ND1030 Ethernet ALA Service definition - NICC
ND1030 Ethernet ALA Service definition - NICC
ND1030 Ethernet ALA Service definition - NICC
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
34<br />
<strong>NICC</strong> ND 1030 V1.1.1 (2010-12)<br />
5.9.5.6 NNI Diagnostics<br />
The NNI MEG shall support Loopback and Linktrace.<br />
5.10 Security in N:1 VLANs<br />
The requirements in this sub-clause only apply where a Point-to-Point AUC is implemented using<br />
N:1 VLAN transport. This is because in this architecture, the end-user MAC address is processed<br />
by the <strong>ALA</strong> Provider network.<br />
5.10.1 Isolation Between <strong>ALA</strong> User Connections<br />
The AUC shall prevent forwarding traffic between UNIs. Traffic received from a UNI shall only be<br />
forwarded to a NNI.<br />
5.10.2 Broadcast Handling<br />
5.10.2.1 Upstream Broadcast Storms<br />
The AUC shall protect the <strong>ALA</strong> user from broadcast storms, by limiting the rate of upstream<br />
broadcast frames per UNI. This limit shall be configurable.<br />
5.10.2.2 Downstream DHCP Broadcast<br />
The AUC shall forward a downstream DHCP broadcast message only to the UNI for which it is<br />
intended as specified in [R-100] of TR-101 [6].<br />
5.10.2.3 Downstream ARP Broadcast<br />
The AUC shall ensure that downstream broadcast ARP requests are only sent to a UNI with the<br />
associated requested IP address as specified in [R-106] and [R-107] of TR-101 [6].<br />
5.10.3 MAC Address Translation<br />
MAC address translation (MAT) uses a symmetric one to one mapping table per UNI that maps<br />
between each end-user MAC address and a Virtual-MAC address (VMAC). The VMAC is a<br />
unique <strong>ALA</strong> Provider administered MAC addresses per end-user MAC address. This function<br />
provides protection against denial of service in the case where multiple CPE use the same MAC<br />
address and satisfies R-89 of TR-101 [6].<br />
5.10.3.1 MAT Support<br />
The AUC shall support per S-VLAN activation / deactivation of the AUC MAT function.<br />
5.10.3.2 MAC Address Mapping<br />
The AUC MAT function shall translate the source address of <strong>Ethernet</strong> frames in upstream traffic<br />
from the end-user MAC to the VMAC. The AUC shall translate the destination address of <strong>Ethernet</strong><br />
frames in downstream traffic from the VMAC to the end-user MAC address.<br />
5.10.3.3 MAT Helper Functions<br />
The AUC MAT function shall support symmetric, one to one translation between each end-user<br />
MAC and a VMAC in the payload of the following messages : ARP, DHCP v4, IEEE 802.1ag<br />
LTM and LTR.<br />
<strong>NICC</strong> Standards Limited