VSOL Certified ICT Professional-Access V2.

1 WWW.VSOLCN.COM | SUPPORT@VSOLCN.COM
www.vsolcn.com
ACCESS THE WORLD
 01
CONTENTS
SFU Bridge Mode

02 HGU Router Mode

03 EPON SFU/HGU Services

04 GPON SFU/HGU Services

05 Internet Services Trouble Shooting

www.vsolcn.com
 01 SFU Bridge Mode
Introduce the characteristics of SFU bridge mode and
the usage scenarios of VSOL products

3 www.vsolcn.com
 Foreword

In a PON system, ONU has two access modes:

1. Bridge Mode (SFU): Functions like a switch by forwarding L2 data. Suitable for a
single terminal device to access the internet or multiple devices sharing the same
account to access the internet simultaneously and communicate with each other on an
Ethernet network.

2. Router Mode (HGU): Functions like a router by forwarding L3 data through NAT.
Allows one ONU and one account to support multiple terminal devices accessing the
internet simultaneously, ideal for high-end users with many access requirements.

4 www.vsolcn.com
 Objectives

Ø Describes the application of SFU (Bridge) Mode.

5 www.vsolcn.com
 SFU (Bridge) Mode
In the Ethernet network, SFU mode is common and functions like a switch. Configuring the VLAN ID
enables L2 data forwarding to achieve the desired effect.
When ISPs provide internet access, they often supply single-port or multi-port SFU devices to
ordinary users. For single-terminal access, the device can be directly connected to the ONU. For
multiple terminals, users can use their own home router to expand connectivity.

The SFU models provided by VSOL include V2902A, V2801Q, V2801S, V2801RD, V2820D and other
equipment.

V2902A V2801Q V2801S/RD V2820D

6 www.vsolcn.com
 SFU (Bridge) Mode-V2801Q
1.ONU connect PC directly for single user/terminal

2.ONU connect Switch for multi user/terminal

3.ONU connect WiFi Router for multi

user/terminal

V2801Q Advantages:
①Device providers only need to supply single-port devices，Its port speed increased to 2.5Gbps;
②It can use Switch or WiFi Router to expand the network for multi user/terminal;
③It also supports routing and NAT functions.
7 www.vsolcn.com
 SFU (Bridge) Mode-V2820D
1.ONU connect PC/Camera directly for multi user/terminal

2.ONU connect PC/Settop Box for multi user/terminal

3.ONU connect WiFi Router for multi

user/terminal
V2820D Advantages:
①The LAN port of the device supports POE power supply;
②It is the most suitable terminal equipment for a small number of users to access the Internet;
③It can provide Internet access, IPTV services, can be used for ISP, industry office and
monitoring data access services.
8 www.vsolcn.com
 02 HGU Router Mode
Introduce the characteristics of HGU router mode and
the usage scenarios of VSOL products

9 www.vsolcn.com
 Objectives

Ø Describes the application of HGU (Router) Mode.

10 www.vsolcn.com
 HGU (Route) Mode
When operators provide Internet access services, HGU with router function is used for high-
end users and various business needs. For example, it supports WiFi, VoIP and so on. With a
single account, multi terminal devices can access the internet through LAN cable or WiFi.
There is no need for customers to use WiFi router separately , and save costs.

The HGU models provided by VSOL include V2801RGW, V2802RGW, HG323RGW, HG323DAC,
HG325AX15T and other equipment.

V2801RGW HG323DAC HG325AX15T

11 www.vsolcn.com
 HGU (Route) Mode-V2801RGW

ONU Router Mode(NAT) for Internet Access

①Labtop/Smartphone/PAD access internet via ONU WiFi

②STB connect ONU LAN for IPTV
③For ISP Home/Office/Shopping Mall access

12 www.vsolcn.com
 HGU (Route) Mode-HG323DAC

ONU Router Mode(NAT) for Internet Access

①Labtop/Smartphone/PAD access internet via ONU dual

band WiFi
②STB connect ONU LAN for IPTV
③POTS connect telephone for VoIP
④For ISP Home/Office/Shopping Mall access

13 www.vsolcn.com
 HGU (Route) Mode-HG325AX15T

ONU Router Mode(NAT) for Internet Access

①Labtop/Smartphone/PAD access internet via ONU WiFi

②STB connect ONU LAN for IPTV or STB connect to
RF for CATV
③For ISP Home/Office access

14 www.vsolcn.com
 03 EPON SFU/HGU Services
Introduce the Internet services of SFU and HGU
configuration in EPON

15 www.vsolcn.com
 Foreword

1. In the following chapters 3 and 4, mainly introduces the main models of VSOL ONU,
and the configuration and usage of Internet services in EPON / GPON mode, Bridge and
Router mode.

2. These configurations are mainly completed on the OLT web of VSOL. Some application
configurations use VSOL specific private protocols (the first course we had mentioned VSOL
private protocols).

16 www.vsolcn.com
 Objectives

Ø Describes the SFU/HGU configuration under EPON.

17 www.vsolcn.com
 EPON SFU-V2801Q
V2801Q default is working at brdige mode. Under EPON system, we only need to set the GE
port vlan id (base on your network design). In some simple network , there only use as
defaut (transparent) also ok. Here is the key parameter VLAN in VSOL EPON OLT website.

18 www.vsolcn.com
 EPON HGU-V2801Q
V2801Q support router mode when you create the wan connection in ONU. You can operate via ONU
web or from VSOL EPON OLT website. Here show the VSOL EPON OLT website WAN menu to config
the ONU wan connection (VSOL private protocols).

19 www.vsolcn.com
 EPON HGU-HG323DAC
HG323DAC support bridge/router mode when you create the bridge/route wan connection in
ONU. You can operate via ONU web or from VSOL EPON OLT website. Here show the VSOL EPON
OLT website WAN menu to config the ONU wan connection (VSOL private protocols). The
WiFi/LAN DHCP Server/VoIP/Security parameters also can be operate via VSOL EPON OLT
website.

20 www.vsolcn.com
 04 GPON SFU/HGU Services
Introduce the Internet services of SFU and HGU
configuration in GPON

21 www.vsolcn.com
 Objectives

Ø Describes the SFU/HGU configuration under GPON.

22 www.vsolcn.com
 GPON SFU-V2801Q
V2801Q default is working at brdige mode. Under GPON system, there more parameters need config
than EPON system. There are TCONT/Gemport/Service/Service Port/PortVlan 5 parameters
mandatory.
the PortVlan parameters like the VLAN menu in GPON system (to set the GE port in
tag/trunk/translate/
transparent).

23 www.vsolcn.com
 GPON HGU-V2801Q
V2801Q support working at route mode. Under GPON system, there more parameters need config
than EPON system. There are TCONT/Gemport/Service/Service Port/PortVlan 5 parameters mandatory.
the PortVlan parameters generally choose the VEIP option.You can operate via ONU web or from
VSOL
OLT website. Here show the GPON OLT website WAN menu to config the ONU wan connection (VSOL
private protocols).

24 www.vsolcn.com
 GPON HGU-HG323DAC
HG323DAC support bridge/router mode when you create the bridge/route wan connection in ONU. Under
GPON system, there more parameters need config than EPON system.
There are TCONT/Gemport/Service/Service Port/PortVlan 5 parameters mandatory.You can operate via ONU
web or from VSOL GPON OLT website. Here show the VSOL GPON OLT website WAN menu to config the ONU wan
connection (VSOL private protocols). The WiFi/LAN DHCP Server/VoIP/Security parameters also can be
operate via VSOL GPON OLT website.

25 www.vsolcn.com
 05 Internet Services Trouble Shooting
Introduce some internet services problems encountered in
practical engineering, analyze the process, and provide
solutions

26 www.vsolcn.com
 Foreword

1. This chapter mainly describe the problems, analysis process and provide solutions of
some Internet service problems which in practical engineering.

2. In view of the previous collection of technical support problems, Internet

service problems mainly focus on PPPoE, DHCP and some related configuration and
compatibility. This chapter aims at PPPoE and other problems which may cause
Internet problems.

27 www.vsolcn.com
 Objectives

Ø Internet service issue about PPPoE.

Ø Internet service issue about Others.

28 www.vsolcn.com
29 www.vsolcn.com
 Issue about PPPoE--Multi PPPoE server
Phenomenon: Sometimes the dialing is normal, but sometimes the dialing is not available.
Analysis: The PPPoE client (ONU) continues the PPPoE dialing process based on the PPPoE
offer package which first replied by the PPPoE server. Therefore, in network planning, try
to avoid multi PPPoE servers in the same L2 network, so as not to cause dial-up exception.
When this issue occurs , we need to mirror ONU WAN and capture to analyse .

Multi PPPoE Server.pcapng

30 www.vsolcn.com
 Issue about PPPoE--Multi PPPoE server
Analysis of packet capture data is as follows：
There are multi PPPoE servers that are sending PPPoE Offer package to this ONU. ONU will
choose the first reponded server to transmit the PPPoE protocol. If the PPPoE server is not
correct, then the issue will occur.

31 www.vsolcn.com
 Issue about PPPoE--Multi PPPoE server
Solution：
1.Optimize the PPPoE environment. Don’t design multi pppoe servers in the same network.
2.Design different PPPoE servers in different vlan id.
3.Design different PPPoE servers with different service name, and fill in the service name
in onu pppoe wan connection.

32 www.vsolcn.com
 Issue about PPPoE--Username/Password
Phenomenon: The dialing is always not available, and doesn’t get PPPoE ip address from
PPPoE Server.
Analysis: First confirm whether ONU is registered normally, whether PPPoE connection is
created, VLAN of PPPoE connection is correct, and then make capture package by the ONU
mirror.

Username_Password not correct.pcapng

33 www.vsolcn.com
 Issue about PPPoE--Username/Password
Analysis：
There exist username/password not correct (Failure).

34 www.vsolcn.com
 Issue about PPPoE--Username/Password
Solution：
Here the capture shows that after changing t1.Double check the Username/Password with ISP,
and make confirm that we do fill in a correct Username/Password in onu .
Change Username to 666, then PPPoE diagling is successful.

35 www.vsolcn.com
 Issue about PPPoE--Service Name
Phenomenon: The dialing is always not available, and doesn’t get pppoe ip address from
pppoe server.
Analysis: First confirm whether the ONU is registered normally, whether the PPPoE
connection is created, whether the VLAN of the PPPoE connection is correct, and whether the
account password is correct, and then capture the packet by the ONU mirror.

Service Name not correct.pcapng

36 www.vsolcn.com
 Issue about PPPoE--Service Name
Analysis：
The PPPoE server didn’t respond the PPPoE Offer to onu.
Check the ONU Service Name opton is different with PPPoE server. ONU use service name
service123, but PPPoE server define the service name is service1.

37 www.vsolcn.com
 Issue about PPPoE--Service Name
Solution：
1.Modify the ONU PPPoE service name the same as the ISP’s PPPoE server

38 www.vsolcn.com
 Issue about PPPoE--MTU
Step2: Obtain some MSS values of TCP connection established by three handshakes through
mirror, and confirm whether ONU processes the actual service data flow according to MTU
negotiated by PPPoE.
Here is an example how the TCP connection created and forward between pc and internet
server, and how the onu process the TCP connection.
MSS (Maximum Segment Size) is an option of the TCP protocol. It is used to determine the
maximum data length (excluding the header) that a packet segment can carry when a TCP
connection is established.
Generally Ethernet’s MTU is 1500 byte,so:
TCP MSS = 1500(PC’s MTU)- 20(IP Header)
-20 (TCP Header) = 1460 byte

39 www.vsolcn.com
 Issue about PPPoE--MTU
PC to ONU LAN and ONU LAN to PC

ONU WAN to Server and Server to ONU WAN

40 www.vsolcn.com
 Issue about PPPoE--MTU
TCP MSS = 1500- 20(IP Header) -20 (TCP Header) = 1460 byte

TCP MSS = 1480- 20(IP Header) -20 (TCP Header) = 1440 byte

If the TCP MSS not process correct, then this issue will occur. Becuase the MSS still use 1460,
the data traffic between Server and PC will have chance encapsulate data size over 1480. he
PPPoE server will drop the data traffic , or make IP data fragment data traffic to ONU.

41 www.vsolcn.com
 Issue about PPPoE--MTU
Step3: Get some IP data flow , and analyze whether there is data fragment forwarding. When
issue occurs, data will only forward by ONU CPU. That will make low speed.
Take this following capture as example :

42 www.vsolcn.com
 Issue about PPPoE--MTU
Solution:
1.Confirm the ONU can process the MSS
correctly via mirror and capture. if not processed
correctly,please contact with our technical support
and send the capture file.
2.Try to modify the ONU PPPoE Wan connection MTU
parameter to a samller value and check.

43 www.vsolcn.com
 Issue about PPPoE--Heartbeat
Phenomenon: PPPoE disconnect randomly
Analysis: When PPPoE dials normally, ONU and Server will initiate an interaction every
other period of time to maintain PPP connection. If no heartbeat interaction for more than
a period of time, the PPP connection will be released, and the ONU will re-initiate a new
PPPoE dialing process.

44 www.vsolcn.com
 Issue about PPPoE--Heartbeat
This is an example of issue capture1 ,happen Heartbeat timeout. The server didn’t respond
the Echo Reply to onu. And onu will keep sending the Echo Request for over 30s. Then ONU
will send the PADT to terminate the PPPoE session. After that , ONU will send PADI to start
a new PPP discover again.

45 www.vsolcn.com
 Issue about PPPoE--Heartbeat
This is example of issue capture2 , PPPoE heartbeat timeout. The server didn’t receive the
Echo Request from onu in 30s.Then server will keep sending the Echo Request for 5 times.
Then Server will send the PADT to terminate the PPPoE session.

46 www.vsolcn.com
 Issue about PPPoE--Heartbeat
Solution:
1.Make confirm there is no data loss in the network, and the bandwith design is correct.
2.Modify the PPPoE server in a appropriate keepalive timeout value , for example 30s. If it
is set to a short time (eg:3s), the PPP session’s connection will be easily disconnected.
3.If all configuration is correct, please collect the capture and send to our technical
support.

47 www.vsolcn.com
 Issue about PPPoE--Heartbeat
Solution:
1.Make confirm there is no data loss in the network, and the bandwith design is correct.
2.Modify the PPPoE server in a appropriate keepalive timeout value , for example 30s. If it
is set to a short time (eg:3s), the PPP session’s connection will be easily disconnected.
3.If all configuration is correct, please collect the capture and send to our technical
support.

48 www.vsolcn.com
49 www.vsolcn.com
 Issue about DHCP
Due to the unreasonable network design, there are multi or illegal DHCP servers in the same
VLAN, making the ONU unable to obtain the correct IP address , and unable to access the
Internet.
(1) If ONU is unable to obtain the DHCP IP address, it needs to capture the packet through
mirror to analyze the interaction process of the specific DHCP protocol packet. In the
following is the normal process of DHCP:

50 www.vsolcn.com
 Issue about DHCP
(2) If DHCP IP address is incorrect, you need to check whether the DHCP server’s
configuration . Or check whether there is an illegal DHCP server . Use DHCP snooping or ACL
filter function to block packets directly from illegal DHCP server.
In the following, there is a illegal DHCP server assigning a wrong IP to ONU:

51 www.vsolcn.com
 Issue about DHCP
Solution1:
1.If confirm there is illegal DHCP server. You can use DHCP snooping function to filter the
illegal DHCP server in OLT.

52 www.vsolcn.com
 Issue about DHCP
Solution2:
1.If confirm there is illegal DHCP server. and your OLT doesn’t support DHCP snooping, you
can use simple ACL deny rule to block the illegal DHCP server data traffic.

53 www.vsolcn.com
 Issue about DHCP
Phenomenon: ONU DHCP WAN gets IP slowly
Analysis: 1: In the network environment, the number of broadcast packets exceeds the
broadcast traffic suppression threshold of the OLT or other network devices, resulting in
the discarding of some DHCP broadcast packets (such as DHCP discover packets).

54 www.vsolcn.com
 Issue about DHCP
Solution: Adjust the broadcast traffic suppression threshold of the OLT until the IP
address can be obtained normally

55 www.vsolcn.com
 Issue about DNS
Phenomenon: PC got the correct IP address, but can not access the web.
Analysis: The website address is usually in the form of domain name, and the real IP
address communication can only be achieved through DNS resolution. So it is very likely
that DNS can not get the IP address of the website, or get the incorrect IP address of the
website.
ping local network gateway

ping public network gateway

ping website address

56 www.vsolcn.com
 Issue about DNS
This is the correct process of ONU relaying the DNS:
Upstream: PC ->ONU LAN->ONU WAN->DNS
Downstream: DNS->ONU WAN->ONU LAN->PC
Here is the example(normal process):The DNS server is 202.96.128.86, and respond the
website www.qq.com release public IP 121.14.77.221

57 www.vsolcn.com
 Issue about DNS
If there is no response pinging website , you need to make a mirror and capture.
For example in this case: PC->ONU LAN->ONU WAN->DNS, there is no response from DNS server.
because this DNS server 1.2.3.1 is not correct. The correct DNS server is 202.96.128.86.

58 www.vsolcn.com
 Issue about DNS
Solution1:
1.fill in the correct DNS server

59 www.vsolcn.com
 Issue about DNS
Solution2:
1.Sometimes use ONU DNS proxy will be slow for DNS release. So you can choose DNS mode from
HGW Proxy to FromISP. Then PC get DNS server address as WAN connection. When PC asks
website address , it will released by DNS server directly.

60 www.vsolcn.com
 Thank You

61 WWW.VSOLCN.COM | SUPPORT@VSOLCN.COM
www.vsolcn.com
ACCESS THE WORLD