background image

Operation Manual – QinQ 
H3C S9500 Series Routing Switches 

Chapter 1  QinQ Configuration

 

1-12 

# Configure the GigabitEthernet 2/1/2 port to be a VLAN-VPN uplink port and add it to 

VLAN 10 (a trunk port). 

[SwitchA]interface GigabitEthernet2/1/2 

[SwitchA-GigabitEthernet2/1/2]port link-type trunk 

[SwitchA-GigabitEthernet2/1/2]port trunk permit vlan 10 

[SwitchA-GigabitEthernet2/1/2]vlan-vpn uplink enable 

# Configure the GigabitEthernet 2/1/1 port to be a VLAN VPN port and add it to VLAN 

10 (an access port). 

[SwitchA]interface GigabitEthernet2/1/1 

[SwitchA-GigabitEthernet2/1/1]port access vlan 10 

[SwitchA-GigabitEthernet2/1/1]vlan-vpn enable 

[SwitchA-GigabitEthernet2/1/1]quit 

2) 

Configure Switch B 

Because Switch B is produced by other vendor, related commands may differ from 

those available to S9500 switches. So only the operation is listed, as shown below: 

z

 

Configure GigabitEthernet 3/1/1 and GigabitEthernet 3/1/3 ports of Switch B to be 

trunk ports. 

z

 

Add the two ports to VLAN 10. 

 

 

  Note: 

The following describes how a packet is forwarded from Switch A to Switch C. 

z

 

As the GigabitEthernet 2/1/1 port of Switch A is a VLAN VPN port, when a packet 

reaches GigabitEthernet 2/1/1 port of Switch A, it is tagged with the default VLAN 

tag (VLAN 10, the outer tag) and is then forwarded to GigabitEthernet 2/1/2 port. 

z

 

Because GigabitEthernet 2/1/2 port is a VLAN-VPN uplink port with a TPID of 

0x9100, Switch A changes the TPID value in the outer VLAN Tag of the packet to 

0x9100, and forwards the packet to the public network. 

z

 

The packet reaches GigabitEthernet 3/1/2 port of Switch B. Switch B sends the 

packet to its GigabitEthernet 3/1/1 port by forwarding the packet in VLAN 10. 

z

 

The packet is forward from GigabitEthernet 3/1/1 port of Switch B to the network on 

the other side and enters GigabitEthernet 2/1/2 port of Switch C, Switch C sends the 

packet to its GigabitEthernet 2/1/1 port by forwarding the packet in VLAN 10. As 

GigabitEthernet 2/1/1 port is an access port, Switch C strip off the outer VLAN tag of 

the packet and restores the original packet. 

A packet goes through similar procedure when traveling from Switch C to Switch A. 

 

Summary of Contents for S9500 Series

Page 1: ...n Based Nested VLAN 1 4 1 3 1 Configuration Prerequisites 1 4 1 3 2 Configuration Procedure 1 4 1 4 Configuring the TPID to Be Used in the Outer Tag 1 6 1 4 1 Configuration Prerequisites 1 6 1 4 2 Con...

Page 2: ...ate networks nested in those of public networks In public networks packets of this type are transmitted by their outer VLAN tags that is the VLAN tags of public networks And those of private networks...

Page 3: ...ssification based nested VLANs Traffic classification based nested VLANs is also called flexible QinQ It is a kind of QinQ implemented in a more flexible way You can specify to perform the following o...

Page 4: ...1 2 Configuring VLAN VPN on a Port 1 2 1 Configuration Prerequisites z GARP VLAN registration protocol GVRP spanning tree protocol STP and 802 1x protocol are disabled on the port z IGMP Snooping is...

Page 5: ...ace of the VLAN z If you have enabled VLAN VPN for the ports in the VLAN the VLAN cannot be removed z After you enable the QinQ function the configured ACL may fail to function 1 3 Configuring Traffic...

Page 6: ...destination vlan l2 vpn link aggregation group groupid destination vlan smart link group groupid destination vlan or traffic redirect inbound ip group acl number acl name link group acl number acl nam...

Page 7: ...k group acl number acl name rule rule modified vlan modified vlanid Modify outer VLAN tags for the packets matching the ACL flow rules Deliver a Layer 2 traffic classification rule traffic redirect in...

Page 8: ...vpn uplink enable By default a port is not a VLAN VPN uplink port Display VLAN VPN configuration information about all ports in the system display port vlan vpn Information about the current TPID val...

Page 9: ...he MAC address is converted back to the original destination MAC address at the other end In this way the packet is transmitted transparently over the service provider network Figure 1 3 VLAN VPN tunn...

Page 10: ...ess vlan vlan id number number Available in any view 1 7 QinQ Configuration Examples 1 7 1 Traffic Classification Based Nested VLAN Configuration Example I Network requirements z As shown in Figure 1...

Page 11: ...nterface GigabitEthernet4 1 2 H3C GigabitEthernet4 1 2 port link type hybrid H3C GigabitEthernet4 1 2 port hybrid vlan 600 tagged H3C GigabitEthernet4 1 2 port hybrid vlan 1000 untagged H3C GigabitEth...

Page 12: ...respectively z Switch B only permits packets of VLAN 10 z It is required that packets of VLANs other than VLAN 10 can be exchanged between the networks connected to Switch A and Switch C II Network di...

Page 13: ...VLAN 10 Note The following describes how a packet is forwarded from Switch A to Switch C z As the GigabitEthernet 2 1 1 port of Switch A is a VLAN VPN port when a packet reaches GigabitEthernet 2 1 1...

Page 14: ...h C and D in the network diagram serve as devices used to access the customer network z Interconnect switch C and switch D through trunk ports Enable VLAN VPN tunneling to transmit packets transparent...

Page 15: ...N VPN on Ethernet 4 1 1 H3C interface Ethernet4 1 1 H3C Ethernet4 1 1 stp disable H3C Ethernet4 1 1 vlan vpn enable H3C Ethernet4 1 1 quit Set Ethernet 4 1 3 to a trunk port and add this port to all t...

Page 16: ...z STP must be enabled on VLAN VPN tunneling enabled devices otherwise BPDUs in the customer network cannot be transmitted transparently z VLAN VPN enabled ports must be configured to Access ports The...

Reviews: