Ont Packet Authorization - Alcatel-Lucent 7302 Information Manual

Intelligent services access manager

Hide thumbs Also See for 7302:

Table of Contents

1 — ONT and MDU overview

Source address anti-spoofing is implemented in either static or dynamic mode.

Static mode enables the table of authorized source addresses to be provisioned

statically by an operator for one of the following anti-spoofing control types:

Dynamic mode enables the table of authorized source addresses to be provisioned

both statically by an operator and dynamically through DHCP, and supports the

anti-spoofing control type IP-only.

Source address anti-spoofing filters are applied as follows:

For IP-only anti-spoofing, packets that match a configured source address are

forwarded, and non matching packets are dropped.

For MAC and IP anti-spoofing, packets that match a configured pair of MAC

source address and IP source address are forwarded, and non-matching packets

are dropped.

MAC-only anti-spoofing can be implemented in one of two modes:

Not all anti-spoofing control types apply to all traffic. Table

anti-spoofing control types and any traffic exemptions by source address

anti-spoofing mode.

November 2013

Figure 1-3 ONT packet authorization

Forward authorized packets

unauthorized

Inclusive mode forwards packets that match a configured MAC source address, and

drops non matching packets.

Exclusive mode forwards packets that do not match a configured MAC source

address, and drops matching packets.

Alcatel-Lucent 7302 ISAM | 7330 ISAM FTTN | 7360 ISAM FX ONT R04.06.02

Upstream packets

source addresses

3FE 55873 AAAA TCZZA

ONT Product Information Guide

identifies the