15.03.2015 Views

ND1030 Ethernet ALA Service definition - NICC

ND1030 Ethernet ALA Service definition - NICC

ND1030 Ethernet ALA Service definition - NICC

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

34<br />

<strong>NICC</strong> ND 1030 V1.1.1 (2010-12)<br />

5.9.5.6 NNI Diagnostics<br />

The NNI MEG shall support Loopback and Linktrace.<br />

5.10 Security in N:1 VLANs<br />

The requirements in this sub-clause only apply where a Point-to-Point AUC is implemented using<br />

N:1 VLAN transport. This is because in this architecture, the end-user MAC address is processed<br />

by the <strong>ALA</strong> Provider network.<br />

5.10.1 Isolation Between <strong>ALA</strong> User Connections<br />

The AUC shall prevent forwarding traffic between UNIs. Traffic received from a UNI shall only be<br />

forwarded to a NNI.<br />

5.10.2 Broadcast Handling<br />

5.10.2.1 Upstream Broadcast Storms<br />

The AUC shall protect the <strong>ALA</strong> user from broadcast storms, by limiting the rate of upstream<br />

broadcast frames per UNI. This limit shall be configurable.<br />

5.10.2.2 Downstream DHCP Broadcast<br />

The AUC shall forward a downstream DHCP broadcast message only to the UNI for which it is<br />

intended as specified in [R-100] of TR-101 [6].<br />

5.10.2.3 Downstream ARP Broadcast<br />

The AUC shall ensure that downstream broadcast ARP requests are only sent to a UNI with the<br />

associated requested IP address as specified in [R-106] and [R-107] of TR-101 [6].<br />

5.10.3 MAC Address Translation<br />

MAC address translation (MAT) uses a symmetric one to one mapping table per UNI that maps<br />

between each end-user MAC address and a Virtual-MAC address (VMAC). The VMAC is a<br />

unique <strong>ALA</strong> Provider administered MAC addresses per end-user MAC address. This function<br />

provides protection against denial of service in the case where multiple CPE use the same MAC<br />

address and satisfies R-89 of TR-101 [6].<br />

5.10.3.1 MAT Support<br />

The AUC shall support per S-VLAN activation / deactivation of the AUC MAT function.<br />

5.10.3.2 MAC Address Mapping<br />

The AUC MAT function shall translate the source address of <strong>Ethernet</strong> frames in upstream traffic<br />

from the end-user MAC to the VMAC. The AUC shall translate the destination address of <strong>Ethernet</strong><br />

frames in downstream traffic from the VMAC to the end-user MAC address.<br />

5.10.3.3 MAT Helper Functions<br />

The AUC MAT function shall support symmetric, one to one translation between each end-user<br />

MAC and a VMAC in the payload of the following messages : ARP, DHCP v4, IEEE 802.1ag<br />

LTM and LTR.<br />

<strong>NICC</strong> Standards Limited

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!