Thomson Gateway VLAN Configuration Guide R7.4 and higher...
Page 4
Distribution and copying of this document, use and communication of its contents is not permitted without written authorization from Thomson. The content of this document is furnished for informational use only, may be subject to change without notice, and should not be construed as a commitment by Thomson. Thomson assumes no responsibility or liability for any errors or inaccuracies that may appear in this document.
Terminology Generally, the Thomson Gateway356 will be referred to as Wireless USB Adaptor in this VLAN Configuration Guide. Typographical Conventions Following typographical convention is used throughout this manual: Sample text indicates a hyperlink to a Web site.
Page 8
About this VLAN Configuration Guide Overview First, this VLAN Configuration Guide shortly lists the VLAN features of the Thomson Gateway and the relevant standards. Some background information on several VLAN-related concepts is also provided. Next, this document describes the configuration of each VLAN feature on the Thomson Gateway in detail. CLI (Command Line Interface) commands are used for the configuration.
Introduction Virtual Local Area Networks, commonly known as VLANs, are the subject of this document. In this chapter, we shortly list the VLAN features that are supported by the Thomson Gateway, the relevant standards and related documents. Supported VLAN features...
VLAN Overview VLAN Overview What is a VLAN? A VLAN is a Layer 2 method of creating independent logical networks within a single physical network. Hosts in the same VLAN behave as if they are connected to the same LAN segment, even though they may be physically connected to different LAN segments.
Page 12
VLAN Overview Topological independence: the use of VLANs allows non-physical grouping of nodes that share similar resources. This results in the creation of logical networks, independent of the physical location of the involved nodes. Hardware requirements are reduced, as networks can be separated logically instead of physically.
Page 13
VLAN Overview Stacked VLAN frame format VLAN stacking means that a frame contains two VLAN tags. An example of a stacked VLAN frame format is shown in the following illustration: Service Provider Customer VLAN tag VLAN tag = S-tag = C-tag Destination Source Length/...
Creating VLANs on the Thomson Gateway Creating VLANs on the Thomson Gateway Introduction This chapter describes the creation of new VLANs on the Thomson Gateway. As soon as a VLAN is created, it can be used for: VLAN bridging by the Ethernet bridge.
Page 16
Creating VLANs on the Thomson Gateway Listing all VLANs To list all VLANs that were created in the previous example, execute following command: =>:eth vlan list Name ---- default data video voice The number of active VLANs is the number of VLANs that are in use at a certain moment. The maximum number of active VLANs that the bridge can support at any time is 15, including the VLANs that are already created by default.
Ethernet Bridge and VLANs Ethernet Bridge and VLANs Introduction This chapter describes the VLAN features of the Ethernet bridge in detail. These VLAN features can be grouped as follows: Ethernet bridge: The learning process is extended with the use of VLAN learning constraints. Static entries can be configured per VLAN or for all VLANs.
In this case, the same MAC address can be used in different VLANs, as each filtering data base can contain an entry for that MAC address. This way, the Thomson Gateway can be connected to the same device via different connections.
Page 19
=>:eth bridge rule add type=independent vlan=voice isi=0 Be careful during the creation of VLAN learning constraints, as inconsistencies are not always reported by the Thomson Gateway. Listing all VLAN learning constraints To list all VLAN learning constraints, execute following command: =>:eth bridge rule list...
Ethernet Bridge and VLANs Static Entries with VLANs Introduction static entry is defined as an entry that has not been obtained through the learning process. This section describes the configuration of static entries in combination with VLANs. Creating static entries :eth bridge macadd To create a static entry, use the command vlan...
Page 21
Ethernet Bridge and VLANs The resulting filtering database looks as follows: =>:eth bridge maclist 00:14:7f:01:dc:9e -- permanent, default E-DOC-CTC-20080229-0001 v1.0...
Ethernet Bridge and VLANs VLAN Awareness What is VLAN awareness? VLAN awareness of the bridge indicates whether the bridge interprets the VLAN tags of received frames: If the bridge is VLAN aware, the bridge recognizes VLAN-tagged frames and interprets the VLAN tags. The VLAN tag of a received frame identifies the VLAN to which the frame belong.
The OBC must be member of the default VLAN. Be careful when modifying the VLAN membership of the OBC, as violations of these rules are not always reported by the Thomson Gateway. Listing VLAN memberships To display all port VLAN memberships, execute following command: =>:eth bridge vlan iflist...
Ethernet Bridge and VLANs Adding ports to a VLAN :eth bridge vlan ifadd To make a bridge port member of a VLAN, use the command Two parameters must be specified: Name: the name of the VLAN. Intf: the name of the bridge port. Optionally, the following parameter can be specified: Untagged: this parameter indicates whether the bridge port is tagged or untagged member of that VLAN.
Ethernet Bridge and VLANs Modifying VLAN membership To modify the configuration of a bridge port that is member of a VLAN, execute the command :eth bridge vlan ifconfig Three parameters must be specified: Name: the name of the VLAN. Intf: the name of the bridge port. Untagged: this parameter indicates whether the bridge port is tagged or untagged member of that VLAN.
VLAN of which the port is untagged member, the PVID of the OBC is always the default VLAN. Be careful when modifying the PVID of a bridge port. A violation of the rule that the bridge port must be untagged member of the PVID VLAN is not always reported by the Thomson Gateway. Acceptable frame types...
Page 27
Ethernet Bridge and VLANs Ingress filtering ingressfiltering Each bridge port can be configured with the parameter. This parameter is used to check the of VLAN-tagged ingress traffic. This parameter decides whether a received frame is allowed or dropped by the port: If the parameter is disabled, both VLAN-tagged and non VLAN-tagged frames (i.e.
Ethernet Bridge and VLANs Dynamic VLAN Membership Introduction The basic idea of the dynamic VLAN (dynVLAN) membership feature is to assign VLANs to specific MAC addresses rather than to bridge ports. When a device with such a MAC address is connected to a bridge port, that port is dynamically added to the correct VLAN.
Ethernet Bridge and VLANs By default, dynVLAN membership checking for a bridge port is disabled. To enable this feature, execute following command: =>:eth bridge ifconfig intf=ethport2 dynvlan=enabled =>:eth bridge iflist intf=ethport2 ethport1 : dest : ethif2 Connection State: connected Retry: 10 Priority Tagging: NA (destination switch interface) Port: ethport2 PortNr: 2...
Ethernet Bridge and VLANs Listing dynVLAN membership information To list the entries of the dynVLAN membership table, execute following command: =>:eth bridge dynvlan list MAC Address VLAN RemVLAN (* = dynamic) ----------- ---------- ---------- 00:19:b9:2d:0f:c1 data (none) When a device with a MAC address from the table is connected to the bridge, an entry is added to the list of active entries.
Ethernet Bridge and VLANs Unknown VID Policy Introduction If the bridge receives a VLAN-tagged frame and no bridge port is member of the same VLAN as the frame, the frame contains an unknown VID. The bridge can be configured with an unknown VID policy that defines how frames with such an unknown VID are handled.
Ethernet Bridge and VLANs Some hardware limitations exist in case of Thomson Gateway devices with an Ethernet switch. The unknown VID policy feature works fine in following cases: No switch ports are a member of the unknown VLAN. All switch ports are a member of the unknown VLAN.
Page 33
Ethernet Bridge and VLANs Untagged: this parameter indicates whether the bridge port is tagged or untagged member of the unknown VLAN. If the parameter is not specified, the parameter is enabled. =>:eth bridge unknownvlan iflist Bridge Interface Untagged -------------------------------------- bridge ethport1 =>:eth bridge unknownvlan ifconfig intf=ethport1 untagged=disabled =>:eth bridge unknownvlan iflist...
Ethernet Bridge and VLANs Extra Tagging (Stacked VLANs) Introduction :eth bridge xtratag The CLI commands explained in this section belong to the command group What is VLAN stacking? VLAN stacking means that a frame contains two VLAN tags: inner VID, also referred to as the local VID. outer VID, also referred to as the WAN-side VID.
Ethernet Bridge and VLANs The parameter can have one of the following values: None: the extra tagging feature is not used. C-vlan: the extra tagging feature is used. When a frame is sent out on the bridge port, two tags are added: an inner C-tag with the inner VID and an outer C-tag with the outer VID.
Ethernet Bridge and VLANs Listing the VID translation table To display all entries of the VID translation table, execute following command: =>:eth bridge xtratag list Bridge Interface Inner VID Outer VID ------------------------------------------------------ bridge eth_data bridge eth_data Configuring a VID translation entry An entry of the VID translation table can be modified using the command :eth bridge xtratag config The entry is identified by the bridge port and the inner VID.
Page 37
Ethernet Bridge and VLANs Brname: the name of the bridge instance to which the bridge port belongs. If this parameter is not specified, the default bridge instance is selected. =>:eth bridge xtratag list Bridge Interface Inner VID Outer VID ------------------------------------------------------ bridge eth_data transparent...
Page 38
Ethernet Bridge and VLANs E-DOC-CTC-20080229-0001 v1.0...
Logical Ethernet interfaces can be configured to support following VLAN features: VLAN tagging of traffic at the WAN-side Support of VLAN routing on the Thomson Gateway VLAN tagging parameter vlan :eth ifconfig A logical Ethernet interface can be assigned to a VLAN using the parameter of the command.
Logical Ethernet Interfaces and VLANs WAN-side VLAN Tagging Introduction In order to support WAN-side VLAN tagging, logical Ethernet interfaces are stacked on top of each other. Several logical Ethernet interfaces with different VLANs (tagged) are created on top of a single logical Ethernet interface with the default VLAN (untagged).
VLAN bridging does not allow communication between two VLANs: the bridge forwards a frame that belongs to a specific VLAN only to bridge ports that are member of the same VLAN. VLAN routing is needed to communicate between two VLANs. To this end, the router on the Thomson Gateway must be member of both VLANs.
Page 42
Logical Ethernet Interfaces and VLANs E-DOC-CTC-20080229-0001 v1.0...
Need help?
Do you have a question about the R7.4 and is the answer not in the manual?
Questions and answers