Choose Manage→Service→Services from the NFM-P main menu. The Manage Services form opens.

Choose a VPRN and click Properties. The VPRN Service (Edit) form opens.

On the service navigation tree, expand Sites→Routing Instance→Subscriber Interfaces→subscriber_interface, right-click on a group interface and choose Properties. The VPRN Group Interface (Edit) form opens.

Click on the Service Access Points tab.

Click Create. The VPRN Service Access Point (Create) form opens.

Configure the required general parameters.

Select a host lockout policy in the Host Lockout panel.

Configure a port:

1. Click on the Port tab.

2. Select a port for the L3 access interface from the Select Terminating Port form.

   Note:

   The form lists only ports in access or hybrid mode. To choose a port that is not listed, you must set the Mode parameter for the port to Access or Hybrid. After you do this, the port is listed when you click Search.

3. Configure the required parameters.

   The Auto-Assign ID parameter is configurable if the port uses dot1q encapsulation. When the parameter is enabled, the NFM-P automatically configures the Outer Encapsulation Value parameter using the lowest unassigned value.

   You can set the Auto-Assign ID parameter to be the default parameter for dot1q encapsulation by enabling the Access Interface Encap Value (Dot1q only) parameter on the User Preferences form. Choose Application→ User Preferences from the main menu.

   The Inner Encapsulation Value is configurable only when the port is an Ethernet or frame relay port with QinQ encapsulation.

   The Outer Encapsulation Value (VPI) and Inner Encapsulation Value (VCI) parameters are configurable only for ATM ports.

To assign ingress and egress QoS policies to the SAP:

Items such as policies, schedulers, and filters can be applied later to multiple service components at once. Choose and right-click the components in the service navigation tree, choose Properties, and configure the parameters on the appropriate tab.

1. Click on the QoS tab.

2. Configure the required parameters.

   The Ingress Match QinQ Dot1P and Egress Mark QinQ Top Bits Only parameters are configurable only when the encapsulation type of the port is BCP dot1q, dot1q, or QinQ.

3. Select a policy in the Ingress Policy and Egress policy panels.

   Note:

   If you select an ingress or egress policy which has a forwarding class mapped to an ingress or egress queue group, you must ensure that the port you selected in Step 8 has the access ingress or egress queue group with the same name created on it.

   See To configure Ethernet ports for more information about how to configure Ethernet ports. See Chapter 49, Policies overview for more information about queue group template policies.

4. Select an HS secondary shaper in the HS Overrides panel, if required.

To specify that an aggregation scheduler policy is not applied to the interface:

1. Set the Aggregation parameter to Off.

   Note:

   The Aggregation parameter is not configurable if the port you selected in Step 8 is an HSMDA port.

2. Configure the required parameters.

   The Aggregate Rate Limit (kbps), Frame-Based Accounting, and Limit Unused Bandwidth parameters are configurable only when there is no scheduler specified in the Egress Scheduler panel.

   The Frame-Based Accounting parameter is not configurable if the port you selected is an HSMDA port.

   You cannot specify an egress scheduler when the Aggregate Rate Limit (kbps) parameter is set to a value greater than zero.

3. Select an ingress scheduler in the Ingress Scheduler panel.

4. Select an ingress policer control policy in the Ingress Policer Control Policy panel.

5. If the port you selected in Step 8 is an HSMDA port, save the changes and close the forms.

6. Select an egress scheduler in the Egress Scheduler panel.

7. Select an egress policer control policy in the Egress Policer Control Policy panel.

To specify that an aggregation scheduler policy is applied to the interface:

1. Set the Aggregation parameter to On.

   Note:

   You cannot specify an access scheduler policy if the port you selected in Step 8 is an HSMDA port.

2. Select an aggregation scheduler in the Aggregation Scheduler panel.

To assign ingress and egress ACL filters to the SAP:

1. Click on the ACL tab.

2. Select an ingress ACL filter in the Ingress Filter panel.

3. Select an egress ACL filter in the Egress Filter panel.

To assign an accounting policy to the SAP:

1. Click on the Accounting tab.

2. Configure the Collect Accounting Statistics parameter.

3. Select an accounting policy.

To assign a virtual port to the SAP:

1. Click on the Virtual Port Name tab.

2. Configure the required parameters.

To configure anti-spoofing for the SAP, click on the Anti-Spoofing tab. Configure the Anti-Spoofing parameter and static hosts, as described in To create a static host for residential subscriber management on a SAP .

To assign a DoS protection policy or DDoS protection policy to the SAP:

Note: A default DoS protection policy is automatically assigned to the SAP.

1. Click on the Security tab.

2. Select a DoS protection policy in the NE DoS Protection panel.

3. Select an NE DDoS protection policy.

4. Configure the required parameters.

To define the levels of the ETH-CFM PDUs that are discarded on ingress into the SAP or to configure LMM or ETH-LMM frame loss measurement statistics collection:

1. Click on the OAM tab, then on the ETH-CFM tab.

2. Configure the parameters in the Squelch Ingress Level panel.

   Levels must be assigned contiguously from Level 0. If you select a level greater than 0, then all levels lower than the one you chose will automatically be selected.

3. Configure the required parameters in the LMM Session Stats Collection panel.

To configure residential subscriber management on the SAP:

1. Click on the Subscriber Management tab, then on the IGMP Host Tracking tab.

2. Select the import policy used to filter IGMP packets.

3. Configure the required parameters.

4. You can click on the Host Tracking Info tab to view a list of hosts that are being tracked on this service access point.

5. Click on the Profiles tab.

6. Configure the required general parameters.

7. Select a default subscriber profile, subscriber authentication policy, and default application profile in the Policies panel.

8. Configure the Profiled Traffic Only parameter in the Single Subscriber Configuration panel.

9. Select a non-subscriber subscriber profile for the SAP in the Non-Subscriber Traffic Subscriber Profile panel.

10. Select a non-subscriber traffic SLA profile for the SAP in the Non-Subscriber Traffic SLA Profile panel.

11. Select a non-subscriber traffic application profile for the SAP in the Non-Subscriber Traffic Application Profile panel.

12. To view active hosts for the subscriber instance, click on the Subscriber Hosts tab.

To configure a default host in cases where the associated DHCP filter policy is configured with the Bypass Host Creation action:

1. Click on the Default Hosts tab.

2. Depending on the required addressing format, click on either the IPv4 or IPv6 tab.

3. Click Create. The (IPv4|IPv6) Default Host (Create) form opens.

4. In the Default Host Configuration panel, Select an (IPv4|IPv6) address to associate with the subscriber interface SAP.

   The address must be one of the addresses on the subscriber interface that the SAP belongs to, and not another default host.

5. Configure the Next Hop (IPv4|IPv6) Address parameter.

   The next hop address can be duplicated on the same SAP, but not on another SAP default host on the same routing instance.

6. Save your changes and close the form.

   Default host configuration settings cannot be changed once the default host is created.

To assign an ANCP policy to the SAP:

1. Click on the ANCP Static Map tab.

2. Click Create. The ANCP Static Map (Create) form opens.

3. Configure the ANCP String parameter.

4. Select an ANCP policy in the ANCP Policy panel.

5. Save the changes and close the forms.

To configure ATM on the SAP:

1. Click on the ATM tab.

2. Configure the required parameters.

3. Select an ingress ATM policy in the Ingress ATM Policy panel.

4. Select an egress ATM policy in the Egress ATM Policy panel.

Save the changes and close the forms.

End of steps