HP 4500G PWR 24-Port, Руководство по настройке

Страница: 206 / 1968

1-5
Two-to-two VLAN mapping
In two-to-two VLAN mapping, the outer VLAN and the inner VLAN carried in a double-tagged uplink
frame received at the downlink port on the edge device of an SP network are called the original SVLAN
and CVLAN, and the VLANs that the edge device substitutes for the original SVLAN and CVLAN are
called the new SVLAN and CVLAN.
On the downlink port On the uplink port
For uplink traffic For downlink traffic For uplink traffic
Do... Based on… Do...
Based
on…
Do... Based on…
Replace the
original
SVLAN with
the new
SVLAN
Uplink policy
in the
inbound
direction
Replace the
new SVLAN
and CVLAN
with the
original
SVLAN and
CVLAN
Downlink
policy in the
outbound
direction
Replace the
original CVLAN
with the new
CVLAN
Uplink policy in the
outbound direction
VLAN Mapping Configuration Task List
You need to configure VLAN mapping on your device depending on its position in the network.
Complete the following tasks to configure VLAN mapping:
Task Remarks
Configuring One-to-One
VLAN Mapping
Optional
Perform this configuration on the corridor switches shown in
Figure 1-1 .
Configuring Many-to-One
VLAN Mapping
Optional
Perform this configuration on the campus switches shown in
Figure 1-1 .
Configuring Two-to-Two
VLAN Mapping
Optional
Perform this configuration on an edge device connecting two SP
networks. An example is Device C in the SP 2 network in Figure 1-2 .
For VLAN mapping to work, you are required to do the following in addition to configuring QoS policies:
z
Enable ARP detection to send ARP packets to the CPU to allow modification of the VLAN attributes
carried in the packets, which is impossible with the normal ARP packet processing procedure. For
information about ARP detection, refer to ARP Attack Protection Configuration in the Security
Volume.
z
Enable the dynamic address binding support of IP Source Guard to filter packets received on a port
based on the source IP address and MAC address bindings created dynamically to prevent illegal
packets from passing through the port. For information about this feature, refer to IP Source Guard
Configuration in the Security Volume.