Device Authentication Configure GPON (H.248-based) - GPON Solution

Device Authentication Configure GPON (H.248-based)

Device Authentication Configure GPON (H.248-based):

This topic describes how to configure the H.248-based device authentication to prevent illegal MGs from registering with the MGC.


  • The MG interface must be configured successfully.
  • The parameters, including the encryption type, the initial key and the DH authentication, and the MG ID, must be configured on the MGC. These parameters must be the same as the parameters configured on the MA5600T/MA5603T/MA5608T.


If Huawei products such as the SoftX3000 is used as the MGC, the authentication MG ID must be a character string with more than eight bits.


  • Step 1: In the global config mode, run the interface h248 command to enter the MG interface mode.
  • Step 2: Run the mg-software parameter 4 command to configure the registration mode.
  • Step 3: Run the mg-software parameter 6 0 command to configure the device authentication function on the MG interface.
  • Step 4: Run the auth command to configure the authentication MG ID and the initial key.
  • Step 5: Run the display auth command to query the authentication parameters.
  • Step 6: Run the reset coldstart command to reset the MG interface. Reset the MG interface to make the MG interface register with the MGC (and to make the modified attributes of the MG interface take effect) so that the MG interface can work in the normal state. The MG interface can be enabled in different ways (see Parameters of the reset command). For a newly configured MG interface, enable the MG interface through cold start.

Example of Device Authentication Configure:

Huawei-OLT(config)#interface h248 0
Huawei-OLT(config-if-h248-0)#mg-software parameter 4 0
Huawei-OLT(config-if-h248-0)#display mg-software parameter 4

Interface Id:0 para index:4 value:0 
Interface software parameter name: 
4: Whether MG register to MGC with wildcard 
0: Yes 
1: No 

Huawei-OLT(config-if-h248-0)#mg-software parameter 6 0
Huawei-OLT(config-if-h248-0)#display mg-software parameter 6

Interface Id:0 para index:6 value:0 
Interface software parameter name: 
6: Whether MG support authentication 
0: Yes 
1: No

Huawei-OLT(config-if-h248-0)#auth auth_mgid MA5600T/MA5603T/MA5608T initial_key

Huawei-OLT(config-if-h248-0)#display auth

[AUTH_PARA config] 
Initial Key : 0123456789ABCDEF 
Auth MGid : MA5600T/MA5603T/MA5608T 
Algorithm : MD5 

Huawei-OLT(config-if-h248-0)#reset coldstart
Are you sure to reset MG interface?(y/n)[n]:y



Hi! I am Shahed. Currently working as a Network Engineer. I want to build up my carrier in Networking field.

Follow Me:
TwitterFacebookLinkedInPinterestGoogle PlusDiggYouTubeRedditDelicious

Device Authentication Configure GPON (H.248-based) was last modified: October 24th, 2015 by Shahed



2 Responses to Device Authentication Configure GPON (H.248-based)

  1. prudhviraju says:

    Dear sir,
    Our company having Huawei MA5680T olt,At present we are using HG8240F,HG8346M onu's.I want to know reaming which onu's in Huawei will support to our olt,Can you tell me the difference between them.

Leave a Reply

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

error: Content is protected !!