51
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
For an E-Series Ethernet port interface to pass traffic carried on a VLAN, the interface
must be added to the VLAN membership, or specified as the target in a tag action.
You can configure only one of the following attributes on a given VLAN on a given E-
Series Ethernet port interface:
VLAN membership
Tag-action (edge and access interfaces only)
Native VLAN (edge and trunk interfaces only)
For an xDSL port to pass traffic carried on a VLAN, a service tag action must be created
specifying the VLAN.
For xDSL VLANs that need to carry IPv6 traffic, enable the VLAN TLAN parameter
for transparent passthrough of IPv6 traffic.
IGMP snooping is only enabled on the outer VLAN ID as multicast traffic is typically
transported throughout the network with a single VLAN ID tag.
All nodes in an ERPS ring must have the same IGMP Snooping provisioning on the
video VLAN for traffic to flow--either all with snooping (snoop-suppress, proxy) or all
without snooping (flood).
An operator may manually delete a lease entry from the table. However, if an IP Source
Verification is enabled on the VLAN, deleting the DHCP lease entry results in the
subscriber traffic being dropped until the subscriber’s IP host requests, and is granted, a
new IP address using DHCP.
When DHCP snooping is enabled on a subscriber VLAN, the E-Series drops all DHCP
server communication originating from subscriber Ethernet interfaces. Calix
recommends DHCP snooping be enabled for all residential subscriber services.
In the VDSL2 subsystems, DHCP leases cannot be learned without also applying a limit
to the number of learned leases on the port. Each Ethernet port has an associated Port
Security Profile that can limit DHCP leases in a range of 1-16. A security profile used by
an xDSL port must have a DHCP lease limit value of 10 or less.
When DHCP snooping is enabled, DHCP requests for VLANs do not appear in an E-
Series port mirror session.
The craft management ports cannot use IP addresses from the same subnet where
DHCP Snooping is enabled.
DHCP snooping is not supported on management VLANs.
DHCP Snoop must be enabled on the VLAN to support the AE Discovery Event
operation.
Simultaneous operation of DHCP Snooping and PPPoE are not supported. When a
PPPoE profile is selected, the DHCP features are disabled. See
Configuring PPPoAPPPoE
Operation for a Data Service
(on page
184
) for more information.
For E-Series VDSL2, IP and MAC addresses may be dynamically learned using either
DHCP Snooping or manually provisioned with static IP/MAC addresses. Services with
static subnets (without MAC address specification) may also be provisioned for IP
Source Verification, but are bound to the port only by IP address.
