GPON

Device Authentication Configure GPON (H.248-based)

by

Device Authentication Configure GPON (H.248-based):

This topic describes how to configure the H.248-based device authentication to prevent illegal MGs from registering with the MGC. [boxads]

Prerequisite:

  • The MG interface must be configured successfully.
  • The parameters, including the encryption type, the initial key and the DH authentication, and the MG ID, must be configured on the MGC. These parameters must be the same as the parameters configured on the MA5600T/MA5603T/MA5608T.

Precautions:

If Huawei products such as the SoftX3000 is used as the MGC, the authentication MG ID must be a character string with more than eight bits.

Procedure:

  • Step 1: In the global config mode, run the interface h248 command to enter the MG interface mode.
  • Step 2: Run the mg-software parameter 4 command to configure the registration mode.
  • Step 3: Run the mg-software parameter 6 0 command to configure the device authentication function on the MG interface.
  • Step 4: Run the auth command to configure the authentication MG ID and the initial key.
  • Step 5: Run the display auth command to query the authentication parameters.
  • Step 6: Run the reset coldstart command to reset the MG interface. Reset the MG interface to make the MG interface register with the MGC (and to make the modified attributes of the MG interface take effect) so that the MG interface can work in the normal state. The MG interface can be enabled in different ways (see Parameters of the reset command). For a newly configured MG interface, enable the MG interface through cold start.

Read more

AAA Config Huawei OLT by HWTACACS protocol

by

AAA Config Huawei OLT by HWTACACS protocol:

Today i will show how to configure AAA in Huawei OLT by using HWTACACS protocol. [boxads]

Service Requirements:

  • The HWTACACS server performs authentication, authorization, and accounting for 802.1X access users.
  • The user logs in to the server carrying the domain name.
  • The HWTACACS server with the IP address 10.10.10.10 functions as the primary server for authentication, authorization, and accounting.
  • The HWTACACS server with the IP address 10.10.10.11 functions as the secondary server for authentication, authorization, and accounting.
  • Other parameters adopt the default settings.

 Technology Diagram:

AAA Config Huawei OLT by HWTACACS
AAA Config Huawei OLT by HWTACACS

Procedure:

Step 1: Configure the AAA authentication scheme.

-The authentication scheme specifies how all the users in an ISP1 domain are authenticated.
-The system supports up to 16 authentication schemes. The system has a default authentication
scheme named default. It can be modified, but cannot be deleted.

  • 1. Run the aaa command to enter the AAA mode.
  • 2. Run the authentication-scheme command to add an authentication scheme.
  • 3. Run the authentication-mode local command to configure the authentication mode of the authentication scheme. Use the HWTACACS protocol to authenticate users.
  • 4. Run the quit command to return to the AAA mode.

[bodyads]

Configuration Example of  authentication scheme:

Configure authentication scheme named newscheme (users are authenticated through HWTACACS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme newscheme
Huawei-OLT(config-aaa-authen-newscheme)#authentication-mode hwtacacs
Huawei-OLT(config-aaa-authen-newscheme)#quit

Read more

AAA Configuration Huawei OLT by Radius protocol

by

AAA Configuration Huawei OLT by Radius protocol:

Today i will show how to configure AAA in Huawei OLT by Radius protocol. [boxads]

Service Requirements:

  • The RADIUS server performs authentication and accounting for users in the ISP1 domain.
  • The RADIUS server with the IP address 10.10.10.10 functions as the primary server for authentication and accounting.
  • The RADIUS server with the IP address 10.10.10.11 functions as the secondary server for authentication and accounting.
  • The authentication port number is 1812, and the accounting port number is 1813.
  • Other parameters adopt the default settings.

Topology Diagram: 

The below figure shows an example network Diagram of the RADIUS Authentication and Accounting application.

Topology Diagram AAA Configuration Huawei OLT by Radius protocol
Topology Diagram AAA Configuration Huawei OLT by Radius protocol

Procedure:

Step 1: Configure the authentication scheme.

NOTE:
– The authentication scheme specifies how all the users in an ISP1 domain are authenticated.
-The system supports up to 16 authentication schemes. The system has a default accounting scheme named default. It can only be modified, but cannot be deleted.

  • 1. Run the aaa command to enter the AAA mode.
  • 2. Run the authentication-scheme command to add an authentication scheme.
  • 3. Run the authentication-mode radius command to configure the authentication mode of the authentication scheme.
  • 4. Run the quit command to return to the AAA mode.

Configuration Example of authentication scheme:

Configure authentication scheme named newscheme (users are authenticated through RADIUS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme newscheme
Info: Create a new authentication scheme
Huawei-OLT(config-aaa-authen-newscheme)#authentication-mode radius
Huawei-OLT(config-aaa-authen-newscheme)#quit

Read more

Huawei OLT HWTACACS Authentication (User Management)

by

Huawei OLT HWTACACS Authentication (User Management):

Today I will show how to configure HWTACACS Authentication (User Management ) so lets go………… [boxads]

Prerequisites:

  •  The route from the MA5600T/MA5603T/MA5608T to the HWTACACS server must be configured.
  • The management user information (user name@domain and password) must be configured on the HWTACACS server.

Service Requirements:

  • The HWTACACS server performs authentication for management user of domain isp1.
  • The user logs in to the server carrying the domain name.
  • The HWTACACS server with the IP address 10.10.10.10 functions as the primary server for authentication.
  • The HWTACACS server with the IP address 10.10.10.11 functions as the secondary server for authentication.
  • Other parameters adopt the default settings.

Topology Diagram HWTACACS authentication:

AAA Config Huawei OLT by HWTACACS
AAA Config Huawei OLT by HWTACACS

Procedure:

Step 1: Configure the authentication scheme.

  • Configure authentication scheme named login-auth(users are authenticated through HWTACACS).

Huawei-OLT(config)#aaa
Huawei-OLT(config-aaa)#authentication-scheme login-auth
Huawei-OLT(config-aaa-authen-login-auth)#authentication-mode hwtacacs
Huawei-OLT(config-aaa-authen-login-auth)#quit

Read more

Huawei OLT Configuration backup procedure

by

Huawei OLT Configuration backup procedure

Today I will discuss how to backup configuration in Huawei OLT. There are different mode we can backup Huawei OLT Configuration, such as ftp, sftp, tftp, xmodem mode etc. Also we can do it GUI/CLI mode. In GUI mode we can use Huawei iManager U2000 NMS server/client. In CLI mode we can use Terminal software Xshell, PuTTY  etc. today i will show in CLI mode. So let’s go our configuration part. [boxads]

Huawei OLT Configuration backup procedure:

Huawei-OLT(config)#backup ?
———————————————
Command of privilege Mode:
———————————————
bios                  BIOS file
configuration         Configuration file
data                  Database file
language              Host Multi-language resource
program               Host program
sip-srvlogic          SIP-Srvlogic file
voice                 Voice file

Huawei-OLT(config)#backup configuration ?
———————————————
Command of privilege Mode:
———————————————
ftp                   Ftp mode
sftp                  Sftp mode
tftp                  Tftp mode
xmodem                Xmodem mode

Huawei-OLT(config)#backup configuration tftp ?
———————————————
Command of privilege Mode:
———————————————
ServerIpAddress<I><X.X.X.X>     Server’s IP address

Huawei-OLT(config)#backup configuration tftp 192.168.1.50 ?
———————————————
Command of privilege Mode:
———————————————
filename<S><Length 1-128>       Load file name

Huawei-OLT(config)#backup configuration tftp 192.168.1.50 OLT-configuration.cfg ?
———————————————
Command of privilege Mode:
———————————————
<cr>                  Please press ENTER to execute command

Read more