ZTE 320 ONU Settings

Доброго времени суток! Я тоже являюсь счастливым обладателем железки C320 пронесенной через границу с китаем на руках. Решили использовать потенциал оптики, вместо меди. В общем, там же мной были закуплены по 10$ F601 (с которыми проблем я не поимел) и для теста за 15$ я взял F623, с чисто китайской, но нормальной прошивкой. В качестве NAS использую Accel-ipoe с Mikbill, и решил подать на С320 Q-in-Q. Каждый сервисный ВЛАН я как бы в режиме "access" повесил на оптический порт OLT, т.е. например 60 сервисный vlan определяет, что это 1 gpon интерфейс, 61 svlan - 2ой gpon интерфейс и т.д. Каждому абоненту я выдаю CVLAN  который Accel-IPOE у себя автоматически поднимает, а биллинг вешает на этот clvan ip адрес и все работает. Для F601 я придумал не замысловатый конфиг:
interface gpon-onu_1/2/1:3
  description ZTE F601
  sn-bind enable sn
  tcont 1 name Int_T1 profile 20Mbit
  gemport 1 name Gemport1 unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 61 vlan 61 svlan 60


pon-onu-mng gpon-onu_1/2/1:3
  service HSI type internet gemport 1 cos 0 vlan 61
  vlan port eth_0/1 mode tag vlan 61
У абонента соответственно оказался access`ом 61 CVLAN в 60 SVLANе. Каким образом настроить профиль для F623 имеющий на борту почти тоже самое, что и F660, за исключением того что телефонный порт один,  чтобы: 1) На F623 на WAN интерфейсе был включен DHCP клиент, на CVLANе поданном туда, и поднят NAT на том же WAN интерфейсе, т.е. чтобы при подключении к любому из 4х ethernet портов или WLAN`ов, человек получив от DHCP сервера F623 адрес, мог выйти во внешнюю сеть. 2) На F623 на любой ethernet интерфейс можно было подать любой access`ом или trunk`ом CVLAN, например в ситуации когда необходимо каждому устройству подать определенный влан или диапазон вланов.
Есть ли у кого мысли, или примеры, подскажите пожалуйста. Тыкаться уже подустал...

show run
Building configuration...
!**********Before interface -- show run on RP start!*********
!
!
sdisk disable
set-pnp disable
add-rack rackno 1 racktype C320Rack
add-shelf rackno 1 shelfno 1 shelftype C320_SHELF
add-subcard rackno 1 shelfno 1 slotno 3 subcardno 1 UCDC/3
add-subcard rackno 1 shelfno 1 slotno 4 subcardno 1 UCDC/1
add-card rackno 1 shelfno 1 slotno 1 GTGO
system-monitor watchdog rackno 1 shelfno 1 slotno 1 disable
system-monitor watchdog-duration rackno 1 shelfno 1 slotno 1 value 5
system-monitor endless-loop duration rackno 1 shelfno 1 slotno 1 value 75
system-monitor endless-loop reboot rackno 1 shelfno 1 slotno 1 disable
system-monitor task-suspend-reboot rackno 1 shelfno 1 slotno 1 all
system-monitor watchdog rackno 1 shelfno 1 slotno 3 disable
system-monitor watchdog-duration rackno 1 shelfno 1 slotno 3 value 5
system-monitor endless-loop duration rackno 1 shelfno 1 slotno 3 value 75
system-monitor endless-loop reboot rackno 1 shelfno 1 slotno 3 disable
system-monitor task-suspend-reboot rackno 1 shelfno 1 slotno 3 all
system-monitor watchdog rackno 1 shelfno 1 slotno 4 disable
system-monitor watchdog-duration rackno 1 shelfno 1 slotno 4 value 5
system-monitor endless-loop duration rackno 1 shelfno 1 slotno 4 value 75
system-monitor endless-loop reboot rackno 1 shelfno 1 slotno 4 disable
system-monitor task-suspend-reboot rackno 1 shelfno 1 slotno 4 all
!
his-performance sample enable
his-performance alarm enable
his-performance auto-upload disable
!
!
clock
!
!
 
!
ptp
ptp-two-step disable
ptp-announce-interval 0
!
!
security port-protect enable
!
eth-switch max-frame-length  1600
!
!
vlan database
  vlan 1,100,303-311,600
  vlan 2040
!
vlan 2040
  name vlan-2040-zte
!
!
!
!
epon
!
!
port-location access-node-identifier inband-mac
!
dhcp-option82 disable
dhcp6-option18 disable
!
pppoe-plus disable
!
ndp-lio disable
!
igmp  enable
mld  disable
gpon
  profile tcont unlim type 4 maximum 1000000
  profile traffic unlim sir 1000000 pir 1000000
!
!
gpon
!
!
pon
  onu-type 1ETH gpon description 1ETH
  onu-type 4ETH gpon description 4ETH
  onu-type GPON_FOUR_WIFI gpon description FourPortWiFiGponONU
  onu-type GPON_ONE gpon description SinglePortGponONU
  onu-type-if 1ETH eth_0/1
  onu-type-if 4ETH eth_0/1
  onu-type-if 4ETH eth_0/2
  onu-type-if 4ETH eth_0/3
  onu-type-if 4ETH eth_0/4
  onu-type-if GPON_FOUR_WIFI eth_0/1
  onu-type-if GPON_FOUR_WIFI eth_0/2
  onu-type-if GPON_FOUR_WIFI eth_0/3
  onu-type-if GPON_FOUR_WIFI eth_0/4
  onu-type-if GPON_FOUR_WIFI wifi_0/1
  onu-type-if GPON_FOUR_WIFI wifi_0/2
  onu-type-if GPON_FOUR_WIFI wifi_0/3
  onu-type-if GPON_FOUR_WIFI wifi_0/4
  onu-type-if GPON_ONE eth_0/1
  uncfg-onu-display-info mac sn model version
onu-profile gpon line 100MB
!
pon
onu-profile gpon line unlim
!
pon
 
!
!
!
!
ip-service ip-source-guard disable
ip dhcp snooping enable
!
pon-loopback-detection enable
pon-loopback-auto-shutdown enable
pon-loopback-auto-check-time 1
!
 
!
!
!
!
!
!
!
!
!
!
!
!
interface mng1
  ip address 192.168.3.220 255.255.255.0
  boot-server 136.1.1.1
  boot-username target
  config-filename startrun.dat
  imgfile-location local
!
interface vlan 100
  ip address 10.200.0.5 255.255.255.0
!
interface vlan 303
  ip address 172.16.18.254 255.255.255.0
!
interface vlan 307
!
interface vlan 600
  ip address 192.168.222.2 255.255.255.0
!
interface vlan 2040
  ip address 10.4.0.212 255.255.255.0
!
interface null1
!
interface gpon-olt_1/1/1
  onu 1 type 1ETH sn ZTEGC551B210
  onu 2 type 1ETH sn ZTEGC55DC95B
  onu 3 type 1ETH sn ZTEGC55124AD
  onu 4 type 1ETH sn ZTEGC556A8E0
  onu 5 type 1ETH sn ZTEGC556ABA7
  onu 6 type 1ETH sn ZTEGC55B76C8
  onu 7 type 1ETH sn ZTEGC55BAA65
  onu 8 type 1ETH sn ZTEGC55E1204
  onu 9 type 1ETH sn ZTEGC55DE11F
!
interface gpon-onu_1/1/1:1
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:2
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:3
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:4
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:5
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:6
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:7
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:8
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/1:9
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-olt_1/1/2
!
interface gpon-olt_1/1/3
!
interface gpon-olt_1/1/4
  onu 1 type 1ETH sn ZTEGC5506823
  onu 2 type 1ETH sn ZTEGC55B361C
  onu 3 type 1ETH sn ZTEGC55E153B
  onu 4 type 1ETH sn ZTEGC5568869
  onu 5 type 1ETH sn ZTEGC55DE15B
!
interface gpon-onu_1/1/4:1
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 303 vlan 303
!
interface gpon-onu_1/1/4:2
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 308 vlan 308
!
interface gpon-onu_1/1/4:3
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 308 vlan 308
!
interface gpon-onu_1/1/4:4
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 308 vlan 308
!
interface gpon-onu_1/1/4:5
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 308 vlan 308
!
interface gpon-olt_1/1/5
  onu 1 type 1ETH sn ZTEGC55AF974
!
interface gpon-onu_1/1/5:1
  sn-bind enable sn
  tcont 1 name unlim profile unlim
  gemport 1 name unlim unicast tcont 1 dir both
  switchport mode hybrid vport 1
  service-port 1 vport 1 user-vlan 308 vlan 308
!
interface gpon-olt_1/1/6
!
interface gpon-olt_1/1/7
!
interface gpon-olt_1/1/8
!
interface gei_1/3/1
  hybrid-attribute fiber
  negotiation auto
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
  switchport vlan 100,303  tag
!
interface xgei_1/3/2
  phy-attribute lan
  hybrid-attribute fiber
  no negotiation auto
  speed 10000
  duplex full
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
  switchport vlan 100,303  tag
!
interface gei_1/3/3
  hybrid-attribute copper
  negotiation auto
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
!
interface gei_1/4/1
  hybrid-attribute fiber
  negotiation auto
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
  switchport vlan 100,303-311  tag
!
interface gei_1/4/2
  hybrid-attribute fiber
  negotiation auto
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
  switchport vlan 100,303-311  tag
!
interface gei_1/4/3
  hybrid-attribute copper
  negotiation auto
  flowcontrol disable
  port-protect disable
  uplink-isolate disable
  switchport mode hybrid
  switchport vlan 100,303-311  tag
!
!**********After interface -- show run on RP start!**********
!
ip route 0.0.0.0 0.0.0.0 10.200.0.1
!
pon
!
!
mac aging-time 300
mac monitor-period 10
mac usage-threshold 70
!
pon-onu-mng gpon-onu_1/1/1:1
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:2
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:3
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:4
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:5
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:6
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:7
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:8
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/1:9
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/4:1
  service HSI type internet gemport 1 cos 0 vlan 303
  vlan port eth_0/1 mode tag vlan 303
!
pon-onu-mng gpon-onu_1/1/4:2
  service HSI type internet gemport 1 cos 0 vlan 308
  vlan port eth_0/1 mode tag vlan 308
!
pon-onu-mng gpon-onu_1/1/4:3
  service HSI type internet gemport 1 cos 0 vlan 308
  vlan port eth_0/1 mode tag vlan 308
!
pon-onu-mng gpon-onu_1/1/4:4
  service HSI type internet gemport 1 cos 0 vlan 308
  vlan port eth_0/1 mode tag vlan 308
!
pon-onu-mng gpon-onu_1/1/4:5
  service HSI type internet gemport 1 cos 0 vlan 308
  vlan port eth_0/1 mode tag vlan 308
!
pon-onu-mng gpon-onu_1/1/5:1
  service HSI type internet gemport 1 cos 0 vlan 308
  vlan port eth_0/1 mode tag vlan 308
!
!
pon
!
!
mpnat service telnet-shell service-port 9999
mpnat trans-table aging-time 60
mpnat onu-telnet idle-time 3
mpnat onu-ftp aging-time 5
mpnat onu-snmp aging-time 30
mpnat onu-ftp-data aging-time 5
mpnat onu-mng-port auto-alloc disable
!
bcm-server listen-port 5000
!
hostname ZXAN
!
enable secret 5 RcMLuUKvnFZX9kNAV6A/UA==
!
username admin password  7 T1L28wi/5+YYuZ4qxdkTxA== privilege 15
username admin password  7 T1L28wi/5+YYuZ4qxdkTxA== max-sessions 16
!
login-authentication-type local
login-authorization-type local
!
clock timezone UTC 0
banner incoming @
************************************************
Welcome to ZXAN product C320 of ZTE Corporation
************************************************
@
!
!
auto-write disable
!
user-suspend mode none
!
!
!
snmp-server location No.889 BiBo Rd. PuDong District, ShangHai, China
snmp-server contact +86-021-68895000
snmp-server packetSize 8192
snmp-server engine-id 80000f3e0300fcc897bdc8c3
snmp-server community openk view allview rw
snmp-server community public view allview ro
snmp-server view allview org included
snmp-server view DefaultView system included
snmp-server enable trap SNMP
snmp-server enable trap VPN
snmp-server enable trap BGP
snmp-server enable trap OSPF
snmp-server enable trap RMON
snmp-server enable trap STALARM
!
!
logging on
logging buffer 200
logging mode fullcycle
logging level notifications
logging snmplog-save disable
syslog facility local0
syslog severity 6
!
line console idle-timeout 30
line console absolute-timeout 1440
line telnet idle-timeout 30
line telnet absolute-timeout 1440
line telnet users 16
line cli detail-info-show disable
!
ssh server authentication ispgroup 1
ssh server authentication mode local
ssh server authentication type chap
no ssh server only
ssh server version 2
!
authentication local enable
!
tacacs disable
tacacs-server timeout 5
tacacs-server packet 1024
!
!
alarm enable
alarm confirm
nms-hello-trap disable
alarm trap-confirm retry 1 timeout 30
!
control-panel
  packet-limit all 1000
!
!
end