background image

Operation Manual – QinQ 
H3C S9500 Series Routing Switches 

Chapter 1  QinQ Configuration

 

1-8 

As shown in 

Figure 1-3

, the service provider network comprises packet input and 

output devices. The customer networks include network A and network B. Through the 

configuration on the devices at both ends of the service provider network, the 

destination MAC address of the BPDU packet is replaced with a MAC address in a 

special format at one end, and the MAC address is converted back to the original 

destination MAC address at the other end. In this way the packet is transmitted 

transparently over the service provider network.  

 

Figure 1-3 

VLAN-VPN tunneling network hierarchy  

1.5.2  Configuring VLAN-VPN tunneling 

Perform the following configuration to configure VLAN-VPN tunneling. 

Table 1-4 

Configure VLAN-VPN tunneling 

Operation 

Command 

Remarks 

Enter system view 

system-view 

— 

Enable VLAN-VPN 
tunneling 

vlan-vpn tunnel

 

Required 

Enter Ethernet port view 

interface

 

interface-type 

interface-number 

— 

Enable VLAN VPN of the 
port 

vlan-vpn enable

 

Required 

By default, VLAN VPN is 
disabled on a port.  

 

Summary of Contents for S9500 Series

Page 1: ...n Based Nested VLAN 1 4 1 3 1 Configuration Prerequisites 1 4 1 3 2 Configuration Procedure 1 4 1 4 Configuring the TPID to Be Used in the Outer Tag 1 6 1 4 1 Configuration Prerequisites 1 6 1 4 2 Con...

Page 2: ...ate networks nested in those of public networks In public networks packets of this type are transmitted by their outer VLAN tags that is the VLAN tags of public networks And those of private networks...

Page 3: ...ssification based nested VLANs Traffic classification based nested VLANs is also called flexible QinQ It is a kind of QinQ implemented in a more flexible way You can specify to perform the following o...

Page 4: ...1 2 Configuring VLAN VPN on a Port 1 2 1 Configuration Prerequisites z GARP VLAN registration protocol GVRP spanning tree protocol STP and 802 1x protocol are disabled on the port z IGMP Snooping is...

Page 5: ...ace of the VLAN z If you have enabled VLAN VPN for the ports in the VLAN the VLAN cannot be removed z After you enable the QinQ function the configured ACL may fail to function 1 3 Configuring Traffic...

Page 6: ...destination vlan l2 vpn link aggregation group groupid destination vlan smart link group groupid destination vlan or traffic redirect inbound ip group acl number acl name link group acl number acl nam...

Page 7: ...k group acl number acl name rule rule modified vlan modified vlanid Modify outer VLAN tags for the packets matching the ACL flow rules Deliver a Layer 2 traffic classification rule traffic redirect in...

Page 8: ...vpn uplink enable By default a port is not a VLAN VPN uplink port Display VLAN VPN configuration information about all ports in the system display port vlan vpn Information about the current TPID val...

Page 9: ...he MAC address is converted back to the original destination MAC address at the other end In this way the packet is transmitted transparently over the service provider network Figure 1 3 VLAN VPN tunn...

Page 10: ...ess vlan vlan id number number Available in any view 1 7 QinQ Configuration Examples 1 7 1 Traffic Classification Based Nested VLAN Configuration Example I Network requirements z As shown in Figure 1...

Page 11: ...nterface GigabitEthernet4 1 2 H3C GigabitEthernet4 1 2 port link type hybrid H3C GigabitEthernet4 1 2 port hybrid vlan 600 tagged H3C GigabitEthernet4 1 2 port hybrid vlan 1000 untagged H3C GigabitEth...

Page 12: ...respectively z Switch B only permits packets of VLAN 10 z It is required that packets of VLANs other than VLAN 10 can be exchanged between the networks connected to Switch A and Switch C II Network di...

Page 13: ...VLAN 10 Note The following describes how a packet is forwarded from Switch A to Switch C z As the GigabitEthernet 2 1 1 port of Switch A is a VLAN VPN port when a packet reaches GigabitEthernet 2 1 1...

Page 14: ...h C and D in the network diagram serve as devices used to access the customer network z Interconnect switch C and switch D through trunk ports Enable VLAN VPN tunneling to transmit packets transparent...

Page 15: ...N VPN on Ethernet 4 1 1 H3C interface Ethernet4 1 1 H3C Ethernet4 1 1 stp disable H3C Ethernet4 1 1 vlan vpn enable H3C Ethernet4 1 1 quit Set Ethernet 4 1 3 to a trunk port and add this port to all t...

Page 16: ...z STP must be enabled on VLAN VPN tunneling enabled devices otherwise BPDUs in the customer network cannot be transmitted transparently z VLAN VPN enabled ports must be configured to Access ports The...

Reviews: