Previous Topic

Next Topic

Book Contents

Example: MVR Video Services

This topic shows an example process for provisioning video services on the E-Series GPON ONT Ethernet port using the Multicast VLAN Registration (MVR) feature to isolate subscriber video traffic from the network multicast VLAN. This is accomplished by using an MVR profile that enables the distribution of multicast traffic on a dedicated multicast VLAN across disparate access networks, while allowing subscribers who are on different VLANs to join and leave the multicast groups carried in the Multicast VLAN. MVR must be configured in every node that will carry the multicast traffic.

MVR works in conjunction with IGMP where subscribers join and leave multicast groups via IGMP. However, both the IGMP messages and multicast content are mapped from the subscriber’s service into the isolated network side multicast VLAN. The E7 GPON ONT supports the ability to map the subscriber’s IGMP and multicast traffic into multiple network multicast VLANs.

Note: Calix recommends that an MVR profile be used for all multicast IPTV applications to move the multicast traffic out of the "video" VLAN, where the video VLAN is assumed to have all of the middleware traffic, STB DHCP traffic, VOD, and so on. Typically, the video VLAN will be more susceptible to accidental or malicious traffic, whereas, MVR pulls the multicast traffic out, keeping the VLAN exclusively for IGMP signaling and multicast streams.

Best Practice: To change parameters of an existing service, first remove the service and then re-add the service with new parameters, especially if using 3rd party provisioning equipment.

See Overview: GPON L2 MVR Video Services for the sequence of linked procedures for configuring the E7 and GPON ONTs MVR video services.

Example configuration:

Unicast VLAN:

  • Middleware traffic, STB DHCP traffic, high-speed internet
  • VLAN ID -
  • IGMP Snooping - flood (no snooping)
  • Service-Tag Action - matches untagged traffic in Unicast VLAN, action is add-2-tags (2001 for inner tag, 200 for outer tag)

Multicast VLAN:

  • IGMP signaling and multicast streams
  • VLAN ID - 100 single tag
  • IGMP Snooping - snoop-suppress or proxy (enable snooping)
  • MVR Profile VLAN ID = Multicast VLAN ID

    Step 1: Configure network uplinks

    • Configure Ethernet Interfaces
    • Configure Ethernet Ports
    • Create Service VLANs
    • If the VLAN IGMP Mode is set to proxy, an IGMP profile must be referenced from the VLAN. Use the system-default IGMP profile, or create a new IGMP profile for the VLAN to reference that sets configuration attributes of the IGMP snoop used to establish membership in a multicast video services group.
    • For an MVR configuration, create a minimum of two VLANS:
      ---One VLAN for Unicast
      ---One VLAN for Multicast

      For example:

      Video (Unicast) VLAN:

    • Middleware traffic, STB DHCP traffic, high-speed internet
    • VLAN ID - 2001 for inner tag, 200 for outer tag
    • IGMP Snooping - flood (no snooping)

      MVR (Multicast) VLAN:

    • IGMP signaling and multicast streams
    • VLAN ID - 101 single tag
    • IGMP Snooping - snoop-supress or proxy (E7-20 only supports proxy, which requires a Proxy IP Address indicated in the referenced IGMP Profile)
    • VLANs > Create

      See Create the Service VLANs.

    • Make Interfaces VLAN Members

      Add uplink interface (LAG) to the service VLANs.

    See procedures in Configuring the Network Uplink(s) for GPON Service.

    See "Configuring Transport and Aggregation Support" in the Calix E7 User Guide for instructions on configuring transport rings and aggregation links.

    IGMP Profile


    Step 2: Create system profiles

    Create Rules to Classify Traffic:

    a) Create a Match List

    The match rule only applies to the Unicast traffic, NOT the Multicast VLAN. The Multicast VLAN will follow the same match rule as setup for the Unicast stream when it is applied to the the ONT Ethernet port.


    • To match all untagged traffic, use the system default match list provided in the E7, as will be used in this example.
    • If a residential gateway (RG) is installed in the subscriber's premesis, the RG classifies traffic into VLANs. Then for each service type, create a match list that contains a tagged rule. For MVR video, match the video Unicast VLAN.
    • To allow both video and internet services on the same port, create a list with rules that match the traffic from set-top boxes (STB). To match the traffic from all STBs of a particular manufacturer, indicate the STB OUI in the first half of the Source MAC and enter zeros for the last half of the source MAC. See Creating a Service Match List and Rules.

      Note: The T-Series ONTs do not support configuring a match rule with an OUI filter.




    Example entries that match all STB source MAC addresses of a particular manufacturer:

    ADB set-top boxes: 00:03:91:00:00:00
    Amino set-top boxes: 00:02:02:00:00:00

    b) Create a Service Tag Action

    Apply a specified service-tag action to the matched traffic. See Creating Service-Tag Actions.

    For this example:

    • The system-default match list that matches all untagged traffic is used.
    • Two tags are added to the Unicast stream where the outer tag is assigned 200 and the inner tag will be specified when the service is provisioned on the ONT Ethernet port.
    • The indication of Specify P-Bit is used for the P-Bit Source, and the P-bit value of 4 marks the traffic for the assured forwarding class.


    Configure the Ethernet Bandwidth Profile.

    An Ethernet bandwidth profile specifies the upstream and downstream bandwidth rates to apply to individual Ethernet services on ONT Ethernet ports. Typically, a single bandwidth profile is applied to many subscriber ports.

    The bandwidth limits for all ONT services (in the same class) of a single ONT Ethernet port are aggregated into a single CoS metered rate. See Creating an Ethernet Bandwidth Profile.


    Create an MVR Profile and MVR VLAN Addresses.

    For this example, the created MVR profile designates the Multicast VLAN (101) as an MVR VLAN and no IP range is specified, allowing all IGMP and Multicast traffic.

    MVR Profile


    Configure the Ethernet Multicast Profile.

    An Ethernet multicast profile enables provisioning of the IPTV service limits that can be applied to subscriber services.

    • Select the MVR profile where the MVR VLAN ID is that of the multicast VLAN.
    • Enter a Query Interval value that matches the query interval of the upstream router that is acting as the IGMP querier.
    • The Convert to Unicast parameter should ONLY be enabled if switches are deployed on the subscriber side that cannot manage heavy multicast traffic. (Only Calix GX ONTs support this feature.)
    • E7 > Profiles > Service > Multicast > Multicast > Profiles > Create

      See Creating an Ethernet Multicast Profile.

    Multicast Profile

    Create an Ethernet Security Profile.

    An Ethernet security profile is applied to ONT Ethernet ports to enable and/or specify security attributes of the ONT Ethernet port, including Layer 2 Control Protocol (L2CP) handling on GPON ONT Ethernet interfaces and VLANs on the interface.

    The E7 has a default Ethernet Security profile that you can apply to ONT Ethernet ports or you can create a new profile with modified attributes.

    • DHCP Lease Limit: 10
    • Upstream Broadcast/Multicast Limit: 24
    • L2CP Filter: user-defined
    • Flood Destination Lookup Fail: selected
    • DOC Attack Detection: selected
    • E7 > Profiles > Security > Ethernet > Profiles > Create

      The E7 has two system default L2CP filters that either discard (all-discard) or pass (all-tunnel) all L2CP protocol frames for all ranges. You can also create filters that specify which L2CP ranges to discard or tunnel L2CP protocol frames.

    • E7 > Profiles > Security > L2CP > Filters > Create

      See Creating an Ethernet Security Profile.

    Security Profile

    L2CP Filters

    Step 3: Configure a PON

    Enable the GPON Port.

    Split Horizon should ONLY be disabled when setting up TLAN service between multiple GPON ports on the same E7 card.

    • Admin State: enabled
    • Split Horizon: selected
    • Dynamic Bandwidth Allocation (DBA): selected
    • Shelf# > Card# (GPON) > GPON #
    • Click Apply from the menu.

      See Configuring an E7 GPON Port.


    Create an ONT.

    Typically, the provisioning of an ONT is done in advance of installation and discovery of the physical ONT. ONTs are created as follows:

    Manually where the ONT is pre-provisioned by entering the ONT serial number into the Create ONT dialogue box.

    Automatically where the ONT is discovered on the network after successfully completing the Remote ONT Activation Process.

    Selecting System Assigned ID allows the automatic assignment for the ONT ID.


    Configure an ONT Ethernet Port.

    Configure an ONT Ethernet port for service.

    • Enable the port and enter subscriber information.
    • Assign port to L2 interface (none), if necessary for HGW ONT.
    • Specify the security profile.
    • To run OAM tests, the Link OAM Events and Accept Link OAM Loopback must be set to Y (Yes).
    • Click Apply on the menu.
    • ONTs > Provisioned ONTs > Ports > GE


      See Configuring an ONT Ethernet Port.


    Step 4: Configure subscriber services

    Add the Video Service to an ONT Ethernet Port.

    This example video service assigns a multicast profile that references an MVR profile for the Multicast VLAN.

    This service also references a Service Tag Action that added two tags, specifying the Outer Tag, and indicating the VLAN inner tag is specified when the service is added to a port. You can specify a unique VLAN inner tag to apply a different VLAN tag for each subscriber.

    • ONTs > Provisioned ONTS > Services > Table.
    • From the top of the Work Area, use the ONT drop-down list ONT_select to select the ONT on which to add the service.
    • Create > Video Service.

      See Overview: GPON L2 MVR Video Service.

      Video MVR

      Verify Service Functionality

    • Click the E7 node in the navigation tree. In the work area click DHCP > Leases. Check whether any subscriber devices have acquired an IP address in the service VLAN.
    • Click the E7 node in the navigation tree. In the work area click Multicast > Groups.
    • In the list of all video streams currently being monitored on the entire E7, check whether any subscriber devices have acquired an IP address in the service VLAN.