Once it was necessary to link several offices in one organization into one common local network, all points were connected by different ONUs, and by default, traffic between ONUs in Smart Vlan is blocked. The setup will be done on Huawei SmartAX MA5683T, the same can be done on other Huawei MA5600 OLTs.
If it is necessary that traffic from different networks can go between clients, then it is enough to give clients different subnets with different gateways and enable proxy arp on the router in the network core, then the traffic of these clients will go through the router and everything will be ok (no additional settings on OLT will not need). I will give an example of setting up a local network between ONUs in the same network, for example, two VLANs with a tag come to the first office with a tag in a managed switch, one VLAN is the Internet, and the second goes to a local network to other offices, other offices have ONUs with a VLAN without a tag through which the local network comes from the first office.
And so, add a new VLAN:
vlan 1060 smart
We indicate it on the Uplink port (if it is also necessary to deliver this VLAN outside the OLT):
port vlan 1060 0/9 0
Let’s create an ont-srvprofile with a new VLAN:
ont-srvprofile gpon profile-id 5 profile-name "L2Vlan1060_ixnfo.com" ont-port eth 1 port vlan eth 1 translation 1060 user-vlan 1060 commit
Let’s create an ont-lineprofile with a new VLAN:
ont-lineprofile gpon profile-id 26 profile-name "L2Vlan1060_ixnfo.com" tcont 4 dba-profile-id 15 gem add 1 eth tcont 4 gem mapping 1 0 vlan 1060 commit
As usual, add ONU to the port:
interface gpon 0/2 ont add 3 126 sn-auth "465454480813353C" omci ont-lineprofile-id 26 ont-srvprofile-id 5 desc "ixnfo.com onu1" ont add 3 127 sn-auth "465454480813352A" omci ont-lineprofile-id 26 ont-srvprofile-id 5 desc "ixnfo.com onu2" ont port native-vlan 3 126 eth 1 vlan 1060 priority 0 ont port native-vlan 3 127 eth 1 vlan 1060 priority 0
As usual, add a service-port for these ONUs with a new VLAN:
service-port 5383 vlan 1060 gpon 0/2/3 ont 126 gemport 1 multi-service user-vlan 1060 tag-transform translate service-port 5384 vlan 1060 gpon 0/2/3 ont 127 gemport 1 multi-service user-vlan 1060 tag-transform translate
Now the most important thing is to create a service-profile in which we activate user-bridging:
vlan service-profile profile-id 1 profile-name "srvprof-1" forwarding vlan-mac user-bridging enable commit
Well, the last command will apply the created service-profile for the new VLAN:
vlan bind service-profile 1060 profile-id 1
After that, there will be L2 communication between client ONUs in the specified VLAN.
An example of viewing information about service-profile and vlan:
display vlan service-profile profile-id 1 display vlan 1060