Parameter

Specification

PON features

GPON

Support ITU -T standard

Each PON port supports 128*ONU

Maximum transmission distance of 20KM

Support uplink FEC, downlink FEC(Forward Error Correction)

ONU identifier authentication :SN /SN+PASSWD/LOID

Bandwidth allocation mechanism

5 types of T-CONT bandwidth

Static Bandwidth Allocation

Dynamic Bandwidth Allocation

L2 features

MAC

MAC Black Hole, Port MAC Limit

VLAN

4K VLAN entries

Port-based/MAC-based/IP subnet-based VLAN

Port-based QinQ and Selective QinQ (StackVLAN)

VLAN Swap and VLAN Remark and VLAN Translate

Based on ONU service flow VLAN add, delete, replace

Protocol

STP, RSTP, MSTP

Port

Bi-directional bandwidth control

Static link aggregation and LACP(Link Aggregation Control Protocol)

Port mirroring and traffic mirroring

L3 features

Protocol

OSPF, IS-IS, BGP

Security features

User Security

Anti-ARP-flooding

IP Source Guard create IP+VLAN+MAC+Port binding

Port Isolation

MAC address binds to port and port MAC address filtration

IEEE 802.1x and AAA/Radius authentication

dhcp anti-attack flood attack automatic suppression

ONU isolation control

Device security

Anti-DOS attack(such as ARP,Synflood, Smurf, ICMP attack), ARP detection, worm and Msblaster worm attack

SSHv2 Secure Shell, SNMP v3 encrypted management

Security IP login through Telnet

Hierarchical management and password protection of users

Network security

User-based MAC and ARP traffic examination

Restrict ARP traffic of each user and force-out user with abnormal ARP traffic

Dynamic ARP table-based binding

Supports IP+VLAN+MAC+Port binding

L2 to L7 ACL flow filtration mechanism on the 80 bytes of the head of user-defined packet

Port-based broadcast/multicast suppression and auto-shutdown risk port

URPF to prevent IP address counterfeit and attack

DHCP Option82 and PPPoE+ upload user’s physical location

Plaintext authentication of OSPF,RIPv2 and MD5 cryptograph authentication

IP routing

IPv4

ARP Proxy, DHCP Relay, DHCP Server, Static route

IPv6

ICMPv6 DHCPv6 ACLv6

Configured Tunnel 6to4 tunnel

IPv6 and IPv4 Tunnels

Service features

ACL

Standard and extended ACL

Time Range ACL

Packet filter providing filtering based on source/destination MAC address, source/destination IP address, port, protocol, VLAN, VLAN range, MAC address range, or invalid frame. System supports concurrent identification at most 50 service traffic

Support packet filtration of L2~L7 even deep to 80 bytes of IP packet head

QoS

Rate-limit to packet sending/receiving speed of port or self-defined flow and provide general flow monitor and two-speed tri-color monitor of self-defined flow

Priority remark to port or self-defined flow and provide 802.1P, DSCP priority and Remark

CAR(Committed Access Rate),Traffic Shaping and flow statistics

Packet mirror and redirection of interface and self-defined flow

Super queue scheduler based on port and self-defined flow. Each port/ flow supports 8 priority queues and scheduler of SP, WRR and SP+WRR.

Congestion avoid mechanism,including Tail-Drop and WRED

Multicast

IGMPv1/v2/v3 , IGMPv1/v2/v3 Snooping, IGMP Filter

MVR and cross VLAN multicast copy

IGMP Fast leave, IGMP Proxy, MLDv2/MLDv2 Snooping