Vlan-Vpn Configuration Example - Huawei Quidway S5600 Series Operation Manual

Operation Manual – VLAN VPN
Quidway S5600 Series Ethernet Switches-Release 1510
Caution:
If you have configured the port priority, (refer to the "QoS&QoS profile" part of Quidway
S5600 Series Ethernet Switches Operation Manual), after you configure to replicate the
tag priority of the inner VLAN tag of a VLAN-VPN packet, the switch will prompt that the
port priority configuration on the current port is disabled.

1.4 VLAN-VPN Configuration Example

I. Network requirements
Switch A and Switch C are S5600 series switches. Switch B is a switch comes
from another vendor, which uses the TPID value of 0x9100.
Two networks are connected to the GigabitEthernet1/0/1 ports of Switch A and
Switch C respectively.
Switch B only permits packets of VLAN 10.
It is required that packets of VLANs other than VLAN 10 can be exchanged
between the networks connected to Switch A and Switch C.
II. Network diagram
Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A Switch A
Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B Switch B
Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C Switch C
Figure 1-3 Network diagram for VLAN-VPN
III. Configuration Procedure
1) Configure Switch A and Switch C.
As the configuration performed on Switch A and Switch C is the same, configuration on
Switch C is omitted.
GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10) GE3/1/2 (trunk permit VLAN 10) GE3/1/2 (trunk permit VLAN 10) GE3/1/2 (trunk permit VLAN 10) GE3/1/2 (trunk permit VLAN 10)
GE3/1/1 (trunk permit VLAN 10) GE3/1/1 (trunk permit VLAN 10) GE3/1/1 (trunk permit VLAN 10) GE3/1/1 (trunk permit VLAN 10) GE3/1/1 (trunk permit VLAN 10)
GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10) GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port) GE1/0/1 (access VLAN 10, VLAN VPN port)
Huawei Technologies Proprietary
1-4
Chapter 1 VLAN-VPN Configuration