-0 ether 1500 0 00-01-03-01-01-00 up up 100 iph-1 ether 1500 0 00-01-03-01-01-10 up up 100 iph-2 ether 1500 0 00-01-03-01-01-11 up up 100 iph-3 ether 1500 0 00-01-03-01-01-12 up up 100 iph-4 ether 1500 0 00-01-03-01-01-13 up up 100 wan-0 ether 1500 0 00-01-02-03-99-01 up up 100

221


Show iftable Field Definitions

Value Description

I/F The Interface Name Type The Interface Type MTU The maximum transmission unit of the IP payload PhysAddress The IEEE MAC address of the interface Speed Unsupported. See "show ethert" to get the current operable link speed.

Admn The desired administrative state, "up" or "down" Oper The operational state. If the "link" is up and the admin state is up the operational state is deemed

"up", otherwise it is deemed down. LastChg The time in seconds since "epoch" when the last change in operational state occurred.

Show ifstats

The AE ONT supports the standard MIB-II ifStats (RFC 1213) for each interface. These may be used to determine data flow, lost packets, and the like for serviceability and debugging by the operator.

CXNK03010101> sh ifs

I/F InOctets InUcastPkt InNUcastPk outOctets OutUcastPk OutNUcastP ---- --------- ------------ ------------- ---------- ------------ ------------

eth-0 10864 78 6 6768 75 15 eth-1 2280 13 20 1334 15 3 loop-0 32 1 0 32 1 0 iph-0 0 0 0 0 0 0 iph-1 0 0 0 0 0 0 iph-2 0 0 0 0 0 0 iph-3 0 0 0 0 0 0 iph-4 0 0 0 0 0 0 wan-0 0 0 0 0 0 0

I/F InDiscards InErrors InUnknwnPr outDiscard OutErrors OutQLen ---- ----------- --------- ------------- --------------- ---------- --------

eth-0 0 0 0 0 0 0 eth-1 0 0 0 0 0 0 loop-0 0 0 0 0 0 0 iph-0 0 0 0 0 0 0 iph-1 0 0 0 0 0 0 iph-2 0 0 0 0 0 0 iph-3 0 0 0 0 0 0 iph-4 0 0 0 0 0 0 wan-0 0 0 0 0 0 0

222


Show ifstats Field Definitions

Value Description

I/F The Interface Name

ifInUcastPkts The number of subnetwork-unicast packets delivered to a higher-layer protocol.

ifInNUcastPkts The number of non-unicast (i.e., subnetwork-broadcast or subnetwork-multicast) packets delivered to a higher-layer protocol.

ifInDiscards The number of inbound packets which were chose to be discarded even though no errors had detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space.

ifInErrors The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.

ifInUnknownProtos The number of packets received via the interface which were discarded because of an unknown or unsupported protocol

ifOutOctets The total number of octets transmitted out of the interface, including framing characters

ifOutUcastPkts The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.

ifOutNUcastPkts The total number of packets that higher-level protocols requested be transmitted to a non unicast (i.e., a subnetwork-broadcast or subnetwork-multicast) address, including those that were discarded or not sent.

ifOutDiscards The number of outbound packets which were chosen to be discarded even though no errors had be detected to prevent their being transmitted. One possible reason for discarding such a packet could be to free up buffer space.

ifOutErrors The number of outbound packets that could not be transmitted because of errors.

ifOutQLen The length of the output packet queue in packets.

Set iftab

The following command is used to administratively enable (up) or disable (down) an individual Ethernet interface:

Note: All ports affected by this command default to a "down" state.

set iftab

Usage

set iftable admin <index> <adminstatus>

Set INTERFACES group ifTable ifAdminStatus object

Parameters

index

type: Interface Name (eth-0, eth-1)

adminstatus

type: up, down

223


Ethert Commands Various Ethernet commands are available to monitor the physical Ethernet ports.

Show Ethertable

The sh ethertable command is used to show basic Layer-2 information about an Ethernet port as follows:

CXNK03010101> show ethertable

I/F AdminMode OperMode PhysAddress ---- --------------- ------------ -------------------

eth-0 auto 100-full 00-01-02-03-99-00 eth-1 auto 100-full 00-01-02-03-99-01 iph-0 auto 100-full 00-01-03-01-01-00 iph-1 auto 100-full 00-01-03-01-01-10 iph-2 auto 100-full 00-01-03-01-01-11 iph-3 auto 100-full 00-01-03-01-01-12 iph-4 auto 100-full 00-01-03-01-01-13 wan-4 auto 100-full 00-01-02-03-99-01

Show ethert Command Field Definitions

Value Description

I/F The Interface Name

AdminMode The desired "Ethernet mode" mode of the interface, unknown, auto, 10-half, 10-full, 100-half, 100-full, 1000-half, 1000-full. The default mode for all interfaces is "auto".

OperMode The current operating Ethernet mode of the interface, unknown, 10-half, 10-full, 100-half, 100-full, 1000-half, 1000-full.

PhysAddress The IEEE MAC address of the interface

224


Set ethert Admin

This command is used to set the desired Ethernet mode in the Ethernet table. In most general uses, the default mode of "auto" is recommended to configure both sides of the home/business interface. The 700 AE ONTs are designed to auto-negotiate with MDIX capability to support both straight through cables or cross-over cables. The command to explicitly set Ethernet mode is described as follows:

setethert adminstatus

Usage

set ethertable adminmode ifindex=<ifname> adminmode=<enum>

Set ETHER group etherTable etherAdminMode object

Parameters

index=<ifname> . . .

type: Interface Name (eth-0, eth-1)

adminmode=<enum> . . .

type: unknown, auto, 10-half, 10-full, 100-half, 100-full, 1000-half, 1000-full

Meter Commands The meter command facility provides a mechanism for supporting 802.1p QoS, per subscriber, and per VLAN ID rate shaping. For additional details regarding ONT metering capability, refer to the section entitled Metering and Traffic Shaping (on page 138).

Metering provisioning is executed using the 'meter' command. The meter subcommands are listed below.

This command is used to show the summarized information on each traffic shaper. It is used as a debug or sanity checking mechanism. The output of the command is as follows:

225


Meter set downstream

This command is used to set up the downstream rate for a particular traffic shaper.

Note: To disable a shaper, both the upstream and downstream rates (cir/pir) must be set to zero.

meter set downstream

Usage

meter set downstream <shaper> <cir> <pir>

Set downstream shaper rate

Parameters

shaper Shaper number (0 - 31)

type: Unsigned

cir Committed information rate in bits per second. (0 - x). 0 = disable metering

type: Unsigned

pir Peak information rate in bits per second. (0 - x, x must be >=cir). 0 = disable metering

type: Unsigned

Meter set upstream

This command is used to set up the upstream rate for a particular traffic shaper.

Note: To disable a shaper both the upstream and downstream rates (cir/pir) must be set to zero.

meter set upstream

Usage

meter set upstream <shaper> <cir> <pir>

Set upstream shaper rate

Parameters

shaper Shaper number (0 - 31)

type: Unsigned

cir Committed information rate in bits per second. (0..x). 0 = disable metering

type: Unsigned

pir Peak information rate in bits per second. (0..x, x must be >=cir). 0 = disable metering

type: Unsigned

226


Meter attach downstream

This command is used to attach a flow mechanism to an individual traffic shaper in the downstream direction. Multiple attachments of the same mechanism are allowed on a given shaper.

meter attach downstream

Usage

meter attach downstream [-dev=<fname>] [-vid=] [-portid=] shaper=

Attach downstream shaper to flow

Options




type: Unsigned


type: Unsigned

Parameters


type: Unsigned

227


Meter de-attach downstream

This command is used to de-attach a flow mechanism from an individual traffic shaper in the downstream direction.

meter deattach downstream

Usage

meter deattach downstream [-dev=<fname>] [-vid=] [-portid=] shaper=

De-attach downstream shaper to flow

Options




type: Unsigned


type: Unsigned

Parameters


type: Unsigned

228


Meter attach upstream

This command is used to attach a flow mechanism to an individual traffic shaper in the upstream direction. Multiple attachments of the same mechanism are allowed on a given shaper.

meter attach upstream

Usage

meter attach upstream [-dev=<fname>] [-vid=] [-portid=] shaper=

Attach upstream shaper to flow

Options




type: Unsigned


type: Unsigned

Parameters

shaper= Upstream shaper number (0-31)

type: Unsigned

229


Meter de-attach upstream

This command is used to de-attach a flow mechanism to an individual traffic shaper in the upstream direction.

meter deattach upstream

Usage

meter deattach upstream [-dev=<fname>] [-vid=] [-portid=] shaper=

Attach upstream shaper to flow

Options




type: Unsigned


type: Unsigned

Parameters


type: Unsigned

230


Meter attach mcast

This command facilitates isolating both broadcast and multicast upstream flows and provides a mechanism to prevent DOS attacks to the provider network for both IPTV VLANs and HSI VLANs. The ability to effectively limit this type of traffic from the subscriber is critical to ensure ongoing network integrity.

One or more upstream shapers per ONT are used to facilitate this feature, in other words, one per VID, per ONT, or one per port, depending on how the provider wants to limit this traffic.

If a multicast or broadcast packet arrives from a subscriber for a WAN VID which has a "mcast" shaper attached to it, the ONT always directs the packet to the attached mcast/bcast shaper. This attachment has precedence over other per port or per VID attachments on these types of packets.

The attachment command is defined as follows:

meter attach mcast

Usage

meter attach mcast shaper= vid=

Attach upstream shaper to all multicast/broadcast flows

Parameters


type: Unsigned

vid= WAN VLAN ID value flow (0 - 4094)

type: Unsigned

Meter de-attach mcast

This command is used to de-attach a multicast shaper from a WAN VID.

meter deattach mcast

Usage

meter deattach mcastup vid=

Detach upstream shaper from multicast/broadcast flows

Parameters

vid= WAN VLAN ID value flow (0 - 4094)

type: Unsigned

231


Meter show info

This command summarizes information on each traffic shaper. It is used as a debugging or sanity check mechanism. The output of the command is as follows:

******Upstream Shaper Info****** Idx CIR PIR RunAvg Drops pmap attachments ---- ---- ---- --------- ------- ------- -------------- 4 10000 10000 0 0 0000 mv4001 3 100000000 100000000 0 0 0000 v4001 v4002 2 100000000 100000000 0 0 0000 eth-0 1 30000000 30000000 0 0 0000 UNASSIGNED 0 200000 200000 0 0 0000 v100

******Downstream Shaper Info****** Idx CIR PIR RunAvg Drops pmap attachments ---- ---- ---- --------- ------- ------- -------------- 3 100000000 100000000 0 0 0000 v4001 v4002 2 100000000 100000000 0 0 0000 eth-0 1 30000000 30000000 0 0 0000 UNASSIGNED 0 200000 200000 0 0 0000 v100

meter show info Field Definitions

Value Description

IDx The shaper index value

CIR The committed information rate of the shaper

PIR The peak information rate of the shaper

RunAvg The current running average rate of information passing through this shaper.

Drops The number of packets dropped on this shaper due to queue full conditions.

Pmap A bit map of occupied priority queues in hexadecimal. The least significant bit is priority 0.

Attachments The flow mechanism and designated attachments for the shaper. Up to 4 are displayed. mv(xx) - multicast/broadcast VLAN Id flow attachment v (xx) - VLAN Id flow attachment eth-x - Ethernet port flow attachment

232


Bridge Commands AE bridges are used to transfer data between the AE WAN port, the subscriber Ethernet ports, the AE control processor, and SIP ports. Each ONT bridge is associated with a single VLAN and associated VLAN ID on the WAN side of the AE ONT. More than one bridge may be configured on each Ethernet port if the subscriber port trunks multiple VLANs or the ONT is mapping untagged traffic to multiple WAN VLANs. For more detailed information, refer to the section entitled Subscriber VLAN to WAN VLAN Mapping (on page 139).

VLAN per Port and VLAN per Service Bridge Create

The VLAN per port model is used when each subscriber port on the ONT is associated with a separate single WAN VLAN. Typically the ONT does not perform a "learning bridge" function when operating on this type of bridge. It simply maps and forward data between the WAN port and a single subscriber port. This bridge may be configured to "learn" MAC addresses on each side for the purpose of debugging via the l2l command.

The VLAN per service model is used when more than one Ethernet port is associated with a single WAN side VLAN. The scope of the VLAN may be either within the ONT or spread across multiple subscribers and ONTs. This service model may be used to configure multiple subscribers into an N:1 service model, in other words, more than one subscriber is a member of the VLAN, possibly outside the ONT. This type of configuration simplifies subscriber provisioning but requires "MAC force forwarding" at some level above the ONT. This prevents subscribers from directly communicating via Layer-2 in the VLAN.

For either scenario, the commands to create a VLAN bridge and associate the bridge to a subscriber port is defined below:

233


VLAN Bridge Add

vlan bridge add

Usage

bridge add [-lb=<enum>] [-mf=<enum>] [-fw=<enum>] [-snoop=<enum>] [-sv=<enum>] [-macff=<enum>] vid=

Add a Subscriber Port VLAN Bridge

Options

-lb=<enum> learning bridge - enable/disable. (This is for debug ONLY and negatively impacts ONT performance at rates > 60 Mbps. Default = disable


-mf=<enum> Enable/Disable multicast filtering in the UPSTREAM direction, default = disable


-fw=<enum> subscriber2subscriber forwarding - enable/disable, default =disable


-snoop=<enum> Turn on IGMP snooping, default = disable


-sv=<enum> Station validation - enable/disable DHCP station validation, default = disable


-macff Enable/Disable MAC forced forwarding support, default = disable


Parameters

vid= WAN side VLAN Id for this VLAN (0 - 4094), 0 == untagged

type: Unsigned

Note: References to the -snoop command refer to IGMP snooping.

234


Associate Subscriber Ethernet Port to VLAN Bridge

This command can be called repeatedly for each member port in a VLAN.

bridge portadd

Usage

bridge portadd vid= dev=<ifname>

Associate a port with an already created VLAN Bridge

Parameters

vid= lWAN side VLAN Id for this VLAN (0 - 4094), 0 == untagged

type: Unsigned

dev=<ifname> eth device name


IGMP Snoop VLAN Per Service Bridge

The "-snoop=enable" option on "VLAN Bridge Add" enables IGMP V2 snooping on the Ethernet ports in this bridge. This capability insures that only multicast channels which are joined by a particular STB appear on the subscriber network. Channels not joined are dropped at the WAN port of the ONT.

The ONT snoops upstream traffic but does not act as an IGMP query agent. The query functionality is required by the AE ONT and MUST be done by an upstream switch or router. If a query agent is not present, the ONT channel timeout features triggers at 180 seconds.

When a VLAN-per-service bridge is created with this option, the ONT transfers data on the subscriber network as Layer-2 multicast or unicast traffic. Unmanaged Layer-2 switches propagate multicast traffic to all ports on the subscriber's network. By default, the ONT sends multicast traffic as Layer-2 multicast packets. The ONT supports the capability to send multicast as Layer-2 unicast packets, replicating the unicast traffic only to those STBs which have joined a particular channel on the subscriber's network. There are two CLIs available to manage the Ethernet port modes. All Ethernet ports on the ONT must be set to the desired mode.

Bridges configured with the -snoop option pass off multicast data transfers such that they are not subject to the ONT shapers as discussed in section Metering Commands/Overview (on page 224).

235


Enable Multicast to Multicast Mode (default)

The multi mode multicast function sets the Ethernet ports to multicast to multicast mode.

multi mode multicast

Usage

multi mode multicast <dev>

Set ethernet port multicast mode to multicast to multicast

Parameters

dev Ethernet device name to apply (eth-0 - eth-n)


Enable Multicast to Unicast Mode

The multicast to Unicast mode sets the Ethernet ports to unicast from multicast mode.

multi mode unicast

Usage

multi mode unicast <dev>

Set ethernet port multicast mode to multicast to unicast

Parameters



Show Multicast or Unicast Modes

The following command displays the current mode setting for all Ethernet ports on the ONT.

Usage: multi mode show

dev mode ----- -------

eth-0 unicast eth-1 multicast

236


Bridge glob

The bridge glob command displays global forwarding counters not attributed to any particular bridge.

Executing command "bridge glob" Global Drop Counters: ffwd_downstream_no_bridge - 1181465 ffwd_upstream_no_bridge - 0 ffwd_downstream_no_ports - 1086631 ffwd_send_error_ae - 3

bridge glob Field Definitions

Field name Description

ffwd_downstream_no_bridge Downstream packets dropped without bridge definitions.

ffwd_upstream_no_bridge Upstream packets dropped without bridge definitions.

ffwd_downstream_no_ports Downstream packets dropped with no port definitions assigned.

ffwd_send_error_ae Forwarded packets dropped due to send errors.

IP Host Bridge(s)

IP Host ports on the ONT are pseudo-devices that allow bridge port paths for IP Host Termination at the ONT.

The ONT creates a default IP Host bridge (iph-0) on the Management VLAN which is then used for the ONT control path and may also be used to attach SIP ports. If additional IP Host Bridges are needed to isolate VoIP data or other services a separate command described below is used to create or delete them.

In order to terminate a path between the WAN interface and an IP host, a bridge must be created with one or more IP Host ports associated with it. The command to facilitate IP Host Bridge creation is bridge setup.

237


Bridge setup The bridge setup command is used to facilitate the provisioning of objects within CMS.

bridge setup

Usage

bridge setup -mf=enable -macff=enable -dcir=40000000 -dpir=40000000 -ucir=40000000 -upir=40000000 vid= dev=eth-0

Add bridge for data services on a port

Options

-vprofile=<str> Name of video profile when snooping is enabled. Default = None.

type: Character string (14)

-mf=<enum> Enable or disable upstream multicast filtering. Default = disable


-macff=<enum> Enable/Disable MAC forced forwarding support, default = disable


-dcir=<enum> Committed downstream unicast traffic rate


-dpir=<enum> Peak downstream unicast traffic rate


-ucir=<enum> Committed upstream unicast traffic rate


-upir=<enum> Peak upstream unicast traffic rate


Parameters

vid= WAN side VLAN ID for this VLAN (0-4094)

type: Unsigned

dev= Ethernet device name

type: Interface name

238


The following attributes are checked and/or created as part of the bridge setup command:

Ensures a VLAN bridge has been created for the VLAN ID's "vid" parameter. If the VLAN bridge does not exist, it uses the existing "lb", "mf", "-fw", "-snoop", "-sv", and "-macff" option values to create the bridge. Reference the "bridge add (on page 238)" command.

If the VLAN bridge already exists, the bridge setup options are ignored. Adds the provided Ethernet device to the VLAN bridge. Reference the 'bridgeport add (on

page 238)" command. Creates a pair of downstream and upstream traffic shapers and attaches them to the

VLAN bridge. Reference "meter set downstream" (on page 224), "meter set upstream (on page 225)", and "meter attach (on page 226)" commands.

Attaches the multicast upstream shaper to the VLAN bridge if the "-mshaper" option is provided. Reference "meter attach mcastup (on page 230)" command.

IP Host Bridge Create (bridge add) This command creates an IP host VLAN Bridge

bridge add

Usage

bridge addiph [-pbit=] vid=

Add an IP host VLAN Bridge

Options



Parameters

vid= WAN side VLAN ID for this VLAN (0-4094), 0 = untagged

type: Unsigned

239


Add IP Host to VLAN Bridge (bridgeport add) This command can be called repeatedly for each member IP host in a VLAN.

bridge portadd

Usage

bridge portadd vid= dev=<ifname>

Associate a port with an already created VLAN Bridge

Parameters


type: Unsigned

dev=<ifname> eth device name


Bridge Show Summary This CLI command is used to dump a summary of all bridges configured on an ONT. The following is a sample output:

bri sh sum

BID Type Member VID upUcast dnUcast upNUcast dnNUcast ---- ----- -------- ---- -------- -------- ---------- ----------

31 VLANIPH 2 85 0 0 5 0

30 VLANPS 2 300 16 17 1 0

Bridge Show Summary Command

Value Description

BID The ONT's internal Bridge ID. This is used to display detailed bridge information with the "bri show bri -bid=x" command (optional).

Type The type of bridge as it was created

Member The number or port members on this bridge

VID The VLAN ID assigned to the bridge

upUcast The number of unicast packets sent out the WAN side of the bridge

dnUcast The number unicast packets sent out the subscriber side of the bridge

upNUcast The number of non-unicast packets sent out the WAN side of the bridge

dnNUcast The number of non-unicast packets sent out the subscriber side of the bridge

240


Bridge Show Drops This shell command displays all dropped packet counters associated with the Layer-2 bridging functions.

CXNK03010101> bridge show drops

Bridge: 007f2d78 Type: VLANPP Members: 3 PonInd: FALSE McastUnkDrops: 0 DnNoEthMDrops: 0

Idx SID bKuNK ingressDrop egressDrop ponIndDrop dstSrcDrop mtuDrop

--- ----- ------ -------------- ------------- -------------- ------------- ---------- 0 eth TRUE 0 0 0 0 0

16 wan FALSE 0 0 0 0 0

bridge show drops Field Definitions

Value Description

McastDrops The number of broadcast/multicast/unknown packets dropped for various reasons.

DnNoEthMDrops The number of broadcast/multicast/unknown packets received on a PON Connection that were dropped because no Ethernet port existed as a forwarding member.

Idx The port number (relative 0) if the port member is a WAN, Ethernet port or IP Host port.

SID The segment identifier.

BkUnk The Boolean value indicating whether broadcast/unknown packets can be sent to the port.

ingressDrop The total number of packets dropped on the ingress side of the interface.

egressDrop The total number of packets dropped on the egress side of the interface.

ponIndDrop The number of uni-cast packets dropped which were forward to an ATM port where ponPortBridgingInd has been set to FALSE.

dstSrcDrop The count of packets received from an interface where the destination interface has been determined to be out the same interface it was received on.

mtuDrdop The number of packets dropped at the destination egress side because the packet to be forwarded exceeded the max MTU provisioned for the port.

241


Bridge Show Bridge This CLI is used to dump detailed information about all bridges (or a single bridge [-bid=x]) configured at the ONT. An example output is shown below:

CXNK03010101> bri sh bri Bridge: 026f96e8-1f Type: VLANIPH Members: 2 VID: 0x0055 (0085) PBIT: 5 learningInd: TRUE igmpSnoopInd: FALS filtUpMcastInd: FALS sub2subFwInd: FALS EthMcastUnkCnt: 0 filtUpMcastCnt: 0 dhcpUpstreamSnoopHits: 0 dhcpDnstreamSnoopHits: 0 option82ProcessErrors: 0

Idx SID Ecp FCS BkUn UP DP ucast_in ucast_out mcast_in mcast_out

---- ---- ---- ----- ------ ---- ---- --------- ----------- ----------- ------------

0 iph NUL NUL TRUE

5 5 0 0 7 0

0 wan NUL NUL TRUE

5 5 0 0 0 7

Bridge: 026faed0-1e Type: VLAN Members: 2 VID: 0X012C (0300) PBIT: (0) learningInd: TRUE sub2subFwInd: FALS stationValidation: FALS option82Enabled: FALS MACFF: TRUE igmpSnoopInd: FALS filtUpMcastInd: FALS EthMcastUnkCnt: 0 dhcpUpstreamSnoopHits: 0 dhcpDnstreamSnoopHits: 0 EthMcastUnk: 0 filteredMulticastUp: 0 stationvalidcount: 0

242


Idx SID Ecp FCS BkUn UP DP ucast_in ucast_out mcast_in mcast_out

---- ---- ----- ----- ------ ---- ---- --------- ----------- ----------- ------------

0 eth NUL NUL TRUE 0 0 16 17 1 0

0 wan NUL NUL TRUE 0 0 17 16 0 1

bridge show bridge Field Definitions

Value Description

Bridge This is a unique bridge handle (X) used by the internal mechanisms.

Type The Bridge type defined for the AE ONT.

Members The current number of port members. Members are either PON SIDs, Ethernet ports, or IP Hosts.

VID The VLAN ID used by this bridge.

PBIT The PBIT value for an IPHost Bridge (if applicable).

learningInd Boolean value indicating whether MAC learning is turned on for this bridge.

sub2subFwInd Allows subscriber to forward packets directly to another subscriber.

stationValidation Enable/Disable station validation. If stationValidation is true, then MACFF is enabled at bridge creation.

option82Enabled Indicates whether Option-82 is inserted onto upstream DHCP requests

MACFF Enable/Disable MAC Forced Forwarding

igmpSnoopInd Boolean value indicating whether IGMP snooping is enabled.

filtUpMcastInd Boolean value indicating whether the topion to filter upstream multicast is enabled.

EthMcast UnkCnt The number of multicast/broadcast/unknown destination packets which have been sent to the Ethernet port members of the bridge.

dhcpUpstreamSnoopHits The number DHCP upstream packets detected during snooping.

dhcpDnstreamSnoopHits The number of DHCP downstream packets detected during snooping.

EthMcastUnk Ethernet Multicast Unknown Counts

filteredMulticastUp The number of multicast packets that have been filtered out when "filtUpMcastInd" is TRUE.

stationvalidcount Number of packets from a valid station count.

Option82ProcessErrors The number of processing errors associated with Option-82 insertion.

Idx The FPGA connection index if the segment/port is a PON SID or the port number (relative 0) if the port member is an Ethernet port or IP Host port.

SID The segment Id. If the segment is on the PON side the "wan" are used or the letters "eth" if the port is an Ethernet port or "iph" if an IP Host port.

Encap Unused by the AE ONT

FCSId Unused by the AE ONT

BkUnk The Boolean value indicating whether broadcast/unknown packets can be sent to the port.

UP The Ndab packet upstream send priority. A value of 7 is the highest priority. A value of 0 is the lowest priority.

DP The Ndab packet downstream send priority. A value of 7 is the highest priority. A

243


bridge show bridge Field Definitions value of 0 is the lowest priority.

ucast_in The number of uni-cast packets received on the interface port.

ucast_out The number of uni-cast packets sent to the interface port.

mcast_in The number of multicast/broadcast/unknown packets received on the interface port.

mcast_out The number of multicast/broadcast/unknown packets sent to the interface port. This is maintained on PON segments only since EthMcastUnk is used to track Ethernet multicast output.

IP Host Configuration

IP Hosts are used for Layer-3 services that are terminated at the ONT. By default, the ONT creates such a service for the first IP Host interface defined in the ONT, for example, iph-0. The iph-0 Host is used by the ONT for the Management VLAN and may also be used for SIP if desired. Subsequent IP Hosts are created by the network provider for use in services such as SIP/VoIP/T1. IP Host interface transfers are not subject to ONT traffic shapers as discussed in the Metering Commands (on page 224) section of this guide.

Important: IP Host interface transfers are not subject to ONT traffic shapers.

The command used to manage the Layer-3 definition for IP Hosts are described as follows:

IP Host Security Considerations ONT IP Hosts require the use of a gateway router. The router must be resident in the service provider's VLAN on each ONT IP Host subnet, including the control VLAN. The ONT always directs packets destined to the WAN from an IP host to each respective IP Host's gateway, even if the destination is in the same subnet as the IP Host.

Note: ICMP redirects must be disabled on the router interface for the ONT.

The IP Host gateway address is either statically configured or is obtained via the DHCP server for each IP Host. This feature allows the network provider to set up access control lists in the gateway to prevent unwanted access to the ONT control plane as well as provide a means to monitor SIP and control security on call data through the router interface.

If the -gfw option is set to "disable", the IP Host behaves like a normal host. In other words, if the source and destination IP addresses are in the same subnet, these peers communicate directly without going through the gateway router.

Note: If two SIP phones on the same ONT communicate with one another, the communication is confined to the ONT. By default, the ONT control channel (iph-0) behaves like a "normal" host (-gfw=disable).

244


IP Host Create The IP Host used for Layer-3 services destined for the ONT is defined by the IP Host Create command.

iphost create

Usage

iphost create [-dhcp=<enum>] [-ping=<enum>][-tracert=<enum>] [-rsh=<enum>] [-gwf=<enum>][-staticip=<ipaddr>][-mask=<ipaddr>][-gateway=<ipaddr>] dev=<ifname>

Create IP Host

Options

-dhcp=<enum> DHCP enable/disable, default = enable

type: enable/disable

-ping=<enum> ICMP ping enable/disable, default = enable type: enable/disable

-tracert=<enum> ICMP tracert enable/disable, default = enable type: enable/disable

-rsh=<enum> Telnet/rsh enable/disable, default = enable. type: enable/disable

-gwf=<enum> Gateway forwarding, enable/disable, Default (iph-1 through iph-n = enable), (iph-0 = disable)


-staticip=<ipaddr> Static IP Host Address, must specify <-dhcp disable>, <-mask>, and <-gateway> type: IP Address

-mask=<ipaddr> IP Host Mask, must specify <-dhcp disable>, <-staticip>, and <-gateway> type: IP Address

-gateway=<ipaddr> IP Host Gateway Address, must be same subnet as <-staticip>, must specify <-dhcp disable>, and <-mask>

type: IP Address

Parameters

dev=<ifname> IP Host device name flow (iph-1 - iph-n) type: Interface Name

245


IP Host Delete To delete an IP Host entry:

iphost delete

Usage

iphost delete dev=<ifname>

Delete IP Host

Parameters

dev=<ifname> IP Host device name flow (iph-1 - iph-n) type: Interface Name

IP Host Show This command is used to display current information about IP Hosts. It displays all allocated iphost interfaces and any associated VIDs. DHCP lease information is also displayed if the iphost is configured for DHCP.

Note: Most customer deployments use DHCP for VoIP iphost interfaces. Usage: iphost show

U Vid P MacAddr CurrIpAddr CurrMask CurrGateway --- ---- --- ---------- ------------- ----------- ---------------- 0 85 0 00-01-03-01-01-10 10.1.2.3 255.255.0.0 10.1.2.1

Server:172.26.31.3 Lease:120secs Remaining:94secs

iphost show Command

Value Description

U The IP Host unit number.

Vid The VLAN ID where this IP Host is located.

P The PBIT value applied to packets sent from this host.

MacAddr The IEEE MAC Address of this IP Host.

CurrIpAddr The static or dynamically obtained IP address of this IP Host.

CurrMask The subnet mask used by this host.

CurrGateway The default gateway used to route packets not on this IP Host subnet.

246


IP Host Options This command displays which options are currently enabled for all IP Hosts.

Usage: iphost options

Unit Option

----- --------

iph-0 DHCP PINGS TRACEROUTE RSH

MAC Forced Forwarding (MACFF)

MACFF is a network security feature that prevents subscribers on the same VLAN (VLAN per service) from directly communicating with each other via a layer 2 access pipe. With MACFF, All subscriber communication is forced upstream to an access router (at the layer 2 level) where a layer 3 or higher decision is made at the router as to whether to route a given packet between subscribers or to the network. MACFF prevents all layer 2 communication which might occur directly between subscribers in a shared VLAN per service model. In addition, MACFF only allows IP protocol packets to traverse towards the network (access router) on a provisioned VLAN.

Overview Using the CLI, MACFF commands are added to the Master ONT configuration file as needed. Prior to provisioning MACFF, A VLAN Bridge must be created with the appropriate commands entered into the ONT configuration file.

Note: Clicking the links below redirects you to the appropriate command with complete descriptions and options.

Show MAC Bridging information details (on page 240): bridge show bridge [-bid=] .Use this command to view detailed information on all bridges (or a single bridge using the "-bid=x" option).

VLAN Bridge Add (on page 232): bridge add [-lb=<enum>] [-mf=<enum>] [-fw=<enum>] [-snoop=<enum>] [-sv=<enum>] [-macff=<enum>] vid=. Use this command to create a new VLAN bridge.

MACFF is physically enabled by setting the '"-macff" option to enabled in the bridge add command. (Default is disabled). This automatically enables MACFF support for all subscriber stations which acquire addresses via DHCP.

247


MACFF is constrained by the following:

MAC Forced Forwarding Limits

Maximum # of bridges/vlans with MACFF enabled (per ONT) 64

Maximum # of access routers per VLAN 1*

Maximum # of MACFF stations per ONT 256

* This number to be increased with next AE release.

MACFF

Large networks may have difficulty restricting access from host to host. When Layer-2 switches are used, this becomes even more difficult:

Broadcast traffic is sent to all ports on a VLAN If the Layer-2 destination cannot be found, traffic is flooded across the network Communications within a single host are always permitted within the same VLAN Layer-2 switches cannot determine who is, or is not allowed access to the stream.

Using MACFF in conjunction with DHCP snooping eliminates these common network security risks and gives you full control of traffic on your network.

248


With AE 2.0, DHCP snooping is used to maintain a database of hosts that may use each switch port. When a host attempts to access the network, DHCP snooping checks the hosts IP address against the database to ensure the host is valid. MACFF then uses DHCP snooping to check whether the host as an Access Router (AR). If an AR is found, MACFF applies a proxy ARP to replay to any ARP requests, sending the AR's MAC address. This forces the host to send all traffic to the AR. The AR receives the traffic and makes forwarding decisions based on forwarding rules set down in advance.

Notes MACFF is implemented by an ARP proxy function that prohibits MAC address

resolution between hosts located within the same subnet and originating at different customer premise locations.

MACFF is enabled on a per VLAN basis.

Manually configured access routers take precedence over dynamically learned locations.

The minimum usable mask for static MACFF entries is /24.

249


Managing AE Optical Link Power Levels Choosing the Proper Attenuator

Calix recommends that Small Form Pluggable (SFP) or Compact Small Form Pluggable (CSFP) attenuators be located in the Central Office at or near the E-Series SFPs, so that adjustments can easily be made if an ONT is moved from one location to another. When necessary, an attenuator can be placed in the ONT enclosure.

In determining the proper attenuation levels, the following minimum and maximum transmit and receive values were used:

Attenuation Guidelines

Range (km) Transmit Min (dBm)

Transmit Max (dBm)

Receive Min (dBm)

Receive Max (dBm)

10 CSFP -9.0 -3.0 -19.5 -3.0

20 CSFP -9.0 -3.0 -22.5 0.0

20 SFP -7.0 -1.0 -22.0 0.0

40 SFP -5.0 0.0 -22.0 0.0

60 SFP -2.0 4.0 -26.0 0.0

700GE AE ONT (60 km)

-5.0 0.0 -22.0 -3.0

700GX AE ONT (50 km)

.50 5.0 -27.0 -8.0

Note: The maximum reach can be increased slightly by deploying premium grade attenuation fiber.

700GE ONTs

When 700GE ONTs are operating in Active Ethernet mode, the system's optical transmitters may require attenuation to avoid saturating the optical receivers. The following chart details the relationship between distance (from the SFP to the ONT) and the appropriate E-Series SFP or CSFP module to use.

700GE ONT AE Attenuation Requirements

Calix E-Series SFPs Optical Fiber Link Length (km)

Attenuation Value to Prevent SFP Saturation

SFP Rated Reach SFP Part Number

10 km CSFP 100-01791 0 to 10 km 0 dB

20 km CSFP 100-01792 0 to 20 km 0 dB

20 km SFP 100-01669 0 to 10 km 5 dB

10 to 20 km 0 dB

40 km SFP

100-01671

0 to 20 km 5 dB

20 to 30 km 0 dB

30 to 40* km 0 dB

60* km SFP 100-01673 0 to 10 km 10 dB

10 to 30 km 5 dB

30 up to 50 km 0 dB

50 to 60** km Not Recommended

250


* - The optical fiber plant performance characteristics determine whether the combination of the 40 km SFP and 700 GE ONT works effectively up to 40 km.

** - The 60 km SFP and 700GE ONT combination only works reliably up to 50 km (actual reach depends on outside plant fiber and connector loss). This is due to the 700GE ONTs reduced output power which is optimized to allow the 10 and 20 km CSFPs to operate without attenuation.

700GX ONTs

When 700GX ONTs are operating in Active Ethernet mode, the system's optical transmitters may require attenuation to avoid over-saturating the optical receivers. The following chart details the relationship between distance (from the SFP to the ONT) and the appropriate E-Series SFP module to use.

700GX ONT AE Attenuation Requirements

Calix E-Series SFPs Optical Fiber Link Length (km)

Attenuation Value to Prevent SFP Saturation

SFP Rated Reach SFP Part Number

10 km CSFP 100-01791 0 to 10 km 10 dB

20 km CSFP

100-01792

0 to 10 km 10 dB

10 to 20 km 5 dB

20 km SFP 100-01669 0 to 10 km 10 dB

10 to 20 km 5 dB

40 km SFP

100-01671

0 to 20 km 10 dB

20 to 30 km 5 dB

30 to 40 km 0 dB

60 km SFP 100-01673 0 to 10* km 15 dB

10 to 20 km 10 dB

20 to 30 km 10 dB

30 to 40 km 5 dB

40 to 50 km 5 dB

50 to 60 km 0 dB

* - Calix recommends using the 60 km rated SFP only for 700GX ONT links longer than 10 km. This eliminates the need for a 15 db attenuator and simplifies attenuator inventory.

251


MACFF Commands Use the following commands to manage and provision Mac Forced Forwarding on an AE ONT Network:

MACFF Show

macff show

Usage

macff show [-vid=] [filter=<enum>]

Show MACFF settings by IP address

Options

vid= Limit MACFF listing to those of the bridge specified by the VLAN ID

type: Unsigned

filter=<enum> Filter display to only access router (ar), subscribers (sub), static entries (stat), learning bridge (lb), or none (no filter - shows all entries)

type: ar, sub, stat, lb, none

CXNK000004E6> macff show ** Access Routers Entries: ** MAC Address vid IP Address ref state ----------------- ---- --------------- --- ---------- 00-16-c8-bc-a4-cb 4002 172.26.61.2 3 resolved ** Subscriber Station Validation Entries: ** MAC Address vid IP Address MASK AR/Gateway Por ----------------- ---- --------------- --------------- --------------- --- 00-00-44-2e-ca-81 4002 172.26.61.33 255.255.255.0 172.26.61.2 0 00-03-03-ae-ae-02 4002 172.26.61.122 255.255.255.0 172.26.61.2 0 00-00-06-82-3b-1d 4002 172.26.61.128 255.255.255.0 172.26.61.2 0 ** Learning Bridge L2Table Entries: ** MAC Address vid IP Address L2Table ----------------- ---- --------------- ----------------- 00-03-03-ae-ae-02 4002 172.26.61.122 sv-00d02c14-1e 00-00-06-82-3b-1d 4002 172.26.61.128 sv-00d02c14-1e 00-00-44-2e-ca-81 4002 172.26.61.33 sv-00d02c14-1e

252


** Static MACFF configuration Entries: ** idx vid IP Address AR/Gateway MASK --- ---- --------------- --------------- --------------- 0 4002 172.26.61.33 172.26.61.2 255.255.255.0 1 -1 N/A N/A N/A 2 -1 N/A N/A N/A 3 -1 N/A N/A N/A 4 -1 N/A N/A N/A 5 -1 N/A N/A N/A 6 -1 N/A N/A N/A 7 -1 N/A N/A N/A 8 -1 N/A N/A N/A 9 -1 N/A N/A N/A 10 -1 N/A N/A N/A 11 -1 N/A N/A N/A 12 -1 N/A N/A N/A 13 -1 N/A N/A N/A 14 -1 N/A N/A N/A 15 -1 N/A N/A N/A CXNK000004E6>

MACFF Del Index

macff delete

Usage

macff del index=

Removes a statically specified MACFF entry

Parameters

index= Index to the MACFF static configuration station validation table entry

type: Unsigned

253


MACFF Set Index

macff set index

Usage

macff set index= vid= gateway=<ipaddr> subip=<ipaddr> mask=<ipaddr>

Statically specify a MACFF entry*

Parameters

index= Index to the MACFF static configuration station validation table entry

type: Unsigned

vid= Specify the participating VLAN ID for this MACFF entry

type: Unsigned

gateway=<ipaddr> IP address of the access router to be used for MACFF

type: IP Address

subip=<ipaddr> Subscriber IP address to be used for MACFF

type: IP Address

mask=<ipaddr> Subnet mask encompassing both the access router and the subscriber

type: IP address

* Note: If the entry is not statically assigned, DHCP populate values as required.

254


Sample MACFF Command String Follows are two examples of a MACFF CLI application:

MACFF Basic Configuration

The following commands enable MACFF on a single VLAN: [CALIX_AE_ONT:R1] #Include FIT-management.cfg and Label output include FIT-management.cfg config label set label="Basic Table 1" #Set-up MACFF on VLAN 4002 and add the VLAN to the 1st Ethernet port bridge add -lb=ena -mf=ena -sv=ena -macff=ena vid=4002 bridge portadd vid=4002 dev=eth-0 #Now map all untagged as data traffic on data vlan for eth-0 lev2 add -treatinpri=0 -treatinvid=4002 dev=eth-0 #Time to turn on the ports set iftab admin eth-0 up set iftab admin eth-1 up #Assign IP addresses to new MACFF entry to VLAN ID, gateway, subscriber, and subnet mask macff set 0 4002 172.26.61.2 172.26.61.33 255.255.255.0

255


MACFF Multiple VLAN Configuration

The following commands enable MACFF on multiple VLANs: [CALIX_AE_ONT:R1] #Include FIT-management.cfg and Label output include FIT-management.cfg config label set label="Basic Table 2" #Set-up MACFF on VLAN 4002 and add the VLAN to the 1st Ethernet port bridge add -lb=ena -mf=ena -sv=ena -macff=ena vid=4002 bridge portadd vid=4002 dev=eth-0 #Set-up MACFF on VLAN 4090 and add the VLAN to the 2nd Ethernet port bridge add -lb=ena -mf=ena -sv=ena -macff=ena vid=4090 bridge portadd vid=4090 dev=eth-0 bridge portadd vid=4090 dev=eth-1 #Now map all untagged as data traffic on data vlan for eth-0 lev2 add -treatinpri=0 -treatinvid=4002 dev=eth-0 #Time to turn on the ports set iftab admin eth-0 up set iftab admin eth-1 up #Assign IP addresses to new MACFF entry to VLAN ID, gateway, subscriber, and subnet mask macff set 0 4090 172.26.61.2 172.26.61.33 255.255.255.0 macff set 1 4090 172.26.61.2 172.26.61.33 255.255.255.0

256


Removing MACFF Entries MACFF entries are persisted in the system until lease expiration. For this reason, MACFF entries are viewable regardless of the state of the associated ONT Ethernet ports.

To remove these entries prior to lease expiration, perform the following:

To forcibly remove MACFF entries

1. Run the macff show command to view all current entries:

CXNK0003A028> macff show ** Access Routers Entries: ** MAC Address vid IP Address ref state ----------------- ---- --------------- --- ---------- 00-00-00-00-00-00 11 10.99.4.254 1 unresolved 00-00-00-00-00-00 11 216.196.71.254 1 unresolved 00-1b-0d-ed-85-80 2030 10.244.239.254 1 resolved ** Subscriber Station Validation Entries: ** MAC Address vid IP Address MASK AR/Gateway Por ----------------- ---- --------------- --------------- --------------- --- 00-1e-37-cb-a9-d9 11 10.99.4.13 255.255.255.0 10.99.4.254 1 00-1e-37-cb-a9-d9 11 216.196.71.248 255.255.255.0 216.196.71.254 1 00-03-91-be-a7-35 2030 10.244.224.33 255.255.240.0 10.244.239.254 0 ** Learning Bridge L2Table Entries: ** MAC Address vid IP Address L2Table ----------------- ---- --------------- ----------------- 00-1e-37-cb-a9-d9 11 10.99.4.13 sv-00d02c64-1e 00-03-91-be-a7-35 2030 10.244.224.33 sv-00d088b8-1d ** Static MACFF configuration Entries: ** idx vid IP Address AR/Gateway MASK --- ---- --------------- --------------- --------------- 0 11 216.196.71.248 216.196.71.254 255.255.255.0 1 -1 N/A N/A N/A 2 -1 N/A N/A N/A 3 -1 N/A N/A N/A 4 -1 N/A N/A N/A 5 -1 N/A N/A N/A 6 -1 N/A N/A N/A 7 -1 N/A N/A N/A 8 -1 N/A N/A N/A 9 -1 N/A N/A N/A 10 -1 N/A N/A N/A 11 -1 N/A N/A N/A 12 -1 N/A N/A N/A 13 -1 N/A N/A N/A 14 -1 N/A N/A N/A 15 -1 N/A N/A N/A

257


2. Issue the macff clear command to eliminate a single or all entries. An example of clearing a single entry is shown below:

CXNK0003A028> macff clear -vid=11 -ip=10.99.4.13

3. Verify the entry has been removed by re-running the macff show command: CXNK0003A028> macff show ** Access Routers Entries: ** MAC Address vid IP Address ref state ----------------- ---- --------------- --- ---------- 00-02-3b-01-fd-31 11 216.196.71.254 1 resolved 00-1b-0d-ed-85-80 2030 10.244.239.254 1 resolved ** Subscriber Station Validation Entries: ** MAC Address vid IP Address MASK AR/Gateway Por ----------------- ---- --------------- --------------- --------------- --- 00-1e-37-cb-a9-d9 11 216.196.71.248 255.255.255.0 216.196.71.254 1 00-03-91-be-a7-35 2030 10.244.224.33 255.255.240.0 10.244.239.254 0 ** Learning Bridge L2Table Entries: ** MAC Address vid IP Address L2Table ----------------- ---- --------------- ----------------- 00-03-91-be-a7-35 2030 10.244.224.33 sv-00d088b8-1d ** Static MACFF configuration Entries: ** idx vid IP Address AR/Gateway MASK --- ---- --------------- --------------- --------------- 0 11 216.196.71.248 216.196.71.254 255.255.255.0 1 -1 N/A N/A N/A 2 -1 N/A N/A N/A 3 -1 N/A N/A N/A 4 -1 N/A N/A N/A 5 -1 N/A N/A N/A 6 -1 N/A N/A N/A 7 -1 N/A N/A N/A 8 -1 N/A N/A N/A 9 -1 N/A N/A N/A 10 -1 N/A N/A N/A 11 -1 N/A N/A N/A 12 -1 N/A N/A N/A 13 -1 N/A N/A N/A 14 -1 N/A N/A N/A 15 -1 N/A N/A N/A

258


Learning Bridge (l2l)

The learning bridge table keeps track of the MAC addresses associated with a given bridge. Each learning bridge consists of 256 entries. When the learning bridge is full, the logic currently waits for an entry to be aged out before another one is added. Packets are sent out via the broadcast/unknown path when an address is not known to the learning bridge. Entries are aged out on 5 minutes of inactivity.

Note: Inactivity is determined by not receiving a packet from the source MAC address in the time period.

CXNK03010101>l2l L2TABLE - 0242bba0-1f:

hash Port MAC Address Minutes source_hit dest_hits hw_act_hit

---- ----- ----------------- ------- ---------- --------- --------- 3 eth-0 00-01-02-03-05-03 5 4 4 0 8 wan-0 00-01-02-03-04-08 5 4 3 0

l2l Field Definitions

Value Description

hash This index is used internally by the hash lookup mechanism.

Port The WAN or the Ethernet/IP Host port device defining the interface the MAC address is known to be on.

MAC Address The IEEE MAC address of the device.

Minutes The number of minutes remaining on the entry.

source_hit The number of times a packet was received and the SRC MAC address in the packet matched the entry.

dest_hit The number of times a destination MAC look up was done on a packet and a match was found for this entry in the learning bridge.

259


DHCP Relay - Option-82 Commands The AE ONT supports the ability to add DHCP remote agent-id Option-82 strings to upstream subscriber DHCP packets on a per WAN VLAN basis. On downstream DHCP packets, the string is removed prior to sending out the subscriber port as per the RFC. Any type of ONT bridge or VLAN configuration supports Option-82 insertion, for example, VLAN per port, VLAN per service, and IP Host bridges. The ONT facility supports options for automatic insertion of strings based on pre-defined tokens. This allows the operator the freedom to configure ONTs identically without any operator defined information. The network provider specifies which tokens appear in the Option-82 string by specifying a format string for the Option-82 result. The following tokens may automatically be inserted by the ONT into the Option-82 string:

Option-82 Commands

Field Name

Description Rendered As

IFType The defined values and their associated strings must include (at a minimum): Ethernet, “eth” IP Host, “iph”

String (predefined values of no more than 3 char)

VLAN The VLAN number on the receive port associated with the Request message.

All valid VLAN numbers (0-4094)

SN The FSAN Serial number of the device String (16 characters maximum)

ONTPORT The ONT interface number relative to zero where the packet was received.

Integer

DESC This operator specified description string associated with a physical port.

String (31 characters maximum)

CLAB The operator specified configuration label for the AE ONT String (31 characters maximum)

The token are specified using a %token notation. The user defined must be configured prior to enabling Option-82 on the bridge. In addition, the bridge must be created prior to Option-82 configuration. The following sequence of configuration commands enables Option-82 for an IPTV bridge:

# # Create VLAN Per Service Bridge for IPTV service on VID 4090, eth-0, eth-1 # bridge add -snoop=ena vid=4090 pmap=eth-0 pmap=eth-1 bridge portadd vid=4090 dev=eth-0 bridge portadd vid=4090 dev=eth=1 # # set up the option82 format string for the IPTV bridge #

260


opt82 set string vid=4090 format="%clab - %sn - %vlan - %iftype-%ontport - %desc" # # set up a config label for this ONT # config label set label="Doe" # # enable option82 on IPTV bridge # The following option82 would be produced... # Doe - CXNK03010101 - 4090 - eth-0 - John Doe, Anytown USA opt82 enable remote vid=4090 -frame=1stag -desc="John Doe, Anytown USA"

The complete description of Option-82 configuration commands follows:

Define Option-82 Format String

The following configuration command is defined as follows:

opt82 set

Usage

opt82 set string vid= format=<str>

Define string/tokens for option-82 insertion

Parameters

vid= Index to the MACFF static configuration station validation table entry

type: Unsigned

format=<str> The DHCP Option-82 format string, current supported tokens which the ONT auto inserts are: %sn, %vlan, %ifname, %ontport, %desc, %clab

261


Enable Option-82 on a Bridge

The following command is used after all Option-82 token values have been specified and the ONT Bridge for a particular VLAN has been created:

enable opt82

Usage

opt82 enable remoteId [-frametype=<enum>] [-desc=<str> vid=

Enables upstream Option-82 insertion, downstream Option-82 removal on a designated WAN VLAN, the bridge must already exist and opt82:string:set called.

Options

frametype=<enum> Designates the type of WAN DHCP frame to snoop on. Default=1stag

type: 1stag, 0stag, 2tag

-desc=<str> Defines the optional %desc string for this Option-82 remote ID


Parameters

vid= WAN side VLAN ID identifying bridge to enable DHCP Option-82 remote ID insertion on

type: Unsigned

262


Layer-2 and Layer-3 Mapping and Filtering CLIs

Level 1- L2 Mapping/Filtering Table Add Entry CLI

The Level 1 L2 Mapping/Filtering table is the first table processed on the subscriber ingress/egress. A separate table with 16 entries exists in the downstream and upstream direction for each Ethernet port. Entries are added to the table one at a time with the "lev1l2 add" command. Entries are processed by the forwarding paths in the order they are added to the table. When an entry is added, the system constructs and automatic "inverse" operation for the downstream processing if the action requires it. The interface supports no tag, 1 tag, and 2 tag operations.

Note: Currently only no tag and 1 tag operations are supported for the level 1 table.

lev1l2 mapping add entry

Usage

lev1l2tag add [-filtmac=<enum>][-filtmacmask=<mac>] [-filtmacmatch=<mac>] [-treattagremdrop=][-treatoutpri=] [-treatoutvid=] [-treatouttpidde=] [-treatinpri=] [-treatinvid=] [-treatintpidde=]

dev=<ifname>

Add Level 1 - Layer2 filter/tagging entry upstream, an inverse operation is automatically performed downstream

Options

-filtmac=<enum> Which MAC address to filter on, default = disable type: disable, da, sa

-filtmacmask=<mac> Mask of MAC address bytes used to compare with filtermacmatch, the bits that are significant

type: MAC address

-filtmacmatch=<mac> MAC address to match on type: MAC address

-treattagremdrop= method to remove tags or drop frames or do nothing, skip = 0, remove1tags = 1, remove2tags = 2, dropframe = 3, default = 0(skip)

type: Unsigned

-treatoutpri= Method to handle outer priority, 0-7 = explicit setting, 8 = copy PBITs from inner tag, 9 = copy PBITS from outer tag, 15 = don't add outer tag, default = 15

type: Unsigned

-treatoutvid= Method to treat outer Vlan Id, less than 4095 = value of VID for outer tag, 4096 = copy outer VID from inner VID, 4097 = copy outer VID from outer VIDi, default = 0

type: Unsigned

-treatouttpidde= Method to treat outer ethertype and discard eligibility bit, TPID and DE copied from inner = 0, TPID and DE copied from outer = 1, TPID is OutputTPID, DE copied from inner = 2, TPID is OutputTPID, DE copied from outer = 3, TPID is 0x8100 = 4, TPID is default OutputTPID = 5, TPID is OutputTPID and DE bit is 0 = 6, TPID is OutputTPID and DE bit is 1 = 7i, default = 6

type: Unsigned

-treatinpri= Method to handle inner priority, 0-7 = explicit setting, 8 = copy PBITs from inner tag, 9 = copy PBITS from inner tag, 15 = don't add inner tag, default = 15

263



type: Unsigned

-treatinvid= Method to treat inner Vlan Id, less than 4095 = value of VID for inner tag, 4096 = copy inner VID from inner VID, 4097 = copy inner VID from inner VID, default = 0

type: Unsigned

-treatintpidde=<u Method to treat inner ethertype and discard eligibility bit, TPID and DE copied from inner = 0, TPID and DE copied from outer = 1, TPID is OutputTPID, DE copied from inner = 2, TPID is OutputTPID, DE copied from outer = 3, TPID is 0x8100 = 4, TPID is default OutputTPID = 5, TPID is OutputTPID and DE bit is 0 = 6, TPID is OutputTPID and DE bit is 1 = 7i, default = 6

type: Unsigned

Parameters

dev=<ifname> Ethernet device name to add the table entry (eth-0--eth-n) type: Interface Name

Supported Configurations

When implementing Level1, Layer 2 tagging configurations, only certain configurations are supported. Refer to the information below for

264


Level 2 - L2 Mapping/Filtering Table Add Entry CLI If no match occurs in the Level1 Layer-2 Mapping/Filtering table the Level 2 L2 Mapping/Filtering table is processed. The Level 2 L2 Mapping/Filtering table is the second table processed on the subscriber ingress/egress. Entries are added to the table one at a time with the "lev2l2 add" command and are processed in the order they are added. When an entry is added, the system constructs an automatic "inverse" operation for the downstream processing if the action requires it. The interface supports no tag, 1 tag, and 2 tag operations.

Important: The terminology used to describe a tag is either "inner" or "outer". The inner tag filter rules are for single or double tag packets. The outer tag filter rules are only used on double tagged frames coming from a subscriber.

With respect to the treatment side, the inner tag refers to the first tag on single tag or no tag frames. On a double tag frame it is the inner tag, or in other words, the second tag. The command is defined as follows:


Usage

lev2l2tag add [-filtoutpri=] [-filtoutvid=] [-filtouttpidde=] [-filtinpri=] [-filtinvid=] [-filtintpidde=] [-filtetype=] [-treattagremdrop=] [-treatoutpri=] [-treatoutvid=] [-

treatouttpidde=] [-treatinpri=] [-treatinvid=] [-treatintpidde=] dev=<ifname>

Add Level 2 - Layer2 filter/tagging entry upstream, an inverse operation is automatically performed downstream

Options

-filtoutpri= Method to filter outer priority, 0-7 = filter on explicit match of outer priority, 8 = do not filter outer priority, 14 = default when no 2-tag rule applies, 15 = no double tag rule, default = 15

type: Unsigned

-filtoutvid= Method to filter outer Vlan Id, less than 4095 = value of VID to match, 4096 = do not filter on outer VID, default = 0

type: Unsigned

-filtouttpidde= Method to filter outer ethertype and discard eligibility bit, Do not filter on outer TPID_DE = 0, outer TPID is 0x8100 = 4, outer TPID is default InputTPID - don't care about DE bit = 5, Outer TPID is default InputTPID - DE bit is 0 = 6, Outer TPID is default InputTPID - DE bit is 1 = 7, default = 6

type: Unsigned

-filtinpri= Method to filter inner priority, 0-7 = filter on explicit match of inner priority, 8 = do not filter inner priority, 14 = default when no 1-tag rule applies, 15 = no tag rule, default = 15

type: Unsigned

-filtinvid= Method to filter inner Vlan Id, less than 4095 = value of VID to match, 4096 = do not filter on inner VID, default = 0

type: Unsigned

-filtintpidde= Method to filter inner ethertype and discard eligibility bit, Do not filter on inner TPID_DE = 0, inner TPID is 0x8100 = 4, inner TPID is default InputTPID - don't care about DE bit = 5, inner TPID is default InputTPID - DE bit is 0 = 6, inner TPID is default InputTPID - DE bit is 1 = 7, default = 6

type: Unsigned

265



-filtetype= Method to filter on ethertype, 0 = Do not filter on ethertype, > 0 = ethertype to match on, default = 0

type: Unsigned

-treattagremdrop= Method to remove tags or drop frames or do nothing, skip = 0, remove1tags = 1, remove2tags = 2, dropframe = 3, default = 0

type: Unsigned

-treatoutpri= Method to handle outer priority, (0-7 = explicit setting, 8 = copy PBITs from inner tag, 9 = copy PBITS from outer tag, 15 = don't add outer tag, default = 15)

type: Unsigned

-treatoutvid= Method to treat outer Vlan Id, less than 4095 = value of VID for outer tag, 4096 = copy outer VID from inner VID, 4097 = copy outer VID from outer VID, default = 0

type: Unsigned

-treatouttpidde= Method to treat outer ethertype and discard eligibility bit, TPID and DE copied from inner = 0, TPID and DE copied from outer = 1, TPID is default OutputTPID, DE copied from inner = 2, TPID is default OutputTPID, DE copied from outer = 3, TPID is 0x8100 = 4, TPID is default OutputTPID = 5, TPID is default OutputTPID and DE bit is 0 = 6, TPID is OutputTPID and DE bit is 1 = 7, default = 6

type: Unsigned

-treatinpri= Method to handle inner priority, 0-7 = explicit setting, 8 = copy PBITs from inner tag, 9 = copy PBITS from inner tag, 15 = don't add inner tag, default = 15

type: Unsigned

-treatinvid= Method to treat inner Vlan Id, less than 4095 = value of VID for inner tag, 4096 = copy inner VID from inner VID, 4097 = copy inner VID from inner VID, default = 0

type: Unsigned

-treatintpidde= Method to treat inner ethertype and discard eligibility bit, TPID and DE copied from inner = 0, TPID and DE copied from outer = 1, TPID is OutputTPID, DE copied from inner = 2, TPID is OutputTPID, DE copied from outer = 3, TPID is 0x8100 = 4, TPID is default OutputTPID = 5, TPID is OutputTPID and DE bit is 0 = 6, TPID is OutputTPID and DE bit is 1 = 7, default = 6

type: Unsigned

Parameters

dev=<ifname> Ethernet device name to add the table entry (eth-0--eth-n) type: Interface Name

266


Level 1 and Level 2 Table Set CLI The following command is used to set the default TPID (ethertype) values on a per Ethernet port basis. The following commands are used for both level 1 and level 2 tables.

lev1 set

Usage

lev1l2tag set [-outtpid ] [-intpid ] <dev>

Set Level 1 - Layer2 filter/tagging Table inputTpid/outputTpid default values

Options

-outtpid= Default resulting/treated (network side) ethertype for frames, default = 0x8100

type: Unsigned

-intpid= Default incoming/filtered (subscriber side) ethertype for frames, default = 0x8100

type: Unsigned

Parameters

dev Ethernet device name to add to the table entry (eth-0 - eth-n)


lev2 set

Usage

lev2l2tag set [-outtpid ] [-intpid ] <dev>

Set Level 2 - Layer2 filter/tagging Table inputTpid/outputTpid default values

Options

-outtpid= Default resulting/treated (network side) ethertype for frames, default = 0x8100

type: Unsigned

-intpid= Default incoming/filtered (subscriber side) ethertype for frames, default = 0x8100

type: Unsigned

Parameters

dev Ethernet device name to add to the table entry (eth-0 - eth-n)

267


Level 1 - L2 Mapping/Filtering Table Show This command is used to examine the Level 1 - L2 Mapping/Filtering Table for the purpose of debugging or interrogation. Assume the following filter operation has been added for the level 1 table:

CXNK03010101> lev1l2tag add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 filtmacmatch=00:01:04:00:00:00 -treatinpri=4 -treatinvid=100 dev=eth-0

The lev1l2 show command displays the following: Level 1 Upstream Tagging Entry Table: unit = 0 outputTpid = 8100 inputTpid = 8100

i ac fm filtermacmask filtermacmatch trd top tov totp tip tiv titp --- ---- ---- -------------------- -------------------- ----- ----- ---- ------ ----- ----- ------ 0 0 2 ff-ff-ff-00-00-00 00-01-04-00-00-00 0 15 0 6 4 100 6

Level 1 Downstream Tagging Entry Table: unit = 0 outputTpid = 8100 inputTpid = 8100

i ac fm filtermacmask filtermacmatch trd top tov totp tip tiv titp --- ---- ---- -------------------- -------------------- ----- ----- ---- ------ ----- ---- ------ 0 1 1 ff-ff-ff-00-00-00 00-01-04-00-00-00 1 0 0 0 0 0 0

268


L2 Mapping/Filtering Table Show

Value Description

outputTpid Default Tpid/ethertype for frame output operations

inputTpid Default Tpid/ethertype for input frame filtering operations on Tpid.

i The table index entry number

ac An internally defined code for the operation filterSAAdd1VidExpPbitDefaultOutputTpid=0, Lev1RemoveVidOnVidMatchTreatmentInner=1, filterSADrop=2, filterDADrop=3

fm filterMac Value FILTER_MAC_DA 1 // Filter on MAC DA FILTER_MAC_SA 2 // Filter on MAC SA INVERSE_SA_ADD1 3 // Inverse of 2

filtermacMask The significant bits of the MAC to match on

filtermacmatch The value to match on after the mask has been applied to the incoming MAC DA/SA

trd The treatment/remove/drop field value 0 - Don't remove tags or drop frame 1 - remove one tag 2 - remove two tags 3 - drop frame

top The treatment outer priority field 7 - The value less than or equal to this is used as outer priority 8 - Copy outer priority from inner 9 - Copy outer from outer 15 - Do not add an outer tag

tov The treatment outer VID 4094 - This value and lower is the VID for outer tag 4096 - Copy outer VID from inner VID 4097 - Copy Outer VID from Outer VID

totp The treatment outer TPID value 0 - TPID and DE copied from inner 1 - TPID and DE copied from outer 2 - TPID - OutputTPID, DE copied from inner 3 - TPID - OutputTPID, DE copied from outer 4 - TPID - 0x8100 6 - TPID - OutputTPID, DE bit = 0 7 - TPID - OutputTPID, DE bit = 1

tip The treatment inner priority field 7 - The value less than or equal to this is used as outer priority 8 - Copy outer priority from inner 9 - Copy outer from outer 15 - Do not add an outer tag

269


L2 Mapping/Filtering Table Show

tiv The treatment inner VID 4094 - This value and lower is the VID for inner tag 4096 - Copy Inner VID from inner VID 4097 - Copy Inner VID from Outer VID

titp The treatment inner TPID value 0 - TPID and DE copied from inner 1 - TPID and DE copied from outer 2 - TPID - OutputTPID, DE copied from inner 3 - TPID - OutputTPID, DE copied from outer 4 - TPID - 0x8100 6 - TPID - OutputTPID, DE bit = 0 7 - TPID - OutputTPID, DE bit = 1

Level 2 - L2 Mapping/Filtering Table Show 10.5.3.4 Level 2- L2 Mapping/Filtering Table Show

This command is used to examine the Level 2 L2 Mapping/Filtering Table for the purpose of debugging or interrogation.

The following examples illustrate all of the current valid Level 2 operations which are permitted on the AE ONT at this time:

# result = single tag, filter on OUI add VID 100, set explicit PBIT(4) lev1l2tag add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:01:04:00:00:00 -treatinpri=4 -treatinvid=100 dev=eth-0 # result = single tag, VID translation from VLAN 100/PBIT=5 to VLAN 210/PBIT=4, use default outputTpid lev2l2tag add -filtinpri=5 -filtinvid=100 -treatinpri=4 -treatinvid=210 eth-0 # result = single tag, VID translation from VLAN 300 to VLAN 400, propagate incoming PBIT from incoming tag, use default outputTpid lev2l2tag add -filtinpri=8 -filtinvid=300 -treatinpri=8 -treatinvid=400 eth-0 # result = double tag, Add VID (500) from incoming VID match (600), propagate incoming PBIT from incoming tag, use default outputTpid lev2l2tag add -filtinpri=8 -filtinvid=600 -treatoutpri=8 -treatoutvid=500 -treatinpri=8 -treatinvid=4096 eth-0 # result = double tag, Add VID (800) from incoming VID match (700), explicit PBIT, use default outputTpid lev2l2tag add -filtinpri=8 -filtinvid=700 -treatoutpri=4 -treatoutvid=800 -treatinpri=8 -treatinvid=4096 eth-0

270


# result = single tag, Add tag if etype == 0x8863 , set explicit PBITs, use default TPID lev2l2tag add -filtetype=0x8863 -treatinpri 5 -treatinvid 200 eth-0 # result = single tag, Add tag to untagged frame, set explicit PBITs, use default TPID lev2l2tag add -treatinpri 5 -treatinvid 200 eth-0 # result = double tag, Add VID (900) from incoming ANY VID (with a ethertype default InputTPID), propagate incoming PBIT from incoming tag, use default outputTpid lev2l2tag add -filtinpri=8 -filtintpidde=5 -treatoutpri=8 -treatoutvid=900 -treatinpri=8 -treatinvid=4096 eth-0 CXNK03010101> lev2 show eth-0 lev2 show eth-0 Level 2 Upstream Tagging Entry Table: unit = 0 upstream_filter_drops = 0 outputTpid = 8100 inputTpid = 8100

i ac fop fov fotp

fip fiv fitp feth tr top tov totp tip tiv titp

-- --- ---- ----- ---- ---- ----- ---- ------ --- ----- ----- ------ ----- ----- ----- 0 1 15 4096 0 5 100 0 0 0 15 0 6 4 210 6 1 2 15 4096 0 8 300 0 0 0 15 0 6 8 400 6 2 3 15 4096 0 8 600 0 0 0 8 500 6 8 4096 6 3 4 15 4096 0 8 700 0 0 0 4 800 6 8 4096 6 4 5 15 4096 0 15 4096 0 8863 0 15 0 6 5 200 6 5 0 15 4096 0 15 4096 0 0 0 15 0 6 5 200 6 6 9 15 4096 0 8 4096 5 0 0 8 900 6 8 4096 6

Level 2 Downstream Tagging Entry Table: unit = 0 dnstream_filter_drops = 0 outputTpid = 8100 inputTpid = 8100

I ac fop fov fotp

fip fiv fitp feth tr top tov totp tip tiv titp

--- ---- ---- ---- ---- ----- ---- ----- -- ---- ---- ------ ----- ----- ----- 0 1 15 0 5 4 210 5 0 0 15 0 6 5 100 6 1 2 15 0 5 8 400 5 0 0 15 0 6 8 300 6 2 7 8 500 5 8 4096 5 0 1 15 0 6 15 600 6 3 7 4 800 5 8 4906 5 0 1 15 0 6 15 700 6 4 6 15 0 5 5 200 5 8863 1 15 0 6 15 4096 6 5 6 15 0 5 5 200 5 0 1 15 0 6 15 4096 6 6 7 8 900 6 8 4096 6 0 1 15 0 6 15 4096 6

271


Valid Level 2 - L2 Mapping/Filtering Table Entry Adds

upstream filter drops

Number of upstream frames dropped due to "drop" treatment

downstream filter drops

Number of downstream frames dropped due to "drop" treatment

outputTpid Default Tpid/ethertype for frame output operations

inputTpid Default Tpid/ethertype for input frame filtering operations on Tpid.

i The table index entry

ac An internally defined code for the operation specified Add1VidOnUntaggedExpPbitDefaultOutputTpid=0, VidPbitTranslationExpPbitDefaultOutputTpid=1, VidTranslationPbitPropIncomingDefaultOutputTpid=2, AddVidFromIncomingVIDMatchPbitPropIncomingDefaultOutputT=3, AddVidFromIncomingVIDMatchExpPbitDefaultOutputTpid=4, AddVidFromIncomingEthertypematchExpPbitDefaultOutputTpid=5, RemoveVidOnVidMatchInner=6, RemoveVidOnVidMatchOuter=7, NoOperation

fop ilter Outer Priority value 7 - This number and below is used as outer priority 8 - Do not filter on outer priority 14 - The default when no outer 2 tag rule applies 15 - No double tag rule, ignore all outer filters in this rule

fov filter Outer VID 4094 - This number and below is used as the given filter VID 4096 - Do not filter on outer VID

fotp Filter Outer TPI/DE 0 - Do not filter on outer TPID_DE 4 - Outer TPID - 0x8100 5 - Outer TPID - InputTPID, don't care about DE bit 6 - Outer TPID - InputTPID, DE bit = 0 7 - Outer TPID - InputTPID, DE bit = 1

fip Filter Inner Priority value 7 - This number and below is used as inner priority 8 - Do not filter on inner priority 14 - the default when no other 1 tag rule applies 15 - No tag rule

fiv Filter Inner VID 4094 - This number and below is used as the given filter VID 4096 - Do not filter on inner VID

fitp Filter Inner TPID/DE 0 - Do not filter on inner TPID_DE 4 - Inner TPID - 0x8100 5 - Inner TPID - InputTPID, don't care about DE bit 6 - Inner TPID - InputTPID, DE bit = 0 7 - Inner TPID - InputTPID, DE bit = 1

272


feth Filter ethertype 0 - Do not filter ethertype >0 - ethertype to match on

trd The treatment/remove/drop field value 0 - Don't remove tags or drop frame 1 - remove one tag 2 - remove two tags 3 - drop frame

top The treatment outer priority field 7 - The value less than or equal to this is used as outer priority 8 - copy outer priority from the inner 9 - copy outer from outer 15 - Do not add an outer tag

tov The treatment outer VID 4094 - This value and lower is the VID for outer tag 4096 - Copy outer VID from inner VID 4097 - Copy Outer VID from Outer VID

totp The treatment outer TPID value 0 - TPID and DE copied from inner 1 - TPID and DE copied from outer 2 - TPID - OutputTPID, DE copied from inner 3 - TPID - OutputTPID, DE copied from outer 4 - TPID - 0x81000 6 - Output TPID, DE bit=0 7 - TPID - OutputTPID, DE bit=1

tip The treatment inner priority field 7 - The value less than or equal to this is used as outer priority 8 - Copy outer priority from inner 9 - Copy outer from outer 15 - Do not add an outer tag

tiv The treatment inner VID 4094 - This value and lower is the VID for inner tag 4096 - Copy Inner VID from inner VID 4097 - Copy INner VID from Outer VID

titp The treatment inner TPID value 0 - TPID and DE copied from inner 1 - TPID and DE copied from outer 2 - TPID - OutputTPID, DE copied from inner 3 - TPID - OutputTPID, DE copied from outer 4 - TPID - 0x8100 6 - TPID - OutputTPID, DE bit=0 7 - TPID - OutputTPID, DE bit=1

273


pwe3 e1port The e1port command configures the E1 attributes for the port. The default E1 port settings satisfy most PWE3 applications.

Note: For this release, PWE3 only supports SAToP encapsulation. As such, only the "unframed" frame format is required.

Line coding is supported via High Density Bipolar 3 (HDB3) only. Line buildout does not apply to E1 mode. The loopbackmode attribute provides capabilities to test the line. The inbandloopback attribute enables/disables the inband loopback detection

mechanism.

Once the PWE3 service is provisioned, only the loopbackmode, inbandloopback, and adminstate attributes can be modified.

Usage: pwe3 e1port [-frameformat=<enum>] [-linecoding=<enum>] [-loopbackmode=<enum>] [-inbandloopback=<enum>] [-adminstate=<enum>] port= AE Mode - Provision the E1 Port for PWE3. Options:

-frameformat=<enum> Frame Format: unframed (default unframed).

type: unframed -linecoding=<enum> Line Encoding: hdb3 (default hdb3). type: hdb3 -loopbackmode=<enum> Loopback Control: none, facility,

equipment, payload(default none). type: none, facility, equipment, payload

-inbandloopback=<enum> Inband Loopback Enable: disabled, enabled (default disabled).

type: disabled, enabled -adminstate=<enum> Administrative State: enabled, disabled

(default enabled). type: disabled, enabled Parameters:

port= T1 Port (1..8). type: Unsigned

274


pwe3 service create This service command creates the PWE3 service. This command includes the following attributes:

The default packet size chosen should be set to a value that yields an approximate packet creation time of 1 msec.

The recommended jitter buffer size, assuming negligible network packet delay variation, is typically 1.5 times the packet creation time.

Defaults are chosen to minimize end-to-end delay for the T1 circuit. For ease of provisioning, the packet creation time (msec) can be calculated as follows:

packet size ÷ 193

Note: The packet size must match at both ends of the pseudowire (source and destination).

The UDP port parameter is utilized to associate a particular packet stream with a T1 port and is considered the local pseudowire label (PW label). If the other end of the pseudowire uses a different PW label, the remote UDP port can be optionally specified.

Note: The UDP port values (local PW label) must be unique.

The RTP header attribute establishes whether or not RTP headers are added to the beginning of the packets. If RTP headers are enabled, the RTP mode attribute defines how the RTP timestamp is generated.

Note: Differential timing (clock recovery) requires differential timestamps and RTP headers to be enabled. Adaptive timing (clock recovery) requires absolute timestamps and can be configured with RTP headers either enabled or disabled. Loop timing does not utilize clock recovery. Instead the T1 receive clock is utilized for timing.

Note: The ONT only supports a single RTP timestamp mode. For clock recovery, all PWE3 services must be configured for either absolute or differential timing. Usage: pwe3 service create [-remoteudpport=][-localudpport=] [-satpacketsize=] [-jitterbuffer=]port= destip=<ipaddr> rtpheader=<enum> rtpmode=<enum> timingmode=<enum>

Provision the PWE3 Service on the T1 Port (AE mode only). Options: -satpacketsize= SAToP Packet Size: 80..1450 bytes

(default 204 bytes). type: Unsigned -jitterbuffer= Jitter Buffer Size: 1..512000 usec

(default 1500 usec). type: Unsigned -remoteudpport= The UDP port value that designates the

remote PW LABEL. (1024..65534) Defaults to the ‘udpport’

value.

275


-localudpport= The uDP port value that designates the local PW LABEL. (1024..65535).

type: Unsigned Parameters: port= T1 Port (1..8). type: Unsigned destip=<ipaddr> The destination IP address for this PWE3

service. type: IP Address rtpheader=<enum> RTP Header Control: enable, disable. type: disable, enable rtpmode=<enum> RTP Timestamp Generation Mode:

differential, absolute. type: absolute, differential timingmode=<enum> PWE3 Timing Mode: adaptive, differential,

loop. type: adaptive, differential, loop

pwe3 service delete This service command deletes the PWE3 service from the specified T1 port.

Usage: pwe3 service delete port= Delete the PWE3 Service on the T1 Port (AE mode only). Parameters: port= T1 Port (1..8) type: Unsigned

276


PWE3 PM Statistics

Bundle Configuration Status

The Bundle Configuration Status command provides a quick summary of the currently provisioned bundles.

Note: The Bundle ID value is generated internally and is displayed with this command. The Bundle Configuration Status can be used to get information on specific bundles.

Usage: pwe3 prov get bundle Summary of provisioned bundles: T1 Link : 1 Bundle ID : 100 (Index : 0) SAToP T1 Link : 2 Bundle ID : 200 (Index : 1) SAToP T1 Link : 3 Bundle ID : 300 (Index : 2) SAToP T1 Link : 4 Bundle ID : 400 (Index : 3) SAToP Alternate: pwe3 prov get bundle -bundle 100 T1 Link : 1 Bundle ID : 100 (Index : 0) SAToP Tx Port#........... 49153 Rx Port#........... 49153 Destination........ 11.1.1.200 Next Hop........... 0.0.0.0 Recovery........... Enabled RTP................ Disabled Jitter Buffer...... 1000 usec Bytes in Packet.... 80 Payload............ Data

277


Jitter Buffer Status

The Jitter Buffer Status command displays information for all currently provisioned jitter buffers. Each provisioned PWE3 service that is provisioned uses a separate jitter buffer.

The provisioned depth of the jitter buffer is what is provisioned via the service command. This value defines the amount of data to be stored in the jitter buffer to compensate for network delay variation. The provisioned maxdepth of the jitter buffer is calculated internally based on the provisioned depth and the provisioned packet size as:

(2 * provisioned depth) + (2 * packet creation time)

When the jitter buffer reaches the maxdepth, an overflow condition occurs (whereby packets arrive faster than the data is being converted to the TDM stream). When the jitter buffer reaches 0, an underflow condition occurs (data is being converted to the TDM stream faster than packets arrive). The min/max/current values represent the status of the jitter buffer at the time the command was executed. The history low/high values are watermarks of the highest and lowest the level has gotten since the last time the values were cleared. The values are cleared via the bundle performance status command that follows.

Usage: pwe3 pm buffer

Jitter Buffer Statistics: Provisioned Current History ----------------- -------------------------- ----------------- ID Depth MaxDepth Min Current Max Low High ---- -------- -------- -------- -------- -------- -------- -------- 100 1000 2832 932 1197 1492 808 1512 OK 200 1000 2832 932 1365 1450 704 1450 OK 300 1000 2832 911 1155 1471 683 1471 OK 400 1000 2832 808 1134 1326 642 1326 OK

278


Bundle Performance Status

The Bundle Performance Status command provides a summary of how the bundle is running.

Note: If the Bundle ID is not specified, all bundles are reported. To report on a specific bundles performance, enter the Bundle ID number as [-bundle=<enum>]

Usage: pwe3 pm bundle Bundle PM Summary: ID T1 Type TX Packets RX Packets Alm/Cnt Recovery ----- -- -------- ------------ ------------ ------- --------------- 100 1 SAToP 31195970 31195970 TRACKING 2 200 2 SAToP 31195967 31195966 TRACKING 2 300 3 SAToP 31195957 31195958 TRACKING 2 400 4 SAToP 31195952 31195953 TRACKING 2 Alternate: pwe3 pm bundle -bundle 100

Bundle Statistics : T1 Link : 1 Bundle ID : 100 (Index : 0) SAToP Packets TX Ok.........................32923656 Packets RX Ok.........................32923656 RX Packets Lost.......................0 RX Packets Discarded (overrun)........0 RX Packets Reordered..................0 RX Packets Jumped.....................0 Jitter Buffer Underrun................0 Max Jitter Buffer Level...............1471 (hi - 1512) Min Jitter Buffer Level...............911 (lo - 808) Current Jitter Buffer Level...........1134 OK Packet Creation Time (PCT)............416 Current Packet Delay Variance (PDV)...144 Longest PDV...........................268 Clock Recovery........................TRACKING 2 Alternate 2: pwe3 pm bundle –clr Alternate 3: pwe3 pm bundle –bundle 100 -clr

Alternate displays the statistics for a specific bundle ID

Alternate 2 clears the statistics for all provisioned bundle IDs

Alternate 3 clears the statistics for a specific bundle ID

279


Bundle Performance Status Notes A normally running bundle has transmit and receive packet counts that are virtually the

same and incrementing at the same rate. The Alm/Cnt column is used to alert the user if any abnormalities have been detected. The Recovery column displays the current state of clock recovery, if clock recovery is

enabled. The clock recovery states are: IDLE, ACQUISITION, TRACKING 1, TRACKING 2, RECOVER FROM UNDERRUN/OVERRUN, and NOT ACTIVE. If clock recovery is disabled, recovery is NOT ACTIVE. When the bundle is provisioned with clock recovery enabled, the clock recovery state machine transitions from IDLE to ACQUISITION to TRACKING 1 and finally TRACKING 2. The TRACKING 2 state indicates the clock recovery is fully phase tracking.

Note: It may take several minutes for clock recovery to transition to TRACKING 2 and significant network delay variation causes it to take longer.

Bundle Error Conditions

The pwe3 alm bundle command provides a summary of the error conditions for all provisioned bundles. Some conditions may be currently active while others may have been detected at some point and have cleared (may have to clear the conditions and display again to determine if conditions are active vs. were detected but have now cleared).

Usage: pwe3 alm bundle Bundle Alarm Summary: ID T1 Type Tx-R Tx-L Rx-R Rx-L Dscd Len JBOV JBUN JBRS ----- -- -------- ---- ---- ---- ---- ---- ---- ---- ---- ---- 100 1 SAToP 200 2 SAToP 300 3 SAToP 400 4 SAToP Alternate: pwe3 alm bundle -bundle 100 Bundle Alarms : T1 Link : 1 Bundle ID : 100 (Index : 0) SAToP Not Receiving Packets (TX R-bit).............OFF Local TDM Failure (TX L-bit).................OFF Local Modifier (TX M-bits)...................OFF TDM Packet Discard (TX low bundle buffers)...OFF Packet Length Mismatch.......................OFF Remote Not Receiving Packets (RX R-bit)......OFF Remote TDM Failure (RX L-bit)................OFF Remote Modifier (RX M-bits)..................OFF Jitter Buffer Overrun........................OFF Jitter Buffer Underrun.......................OFF Jitter Buffer Reset..........................OFF

280


Alternate 2: pwe3 alm bundle –clr Alternate 3: pwe3 alm bundle –bundle 100 -clr

Alternate displays details for a specific bundle ID

Alternate 2 clears the details for all bundles

Alternate 3 clears the details for a specific bundle ID

281


Ethernet Performance Status

While the ONT does not contain a physical Ethernet port for PWE3, internally the ONT does contain a switch that directs all PWE3 traffic to the PWE3 chip. The pwe3 pm ethernet command displays information regarding the aggregate Ethernet interface (all bundle and control traffic) for the PWE3 chip. The statistics of most value are the counters for the number of packets being transmitted and received. When the pseudowires are running normally, these counts are incrementing at the same rate. The PWE3 chip contains an extensive packet classifier that determines how received packets are to be processed and where the packets are destined. Any packet that does not satisfy packet classification can be considered a stray packet. Under normal conditions, the classified packet count is incrementing at the same rate as the received packet count. If the unclassified/stray count is incrementing steadily, then the packet flow to the PWE3 chip is receiving stray packets. Stray packets are most likely to occur when the far-end of the pseudowire is transmitting prior to the near-end pseudowire being provisioned (for example, only half of the pseudowire is provisioned).

Usage: pwe3 pm ethernet PWE3 Ethernet Statistics Packets TX OK...................139342032 (934262126 bytes) Packets RX OK...................139342040 (934282186 bytes) Classified Packets (RX).........139342040 (0 unclassified/stray) Pause Packets RX OK.............0 Pause Packets TX OK.............0 FCS Errors (RX).................0 Alignment Errors (RX)...........0 Single Collisions (TX)..........0 Multiple Collisions (TX)........0 Symbol Errors (RX)..............0 Deferred Packets (TX)...........0 Excessive Length Packets (RX)...0 Underrun (TX)...................0 Jabber Errors (RX)..............0 Excessive Collisions (TX).......0 Undersize Packets (RX)..........0 Late Collisions (TX)............0 IP Checksum Errors (RX).........0 Carrier Sense (TX)..............0 Sequence Test Errors (TX).......0 Alternate: pwe3 pm ethernet -clr

All Ethernet statistics can be cleared using the alternate command

282


Pseudowire Commands Several commands are available for managing PWE3 services.

TDM Mode

Prior to provisioning any PWE3 ports or services, you must set TDM services to run in either T1 or E1 mode.

Note: Upon switching the TDM mode, the ONT automatically resets. The default TDM mode is T1.

Usage: pwe3 tdmmode [-mode=<enum>] Get/Set the TDM operating mode for the ONT. Options: -mode=<enum> T1 or E1 type: t1, e1

pwe3 bridge create

This bridge command is designed to facilitate the following:

Creates the layer 2 bridge on the ONT for carrying all PWE3 traffic between the WAN interface and the PWE3 Ethernet interface (for example, eth-4).

Defines the VLAN tag for the PWE3 traffic (tagged VLANs are a required element for PWE3 transport).

Defines the PWE3 traffic p-bit priority (for example, p-bit 7). Defines the source IP address used for all PWE3 traffic on the ONT.

Note: The ONT PWE3 implementation supports a subnet mask of 255.255.255.0. If the two ends of the pseudowire (source and destination IP address) are on the same subnet, then a default gateway is not necessary. If the destination IP address of the pseudowire is on a different subnet, then the default gateway must be defined for the subnet that the source IP address resides on.

283


Usage: pwe3 bridge create [-mask=<ipaddr>] [-gateway=<ipaddr>] vid= pbit= staticip=<ipaddr> Provision the Bridge and static IP address for PWE3 (AE mode only). Options:

-mask=<ipaddr> The subnet mask for PWE3 traffic (default 255.255.255.0). type: IP Address -gateway=<ipaddr> The default gateway for PWE3 traffic

(default 0.0.0.0). type: IP Address Parameters: vid= The VLAN ID used for PWE3 traffic

(1..4094). PWE3 traffic must be tagged and should use a unique VLAN.

type: Unsigned pbit= The priority of the PWE3 traffic (0..7).

PWE3 should use a high pbit value. type: Unsigned staticip=<ipaddr> The static IP address for PWE3 traffic. type: IP Address

pwe3 bridge delete

This bridge command deletes the PWE3 bridge on the ONT. Since there is only a single bridge for PWE3 traffic on the ONT, no other parameters are required.

Note: The bridge cannot be deleted if PWE3 service is provisioned. Usage: pwe3 bridge delete Delete the bridge for PWE3 (AE mode only).

pwe3 t1port

The T1 port command configures the T1 attributes for the port. The default T1 port settings satisfy most PWE3 applications.

Note: For this release, PWE3 only supports SAToP encapsulation. As such, only the "unframed" frame format is required.

Line coding and line build out are T1 physical layer attributes that are dependent upon the particular application.

The loopbackmode attribute provides capabilities to test the line. The inbandloopback attribute enables/disables the inband loopback detection

mechanism.

284


Once the PWE3 service is provisioned, only the loopbackmode, inbandloopback, linebuildout, and adminstate attributes can be modified.

Usage: pwe3 t1port [-frameformat=<enum>][-linecoding=<enum>] [-linebuildout=<enum>][-loopbackmode=<enum>][-inbandloopback=<enum> [-adminstate=<enum>] port= Provision the T1 port for PWE3 (AE Mode only). Options:

-frameformat=<enum> Frame Format: unframed, esf, sf (default unframed).

type: unframed, esf, sf -linecoding=<enum> Line Encoding: b8zs, ami (default b8zs). type: b8zs, ami -linebuildout=<enum> Line Build Out: 0_133, 133_266, 266_399,

399_532, 532_655 (default 0_133). type: 0_133, 133_266, 266_399, 399_532,

532_655 -loopbackmode=<enum> Loopback Control: none, facility,

equipment, payload (default none). type: none, facility, equipment, payload -inbandloopback=<enum> Inband Loopback Enable: disabled, enabled

(default disabled). type: disabled, enabled -adminstate=<enum> Administrative State: enabled, disabled

(default enabled). Parameters: port= T1 Port (1..8) type: Unsigned

285


About Differential Clock Recovery

Differential clock recovery is possible in AE mode when the WAN uplink Ethernet port is synchronous (when the upstream switch/router is sourcing SyncE towards the ONT). The ONT contains a global flag indicating the current state of SyncE on the WAN interface. When SyncE is not active, PWE3 is utilizing the local oscillator as its clock source (local oscillator implies the local PWE3 is running asynchronously to the remote PWE3). In this case, differential clock recovery will not function properly since differential clock recovery requires both ends to have common (the same) timing – both ends are synchronous. When SyncE is active, PWE3 utilizes the WAN clock as its clock source. The WAN clock, when SyncE is active, is assumed to be traceable and is trusted. Assuming both ends of the pseudowire have SyncE active, differential clock recovery is possible as long as the SyncE is traceable to the same source.

The PWE3 subsystem periodically monitors the ONT SyncE state and adjusts the PWE3 clock source appropriately with respect to the SyncE state. PWE3 is considered to be misconfigured if differential clock recovery is active when SyncE is inactive. This results in an SNMP provisioning mismatch trap.

By nature, adaptive clock recovery is an asynchronous clock recovery mechanism. As such, only adaptive clock recovery is possible when SyncE is inactive. However, adaptive clock recovery can always be used when SyncE is active.

PWE3 SNMP Support

The ONT in AE mode provides SNMP support for gathering performance monitoring statistics. The SNMP support includes both enterprise and standard MIBs.

Standard MIBs

The following standards are supported. Refer to the standard RFCs for complete definitions.

RFC 5601 – PW-STD-MIB

pwPerfCurrentTable – The current 15-minute period. pwPerfIntervalTable – The previous 96 15-minute periods. pwPerf1DayIntervalTable – The current 24-hour period and the previous 24-hour period. pwPerfTotalErrorPackets – A scalar indicating the total number of packet errors

encountered at the PWE3 interface.

RFC 5604 – PW-TDM-MIB

pwTDMPerfCurrentTable – The current 15-minute period. pwTDMPerfIntervalTable – The previous 96 15-minute periods. pwTDMPerf1DayIntervalTable – The current 24-hour period and the previous 24-hour

period.

286


RFC 1406 – RFC1406-MIB

dsx1CurrentTable – The current 15-minute period. dsx1IntervalTable – The previous 96 15-minute periods. dsx1TotalTable – The previous 24-hour period.

Enterprise MIBs

See AE-PM-TABLE-MIB.mib for complete definitions.

Bundle PM (individual pseudowire PM) – Statistics such as packets transmitted and received and error conditions such as lost packets and jitter buffer underruns.

aePwe3BunCurrent15Table – The current 15-minute period. aePwe3BunInterval15Table – The previous 96 15-minute periods. aePwe3BunCurrent24Table – The current 24-hour period. aePwe3BunInterval24Table – The previous 24-hour period.

Aggregate PM (aggregate PWE3 interface) – Statistics such as packets transmitted and received and classified packets.

aePwe3AggCurrent15Table – The current 15-minute period. aePwe3AggInterval15Table – The previous 96 15-minute periods. aePwe3AggCurrent24Table – The current 24-hour period. aePwe3AggInterval24Table – The previous 24-hour period.

T1 PM – Statistics such as ES (errored seconds), UAS (unavailable seconds), and LCV (line code violations)

aePwe3T1Current15Table – The current 15-minute period. aePwe3T1Interval15Table – The previous 96 15-minute periods. aePwe3T1Current24Table – The current 24-hour period. aePwe3T1Interval24Table – The previous 24-hour period.

287


PWE3 Provisioning Example When provisioning PWE3, services must be created in the following order:

1. The bridge must always be configured first, and only once, on the ONT.

2. The T1 port must be configured (simply enabled if all of the default values apply).

3. The pseudowire service must be created.

Once the three steps above have been accomplished, then and only then can subsequent T1 ports and services can be added.

Note: The first time the service is configured, the ONT must ARP for the destination MAC address prior to establishing the pseudowire connection and passing T1 payload. The ONT continues to ARP until either the other end responds or the service is deleted.

For the example directly below, the UDP demultiplexing mode is configured per item 1 above:

pwe3 tdmmode -mode t1 pwe3 bridge create 101 5 11.1.1.199 pwe3 t1port 1 pwe3 service create -localudpport 2001 1 11.1.1.200 disable absolute adaptive pwe3 t1port –linebuildout 133_266 2 pwe3 service create -localudpport 2002 2 11.1.1.200 disable absolute adaptive

The provisioning steps above for t1 transport are summarized in the following table:

Provisioning Example

Command Function

pwe3 tdmmode - mode t1 The ONT TDM mode is established for T1 transport. This is a one-time only event and applies to any future services or ports created.

pwe3 bridge create 101 5 11.1.1.199 The bridge is created with the PWE3 traffic utilizing VLAN 101 with priority 5. The IP address for the t1 PWE3 traffic on the ONT is 11.1.1.199.

pwe3 t1port 1 The first T1 port is enabled. The port defaults to unframed, B8ZS, 0-133 feet, no loopback, with inband loopback detection disabled.

pwe3 service create -localudpport 2001 1 11.1.1.200 disable absolute adaptive

The service on port 1 is created with a default packet size of 204 bytes and a jitter buffer of 1500 µsec. RTP headers are disabled and since adaptive clock recover is being used, the RTP timestamp mode is absolute. The far end of the pseudowire has an IP address of 11.1.1.200 and uses UDP port number 2001.

pwe3 t1port –linebuildout 133_266 2 The second T1 port is enabled. The same defaults are used except this line assumes a longer drop so the line build out is specified as 133-266 feet

pwe3 service create -localudpport 2002 2 11.1.1.200 disable absolute adaptive

The service on port 2 is created identically to the service on port 1 except the UDP port number is changed (must be unique to the port).

288


In the following example, the TDM mode is set to E1 and the UDP demultiplexing mode is configured per item 3 above:

pwe3 tdmmode -mode e1 pwe3 bridge create 101 5 11.1.1.99 pwe3 e1port 1 pwe3 service create -remoteudpport 4000 -localudpport 3000 -satpacketsize 216 1 12.1.1.10 disable absolute adaptive

The provisioning steps above for e1 transport are summarized in the following table:

Provisioning Example

Command Function

pwe3 tdmmode - mode e1 The ONT TDM mode is established for E1 transport. This is a one-time only event and applies to any future services or ports created.

pwe3 bridge create 101 5 11.1.1.199 The bridge is created with the PWE3 traffic utilizing VLAN 101 with priority 5. The IP address for E1 PWE3 traffic on the ONT is 11.1.1.199.

pwe3 e1port 1 The first E1 port is enabled. The port defaults to unframed, HDB3, no loopback, with inband loopback detection disabled.

pwe3 service create -remoteudpport 4000 -localudpport 3000 -satpacketsize 216 1 12.1.1.10 disable absolute adaptive

Service is created with a packet size of 216 bytes. Packets are received on UDP port 3000 and transmitted to UDP port 4000.

289


PWE3 Timing Configuration Examples

Note: Calix strongly recommends that you familiarize yourself with PWE3 provisioning by reviewing the sample configuration file (pwe3_setup.cfg) provided with the AE software distribution. This file includes notes and full explanations for required provisioning components.

Loop Timing Example ONT Specific Configuration File: [CALIX_AE_ONT:R1] include inc/common.cfg include inc/PWE3_51F01.cfg config label set label="51F01" PWE3 Configuration File: [CALIX_AE_ONT:R1] ### Provision the TDM mode of the ONT pwe3 tdmmode -mode t1 ### Define the PWE3 IP address, VLAN, and p-bit value. This creates the bridge for PWE3. ### pbit is typically 5-7 for PWE3 pwe3 bridge create -staticip=11.11.11.1 vid=10 pbit=5 ### Provision the T1 port if TDM mode is T1. Provision the E1 port if TDM mode is E1. ### T1 defaults: unframed, B8ZS, 0-133 feet, no loopback, inband loopback disabled, admin enabled pwe3 t1port port=1 ### Provision the PWE3 service. pwe3 service create -destip=11.11.11.2 -locallabel=40001 -remotelabel=30001 port=1 rtpheader=disable rtpmode=absolute timingmode=loop

290


Adaptive Timing Example ONT Specific Configuration File: [CALIX_AE_ONT:R1] include inc/common2.cfg include inc/PWE3_51ED6.cfg config label set label="51ED6" PWE3 Configuration File: [CALIX_AE_ONT:R1] ### Provision the TDM mode of the ONT pwe3 tdmmode -mode t1 ### Define the PWE3 IP address, VLAN, and p-bit value. This creates the bridge for PWE3. ### pbit is typically 5-7 for PWE3 pwe3 bridge create -staticip=11.11.11.2 vid=10 pbit=5 ### Provision the T1 port if TDM mode is T1. Provision the E1 port if TDM mode is E1. ### T1 defaults: unframed, B8ZS, 0-133 feet, no loopback, inband loopback disabled, admin enabled pwe3 t1port port=1 ### Provision the PWE3 service. pwe3 service create -destip=11.11.11.1 -locallabel=30001 -remotelabel=40001 port=1 rtpheader=disable rtpmode=absolute timingmode=adaptive

291


IPTV Commands The following commands are available for provisioning IPTV within the system.

Video Profile commands Per port channel limiting Provisionable query interval Per port Multi-cast to Uni-cast control (m2u) MVR Provisioning Multi-cast range filtering (IGMP joins outside the Multi-cast range are dropped).

Video Profiles

The video profile command contains attributes that control per-port channel limits, query intervals, and m2u controls

videoprofile create

Usage

videoprofile create [-maxchannels=] [-queryinterval=] [-m2u=<enum>] name=<str>

Create a video service profile for IPTV

Options

-maxchannels= Sets maximum number of channels that can be joined (0 = no limit).

type: Unsigned (0 - 512)

-queryinterval= Router query interval (in seconds) type: Unsigned (30 - 3600)

-m2u=<enum> Enable Multicast to Unicast conversion? Yes = 1, No = 0 type: enum

Parameters

name=<str> Provide a video profile name type: charstring (14)

292


Additional Supported Commands

Action videoprofile delete name=<str>

Result

Delete an existing video profile Action videoprofile show

Result

Displays all video profiles created

Multicast VLAN Registration (MVR) Provisioning

MVR allows the downstream video content to flow from one or more VLANs that are separate from the set-top control VLAN. This is beneficial in instances where a set-top control VLAN bridge is created to classify all traffic from the set-top-boxes, including IGMP. With MVR enabled, the VLAN is changed on the IGMP packets before packets are sent upstream. The corresponding video content then flows downstream on the MVR VLAN.

For a given video VLAN, up to 4 MVR VLANs can be defined. In addition, each MVR VLAN can contain up to 4 multicast ranges. An upstream IGMP has its VLAN changed based on matching one of these MVR multicast ranges.

This command creates an MVR profile

mvrprofile create

Usage

mvrprofile create vlan=

Create a new MVR profile to support downstream video on a specific VLAN

Options

vlan Define VLAN ID for transporting downstream video

type: unsigned

293


Additional MVR Commands

Action mvrprofile delete vlan=

Result

Deletes an mvrprofile)

Action mvrprofile add vlan= mvrvlan=

Result

Adds an MVR VLAN to an existing profile

Action mvrprofile remove vlan= mvrvlan=

Result

Removes an MVR VLAN from an existing profile.

Action mvrprofile set vlan= mvrvlan= index= ipstart=<ipaddr> ipend=<ipaddr>

Result

Establishes a range for a given MVR VLAN. Up to 4 ranges can be specified per MVR VLAN. Ranges cannot overlap within a given MVR profile, in other words, a given range must uniquely identify a particular MVR VLAN. One MVR VLAN can contain a range specified as ipstart=0.0.0.0 and ipend=0.0.0.0. Unspecified IP addresses act as a wildcard and match any range not otherwise given

Action mvrprofile clear vlan= mvrvlan= index=

Result

Clears a range for a given MVR VLAN

Action mvrprofile show

Result

Displays the defined MVR profiles

294


Multicast Range Filters

Multicast ranges act as "allow" filters and are setup on a per video VLAN basis. The video VLAN is the "vid" specified in the bridge setup command (where IGMP snooping is enabled).

mcrange create

Usage

mcrange create vlan=

Create a multicast range associate with a video vlan

Parameters

vlan= VLAN ID (0 - 4094) type: unsigned

Additional Supported Commands

Action mcrange delete vlan=

Result

Delete an existing multicast range Action mcrange set vlan= index= ipstart=<ipaddr> ipend=<ipaddr>

Result

Sets a range at the specified index value starting and ending IP addresses.

Note: Up to 8 ranges are supported per video VLAN.

Action mcrange clear vlan= index=

Result

Clears a specified range of multicast range filters

Action mcrange show

Results

Displays all currently defined multicast ranges

295


MVR Provisioning Examples

Creating an MVR Bridge In order to support MVR, separate bridges must be created for each MVR VLAN.

Note: IGMP snooping must be enabled on MVR VLAN bridges.

This example shows how to setup a video VLAN 800 using VLAN 26 as the MVR VLAN.

To create an MVR bridge

1. Create a basic video profile specifying max channels and query interval video create –maxchannels 16 –queryinterval 240 name=basic

2. Create a multicast address ranges for allowed channels mcrange create vlan=800 mcrange set vlan=800 index=1 ipstart=238.0.0.0 ipend=239.255.255.255

3. Create an MVR profile to support downstream video on VLAN 26 mvr create vlan=800 mvr add vlan=800 mvrvlan=26 mvr set vlan=800 mvrvlan=26 index=1 ipstart=0.0.0.0 ipend=0.0.0.0

4. Create the bridge associated with the video VLAN 800 bridge setup –snoop enabled –video basic vid=800 dev=eth-0

5. Create the bridge associated with the MVR VLAN 26 bridge setup –snoop enabled vid=26 dev-eth-0

MVR Video Profile for Untagged CPE [root@k2intsolsrv1 video]# cat MvrVideo_5Channels.cfg [CALIX_AE_ONT:R1] # # Example MVR Video profile for untagged CPE # # MVR Video Script parameters: # $0 = Subscriber Unicast Video VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # 500 = Video VLAN delivering all multicast video content # # Create subscriber unicast video VLAN mvrprofile create vlan=$0 # Associate the unicast VLAN with the MVR VLAN mvrprofile add vlan=$0 mvrvlan=500 # Create multicast allow range (Do not need if full range is allowed) mcrange create vlan=$0 mcrange set vlan=$0 index=1 ipstart=224.0.1.0 ipend=239.255.255.255 # Add multicast allow range to allow all multicast addresses

296


mvrprofile set vlan=$0 mvrvlan=500 index=1 ipstart=0.0.0.0 ipend=0.0.0.0 # Create a video profile to limit streams and set query interval videoprofile create -maxchannels=5 -queryinterval=180 -m2u=false name=5_Channels # Create bridge associated with unicast video VLAN bridge setup -vprofile=5_Channels -snoop=enable -macff=enable vid=$0 dev=$1 # Create bridge associated with MVR VLAN bridge setup -snoop=enable vid=500 dev=$1 # # Set up appropriate OUI filtering for set top boxes # include inc/video_oui.cfg $0 $1

Notes on Above Configuration All multicast content is expected on VLAN 500 of the AE ONT WAN interface

The VLAN for all unicast content is specified based on an input from the CMS GUI. By using the VLAN variable, it allows the user to specify multiple unicast video VLANs. If you have a large video subscriber base, this would be the optimal method of configuration since it is likely multiple unicast video VLANs would be available on a geographic basis. If not, the $0 variable could be removed and simply hard coded; thus, ignoring the VLAN value passed in via the CMS GUI.

When an IGMP message is received from the CPE, the IGMP snooping code adds a tag of VID 500 and sends the REPORT, LEAVE, and the like upstream.

By using the Level 1 L2 map/filter, all untagged traffic that matches the specified video OUI is directed to the unicast video VLAN unless it is multicast content.

Ranges cannot overlap within a given MVR profile, in other words, a given range must uniquely identify a particular MVR VLAN. One MVR VLAN can contain a range specified as ipstart=0.0.0.0 ipend=0.0.0.0. This acts as a wildcard and matches any range not otherwise given.

297


MVR Video Profile for Tagged CPE [root@k2intsolsrv1 video]# cat MvrVideoVid700_5Channels.cfg [CALIX_AE_ONT:R1] # # Example MVR Video profile for tagged CPE # # MVR Video Script parameters: # $0 = Subscriber Unicast Video VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # 500 = Video VLAN delivering all multicast video content # # Create subscriber unicast video VLAN mvrprofile create vlan=$0 # Associate the unicast VLAN with the MVR VLAN mvrprofile add vlan=$0 mvrvlan=500 # Create multicast allow range (Do not need if full range is allowed) mcrange create vlan=$0 mcrange set vlan=$0 index=1 ipstart=224.0.1.0 ipend=239.255.255.255 # Add multicast allow range to allow all multicast addresses mvrprofile set vlan=$0 mvrvlan=500 index=1 ipstart=0.0.0.0 ipend=0.0.0.0 # Create a video profile to limit streams and set query interval videoprofile create -maxchannels=5 -queryinterval=180 -m2u=false name=5_Channels # Create bridge associated with unicast video VLAN bridge setup -vprofile=5_Channels -snoop=enable -macff=enable vid=$0 dev=$1 # Create bridge associated with MVR VLAN bridge setup -snoop=enable vid=500 dev=$1 # # Add a Level 2 L2 tag action to handle the tagged traffic from the RG # and change the priority bit to a more appropriate value # lev2l2tag add -filtinvid=700 -treatinvid=$0 -treatinpri=3 dev=$1

298


Notes on Above Configuration All multicast content is expected on VLAN 500 of the AE ONT WAN interface.


When an IGMP message is received from the CPE, the IGMP snooping code adds a tag of VID 500 and sends the REPORT, LEAVE, and the like upstream.


Ranges cannot overlap within a given MVR profile, in other words, a given range must uniquely identify a particular MVR VLAN. One MVR VLAN can contain a range specified as ipstart=0.0.0.0 ipend=0.0.0.0. This acts as a wildcard and matches any range not otherwise given. One MVR VLAN can contain a range specified as ipstart=0.0.0.0 ipend=0.0.0.0. This acts as a wildcard and matches any range not otherwise given.

This method allows a customer to deploy all residential gateway devices pre-configured with a video VLAN of 700 and the tag action changes all unicast content to the specified VLAN and uses a pre-determined priority.

Snooping is required on each MVR VLAN.

299


Multiple MVR VLANs for Untagged CPE [root@k2intsolsrv1 video]# cat MvrVideo_SD_HD_5Channels.cfg [CALIX_AE_ONT:R1] # # Example Multiple MVR VLANs Video profile for untagged CPE # # MVR Video Script parameters: # $0 = Subscriber Unicast Video VLAN assigned for this subscriber # $1 = Ethernet port eth-0, eth-1 .. eth-X depending on ONT type # 500 = Video VLAN delivering all multicast video content # # Create subscriber unicast video VLAN mvrprofile create vlan=$0 # Associate the unicast VLAN with the MVR VLAN mvrprofile add vlan=$0 mvrvlan=500 mvrprofile add vlan=$0 mvrvlan=600 # Create multicast allow range (Do not need if full range is allowed) mcrange create vlan=$0 # SD Content mcrange set vlan=$0 index=1 ipstart=224.0.1.0 ipend=227.255.255.255 # HD Content mcrange set vlan=$0 index=2 ipstart=230.0.0.1 ipend=235.255.255.255 # Add multicast allow range to specify multiple MVR VLANs # SD Content mvrprofile set vlan=$0 mvrvlan=500 index=1 ipstart=224.0.1.0 ipend=227.255.255.255 # HD Content mvrprofile set vlan=$0 mvrvlan=600 index=2 ipstart=230.0.0.1 ipend=235.255.255.255 # Create a video profile to limit streams and set query interval videoprofile create -maxchannels=5 -queryinterval=180 -m2u=false name=5_Channels # Create bridge associated with unicast video VLAN bridge setup -vprofile=5_Channels -snoop=enable -macff=enable vid=$0 dev=$1 # Create bridge associated with MVR VLANs bridge setup -snoop=enable vid=500 dev=$1 bridge setup -snoop=enable vid=600 dev=$1 # # Set up appropriate OUI filtering for set top boxes # include inc/video_oui.cfg $0 $1

300


Notes on Above Configuration All SD multicast content is expected on VLAN 500 on the ONT WAN interface.

All HD multicast content is expected on VLAN 600 on the ONT WAN interface.


When an IGMP message is received from the CPE, the IGMP snooping code adds a tag for VID 500 or VID 600 and send the REPORT, LEAVE, and like messages upstream to the appropriate VLAN based on the DA of the IGMP frame.


Ranges cannot overlap within a given MVR profile, in other words, a given range must uniquely identify a particular MVR VLAN.

A separate bridge is required for each MVR VLAN.

Snooping is required on each of the MVR VLANs.

301


MVR Video Configuration on an ONT The example below depicts a typical video set-up using the MVR model of video provisioning. The commands displayed in italic pertain to the MVR video setup.

CXNK0006CDA0> hist 1 config syslog setup -prisvr=172.16.73.1 -secsvr=172.16.73.1 2 config trap sink -s1=172.16.73.1 -s2=172.16.73.1 -community=public 3 config ntp update -prisvr=172.16.73.1 -secsvr=172.16.73.1 offset=-21600 4 config upgrade -prisvr 172.16.73.1 -secsvr 172.16.73.1 -downok filename=calix_ae_700sfu_r1.1.2.1.rto 5 config label set label="711GE" 6 bridge setup -mf=enable -macff=enable -dcir=100000000 -dpir=100000000 -ucir=10000000 -upir=10000000 vid=125 dev=eth-0 7 lev2 add -treatinpri=0 -treatinvid=125 dev=eth-0 8 mvrprofile create vlan=225 9 mvrprofile add vlan=225 mvrvlan=500 10 mcrange create vlan=225 11 mcrange set vlan=225 index=1 ipstart=224.0.1.0 ipend=239.255.255.255 12 mvrprofile set vlan=225 mvrvlan=500 index=1 ipstart=0.0.0.0 ipend=0.0.0.0 13 videoprofile create -maxchannels=5 -queryinterval=180 -m2u=false name=5_Channels 14 bridge setup -vprofile=5_Channels -snoop=enable -macff=enable vid=225 dev=eth-0 15 bridge setup -snoop=enable vid=500 dev=eth-0 16 lev1 add -filtmac=sa -filtmacmask=ff:ff:ff:00:00:00 -filtmacmatch=00:02:02:00:00:00 -treatinpri=4 -treatinvid=225 dev=eth-0 17 voip setup -pbit=5 -gwf = disable vid=95 board=i-pots port=0 display="GE ONT" file=inc/VoipConfig.txt prisvr=172.16.74.1 secsvr=172.16.74.1 user="1002" password="1002" uri="1002" 18 set iftable adminstatus index=eth-0 adminstatus=up

Note: For additional information on video provisioning, refer to the appropriate command in the Command Reference section of this guide.

302


Troubleshooting Commands To facilitate ONT troubleshooting, the CLI provides many commands to assist in determining ONT problems.

The basic syntax for using the command line based instructions is available here (on page 146).

The following commands are used most often when troubleshooting ONT configuration issues;

Basic Troubleshooting Commands

bridge show summary (on page 239)

This command is used to dump a summary of all bridges configured on an ONT.

bridge show bridges (on page 240)

This command is used to dump detailed information about all bridges (or a single bridge [-bid=x]) configured at the ONT.

bridge show drops (on page 240)

This command displays all dropped packet counters associated with the Layer-2 bridging function.

ip host show (on page 245) This command is used to display current information about IP Hosts. It displays all allocated iphost interfaces and any associated VIDs.

config dia (on page 335)g The config diag command displays a pre-defined list of elements on an ONT. Note: Prior to calling Calix Customer Service, it is recommended you run this command and capture its contents for reference.

ver (on page 336) The ver command is used to show current software and hardware version information.

config hist (on page 219) This command displays all previously performed config commands for the AE ONT.

os log dump (on page 337) This command displays the ONT log file as it is persisted in the internal ONT flash. The log file contains informational text that was logged by the ONT. This command is useful for debugging configuration issues.

pmcat (on page 340) In the event of an ONT software failure, the ONT captures information related to the failure and stores the information in its FLASH memory. After the ONT reboots, it is possible to retrieve this information for Calix customer service personal.

os dump force (on page 339) When executed, os dump force forces the ONT to provide a core dump on any AE ONT reset.

os dump clear (on page 339) Executing os dump clear releases the flag forcing the core dump.

os sys (on page 339) When executed, the os sys command displays various system statistics

303


Basic VoIP Commands (CTG and SIP)

voipreg (on page 322) The voipreq command returns registration and IP address information for each port of the ONT.

voipcc (on page 325) The voipcc command displays the current call state by port.

iphost show (on page 245) This command is used to display current information about IP Hosts. It displays all allocated iphost interfaces and any associated VIDs.

voiprtp (on page 323) The voiprtp command returns registration and IP address information for each port of the ONT.

voipconfig (on page 320) The voipconfig command includes all SIP provisioning parameters for the voice service.

show voip mib (on page 315) The show voip mib command displays pertinent information for the VoIP service by port. Much of this information is also included in the VoIP configuration file.

Basic Data and Video Commands

show ethertable (on page 223) The sh ethertable command is used to show basic Layer-2 information about an Ethernet port.

show iftable (on page 220) The show iftable command displays various attributes associated with an ONT Ethernet interface group.

mpp rate (on page 331) The mpp rates command displays data and packet rates on each interface as observed over the last 5 seconds of operation.

show ifstats (on page 221) The AE ONT supports the standard MIB-II ifStats (RFC 1213) for each interface. These may be used to determine data flow, lost packets, and the like for serviceability and debugging by the operator.

meter show info (on page 231) This command summarizes information on each traffic shaper. It is used as a debugging or sanity check mechanism.

macff show (on page 251) The macff show command displays MACFF static entry settings by IP address

lev1 show (on page 267) This command is used to examine the Level 1 - L2 Mapping/Filtering Table for the purpose of debugging or interrogation.

lev2 show (on page 269) This command is used to examine the Level 2 - L2 Mapping/Filtering Table for the purpose of debugging or interrogation.

mpp ess (on page 331) The mpp ess command displays the ingress and egress Ethernet port statistics by MAC address.

mpp pdump (on page 334) The mpp pdump command is used to dump transmitted/received/errored frames to the console.

304


Channel and Drop Testing (vtst test) The vtst test command initializes a channel and drop test on a phone line:

Usage: vtst test [main=<default>] [BP] [all/cd/ch/drop/vbat/drop+/test<code>] [extra]

Testing Example

Follows is a sample output for a "typical" channel and drop test run from the CLI. Definitions for the output are also included.

CXNK0002B70E> vtst test 0 cd start test 00003FFC on BP 0 in slot 0 057, (CXNK0002B703) [INFO], Sat Jan 01 20:30:04 2000, VoiceDrv, Voice port test: BP1, slot 0 [00003FFC] Start DIAG:VOICEPATH:PASS:VRinging:slot0:BP1:Not run, no hardware DIAG:VOICEPATH:PASS:RingTrip:slot0:BP1:Not run, no hardware DIAG:VOICEPATH:PASS:DialTone:slot0:BP1:Fail:None DIAG:VOICEPATH:PASS:LoopCur:slot0:BP1:Not run, no hardware DIAG:VOICEPATH:PASS:VACFEME:slot0:BP1:Pass:0.0VACr DIAG:VOICEPATH:PASS:VDCFEME:slot0:BP1:Pass:0.8VDCl DIAG:VOICEPATH:PASS:VDD:slot0:BP1:Pass:3.38VDCv - DIAG:VOICEPATH:PASS:VBATR:slot0:BP1:Pass:101.0VDCr DIAG:VOICEPATH:PASS:VBATL:slot0:BP1:Pass:24.9VDCl DIAG:VOICEPATH:PASS:VBATH:slot0:BP1:Pass:51.2VDCh DIAG:VOICEPATH:PASS:TGres:slot0:BP1:Pass:Open DIAG:VOICEPATH:PASS:RGres:slot0:BP1:Pass:Open DIAG:VOICEPATH:PASS:TRres:slot0:BP1:Pass:Open DIAG:VOICEPATH:PASS:RENload:slot0:BP1:Pass:0.0REN Want tests 00003FFC, ran 0001F7FE Test duration: 8.330sec 058, (CXNK0002B70E) [INFO], Sat Jan 01 20:30:12 2000, VoiceDrv, Voice port test: BP 1, slot 0 [00003FFC] Fail {3} <8.330sec>

305


DIAG;VOICEPATH:FAIL:Final:slot0:BP1:Fail

# step res lvl min actual max --- ------ ---- ---- ------ -------- -----

1: VRinging [3] 1 0

2: RingTrip [5] 1 0

3: DialTone [4] ! 3 0 None

4: LoopCur [13] 1 0 0.0 VACr 20.0VAC

5: VACFEMF [6] 0 0 0.8 VACl 60.0VDC

6: VACFEMF [7] 0 0

7: VTipRing [2] 0 0 43.0VDC 51.2VDCh 75.0VDC 8: TGres [8] 0 0 150kohm Open 9: RGres [9] 0 0 150kohm Open 10: TRres [10] 0 0 150kohm Open 11: RENload [12] 0 0 0.0REN 5.5REN

12: Offhook [11] 2 0

13: Final [0] ! 3 0 Dial Tone

Channel and Drop Testing Options

Value Description

all Specifies to run all channel and drop tests. Example: vtst test 0 all

cd Run channel and drop test. Example: vtst test 0 cd

ch Run channel test only. Example: vtst test 1 ch

drop Run drop test only. Example: vtst test 0 drop

vbat Runs battery voltage tests including ringing voltage, low voltage supply, and high voltage supply. Example: vtst test 0 vbat

drop+ Run drop test with VBAT, TGres, RGres, TRres, RENload, and Offhook. Example: vtst test 0 drop+

test Specify a specific test to run. See below for a list of available test codes. Example: vtst test 0 test 00002

ren1 Forces VRinging with 1 REN on drop. These are tests run by manufacturing only and provide no meaningful user data when run. Example: vtst test 0 ren1

ren5 Forces VRinging with 1 REN on drop. These are tests run by manufacturing only and provide no meaningful data user when run. Example: vtst test 0 ren5

minren Run minimum REN test. These are tests run by manufacturing only and provide no meaningful user data when run. Example: vtst test 1 minren

extra Runs all tests and shows additional results for voltage tests. Example: vtst test 0 extra

306


Test Output Descriptions

VRinging With a 1 Ren load on the circuit during ringing, the AC voltage is displayed. Note: This test supported on MDU ONTs only.

RingTrip With a 600 ohm load with an isolation relay, displays the ring trip voltage. Note: This test supported on MDU ONTs only.

DialTone With a 600 ohm load or a forced off-hook, measures whether a dial tone is detected.

LoopCur With a 600 ohm load, current is read and reported while the binding post is forced into "forward active low". Note: This test supported on MDU ONTs only.

VACFEMF Measures the AC voltage of the tip and ring when in a high impedance state.

VDCFEMF Measures the DC voltage of the tip and ring when in a high impedance state.

VDD Measures the internal operating voltage of the circuit (VDC).

VBATR Measures and reports the ringing voltage supply (VDC).

VBATL Measures and reports the low voltage supply (VDC).

VBATH Measures and reports the high voltage supply (VDC).

TGres Tip to ground resistive value is measured and displayed.

RGres Ring to ground resistive value is measured and displayed.

TRres Reports the mean resistance across the tip and ring lead in both directions.

RENload If no resistive faults are detected, a ringing signal is initiated and the REN load is calculated.

OffHook If offhook is detected (tip to ring less than 1001 ohms), resistance is calculated to determine if the phone is offhook.

Results Table Definitions

# Test sequence number with name of test

step Internal value of test (from specific test option).

res Results Code: 0 = Pass 1 = Not run, no hardware 2 = Not run 3 = Fail

lvl Indicates severity of failure: -1 = Unknown 0 = Normal 1 = Warning 2 = Caution 3 = Hazardous

min Minimum value to compare for passing test.

actual Actual value captured during the test.

max Maximum value to compare for passing test.

307


Specific Test Options

The "test" command provides the ability to run a specific test against a circuit. Follows is a list of tests available with their appropriate step code:

Test Codes

Test Number

Test Code Test Name

0 [00001] Final Note: Used to Reset sequence only (not a valid test).

1 [00002] VDD

2 [00004] VTipRing

3 [00008] VRinging

4 [00010] DialTone

5 [00020] RingTrip

6 [00040] VACFEMF

7 [00080] VDCFEMF

8 [00100] TGres

9 [00200] RGres

10 [00400] TRres

11 [00800] OffHook

12 [01000] RENload

13 [02000] LoopCur

14 [04000] VBATR

15 [08000] VBATH

16 [10000] VBATL

308


VoIP Commands CLI commands are available to facilitate the provisioning of SIP voice service and TDM Gateway voice services while setting up the necessary objects for the CMS interface.

voip setup

The voip setup command is used to facilitate the provisioning of SIP phone service objects within CMS.

The following attributes are checked and/or created as part of the voip setup command:

Ensures a VLAN bridge has been created for the VLAN ID's "vid" parameter. If the VLAN bridge does not exist, it uses the existing "-pbit" option values to create the IP host VLAN bridge.

If the VLAN bridge does exists, the "-pbit" option is ignored. Creates an IP host using "-dhcp", "-ping", "-tracert", "-rsh", "-staticip", "-gwf", "-mask",

and "-gateway" options.

Note: Reference the 'iphost create" command.

Adds the IP host to the VLAN bridge.

Note: Reference "bridge add" command.

Sets up VoiP service on the IP host using the supplied "display", "file", "prisvr", "secsvr", "user", "password", and "uri" parameters.

Note: Reference "voip add" command.

309


voip setup

Usage

voip setup [-pbit=] [-dhcp=<enum>] [-ping=<enum>] [-tracert=<enum>] [-rsh=<enum>] [-staticip=<ipaddr>] [-mask=<ipaddr>] [-gwf=<enum>] [-gateway=<ipaddr>] vid= linemode=<enum> board=<enum> port=<n>

display=<str> file=<s] [-treatinpri=] [-treatinvid=] [-treatintpidde=] dev=<ifname>

Setup VoIP port along with the corresponding IP host and VLAN bridge (for CMS provisioning)

Options

-pbit= PBIT value to be applied to frames (0..7, default = 0), ignored if VLAN bridge is already created

type: Unsigned

-dhcp=<enum> DHCP enable/disable, default=enable type: enable/disable



-rsh=<enum> Telnet/rsh enable/disable, default = disable type: enable/disable

-staticip=<ipaddr> Static IP Host Address, must specify <-dhcp disable>, <-mask>, and <-gateway>

type: IP Address

-mask=<ipaddr> IP Host Mask, must specify <-dhcp disable>, <-staticip>, and <-gateway>

type: IP Address



-gateway=<ipaddr> IP Host Gateway Address, must be same subnet as <-staticip>, must specify <-dhcp disable>and <-mask>

type: IP ADDress

-linemode=<enum> POTS port line mode: Loop start or Ground Start

type: LoopStart, GroundStart, default=LoopStart* Note: Both values case sensitive

310


Parameters


type: Unsigned

board=<enum> Board (SLC) ID

type: i-pots, n-exp1, n-exp2

port=<n> POTS Port number

type: Integer (0-7)

display=<str> Display Name


file=<str> Name of file to retrieve to configure VoIP Server


prisvr=<ipaddr> IP Address of primary TFTP server

type: IP Address

secsvr=<ipaddr> IP Address of secondary TFTP server

type: IP Address

user=<str> Registration User Name

type: IP Address

password=<str. Registration Password


uri=<str> VoIP URI type: Character String (32)

* - If loopstart is the desired mode, this command can be omitted.

311


Add VoIP Service The "voip add" command is used to create the VOIP SIP service on a binding post. This command should run after IP Host has been created.

voip add

Usage

voip add linemode=<enum> board=<enum> port=<n> iphost=<n> display=<str> file=<str> prisvr=<ipaddr> secsvr=<ipaddr> user=<str> password=<str> uri=<str>

Add a VoIP port

Options

-mgmt Retrieve VoIP configuration file from ONT configuration TFTP server on the management VLAN

-linemode=<enum> POTS port line mode

type: LoopStart, GroundStart Default=LoopStart* Note: Both values case sensitive

Parameters

board=<enum> board=<enum>



type: Integer (0-7)

iphost=<n> IP Host index

type: Integer (0-7)

display=<str> Display Name type: Character String (32)

file=<str> Name of file to retrieve to configure VoIP Server type: Character String (80)

prisvr=<ipaddr> IP Address of primary TFTP server type: IP Address

secsvr=<ipaddr> IP Address of secondary TFTP server type: IP Address

user=<str> Registration User Name type: IP Address

password=<str. Registration Password type: Character String (20)

uri=<str> VoIP URI type: Character String (32)

* - If Loopstart is the desired linemode, this command can be omitted.

312


ctg setup

The ctg setup command is used to facilitate the provisioning of TDM Gateway phone service objects within CMS. The ctg setup command combines the functions of "bridge addiph", "bridge portadd", "iphost create", and "ctg add"

The following attributes are checked and/or created as part of the ctg setup command:

Ensures a VLAN bridge has been created for the VLAN ID's "vid" parameter. If the VLAN bridge does not exist, it uses the existing "-pbit" option values to create the IP host VLAN bridge.

If the VLAN bridge does exists, the "-pbit" option is ignored. Creates an IP host using "-dhcp", "-ping", "-tracert", "-rsh", "-staticip", "-gwf", "-mask",

and "-gateway" options.

Note: Reference the 'iphost create" command.

Adds the IP host to the VLAN bridge.

Note: Reference "bridge add" command.

Sets up TDM Gateway service on the IP host using the supplied "-pktrate", "ctgsvr", and "lineaid" parameters.

Note: Reference "ctg add" command.

313


ctg setup

Usage

ctg setup [-pbit=] [-dhcp=<enum>] [-ping=<enum>] [-tracert=<enum>] [-rsh=<enum>] [-staticip=<ipaddr>] [-mask=<ipaddr>] [-gwf=<enum>] [-gateway=<ipaddr>] [-pktrate=<enum>] vid= linemode=<enum> board=<enum>

port=<n> ctgsvr=<ipaddr> lineaid=<str>

Setup C7 TDM Gateway service along with the corresponding IP host and VLAN bridge (for CMS provisioning)

Options

-pbit= PBIT value to be applied to frames (0..7, default = 0), ignored if VLAN bridge is already created

type: Unsigned

-dhcp=<enum> DHCP enable/disable, default=enable type: enable/disable



-rsh=<enum> Telnet/rsh enable/disable, default = disable type: enable/disable

-staticip=<ipaddr> Static IP Host Address, must specify <-dhcp disable>, <-mask>, and <-gateway>

type: IP Address

-mask=<ipaddr> IP Host Mask, must specify <-dhcp disable>, <-staticip>, and <-gateway> type: IP Address



-gateway=<ipaddr> IP Host Gateway Address, must be same subnet as <-staticip>, must specify <-dhcp disable>and <-mask>

type: IP Address

-pktrate=<enum> Voice Packetization Rate

type: 10ms, 20ms

-linemode=<enum> POTS port line mode: Loop start or Ground Start

type: LoopStart, GroundStart, default=LoopStart* Note: Both values case sensitive

314


Parameters


type: Unsigned

board=<enum> Board (SLC) ID



type: Integer (0-7)

ctgsvr=<ipaddr> IP Address of C7 TDM Gateway server on VIPR card

type: IP Address

lineaid=<str> Line CRV in C7 AID format


* - If loopstart is the desired linemode, this command can be omitted.

315


Add TDM Voice Service The "ctg add" command is used to create the TDM Gateway phone service on a binding post. This command is run after the IP Host has been created.

ctg add

Usage

ctg add [-pktrate=<enum>] linemode=<enum> board=<enum> port=<n> iphost=<n> ctgsvr=<ipaddr> lineaid=<str>

Add C7 TDM Gateway service to an existing IP host.

Options

-ctgsvrs=<ipaddr> IP Address of C7 TDM Gateway server on VIPR card

type: IP Address

-pktrate=<enum> Voice packetization rate

type: 10msec, 20msec

-linemode=<enum> POTS port line mode

type: LoopStart, GroundStart Default=LoopStart* Note: Both values case sensitive

Parameters

board=<enum> board=<enum>



type: Integer (0-7)

iphost=<n> IP Host index

type: Integer (0-7)

lineaid=<str> Line CRV in C7 AID format


* - If Loopstart is the desired linemode, this command can be omitted.

316


Show voip mib

The show voip mib command displays pertinent information for the VoIP service by port. Much of this information is also included in the VoIP configuration file.

Executing command "show voip mib" VoIP data for board:0, port:0 (binding post present) cfg file pri:VoipConfig.txt cfg file sec:VoipConfig.txt cfg srvr pri:172.26.203.16 - sec:172.26.203.16 Reg name:7635551012, password:password URI:7635551012 display name:Name_Line1 DHCP Profile:0, Opt 82: static addr:0.0.0.0, mask:0.0.0.0, gateway:0.0.0.0 MAC address:00-06-31-14-38-a0 in-use addr:172.26.203.136, mask:255.255.255.0, gateway:172.26.203.16 DNS primary:0.0.0.0, DNS secondary:0.0.0.0 rowStatus:active state:registered status:(a0fd)MAC,DHCP-acq,FILE,EN,PRES,RUN hook state:on hook, call status:idle action:(none) dhcp attpts:1 dhcp acks:1 dhcp nacks:0 reg attpts:72424 reg challenges:868 reg rejects:871 reg grants:72227 incall attpts:0 incall complts:0 incall busy:0 incall peerdisc:0 incall ontdisc:0 outcall attpts:0 outcall complts:0 outcall busy:0 outcall peerdisc:0 outcall ontdisc:0 911 attpts:0 911 complts:0 911 busy:0 911 peerdisc:0 911 onhooks:0 vmwi sub attpts:0

317


vmwi sub fails:0 vmwi sub succs:0 vmwi notify(msgs):0 vmwi notify(nomsgs):0 rtp pkts sent:0 rtp pkts recv:0 null IPs sent:0 null IPs recv:0 jitter buf oflow:0 jitter buf urun:0 VoIP data for board:0, port:1 (binding post present) cfg file pri:VoipConfig.txt cfg file sec:VoipConfig.txt cfg srvr pri:172.26.203.16 - sec:172.26.203.16 Reg name:7635551014, password:password URI:7635551014 display name:Name_Line2 DHCP Profile:0, Opt 82: static addr:0.0.0.0, mask:0.0.0.0, gateway:0.0.0.0 MAC address:00-06-31-14-38-a0 in-use addr:172.26.203.136, mask:255.255.255.0, gateway:172.26.203.16 DNS primary:0.0.0.0, DNS secondary:0.0.0.0 rowStatus:active state:registered status:(a0fd)MAC,DHCP-acq,FILE,EN,PRES,RUN hook state:on hook, call status:idle action:(none) dhcp attpts:0 dhcp acks:0 dhcp nacks:0 reg attpts:72434 reg challenges:820 reg rejects:822 reg grants:72254

318


Show voip mib Field Definitions show voip mib Field Definitions

Field Name Description

Voip data for board Displays the binding post and port for the VoIP service Example: board: 0, port: 1

cfg file pri Primary configuration file name Example: VoipConfig.txt

cfg file sec Secondary configuration file name Example: VoipConfig_bu.txt

cfg srvr pri cfg srvr sec

Location of the primary and secondary tftp server. Example: cfg srvr pri:172.26.203.16 cfg srvr sec: 172.26.203.16

Reg name VoIP service name and optional password for changing. Example: 7655551012, password:password

URI Uniform Resource Identifier. Example: 7655551012

display name Name that appears on a caller ID string. Example: Name_Line1

DHCP Profile Name of DHCP Profile being used for this line. Example: dhcp_sip2

static addr Static, mask, and gateway IP address. Example: 0.0.0.0, mask: 0.0.0.0, gateway:0.0.0.0

MAC address MAC address for the DHCP Profile Example: 00-06-31-14-38-a0

in-use addr ??? Example: 172.26.203.136, mask: 255.255.255.0, gateway: 172.26.203.16

DNS primary and secondary Domain Name primary and secondary IP addresses. Example: DNS primary: 0.0.0.0, DNS secondary: 0.0.0.0

hook state Current hook state and call status. Example: hook state: on hook, call status: idle

dhcp attpts Total cumulative usage of the SIP line. This counter increments every 100 seconds a call is active. Example: dhcp attps: 59383

dhcp acks Total cumulative Acknowledgement Packets. Example: dhcp acks: 4865

dhcp nacks Total cumulative Negative Acknowledgement Packets. Example: dhcp nacks: 0

reg attpts Total registration attempts on the line. Example: reg attpts: 25889

reg challenges Total registration challenges on the line. Example: reg challenges: 0

reg rejects Total registration rejections on the line. Example: reg rejects: 0

reg grants Total SIP REGISTER message requested granted (OK). Example: reg grants: 1788

319


show voip mib Field Definitions

incall attpts Total incoming calls received. Example: incall attpts: 25122

incall complts Total incoming calls completed successfully. Example: incall complts: 24915

incall busy Total incoming calls received when line was busy. Example: incall busy: 45

incall peerdisc Incoming calls disconnected by far end peer (calling party). Example: incall peerdisc: 9

incall ontdisc Incoming calls disconnected by local ONT hangup (on hook). Example: incall ontdisc: 14

outcall attpts Total outgoing calls attempted. Example: outcall attpts: 94

outcall complts Total outgoing calls completed successfully. Example: outcall complts: 125

outcall busy Total outgoing calls that received a busy reply. Example: outcall busy: 3

outcall peerdisc Total outgoing calls that were disconnected by far end peer (calling party). Example: outcall peerdisc: 7

outcall ontdisc Total outgoing calls disconnected by local ONT hangup (on hook). Example: outcall ontdisc: 4

911 attpts Emergency 911 Call Attempts on the line. Example: 911 attpts: 4

911 complts Emergency 911 Call Attempts completed successfully. Example: 911 complts: 4

911 busy Emergency 911 Call Attempts that received a busy reply. Example: 911 busy: 0

911 peerdisc Emergency 911 calls disconnected by far end E911 operator. Example: 911 peerdisc: 0

911 onhooks Emergency 911 Call attempts with local On hook condition. Example: 911 onhooks: 5

vmwi notify(msgs) SIP NOTIFY messages received with Messages-Waiting set to Yes. Example: vmwi notify(msgs): 2

mnwi notify (nomsgs) SIP NOTIFY message received with Messages-Waiting set to No. Example: vmwi notify(nomsgs): 0

rtp pts sent Total RTP Packets sent Example: rtp pts sent: 25411

rtp pkts recv Total RTP Packets received Example: rtp pts recv: 25411

null IPs sent Total RTP Packets sent with 0.0.0.0 as the destination address (sent to put remote on hold). Example: rtpNullIPSent: 17369

null IPs recv Total RTP Packets received with 0.0.00 for the destination address (sent to put local end on hold). Example: rtpNullIPRecv: 579

320


voipconfig

The voipconfig command includes all SIP provisioning parameters for the voice service.

Note: Running the voipconfig command is especially useful when attempting to verify voip configuration file changes.

CXNK00047A20> voipconfig

Line 2: SIP ONT URI : 7635551013 SIP ONT IP : 172.26.203.148 SIP Contact IP : 172.26.203.148 SIP Proxy Server: 172.26.203.16 SIP Domain Name : 172.26.203.16 DNS Primary : 192.168.1.27 DNS Alternate : 192.168.1.29 TFTP Primary : 172.26.203.16 TFTP Secondary : 172.26.203.16 TFTP Filename : VoipConfig.txt TFTP Filename : VoipConfig.txt SIP Proxy Port : 5060 SIP Registration: ON SIP Register User: OFF SIP Registration Period: 3600 sec SIP T1 Timer: 500 msec SIP T2 Timer: 4000 msec Reorder Tone Delay: 10 sec Warning Tone Delay: 60 sec Warning Tone Timeout: 600 sec RTP Base Port: 16384 RTP TOS/DSCP: 160 (0xa0) RTP Codec: G.711 u-law RTP Packet Rate: 10 msec Options: SIP E.164: OFF FlashINFO: OFF E911CalledPartyHold: ON Call Waiting: ON CallerID: ON DTMF playout: ON Pulse Dial: ON GroundStart: OFF CSIP: OFF ThreeWayCall: OFF ContactHeaderPort: OFF Dial Digit Timeout: 8 sec Dial Plan IntraLATA Area Codes: 952 763 651 612 507 240 561 Dial Plan: ^911|^411|^S[0-9]{2}|^1[0-9]{10}|^[2-9][0-9]{9}|^011[0-9]*T

321


voipconfig Field Definitions voipconfig Field Definitions


SIP ONT URI SIP Uniform Resource Identifier (typically telephone number)

SIP ONT IP IP Address of the ONT

SIP Contact IP Secondary IP Address of the ONT (if used)

SIP Proxy Server UDP or IP address of the Border Controller or the SIP Proxy Server.

SIP Domain name IP address or a Fully Qualified Domain Name (FQDN).

DNS Primary Primary DNS IP Address for the ONT port being provisioned.

DNS Alternate Secondary DNS IP Address for the ONT port being provisioned.

TFTP Primary IP Address of Primary TFTP Server

TFTP Secondary IP Address of Secondary TFTP Server

TFTP Filename Filename of SIP Configuration file

SIP Proxy Port UDP Port number for SIP Proxy server

SIP Registration Enter 0 to disable SIP Registration.

SIP Register Enter 0 to disable SIP Register.

SIP Registration Period Enter the maximum registration period for the SIP connection.

SIP T1 Timer SIP Timer Time-out Values in milliseconds.

SIP T2 Timer SIP Timer Time-out Values in milliseconds.

Reorder Tone Delay Enter the delay in seconds before playing a fast busy tone after far end hangup or far end off hook.

Warning Tone Delay Enter the delay in seconds before playing a warning tone (howler) for off hook.

Warning Tone Timeout Enter the amount of time to play the "howler".

RTP Base Port Input the start port number of a range of ports that are allowed access to the RTP service. Each ONT VoIP port requires two RTP port numbers.

RTP TOS/DSCP Enter the TOS bits for RTP packet stamping (0-255)

RTP Codec Enter the voice encoding option. Always set to zero.

RTP Packet Rate Input the expected RTP packetization rate sent by the ONT. choose between 10, 20, or 30 msecs.

322


Options

SIP E.164 Format to add the country code to all SIP messages. enter 0 to use local format, enter 1 to use E.164 global format.

FlashINFO For Flash Hook messages, send a SIP INFO message.

E911CalledPartyHold Options to allow E911 hang-up.

Call Waiting Enter the softswitch signaling pattern for call waiting.

Caller ID Needed to disable Caller ID at the ONT.

DTMF playout Enable or disable the playing of the DTMF SIP INFO message.

Pulse Dial Enable or disable pulse dialing.

GroundStart Enable GroundStart POTS.

CSIP Enable or Disable TDM Gateway

ThreewayCall Allows for configuring 3-way calling.

ContactHeaderPort Enable or Disable ContactHeaderPort

Dial digit Timeout Enter a value (seconds) for a partial match "pause" until all digits have been collected (slow dialers).

Dial Plan IntraLATA Area codes

Enter area code toll free exceptions.

Dial Plan Enter the type of dial plan to enable. For additional information, reference the VOIP Configuration File (on page 199) example.

Voipreq

The voipreq command returns registration and IP address information for each port of the ONT.

Note: Attempts to execute this command on an ONT that has not been configured for VoIP results in an Invalid Line number error.

Executing command "voipreg" Line 1: SIP ONT URI : 7635551012 SIP ONT IP : 172.26.203.136 SIP Contact IP : 172.26.203.136 SIP Shadow IP : 172.26.203.136 SIP Proxy Server: 172.26.203.16 SIP Domain Name : 172.26.203.16 DNS Primary : 192.168.1.27 DNS Alternate : 192.168.1.29 SIP Registration: REGISTERED. Period: 60 Re-Registration in 10 seconds Line 2: SIP ONT URI : 7635551014 SIP ONT IP : 172.26.203.136 SIP Contact IP : 172.26.203.136

323


SIP Shadow IP : 172.26.203.136 SIP Proxy Server: 172.26.203.16 SIP Domain Name : 172.26.203.16 DNS Primary : 192.168.1.27 DNS Alternate : 192.168.1.29 SIP Registration: REGISTERED. Period: 60 Re-Registration in 10 seconds incall attpts:0 incall complts:0 incall busy:0 incall peerdisc:0 incall ontdisc:0 outcall attpts:0 outcall complts:0 outcall busy:0 outcall peerdisc:0 outcall ontdisc:0

voipreg Field Definitions


SIP ONT URI The assigned registration ID number for the port.

SIP ONT IP The IP Address for the port.

SIP PRoxy Server The IP Address for the SIP proxy server.

SIP Domain Name The IP Address for the Sip switch.

DNS Primary The primary DNS IP address.

DNS Alternate The secondary DNS IP address (optional).

SIP Registration Displays the Registration state of the port and the length of time until the next lease renewal.

incall attpts Total incoming calls received.

incall complts Total incoming calls completed successfully.

incall busy Total incoming calls received when the line was busy.

incall peerdisc Incoming calls disconnected by far end peer (calling party).

incall ontdisc Incoming calls disconnected by local ONT hangup (on hook).

outcall attpts Total outgoing calls attempted.

outcall complts total outgoing calls completed successfully.

outcall busy Total outgoing calls that received a busy reply.

outcall peerdisc Total outgoing calls that were disconnected by far end peer (calling party).

outcall ontdisc Total outgoing calls disconnected by local ONT hangup (on hook).

324


Voiprtp

The voiprtp command returns registration and IP address information for each port of the ONT.

Note: Attempts to execute this command on an ONT that has not been configured for VoIP results in an Invalid Line number error.

Executing command "voipreg" Line 1: SIP ONT URI : 7635551012 SIP ONT IP : 172.26.203.136 SIP Contact IP : 172.26.203.136 SIP Shadow IP : 172.26.203.136 SIP Proxy Server: 172.26.203.16 SIP Domain Name : 172.26.203.16 DNS Primary : 192.168.1.27 DNS Alternate : 192.168.1.29 SIP Registration: REGISTERED. Period: 60 Re-Registration in 10 seconds Line 2: SIP ONT URI : 7635551014 SIP ONT IP : 172.26.203.136 SIP Contact IP : 172.26.203.136 SIP Shadow IP : 172.26.203.136 SIP Proxy Server: 172.26.203.16 SIP Domain Name : 172.26.203.16 DNS Primary : 192.168.1.27 DNS Alternate : 192.168.1.29 SIP Registration: REGISTERED. Period: 60 Re-Registration in 10 seconds incall attpts:0 incall complts:0 incall busy:0 incall peerdisc:0 incall ontdisc:0 outcall attpts:0 outcall complts:0 outcall busy:0 outcall peerdisc:0 outcall ontdisc:0

325


voipreg Field Definitions


SIP ONT URI The assigned registration ID number for the port.

SIP ONT IP The IP Address for the port.

SIP PRoxy Server The IP Address for the SIP proxy server.

SIP Domain Name The IP Address for the Sip switch.

DNS Primary The primary DNS IP address.

DNS Alternate The secondary DNS IP address (optional).

SIP Registration Displays the Registration state of the port and the length of time until the next lease renewal.

incall attpts Total incoming calls received.

incall complts Total incoming calls completed successfully.

incall busy Total incoming calls received when the line was busy.

incall peerdisc Incoming calls disconnected by far end peer (calling party).

incall ontdisc Incoming calls disconnected by local ONT hangup (on hook).

outcall attpts Total outgoing calls attempted.

outcall complts total outgoing calls completed successfully.

outcall busy Total outgoing calls that received a busy reply.

outcall peerdisc Total outgoing calls that were disconnected by far end peer (calling party).

outcall ontdisc Total outgoing calls disconnected by local ONT hangup (on hook).

326


Voipcc

The voipcc command displays the current call state by port.

CXNK0002B2E3> voipcc

Line 1: CCState (1) : IDLE Msg Waiting: NO

remoteIP : : 0 localport: 16384

remoteIP2 : : 0

waitingIP : : 0

crv=0 crvWaiting=0 crvHold=0 Threeway=0

Line2: CCState(1) : IDLE MsgWaiting: NO

remoteIP : : 0 localport: 16386

remoteIP2 : : 0

waitingIP : : 0

crv=0 crvWaiting=0 crvHold=0 Threeway=0

voipcc Field Definitions


CCState Current Call State of the port (IDLE, ???, xxx)

Msg Waiting Message waiting indicator (yes or no).

remote IP IP address of the inbound calling party.

remote IP2 IP address of any secondary inbound calling party.

waiting IP IP address of any inbound call in the call waiting queue.

crv The Call Reference Value (CRV) of the current call.

crvWaiting The CRV of any inbound call in the waiting queue.

crvHold The CRV of a current called placed on hold.

Threeway Status of current three way call. possible states????

327


Delete voip/ctg Service

The “voip del” command is used to delete the voice service on a binding post (SIP or TDM).

delete voip or ctg

Usage

voip del board=<enum> port=<n>

Delete VoIP or TDM port

Parameters

board=<enum> Board (SLC) ID type: i-pots, n-exp1, n-exp2

port=<n> POTS port number type: integer (0,7)

328


DHCP Option-43 Configuration Process In order to more efficiently manage ONT inventory, DHCP Option-43 commands can be used. The information below details how the AE 2.0 system uses the Option-43 structure:

DHCP Option-43 firmware inventory upgrade process

1. Prior to turning up ONTs, the operator populates the designated DHCP server with Option-43 entries listing Calix ONT firmware image filenames.

2. After ONTs have been upgraded to AE 2.0 firmware, the DHCP client on the ONT requests any available Option-43 data. If DHCP Option-43 data is available, the ONT pulls (via a TFTP get) the image header for each Option-43 firmware entry until it finds the right ONT type match.

3. Once the ONT finds an image with the right ONT type match but with a firmware version mismatch (default is upgrade only, override-able), the ONT retrieves the entire firmware image file and upgrades itself. If the version of the matching image is equal or lower to the ONT running version, the ONT continues on to the configuration process (retrieving the appropriate configuration file).

4. During configuration file processing, the ONT includes built-in intelligence to determine whether the Option-43 data should be used or of the ONT should rely on the firmware upgrade CLI command. If a DHCP Option-43 firmware entry is dictating the ONT firmware version (entry with matching firmware type), the ONT ignores the firmware upgrade CLI command. In other words, the ONT processes any DHCP Option-43 information first before processing any firmware CLI commands. If a matching DHCP Option-43 firmware entry is not found, the ONT executes the firmware matching/upgrade as instructed by the CLI command.

329


DHCP Option-43 Command Elements

The following elements must be included in the DHCP global command structure: option space CALIX-ONT-SERVER; option CALIX-ONT-SERVER.cms-address code 1 = ip-address; option CALIX-ONT-SERVER.second-tftp-address code 2 = ip-address; option CALIX-ONT-SERVER.validateMIC code 3 = boolean; option CALIX-ONT-SERVER.firmware1 code 101 = text; option CALIX-ONT-SERVER.firmware2 code 102 = text; option CALIX-ONT-SERVER.firmware3 code 103 = text; option CALIX-ONT-SERVER.firmware4 code 104 = text; option CALIX-ONT-SERVER.firmware5 code 105 = text; option CALIX-ONT-SERVER.force-firmware code 200 = boolean;

The following elements must be included in the DHCP subnet declaration structure: # This line is required vendor-option-space CALIX-ONT-SERVER; # Primary TFTP Server Address option CALIX-ONT-SERVER.cms-address 172.26.31.149; # Secondary TFTP Server Address option CALIX-ONT-SERVER.second-tftp-address 172.26.35.3; # list of firmware image names option CALIX-ONT-SERVER.firmware1 "calix_ae_700ge_r2.0.0.20.rto"; option CALIX-ONT-SERVER.firmware2 "calix_ae_700sfu_r2.0.0.20.rto"; option CALIX-ONT-SERVER.firmware3 "calix_ae_700mdu_r2.0.0.20.rto";

Global Option-43 Field Definitions

Option Name Definition

option CALIX-ONT-SERVER.cms-address

In R1.1, the ONT used the CLI command config trap sink to specify the trap location for the CMS server. In R2.0, this Option-43 element is used to configure the ONT.

option CALIX-ONTSERVER.second-tftp-address

This designates the IP address of the second TFTP server that the ONT must use to download firmware and the configuration. In AE R1.1, the following rules applied when determining the TFTP server location: 1. The AE ONT first looks for the server name from either the sname field or option 66. sname takes precedence over option 66. 2. If the server name is not available, the ONT looks for the siaddr field and uses that value. 3. If the siaddr field is not defined, the ONT falls back to the DHCP server address. The above rules still apply for R2.0, however a method was required to specify a second TFTP server address. Thus, the Option-43 syntax specifying the second TFTP address was added.

option CALIX-ONT-SERVER.validateMIC Placeholder for future "Message Integrity Code" feature. Not currently supported in CMS 11.1

option CALIX-ONT-SERVER.force-firmware

This flag is used to force load C7 or manufacturing ONT images onto the ONT.

330


Notes on Option-43 Processing Effective with AE ver 2.0, the Option-43 structure allows for both Primary and

Secondary TFTP servers to be specified.

Note: In AE ver 1.1 and below, the following sequence is used in determining the correct server name location:

1. Looks for the server name in the sname field.

2. Looks for the server name in the Option-66 string.

3. Looks for the siaddr field.

4. Looks for the ONTs DHCP server address.

DHCP Option-43 Example

Follows is an example of a completed Option-43 configuration: authoritative; ddns-update-style none; option domain-name "tac.calix.com"; max-lease-time 2592000; # 30 days default-lease-time 2592000; # 30 days allow bootp; option space CALIX-ONT-SERVER; option CALIX-ONT-SERVER.cms-address code 1 = ip-address; option CALIX-ONT-SERVER.second-tftp-address code 2 = ip-address; option CALIX-ONT-SERVER.firmware1 code 101 = text; option CALIX-ONT-SERVER.firmware2 code 102 = text; option CALIX-ONT-SERVER.firmware3 code 103 = text; # AE-ONT Management Network subnet 192.168.254.0 netmask 255.255.255.0 { vendor-option-space CALIX-ONT-SERVER; option CALIX-ONT-SERVER.cms-address 192.168.254.254; option CALIX-ONT-SERVER.firmware1 "calix_ae_700ge_r2.0.0.5.rto"; option CALIX-ONT-SERVER.firmware2 "calix_ae_700sfu_r2.0.0.6.rto"; option CALIX-ONT-SERVER.firmware3 "calix_ae_700mdu_r2.0.0.6.rto"; max-lease-time 3600; default-lease-time 3600; range 192.168.254.10 192.168.254.252; }

331


Message Posting Protocol Commands

MPP rates

The mpp rates command displays data and packet rates on each interface as observed over the last 5 seconds of operation.

ifDesc upUcastPps dnUcastPps upMcastPps dnMcastPps upMbps dnMbps ------ ---------- ---------- ---------- ---------- ---------- ---------- eth-0 0 0 0 0 0 0 TOTAL 0 0 0 0 0 0 ifDesc upUcastPps dnUcastPps upMcastPps dnMcastPps upMbps dnMbps ------ ---------- ---------- ---------- ---------- ---------- ---------- wan-0 0 0 0 5239 0 57 TOTAL 0 0 0 5239 0 57

mpp Rates Field Definitions

Field name

Description

IFDesc The interface type description

upUcastPps Upstream Unicast packets per second

dnUcastPps Downstream Unicast packets per second

upMcastPps Upstream multicast packets per second

dnMcastPps Downstream multicast packets per second

upMbps Overall upstream Mbps

dnMbps Overall downstream Mbps

332


MPP ess

The mpp ess command displays the ingress and egress Ethernet port statistics by MAC address. Statistics are kept for both Egress and Ingress traffic.

EGRESS Ethernet Statistics: Counter mac-0 mac-1 mac-2 -------------------- ---------- ---------- ---------- NUM_GOOD_FRAMES 1478819 0 609292 NUM_BC_FRAMES 400004 0 80385 NUM_MC_FRAMES 838932 0 0 NUM_UNDERRUN 0 0 0 NUM_CONTROL_FRAMES 0 0 0 BYTES_GOOD_FRAMES 288905817 0 159418724 BYTES_BC_FRAMES 43675163 0 6265422 BYTES_MC_FRAMES 70246947 0 0 BYTES_VLAN_FRAMES 0 0 159420665 NUM_VLAN_FRAMES 0 0 609364 NUM_TX_DEFERRALS 0 0 0 NUM_EXCESSIVE_DEFERR 0 0 0 NUM_LATE_COLLISIONS 0 0 0 NUM_EXCESSIVE_COLLIS 0 0 0 NUM_PAUSE_FRAMES 0 0 0 NUM_TX_ATTEMPTS 0 0 0 NUM_TOTAL_FRAMES 1478819 0 609420

mpp ess Egress Field Definitions


NUM_GOOD_FRAMES Number of frames received error free.

NUM_BC_FRAMES Number of broadcast packet frames processed.

NUM_MC_FRAMES Number of multicast packet frames processed.

NUM_UNDERRUN Number of data underruns during transmit.

NUM_CONTROL_FRAMES Number of frames processed which include a control frame identifier.

BYTES_GOOD_FRAMES Number of bytes processed in error free frames.

BYTES_BC_FRAMES Number of bytes processed for broadcast frames.

BYTES_MC_FRAMES Number of bytes processed for multicast frames.

BYTES_VLAN_FRAMES Number of bytes for frames which include a VLAN identifier (tag).

NUM_VLAN_FRAMES Number of frames processed which include a VLAN identifier (tag).

NUM_TX_DEFERRALS Number of transmitted frames that were deferred.

NUM_EXCESSIVE_DEFERRALS Number of frames that were deferred past the maxDeferTime constant.

NUM_LATE_COLLISIONS Number of frames that had collisions during transmit.

NUM_EXCESSIVE_COLLISIONS Number of frames that had at least 16 attempts to transmit.

NUM_PAUSE_FRAMES Number of pause frames detected.

NUM_TX_ATTEMPTS Number of attempts to transmit the previous frame.

NUM_TOTAL_FRAMES Total number of frames processed.

333


INGRESS Ethernet Statistics: Counter mac-0 mac-1 mac-2 -------------------- ---------- ---------- ---------- NUM_GOOD_FRAMES 222225 0 2576489113 NUM_BAD_FRAMES 0 0 0 NUM_FCS 0 0 0 NUM_BC_FRAMES 7695 0 1440115 NUM_MC_FRAMES 36237 0 2574249529 BYTES_GOOD_FRAMES 37195110 0 1005363075 BYTES_BC_FRAMES 1290951 0 118469573 BYTES_MC_FRAMES 2319168 0 518002283 BYTES_VLAN_FRAMES 0 0 931140783 NUM_CTRL_FRAMES 0 0 0 NUM_OUT_OF_BOUNDS 0 0 0 NUM_VLAN_FRAMES 0 0 2575328421 NUM_ALIGNMENT_ERROR 0 0 0 NUM_FLOW_CTRL 0 0 0 NUM_BAD_OPCODE 0 0 0 NUM_LT_OUT_OF_RANGE 0 0 0 NUM_TOTAL_FRAMES 222225 0 2576489543 NUM_RESOURCE_ERROR 0 0 0

mpp ess Ingress Field Definitions Field Name Description

NUM_GOOD_FRAMES Number of frames received error free. NUM_BAD_FRAMES Number of frames received with errors. NUM_FCS Number of inserted Frame Check Sequence bits.

NUM_BC_FRAMES Number of broadcast packet frames processed.

NUM_MC_FRAMES Number of multicast packet frames processed. BYTES_GOOD_FRAMES Number of bytes processed in error free frames. BYTES_BC_FRAMES Number of bytes processed for broadcast frames. BYTES_MC_FRAMES Number of bytes processed for multicast frames.

BYTES_VLAN_FRAMES Number of bytes for frames which include a VLAN identifier (tag).

NUM_CTRL_FRAMES Number of frames processed which include a control frame identifier.

NUM_OUT_OF_BOUNDS Number of frames processed which exceeded the maximum legal length. Note: Only applies if jumbo frames are disabled.

NUM_VLAN_FRAMES Number of frames processed which include a VLAN identifier (tag).

NUM_ALIGNMENT_ERROR Number of frames received with an incorrect FCS value.

NUM_FLOW_CTRL Number of Ethernet flow control type packets as identified by the Length/Type (LT) field.

NUM_BAD_OPCODE Number of frames processed that contains an unsupported OPCODE. Note: only applies to non-Pause type frames

NUM_LT_OUT_OF_RANGE Number of frames processed where the Length exceeds max_mtu or is less than 64 bytes.

NUM_TOTAL_FRAMES Total number of frames processed. NUM_RESOURCES_ERRORS Number of total resource errors detected.

334


mpp pdump

The mpp pdump command is used to dump transmitted/received/errored frames to the console. On the GE ONT, only control frames such as ARP, IGMP, etc are printed to the console and therefore can be analyzed quickly.

However, on the GX ONTs there is no filter and as such, all frames received/transmitted on the specified interface are printed to the console. Thus, extra care must be taken when using this command on the GX ONT if you don’t wish to inadvertently reset the ONT.

CXNK0006CDA0> mpp pdump ? errors Errored packet dump enable control receive Receive packet dump enable control transmit Transmit packet dump enable control CXNK0004FC4F> mpp pdump receive device=eth-0 ena=ena CXNK0004FC4F> NPACKET Head = 1cba000 NPACKET Data = 1cba040 NPACKET Tail = 1cba080 NPACKET End = 1cba7e4 NPACKET Length = 64 01 00 5e 11 ba 4d 00 08 d4 8a 0a 3b 08 00 46 00 00 20 00 01 00 00 01 02 ae 9e 0a d1 c8 08 e9 11 ba 4d 94 04 00 00 16 00 46 a0 e9 11 ba 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 11

335


Miscellaneous Serviceability Commands The following commands are useful for obtaining basic information about an ONT while it is running. These commands may be issued to the ONT via the management utility or directly by first using telnet to log into the ONT.

Show ipconfig The show ipconfig command displays critical IP information pertaining to an ONT. CXNK03010101> show ipc

I/F Address NetMask MHomeIndex xIndex

----- ----------- ----------- ----------------- ---------

loop-0 127.0.0.1 255.0.0.0 0 0

iph-0 192.168.102.2 255.255.255.0 0 0

iph-1 192.168.102.3 255.255.255.0 0 0

iph-2 192.168.102.4 255.255.255.0 0 0

iph-3 192.168.102.5 255.255.255.0 0 0

The show route command displays IP routing of each ONT interface. CXNK03010101>show route

IpDest IpMask IpNextHop I/F Type Proto

----- ----------- ----------- ------ -------- --------

127.0.0.0 255.0.0.0 127.0.0.1 loop-0 local local

192.168.102.0 255.255.255.0 192.168.102.2 iph-0 local local

192.168.102.0 255.255.255.0 192.168.102.3 iph-0 local local

192.168.102.0 255.255.255.0 192.168.102.4 iph-0 local local

192.168.102.0 255.255.255.0 192.168.102.5 iph-0 local local

336


config diag

The config diag command displays a pre-defined list of elements on an ONT.

Note: Prior to calling Calix Customer Service, it is recommended you run this command and capture its contents for reference.

The following commands are executed as part of the config diag command:

ver config history show iftab show ifstats mpp rates show ethert bridge show bridge bridge show drops mpp queues bridge glob meter show info meter show count iphost show mpp ess mpp show show voip mib voipreg voiprtp voipcc levxl2tag show eth-x (where levx is lev1 or lev2 and eth-x corresponds to all Ethernet

ports on the ONT)

337


Ver

The "ver command is used to show current software and hardware version information. An example output is as follows:

CXNK11900011> ver FiberPoint 720G (2 POTS, 1 GE) Main Board Mod ID : 78 (0x4E) Optics Mod ID : 75 (0x4B) Exp Board Mod ID : 0 (0x00) Serial Number : "0807119000", 0x3080711900011000 [080711900011 ] FSAN Serial No : CXNK11900011 Software Version : 6.0.z.116 Board Rev : 1 App Version : 6.0.z.115 Built Apr 29 2008, 10:59:16 XIP-Boot Version : 6.0.z.1 BootStrap Version : 6.0.z.116 MONT FPGA : 12.1.0.5 MONT Exp FPGA : x.x.x.x (not loaded)

338


Os log dump

This command displays the ONT log file as it is persisted in the internal ONT flash. The log file contains informational text that was logged by the ONT. This command is useful for debugging configuration issues. Example output of a booted/configured AE ONT is as follows:

CXNK03010101>os log dump 016, (CXNK11900011) [INFO], Sat Jan 01 00:00:25 2000, AlarmMgr, Data Port #0 link DOWN(107) being set 017, (CXNK11900011) [INFO], Sat Jan 01 00:00:26 2000, AlarmMgr, Data Port #0 link DOWN(107) clearing msg. rcvd. AE Config Host MAC: 00-06-31-07-e6-2a MONT AE Config Init done 018, (CXNK11900011) [WARNING], Sat Jan 01 00:00:32 2000, AlarmMgr, , 1401, UPS Missing(58) being set 019, (CXNK11900011) [INFO], Sat Jan 01 00:00:57 2000, aeconfig, Use default config filename: calix_ont_CXNK11900011.cfg 020, (CXNK11900011) [INFO], Sat Jan 01 00:00:57 2000, aeconfig, retrieving file calix_ont_CXNK11900011.cfg from server 172.26.31.3 processing file calix_ont_CXNK11900011.cfg line 3: "explicit -off" processing file calix_ont_CXNK11900011.cfg line 4: "bridge create vlanpp eth-0 4001 -lb=enable" processing file calix_ont_CXNK11900011.cfg line 5: "include business_gold_eth-0_700.cfg" 021, (CXNK11900011) [INFO], Sat Jan 01 00:00:59 2000, aeconfig, retrieving file business_gold_eth-0_700.cfg from server 172.26.31.3 processing file business_gold_eth-0_700.cfg line 3: "meter set upstream 0 300000000 300000000" processing file business_gold_eth-0_700.cfg line 4: "meter set downstream 0 400000000 400000000"

339


processing file business_gold_eth-0_700.cfg line 5: "meter attach downstream -dev eth-0 0" processing file business_gold_eth-0_700.cfg line 6: "meter attach upstream -dev eth-0 0" 022, (CXNK11900011) [INFO], Sat Jan 01 00:01:01 2000, aeconfig, ONT has been configured successfully 023, (CXNK11900011) [INFO], Sat Jan 01 00:01:26 2000, AlarmMgr, Data Port #0 link DOWN(107) being cleared 024, (CXNK11900011) [INFO], Sat Jan 01 00:04:03 2000, , remoteSrvd: Connection request from address: ac1a1f03 172.26.31.3 025, (CXNK11900011) [INFO], Sat Jan 01 00:05:44 2000, , Can't get peer name. 026, (CXNK11900011) [INFO], Sat Jan 01 00:05:44 2000, , remoteSrvd->end_session: Close connection request to address: 000000000.0.0.0 000, (NMONT) [INFO], Sat Jan 01 00:00:22 2000, , VidMgr: board presence change = video slot full

os dump force and os dump clear

When executed, os dump force forces the ONT to provide a core dump on any AE ONT reset. Executing os dump clear releases the flag forcing the core dump.

340


os sys

When executed, the os sys command displays various system statistics: CXNK00040BB9> os sys **** Kernel Configuration Information - System Wide **** Max Tasks...........176 Max Queues..........160 Max Semaphores......200 Clock Ticks/second..100 Remote Console Active: Yes, Global Stdin: 940, Stdout: 940 SysInfo size : 4096 bytes Boot Cause : Unknown Boot Mode : POWER UP Panic Message : *** No Panic Yet *** Error Code : 0x0 Panic Time : Up Time : 0 years, 0 days, 15:29:14.40 (tot tics: 5575440) Current Time : Thu Nov 4 20:30:58 2010 Card Type : 0x0 Running Task : Remote_Shell Context : TASK Running State : [0x10040] Runtime|Application Mode Memory Range : 0x0 - 0xffffffff (4095MB) Dump Flag : dump on panic (default) Boot Version : OS Version : 1.0.a.165 Release Version: Load Image : Last Interrupt: -1 Task Table Adr: 0x2a002e30 Boot Partition: 00000000 Boot Attempts : 0 Clock Rate : 0 CXNK00040BB9>

341


Pmcat

In the event of an ONT software failure, the ONT captures information related to the failure and stores the information in its FLASH memory. After the ONT reboots, it is possible to retrieve this information for Calix customer service personal. The following command provides information to determine whether post-mortem crash information exists:

CXNK03010101> pmcat -h Checking addr 0xbc820000 for valid dump image: found dump: UNPROCESSED! Dump Size : 59553 bytes (adjusted length: 59553) .... * ******************************************************************************** ** No Panic Yet ** Uptime.................0 yrs, 0 days, 00:51:52 Panic Task.............OSAB_Shell [panic'd in TASK mode] Panic Time.............Sat Jan 01 00:52:19 2000Panic Code.............0x0 Panic Register.........0 ******************************************************************************** * Stack traceback * ******************************************************************************** ************************** *******SYSTEM PANIC******* ************************** CAUSE: Machine Check GENERAL REGISTERS:

In order to retrieve the entire contents of the post-mortem information the following command should be entered to capture all text:

CXNK03010101> pmcat

Note: If there is no dump image found in memory, a "no dump found" message is displayed.

342


ae ont config guide r20

Documents