3Com 5500-EI PWR Install Manual page 965

[SwitchB] interface Ethernet 1/0/21
[SwitchB-Ethernet1/0/21] vlan-vpn enable
# Set the TPID value of Ethernet1/0/22 to 0x9200 (for intercommunication with the devices in the public
network) and set the port as a trunk port permitting packets of VLAN 1040.
[SwitchB-Ethernet1/0/22] vlan-vpn tpid 9200
[SwitchB-Ethernet1/0/22] quit
[SwitchB] interface Ethernet 1/0/21
[SwitchB-Ethernet1/0/22] port link-type trunk
[SwitchB-Ethernet1/0/22] port trunk permit vlan 1040
Note:
Do not configure VLAN 1040 as the default VLAN of Ethernet 1/0/12 of Switch A and Ethernet
1/0/22 of Switch B. Otherwise, the outer VLAN tag of a packet will be removed during transmission.
In this example, both Ethernet1/0/11 of Switch A and Ethernet1/0/21 of Switch B are access ports.
In cases where the ports are trunk ports or hybrid ports, you need to configure the two ports to
remove the outer VLAN tags before transmitting packets of VLAN 1040. Refer to VLAN in this
manual for detailed configuration.
Configure the devices in the public network
# As the devices in the public network are from other vendors, only the basic principles are introduced
here. That is, you need to configure the devices connecting to Ethernet 1/0/12 of Switch A and Ethernet
1/0/22 of Switch B to permit the corresponding ports to transmit tagged packets of VLAN 1040.
Data transfer process
The following describes how a packet is forwarded from Switch A to Switch B in this example.
1) As Ethernet 1/0/11 of Switch A is a VLAN-VPN port, when a packet from the customer's network
side reaches this port, it is tagged with the default VLAN tag of the port (VLAN 1040).
2) The TPID value of the outer VLAN tag is set to 0x9200 before the packet is forwarded to the public
network through Ethernet1/0/12 of Switch A.
3) The outer VLAN tag of the packet remains unchanged while the packet travels in the public network,
till it reaches Ethernet1/0/22 of Switch B.
4) After the packet reaches Switch B, it is forwarded through Ethernet1/0/21 of Switch B. As the port
belongs to VLAN 1040 and is an access port, the outer VLAN tag (the tag of VLAN 1040) of the
packet is removed before the packet is forwarded, which restores the packet to a packet tagged
with only the private VLAN tag and enables it to be forwarded to its destination networks.
5) It is the same case when a packet travels from Switch B to Switch A.
1-8