Got it

PC cant reach or ping another pc on same vlan with different ont

Created: Dec 8, 2021 09:13:32Latest reply: Dec 13, 2021 20:49:43 276 10 0 0 0
  HiCoins as reward: 0 (problem unresolved)

Dears,


I have two ont ,ont 01 connected to pon1 and ont 02 connected to pon2 ,each ont work in bridge wan and vlan ID 925.

each ont connted to pc through LAN of ont as you can see in attachments.

The issue is PC1 can not access or ping PC2 but PC1 and PC2 can ping and access to OLT and I can see mac and IP or PC1 and PC2 in arp table and mac table with their IP's so what can I do to make PC1 reach or ping PC2



Featured Answers

Recommended answer

Chenxintao
Admin Created Dec 8, 2021 09:38:00

Hello, friend!


Please note that your attachments were not uploaded successfully, so I can't see your attachments.


Also, can you provide the model of your equipment?


You need to check whether the IP address and gateway IP address of the two ONTs and PCs are correctly configured and are in the same network segment.


Since I don't know the exact configuration of the device, according to your problem description, the possible causes are as follows:


1. The IP addresses are not in the same network segment.

2. The gateway configuration is incorrect.

3. The interface configuration on the OLT is incorrect.

4. Layer 2 isolation may exist.


Thanks!

View more
  • x
  • convention:

All Answers

Hello, dear.
It's nice to meet you in the community.
We're working on getting the right answer for you. Please rest assured that we'll be back with an answer shortly.
View more
  • x
  • convention:

Hello, friend!


Please note that your attachments were not uploaded successfully, so I can't see your attachments.


Also, can you provide the model of your equipment?


You need to check whether the IP address and gateway IP address of the two ONTs and PCs are correctly configured and are in the same network segment.


Since I don't know the exact configuration of the device, according to your problem description, the possible causes are as follows:


1. The IP addresses are not in the same network segment.

2. The gateway configuration is incorrect.

3. The interface configuration on the OLT is incorrect.

4. Layer 2 isolation may exist.


Thanks!

View more
  • x
  • convention:

topology

sorry for attachments as you can see in pic and I checked
IP address and correct

Gate not need becasue they are in same network

how can I check layer 2 isolation ?


View more
  • x
  • convention:

GOOD ANSWER
View more
  • x
  • convention:

Posted by laith7s123 at 2021-12-08 10:07 sorry for attachments as you can see in pic and I checkedIP address and correctGate not need becasue ...

Hello, friend!


You can run the display vlan isolation command to query the global Layer 2 communication status.

huawei#display vlan-isolate                                              
      VLAN isolate is disable


In global config mode, run the vlan-isolate disable command to disable Layer 2 isolation.


Assume that the control board of the MA5680T/MA5683T/MA5608T is SCU, the service board is GPBC, and the global Layer 2 interworking function is enabled. To enable the global Layer 2 interworking function, do as follows:

huawei(config)#vlan-isolate disable     
Command:           
          vlan-isolate disable      
  It will take several minutes, and console may be timeout, please use command  
idle-timeout to set time limit          
  Are you sure to switch the VLAN isolate? (y/n)[n]:y


Thanks!

View more
  • x
  • convention:

well thanks for answer but when I ran the commands "display vlan-isolate,vlan-isolate disable " is not work when I try to do it and after I check the vlan smart is isolate by default so need to disable to isolation of vlan smart
my config for two ont is :

vlan 925 smart
port vlan 925 0/3 3

interface gpon 0/0
ont add 1 0 sn-auth "4857544357xxxxx" omci ont-lineprofile-id 0 ont-srvprofile-id 0 desc "ONT A"
ont add 3 0 sn-auth "485754435DDxxxxx" omci ont-lineprofile-id 0 ont-srvprofile-id 0 desc "ONTB"

service-port 1 vlan 925 port 0/0/1 ont 0 multi-service user-vlan 925  tag-transform translate
service-port 2 vlan 925 port 0/0/3 ont 0 multi-service user-vlan 925  tag-transform translate

so is there anyway to remove isolation and make connectivity work in same vlan ?

View more
  • x
  • convention:

Chenxintao
Chenxintao Created Dec 10, 2021 00:36:27 (0) (0)
A smart VLAN can contain multiple upstream ports and multiple service virtual ports. The service virtual ports in a smart VLAN are isolated from each other, and the service virtual ports in different VLANs are isolated from each other. One VLAN can access multiple users, reducing the number of VLANs occupied.  
Posted by laith7s123 at 2021-12-09 18:39 well thanks for answer but when I ran the commands "display vlan-isolate,vlan-isolate disable " is n ...

Hello. friend!


Create service flows for Layer 2 interworking on the OLT so that data packets on different ONUs can be forwarded at Layer 2 based on the same VLAN on the OLT. You may also need to configure the protocol transparent transmission attribute based on the configuration information provided by you.


Create a VLAN service profile, enable the VLAN Layer 2 interworking function, configure the protocol transparent transmission attributes related to the Layer 2 interworking service, and bind the profile to VLAN 925.

huawei(config)#vlan service-profile profile-id 1
huawei(config-vlan-srvprof-1)#user-bridging enable   //mandatory
huawei(config-vlan-srvprof-1)#bpdu tunnel enable
huawei(config-vlan-srvprof-1)#ospf tunnel enable
huawei(config-vlan-srvprof-1)#rip tunnel enable
huawei(config-vlan-srvprof-1)#vtp-cdp tunnel enable
huawei(config-vlan-srvprof-1)#commit
huawei(config-vlan-srvprof-1)#quit
huawei(config)#multicast-unknown policy service-port 1 transparent
huawei(config)#multicast-unknown policy service-port 2 transparent
huawei(config)#vlan bind service-profile 925 profile-id 1


Note, however, that the preceding configuration has two prerequisites:


1. The SCUN control board is used.

2. Run the arp proxy disable command to disable the ARP proxy function because Layer 2 interworking is mutually exclusive with the ARP proxy function.


Thanks!


View more
  • x
  • convention:

thank you I will try and give you the result in two days
View more
  • x
  • convention:

its works perfectly thank you for helping
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.