Configurations between IPv6 and IPv4 on the OLT EA5801-GP08 vary in the ACL, security feature, and IPTV multicast service.
Configuration Difference in Each Scenario
Configuration difference between IPv6 and IPv4 on the OLT
| Service | Scheme | Configuration Difference Between IPv6 and IPv4 |
|---|---|---|
| HSI | IPv4/IPv6 DS+NAT+PPPoE | The ACL and anti-IP spoofing configurations are different for the two services. |
| IPv4/IPv6 DS+NAT+IPoE | The ACL, anti-IP spoofing, and DHCP option configurations are different for the two services. | |
| DS-Lite+PPPoE | The ACL and anti-IP spoofing configurations are different for the two services. | |
| IPTV | IPv4/IPv6 DS+IPoE | The ACL, anti-IP spoofing, DHCP option, and multicast IGMP protocol configurations are different for the two services. |
ACL
ACL configurations on the OLT are different for IPv6 and IPv4 on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. When configuring basic and advanced IPv6 ACLs, ensure that the keyword “ipv6” is included in the configuration command.
Commands for configuring IPv4 and IPv6 ACL on the OLT
| IPv4 | IPv6 | IPv6 ACL Supported or Not |
|---|---|---|
| acl | acl ipv6 | Supported |
| packet-filter { inbound | outbound } | packet-filter { inbound | outbound } ipv6 | Supported |
| rule | rule | Supported
NOTE: After IPv6 is introduced, the protocol parameter in the rule command is extended to support the IPv6 protocols. |
Security Feature
Anti-IP spoofing configurations for IPv6 and IPv4 are different on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. If the IPoE and DHCP protocols are used, DHCP option configurations for IPv6 and IPv4 are also different.
- The IP addresses in anti-IP spoofing configurations are different for the two services.
- In the IPv4 configuration, DHCP option is DHCPv4 option 82. In the IPv6 configuration, DHCP option is DHCPv6 option 18/37.The DHCP option function is used together with the RAIO function, which enables the OLT to include physical information (including RID and CID) of the user, such as the subrack/slot/port. In this way, the BRAS or DHCP server is able to perform user authentication and tracing. When DHCPv4 is in use, the OLT includes RID and CID to the option 82 field. When DHCPv6 is in use, the OLT includes the RID to the option 37 field in the DHCPv6 packet and the CID to the option 18 field. The sub option 7 and sub option 9 functions of DHCPv4 option 82 are not supported by DHCPv6.
Commands for configuring IPv4 and IPv6 security features on the OLT
| IPv4 | IPv6 | IPv6 Security Supported or Not |
|---|---|---|
| DHCP Option | ||
| raio-mode mode dhcp-option82 | raio-mode mode dhcpv6-option | Supported |
| dhcp option82 | dhcpv6 option | Supported |
| dhcp-option82 permit-forwarding service-port | dhcpv6-option permit-forwarding | Supported |
| raio sub-option | – | Not supported |
| dhcp sub-option7 | – | Not supported |
| – | raio dhcpv6-option37 enterprise-num | Supported |
| display dhcp option82 | display dhcpv6 option | Supported |
| display dhcp config | display dhcpv6 config | Supported |
| Anti-IP spoofing | ||
| security anti-ipspoofing | security anti-ipv6spoofing | Supported |
| display security bind ip | display security bind ipv6 | Supported |
IPTV Multicast Service
The IGMP protocol configurations (used to implement the IPTV multicast service) for IPv6 and IPv4 on the OLT are different. IPv4 uses the IGMP protocol while IPv6 uses the MLD protocol (the IGMP protocol for IPv6). The IPv4 multicast service can share VLANs with the IPv6 multicast service; therefore, you can deploy the IPv6 multicast service in existing IPv4 M-VLANs only by adding IPv6 multicast programs in the IPv4 M-VLANs and in right profiles. The configured parameters such as the bound right profiles and M-VLANs can remain unchanged. For details about the difference of the IGMP commands between the two services.
Commands for configuring the IPv4 and IPv6 multicast services on the OLT
| IPv4 | IPv6 | IPv6 Multicast Supported or Not |
|---|---|---|
| MVLAN | ||
| igmp mode | igmp ipv6 mode | Supported |
| igmp match mode | igmp ipv6 match mode | Supported |
| igmp version | igmp ipv6 version | Supported |
| igmp match group | igmp ipv6 match group | Supported |
| display igmp config vlan | display igmp ipv6 config vlan | Supported |
| igmp inner-vlan | – | Not supported |
| igmp send global-leave | – | Not supported |
| Multicast user and right | ||
| debugging igmp | debugging igmp ipv6 | Supported |
| Preview | ||
| igmp preview | – | Not supported |
| igmp preview reset count | – | Not supported |
| igmp preview reset record | – | Not supported |
| igmp preview-profile add | – | Not supported |
| igmp preview-profile delete | – | Not supported |
| igmp preview-profile modify | – | Not supported |
| display igmp preview user | – | Not supported |
| display igmp preview-profile | – | Not supported |
| Protocol parameter | ||
| igmp proxy router gen-query-interval | igmp ipv6 proxy router gen-query-interval | Supported |
| igmp proxy router gen-response-time | igmp ipv6 proxy router gen-response-time | Supported |
| igmp proxy router robustness | igmp ipv6 proxy router robustness | Supported |
| igmp proxy router sp-query-interval | igmp ipv6 proxy router sp-query-interval | Supported |
| igmp proxy router sp-query-number | igmp ipv6 proxy router sp-query-number | Supported |
| igmp proxy router sp-response-time | igmp ipv6 proxy router sp-response-time | Supported |
| igmp initial-unsolicited-report interval | igmp ipv6 initial-unsolicited-report interval | Supported |
| igmp unsolicited-report interval | igmp ipv6 unsolicited-report interval | Supported |
| display igmp config vlan | display igmp ipv6 config vlan | Supported |
| igmp proxy router timeout | – | Not supported |
| Multicast additional function | ||
| igmp leave-proxy | igmp ipv6 leave-proxy | Supported |
| igmp priority | igmp ipv6 priority | Supported |
| imgp report-proxy | igmp ipv6 report-proxy | Supported |
| igmp accelerator | – | Not supported |
| igmp echo | – | Not supported |
| igmp encapsulation | – | Not supported |
| igmp multicast-tag | – | Not supported |
| igmp policy | – | Not supported |
| igmp query-offline-user | – | Not supported |
| igmp user-action-report | – | Not supported |
| igmp mismatch | – | Not supported |
| display igmp policy | – | Not supported |
| igmp sip-gip-forward | – | Not supported |
| Statistics | ||
| igmp statistic reset | igmp ipv6 statistic reset | Supported |
| display igmp statistic | display igmp ipv6 statistic | Supported |
| display multicast flow-statistic | – | Not supported |
| Log | ||
| display igmp log statistic | – | Not supported |
NOTE: The multicast commands that are not listed in this table are the commands shared by the IPv4 multicast and IPv6 multicast.
Leave a comment