3Com S7906E - Switch, Руководство по настройке

Страница: 234 / 2621

1-11
To do... Use the command... Remarks
Exit to system view quit —
z
To guard against attacks, you are recommended to enable ARP detection on each CVLAN.
z
Before applying a QoS policy to the downlink port, enable customer-side QinQ on the port; before
disabling customer-side QinQ on the downlink port, remove the QoS policy.
z
To change a VLAN mapping, you must first use the reset dhcp-snooping command to clear the
corresponding DHCP snooping address binding entry (refer to DHCP Commands in the IP
Services Volume ) or disable the dynamic address binding function of IP Source Guard on the
downlink port and then enable dynamic address binding again (refer to IP Source Guard
Commands in the Security Volume ).
z
When configuring many-to-one VLAN mapping, you cannot create VLAN interfaces for the involved
SVLANs and CVLANs on the switch.
Configuring One-to-Two VLAN Mapping
Perform one-to-two VLAN mapping on the edge devices from which customer traffic enters SP
networks, on Device A and Device D in Figure 1-2 for example.
Follow these steps to configure a one-to-two VLAN mapping:
To do... Use the command... Remarks
Enter system view
system-view
—
Configure an uplink policy for
the downlink port to tag CVLAN
tagged frames with an SVLAN
Refer to Table 1-4 . Required
Enter the interface view of the
downlink port interface interface-type
interface-number
—
Set the link type of the downlink
port to hybrid
port link-type hybrid Required
Configure the downlink port to
permit the specified SVLANs to
pass through and forward
frames after removing the outer
SVLAN tag
port hybrid vlan vlan-id-list
untagged
Required
By default, a hybrid port permits
only VLAN 1 to pass through.
Enable basic QinQ on the port qinq enable Required
Apply the uplink policy to the
downlink port in the inbound
direction
qos apply policy policy-name
inbound
Required
Exit to system view quit —
Enter the interface view of the
uplink port
interface interface-type
interface-number
—