| |
|
1 |
Choose Manage→Service→Services from the NFM-P main menu. The Manage Services form opens.
|
2 |
Select a VPLS in the list and click Properties. The VPLS Service (Edit) form opens.
|
3 |
In the navigation tree, expand Sites→site_n→Access Interfaces.
|
4 |
Right-click on the Access Interfaces icon and choose Create VPLS L2 Access Interface, or right-click an existing access interface object and choose Properties. The VPLS L2 Access Interface (Create|Edit) form opens.
-
Set the SAP Sub Type parameter to Capture. The form displays a different array of tabs and panels.
-
Configure the Description and Administrative State parameters.
-
Select a host lockout policy, if required.
-
Select a subscriber authentication policy, if required.
|
5 |
Click on the Port tab.
-
Select a terminating port for the capture SAP.
-
Configure the encapsulation values for the SAP, if required. The encapsulation type of the terminating port determines the encapsulation values that are available. The table below describes the encapsulation values for each encapsulation type.
The capture SAP is used if a more specific match for the dot1q or QinQ tags is not found.
Some providers use QinQ encapsulation to represent a service.sub or sub.service SAP. When configured, the full QinQ represents a subscriber. Table 74-4: Encapsulation types
|
Encapsulation type |
Encapsulation values |
|
dot1q |
4095 only, which appears as an asterisk (*) |
|
QinQ |
1 to 4095 for the outer encapsulation value, and 4095 only for the inner encapsulation value |
|
LAG |
1 to 4095 for both encapsulation values |
|
6 |
Click on the ACL tab to select an ACL filter.
|
7 |
Click on the QoS tab to specify an ingress or egress queue group policy.
-
Select an NE DoS protection policy.
-
Configure the MAC Monitoring parameter OR the Ethernet CFM Monitor Flags parameter.
-
Select a DDoS protection policy.
|
8 |
If the capture SAP is an ATM SAP, click on the ATM tab.
-
Configure the AAL5 Encapsulation parameter.
-
Click on the VC Ranges tab.
-
Click Create or select an existing ATM configuration and click Properties. The ATM Configuration (Create|Edit) form opens.
-
Configure the required parameters.
-
Save your changes and close the form.
|
9 |
Click on the Capture Access Interface tab.
-
Enable the Allow Dot1Q MSAPs parameter, if required. This parameter can only be configured when the terminating port for the capture SAP is configured for QinQ encapsulation.
- Select one or more of the following parameters on the Trigger Packet panel to specify the types of packets that will trigger RADIUS authentication:
-
DHCPv4
-
PPP
-
PPPoE
-
ARP
-
DHCPv6
-
Data
The PPPoE parameter is selectable only on an ATM SAP. The ARP, DHCPv4, and DHCPv6 parameters are selectable only on a non-ATM SAP.
-
Select a MSAP policy in the MSAP Defaults panel.
-
Select or manually type an MSAP Service ID.
-
Select or manually type an MSAP Group Interface Name.
-
Select a PPP policy in the PPP panel, if required.
A PPP policy is configurable only on an ATM SAP.
-
Select a PPP policy in the PPPoE panel, if required.
- Select a local user database for the following protocols, as required:
A PPP local user database is selectable on only an ATM SAP.
A DHCPv4 or DHCPv6 local user database is selectable on only a non-ATM SAP.
- Select a python policy for the following protocols, as required:
-
Select an SRRP instance in the Redundancy panel.
-
Select a diameter authentication policy.
-
If the capture SAP is to be used for data-triggered authentication in a dynamic services configuration, select a dynamic service policy and configure its administrative state.
|
10 |
If the capture SAP is to be used to instantiate IPoE sessions, click on the IPoE Session tab.
-
Configure the Administrative State and Description parameters.
The Administrative State parameter must be set to Disabled before IPoE session policy and local user database configurations can be changed.
-
Select an IPoE session policy.
-
Select a local user database.
|
11 |
Save your changes and close the forms.
End of steps |