GPON

Huawei OLT VoIP Configure SIP & H.248 protocol

by

Huawei OLT VoIP Configure based on SIP and H.248 protocol:

Today i will discuss how to Huawei OLT VoIP Configure based on SIP and H.248 protocol. [boxads]

 Prerequisite:

  • The MA5600T/MA5603T must use the H.248 protocol to communicate with the MGC and use the SIP protocol to communicate with the IMS.
  • The H.248 interface and the system parameters must be configured. For the related operations, see Configuring an MG Interface and (Optional) Configuring the System Parameters. The H.248 interface must be in the normal state.
  • The SIP interface and the system parameters must be configured. For the related operations, see Configuring an SIP Interface and (Optional) Configuring the System Parameters. The SIP interface must be in the normal state.
  • The system must be configured with the ISDN service board, that is, the DSRD board or DSRE board.
  • The system must be configured with the PSTN service board, that is, the ASRB board or ASPB board.
  • The ISDN digital phone must support the P2P function.
  • The terminal endpoint identifier of the ISDN digital phone must be 0

Topology Diagram for VoIP Configure based on SIP and H.248:

Huawei OLT VoIP Configure based on SIP and H.248 protocol
Huawei OLT VoIP Configure based on SIP and H.248 protocol

Procedure:

Configure the H.248-based ISDN service:

1. Add the ISDN service board.

Add a ISDN board to slot 0/2.

Huawei-OLT(config)#board add 0/2 H802DSRD
Huawei-OLT(config)#board confirm 0/2

Read more

Device Authentication Configure (MGCP-based)

by

Device Authentication Configure (MGCP-based):

  This topic describes how to configure the MGCP-based authentication parameters for the MG interface on the MA5600T/MA5603T/MA5608T to implement device authentication and prevent illegal MGs from registering with the MGC. [boxads]

Prerequisite:

  • The MG interface must be configured successfully.
  • The parameters, are including the encryption type, initial key,  DH authentication, and MG ID, must be configured on the MGC. This parameters must be the same as the parameters configured on the MA5600T/MA5603T/MA5608T.

Procedure:

Step 1: In the global config mode, run the interface mgcp command to enter the MG interface mode.
Step 2: Run the mg-software parameter 4 command to configure the registration mode.
Step 3: Run the auth command to configure the authentication MG ID and the initial key.
If Huawei products such as the SoftX3000 is used as the MGC, the authentication MG ID must
be a character string with more than eight bits.

Read more

Device Authentication Configure GPON (H.248-based)

by

Device Authentication Configure GPON (H.248-based):

This topic describes how to configure the H.248-based device authentication to prevent illegal MGs from registering with the MGC. [boxads]

Prerequisite:

  • The MG interface must be configured successfully.
  • The parameters, including the encryption type, the initial key and the DH authentication, and the MG ID, must be configured on the MGC. These parameters must be the same as the parameters configured on the MA5600T/MA5603T/MA5608T.

Precautions:

If Huawei products such as the SoftX3000 is used as the MGC, the authentication MG ID must be a character string with more than eight bits.

Procedure:

  • Step 1: In the global config mode, run the interface h248 command to enter the MG interface mode.
  • Step 2: Run the mg-software parameter 4 command to configure the registration mode.
  • Step 3: Run the mg-software parameter 6 0 command to configure the device authentication function on the MG interface.
  • Step 4: Run the auth command to configure the authentication MG ID and the initial key.
  • Step 5: Run the display auth command to query the authentication parameters.
  • Step 6: Run the reset coldstart command to reset the MG interface. Reset the MG interface to make the MG interface register with the MGC (and to make the modified attributes of the MG interface take effect) so that the MG interface can work in the normal state. The MG interface can be enabled in different ways (see Parameters of the reset command). For a newly configured MG interface, enable the MG interface through cold start.

Read more

AAA Config Huawei OLT by HWTACACS protocol

by

AAA Config Huawei OLT by HWTACACS protocol:

Today i will show how to configure AAA in Huawei OLT by using HWTACACS protocol. [boxads]

Service Requirements:

  • The HWTACACS server performs authentication, authorization, and accounting for 802.1X access users.
  • The user logs in to the server carrying the domain name.
  • The HWTACACS server with the IP address 10.10.10.10 functions as the primary server for authentication, authorization, and accounting.
  • The HWTACACS server with the IP address 10.10.10.11 functions as the secondary server for authentication, authorization, and accounting.
  • Other parameters adopt the default settings.

 Technology Diagram:

AAA Config Huawei OLT by HWTACACS
AAA Config Huawei OLT by HWTACACS

Procedure:

Step 1: Configure the AAA authentication scheme.

-The authentication scheme specifies how all the users in an ISP1 domain are authenticated.
-The system supports up to 16 authentication schemes. The system has a default authentication
scheme named default. It can be modified, but cannot be deleted.

  • 1. Run the aaa command to enter the AAA mode.
  • 2. Run the authentication-scheme command to add an authentication scheme.
  • 3. Run the authentication-mode local command to configure the authentication mode of the authentication scheme. Use the HWTACACS protocol to authenticate users.
  • 4. Run the quit command to return to the AAA mode.

[bodyads]

Configuration Example of  authentication scheme:

Configure authentication scheme named newscheme (users are authenticated through HWTACACS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme newscheme
Huawei-OLT(config-aaa-authen-newscheme)#authentication-mode hwtacacs
Huawei-OLT(config-aaa-authen-newscheme)#quit

Read more

AAA Configuration Huawei OLT by Radius protocol

by

AAA Configuration Huawei OLT by Radius protocol:

Today i will show how to configure AAA in Huawei OLT by Radius protocol. [boxads]

Service Requirements:

  • The RADIUS server performs authentication and accounting for users in the ISP1 domain.
  • The RADIUS server with the IP address 10.10.10.10 functions as the primary server for authentication and accounting.
  • The RADIUS server with the IP address 10.10.10.11 functions as the secondary server for authentication and accounting.
  • The authentication port number is 1812, and the accounting port number is 1813.
  • Other parameters adopt the default settings.

Topology Diagram: 

The below figure shows an example network Diagram of the RADIUS Authentication and Accounting application.

Topology Diagram AAA Configuration Huawei OLT by Radius protocol
Topology Diagram AAA Configuration Huawei OLT by Radius protocol

Procedure:

Step 1: Configure the authentication scheme.

NOTE:
– The authentication scheme specifies how all the users in an ISP1 domain are authenticated.
-The system supports up to 16 authentication schemes. The system has a default accounting scheme named default. It can only be modified, but cannot be deleted.

  • 1. Run the aaa command to enter the AAA mode.
  • 2. Run the authentication-scheme command to add an authentication scheme.
  • 3. Run the authentication-mode radius command to configure the authentication mode of the authentication scheme.
  • 4. Run the quit command to return to the AAA mode.

Configuration Example of authentication scheme:

Configure authentication scheme named newscheme (users are authenticated through RADIUS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme newscheme
Info: Create a new authentication scheme
Huawei-OLT(config-aaa-authen-newscheme)#authentication-mode radius
Huawei-OLT(config-aaa-authen-newscheme)#quit

Read more

Huawei OLT HWTACACS Authentication (User Management)

by

Huawei OLT HWTACACS Authentication (User Management):

Today I will show how to configure HWTACACS Authentication (User Management ) so lets go………… [boxads]

Prerequisites:

  •  The route from the MA5600T/MA5603T/MA5608T to the HWTACACS server must be configured.
  • The management user information (user name@domain and password) must be configured on the HWTACACS server.

Service Requirements:

  • The HWTACACS server performs authentication for management user of domain isp1.
  • The user logs in to the server carrying the domain name.
  • The HWTACACS server with the IP address 10.10.10.10 functions as the primary server for authentication.
  • The HWTACACS server with the IP address 10.10.10.11 functions as the secondary server for authentication.
  • Other parameters adopt the default settings.

Topology Diagram HWTACACS authentication:

AAA Config Huawei OLT by HWTACACS
AAA Config Huawei OLT by HWTACACS

Procedure:

Step 1: Configure the authentication scheme.

  • Configure authentication scheme named login-auth(users are authenticated through HWTACACS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme login-auth
Huawei-OLT(config-aaa-authen-login-auth)#authentication-mode hwtacacs
Huawei-OLT(config-aaa-authen-login-auth)#quit

Read more