Huawei OLT Bridge ONU , Easy

Huawei OLT bridge ONU configuration lets clients behind different ONUs talk to each other at Layer 2 inside one VLAN. On Huawei OLTs, traffic between ONUs in a smart VLAN is blocked by default, so you enable user bridging on that VLAN. This guide was tested on the Huawei SmartAX MA5683T.

Written by Madan Kc

Quick answer: Create the VLAN, service and line profiles, register the ONUs with a service-port each, then create a VLAN service profile with forwarding vlan-mac and user-bridging enable and bind it to the VLAN with vlan bind service-profile.

Before you start

Use this setup only when clients must be in the same network. Example: office 1 receives two tagged VLANs on a managed switch (Internet and local network), while the other offices receive the local-network VLAN untagged on their ONUs.
If clients only need to reach different networks (different subnets and gateways), skip this guide. Enable proxy ARP on your core router instead; no OLT change is required.
You need console or Telnet access to the OLT, an existing DBA profile, and the serial numbers of your ONUs.
Values in red are examples. Replace them with your own VLAN, slots, IDs and serial numbers.

How to bridge ONUs on a Huawei OLT step by step

Create the VLAN
Create a smart VLAN for the bridged network (1060 in this example).
```
vlan 1060 smart
```
Add the VLAN to the uplink port (optional)
Only needed if this VLAN must also leave the OLT.
```
port vlan 1060 0/9 0
```

Create the ONT service profile

Map Ethernet port 1 to the VLAN.

ont-srvprofile gpon profile-id 5 profile-name "Madankc"
ont-port eth 1
port vlan eth 1 translation 1060 user-vlan 1060
commit

Create the ONT line profile

Define the T-CONT, the GEM port and the VLAN mapping. The DBA profile referenced here must already exist.

ont-lineprofile gpon profile-id 26 profile-name "Madankc"
tcont 4 dba-profile-id 15
gem add 1 eth tcont 4
gem mapping 1 0 vlan 1060
commit

Register the ONUs

Enter the GPON interface and add each ONU by serial number. ont port native-vlan sets the untagged VLAN on the ONU Ethernet port.

interface gpon 0/2
ont add 3 126 sn-auth "SERIAL-1" omci ont-lineprofile-id 26 ont-srvprofile-id 5 desc "madankc onu1"
ont add 3 127 sn-auth "SERIAL-2" omci ont-lineprofile-id 26 ont-srvprofile-id 5 desc "madankc onu2"
ont port native-vlan 3 126 eth 1 vlan 1060 priority 0
ont port native-vlan 3 127 eth 1 vlan 1060 priority 0

Create a service-port for each ONU

Each ONU needs its own service-port, here with tag translation.

service-port 5383 vlan 1060 gpon 0/2/3 ont 126 gemport 1 multi-service user-vlan 1060 tag-transform translate
service-port 5384 vlan 1060 gpon 0/2/3 ont 127 gemport 1 multi-service user-vlan 1060 tag-transform translate

Enable user bridging (the key step)
Create a VLAN service profile with MAC-based forwarding and user-bridging enable, then bind it to the VLAN.
```
vlan service-profile profile-id 1 profile-name "srvprof-1"
forwarding vlan-mac
user-bridging enable
commit
```
```
vlan bind service-profile 1060 profile-id 1
```
After this, ONUs in the VLAN can talk to each other at Layer 2.

Verify the bridge

Check the VLAN service profile and the VLAN configuration:

display vlan service-profile profile-id 1
display vlan 1060

Notes and compatibility

Commands and defaults can vary by OLT model and firmware version. Confirm on your own unit.
Official reference: Huawei SmartAX MA5600T series documentation on Huawei Enterprise Support (some downloads need an account).

Command reference

Command	What it does
`vlan 1060 smart`	Create the smart VLAN
`ont-srvprofile gpon profile-id 5 ...`	Create the ONT service profile
`ont-lineprofile gpon profile-id 26 ...`	Create the ONT line profile
`ont add 3 126 sn-auth ...`	Register an ONU
`ont port native-vlan 3 126 eth 1 vlan 1060`	Set the untagged VLAN on an ONU port
`service-port 5383 vlan 1060 ...`	Create the per-ONU service-port
`vlan service-profile profile-id 1 ...`	Create the VLAN service profile
`user-bridging enable`	Allow ONU-to-ONU traffic in the VLAN
`vlan bind service-profile 1060 profile-id 1`	Bind the profile to the VLAN
`display vlan service-profile profile-id 1`	Check the service profile
`display vlan 1060`	Check the VLAN

Frequently asked questions

Why is ONU-to-ONU traffic blocked by default?

Traffic between ONUs in a smart VLAN is isolated by default on Huawei OLTs. user-bridging enable in the VLAN service profile lifts that isolation for the VLAN it is bound to.

Does this work on the MA5608T and MA5800?

The syntax is similar across the MA5600 series, but this guide was tested on the MA5683T. Command details can differ by model and firmware, so verify on your own unit.

Do I need user-bridging if clients are on different subnets?

No. If clients use different subnets and gateways, traffic passes through the router. Enable proxy ARP on the core router and no OLT change is needed.

What does tag-transform translate do?

It translates the VLAN tag between the ONU side (user-vlan) and the OLT side (vlan) of the service-port.