Huawei OLT monitoring and ONU management

RadixOLT reads Huawei MA5600T and MA5800 chassis over SNMP every 15 minutes, finds unauthorized ONUs, authorizes them with the profiles and service ports already on the chassis, and raises one alert naming the PON port when a fibre goes dark.

Start 24-hour free trial Talk to sales

Models: MA5608T, MA5680T, MA5683TMA5800-X2, X7, X15 and X17
Reads: SNMPNo CLI login for a sweep
Writes: CLISSH or Telnet, per OLT
Verified on: MA5683T and MA5800-X2MA5600V800R018C00 on the MA5683T

What RadixOLT reads

The fleet sweep is SNMP from end to end, so a 15-minute auto-poll never holds the chassis’s CLI. Reads that only the CLI can answer run when you open the panel that needs them. SNMP reads take none of the OLT’s CLI logins, which most chassis allow only one or two of. CLI means a session over SSH or Telnet, whichever the OLT is set to.

Read on every sweep or on request
Reading	How	Notes
ONU list, status, serial and description	SNMP	The serial column is walked, then each ONT’s info is fetched by index, which is why the sweep is complete rather than truncated.
ONU optical power: RX, TX, voltage, bias, temperature	SNMP	A down ONT reports 2147483647 on every optical column. That is read as no reading, never as a level.
Last down cause and admin state	SNMP	LOS, LOSi, LOFi and the rest of Huawei’s table; activated or deactivated, measured on a live chassis.
One ONU in depth	SNMP	LAN ports and negotiated speed, active ONU alarms, line quality counters, packet and drop counters, the last ten registrations.
An open ONU page, live	SNMP	Re-read every 5 seconds while the page is open, with no CLI session. A tab left in the background stops reading.
ONU service ports and capability (SFU or HGU)	CLI	On request from the ONU page. SFU or HGU decides whether the OLT must tag the LAN ports.
PON ports and their transceivers	SNMP	Link state, ONT count, module vendor, part and wavelength, TX power, temperature, CRC and drop counters.
Uplink ports, uplink and PON traffic, per-ONU traffic	SNMP
Board CPU and temperature	SNMP	−1 means the board does not report it; 0% is a real reading, and the two are never shown alike.
Chassis model and software version	CLI	Only `display version` names the model; ENTITY-MIB says MA5600T on an MA5683T.
The chassis’s own active alarms	CLI	With Huawei’s cause and advice, each linked to the ONU it names.
MACs learned behind an ONU	CLI	Two table layouts exist; the VLAN is read from the header column, so it is never the GEM index by mistake.

What you can do from RadixOLT

Writes run over the CLI, one command at a time, and each one is checked against what the chassis answers rather than assumed.

Every write asks first, names the OLT and the ONU, and is recorded
Action	How	Notes
Discover unauthorized ONUs (autofind)	CLI	`display ont autofind all`. An empty list is the normal answer, even though Huawei words it as a failure.
Authorize an ONU	CLI	`ont add … sn-auth … ont-lineprofile-id … ont-srvprofile-id …` with profile ids read off the chassis, never defaulted.
Apply a provisioning template	CLI	The service port, and native VLAN tagging on the LAN ports for a bridging ONU, copied from ONTs already on the chassis.
Create a line and service profile pair	CLI	Cloned from an existing pair and changed only in name and VLAN, so FEC, QoS mode and DBA match the rest of your fleet.
Reboot an ONU	CLI	`ont reset`, answering the chassis’s confirmation only when it actually asks.
Activate or deactivate an ONU	CLI	Followed by a read, because the chassis answers both with silence.
Delete an ONU	CLI	Optionally removing its service ports first, off by default. The chassis’s own count decides whether it went.
Edit uplink VLANs and shut or open an uplink	CLI	Creating a VLAN that does not exist on the chassis is a separate opt-in.

Not on Huawei yet: the whole-chassis MAC read that Link Radius Server uses, and saving the running configuration from RadixOLT.

Commands one click away in the terminal

The terminal is a live session to the chassis. These are the Huawei commands offered beside it, each one verified on this platform.

display ont info summary 0/0
display ont info summary 0/1
display ont autofind all
display snmp-agent sys-info
display ont optical-info <f/s> <port> <ont-id>
display interface <interface>

Notes from live chassis

What reading this platform taught us, written down so you do not have to find it out on your own plant.

SNMP on a non-standard port is normal

One MA5683T behind NAT answered SNMP on udp/2161 with Telnet beside it. Every OLT in RadixOLT carries its own SNMP port, so a forwarded port costs nothing; tooling that assumes 161 reads an empty chassis and calls it a dead agent.

A full sweep is seconds, not minutes

Measured on an MA5683T: 253 ONTs read over SNMP in 9.3 seconds. Walking the info table instead of fetching it by index took 114.7 seconds and still lost half the optical readings, without any error.

Profile ids are per chassis

A live MA5683T held line profiles at id 0 and at 8192 to 8194. RadixOLT lists what the chassis has and validates only what keeps a nonsense value out of the command, so the chassis stays the authority.

The service port table prints RX and TX backwards

display service-port shows RX 9 TX 8 for a port configured inbound 8, outbound 9. Read by header, a template would swap a subscriber’s upload and download limits; RadixOLT maps them the way the chassis applies them.

A refused command can come back as a timeout

On the MA5683T the line editor collapses the end of a line it rejects, so the client never sees its own command echoed and times out instead of reading % Parameter error. RadixOLT treats that as the refusal it is and tries the spelling this firmware accepts.

Some ONTs never answer a version query

One online ONT answered silence to every version read while its admin state came back instantly. Firmware and model are therefore read separately, on the ONU page, so one quiet ONT cannot cost the sweep anything.

Adding one to RadixOLT

Everything the onboarding form asks for, in the order it asks.

Make the management address reachable
RadixOLT polls from its own servers, so the OLT’s management IP, or a NAT forward to it, has to answer from outside. If it cannot, the self-hosted install runs the same product inside your network.
Give it a CLI login
SSH or Telnet, the port, and a username and password. Reads never use it; autofind, authorization and the other writes do. Credentials are stored encrypted and never shown again.
Give it SNMP
The community and the SNMP port. On Huawei a wrong community is refused loudly rather than timing out, so a mistake shows straight away.
Pick the model if you know it
Optional on Huawei: one adapter covers every model. It is kept because the chassis does not report it over SNMP.
Turn on auto-poll
Every 15 minutes by default, spread per OLT. The first sweep fills the ONU list within a couple of minutes.

Other platforms

The same product on the rest of your plant. Compare every platform side by side.