MES1000, MES2000 Ethernet Switches
75
5.11
Selective Q-in-Q
This function allows to assign external SPVLAN (Service Provider's VLAN), substitute Customer
VLAN, and block the transmission of traffic based on configured filtering rules by internal VLAN numbers
(Customer VLAN).
The list of rules will be created for the device, that will be used for traffic processing.
The Selective-Q-in-Q rule configuration commands are not available in the acl-only mode.
If at least one Selective Q-in-Q rule is present for an interface, broadcast storm logging
becomes disabled for this interface.
Ethernet and Port-Channel interface configuration mode commands (interface range)
Command line request in configuration interface configuration mode appears as follows:
console#
configure
console(config)#
interface
{
fastethernet
fa_port
|
gigabitethernet
gi_port
| port-channel
group
| range
{…}
}
console(config-if)#
Table 5.42 —Ethernet interface configuration mode commands (interface range)
Command
Value
Action
selective-qinq list ingress
add_vlan
vlan_id
[ingress_vlan
ingress_vlan_id
]
vlan_id: (1..4094)
ingress_vlan_id:
(1..4094)
Create the rule, that will be used for adding the second tag
vlan_id
to the
ingress_vlan_id
inbound packet external tag.
If the
ingress_vlan_id
parameter is not defined, the rule will be
applied to all inbound packets regardless of their VLAN
inherence. Such rule may be applied to all packets not falling
under any other rule ('default rule').
selective-qinq list ingress
deny [ingress_vlan
ingress_vlan_id
]
ingress_vlan_id: (1..4094)
Create the restriction rule, that will be used for dropping
packets with external
ingress_vlan_id
tag. If the
ingress_vlan_id
parameter is not defined, the rule will cause
the inbound traffic drop regardless of the external VLAN tag.
selective-qinq list ingress
permit [ingress_vlan
ingress_vlan_id
]
ingress_vlan_id: (1..4094)
Create the rule, that will allow to forward inbound packets
with the
ingress_vlan_id
external tag without any changes.
If the
ingress_vlan_id
parameter is not defined, all inbound
packets will be forwarded regardless of the external tag value.
selective-qinq list ingress
override_vlan
vlan_id
[ingress_vlan
ingress_vlan_id
]
vlan_id: (1..4094)
ingress_vlan_id: (1..4094)
Create the rule, that will be used for replacing the
ingress_vlan_id
inbound packet external tag with the
vlan_id
value.
If the
ingress_vlan_id
parameter is not specified, the rule will
be applied to inbound packets not falling under any other rule.
selective-qinq list egress
override_vlan
vlan_id
[ingress_vlan
ingress_vlan_id
]
vlan_id: (1..4094)
ingress_vlan_id: (1..4094)
Create the rule, that will be used for replacing the
ingress_vlan_id
inbound packet external tag with the
vlan_id
tag.
This rule is applied to outbound packets.
If the
ingress_vlan_id
parameter is not specified, the rule will
be applied to outbound packets regardless of the
ingress_vlan_id
value.
no selective-qinq list
ingress [ingress-vlan
ingress_vlan_id
]
ingress_vlan_id: (1-4094)
Remove the rule for the selected
ingress_vlan_id
for inbound
packets.
Command without the
ingress_vlan_id
parameter deletes the
rule applied by default to the inbound traffic.
no selective-qinq list
egress ingress-vlan
ingress_vlan_id
ingress_vlan_id: (1-4094)
Remove the
selective qinq
rule for the selected
ingress_vlan_id
for outbound packets.
