Vlan Vpn - TP-Link T3700G-52TQ User Manual

Step Operation
3 Create VLAN20
4 Create Protocol
Template
5 Create Protocol
VLAN 10
6 Create Protocol
VLAN 20

7.7 VLAN VPN

With the increasing application of the Internet, the VPN (Virtual Private Network) technology is
developed and used to establish the private network through the operators' backbone
networks. VLAN-VPN (Virtual Private Network) function, the implement of a simple and flexible
Layer 2 VPN technology, allows the packets with VLAN tags of private networks to be
encapsulated with VLAN tags of public networks at the network access terminal of the Internet
Service Provider. And these packets will be transmitted with double-tag across the public
networks.
The VLAN-VPN function provides you with the following benefits:
（1） Provides simple Layer 2 VPN solutions for small-sized LANs or intranets.
（2） Saves public network VLAN ID resource.
（3） You can have VLAN IDs of your own, which is independent of public network VLAN
IDs.
（4） When the network of the Internet Service Provider is upgraded, the user's network
with a relative independence can still work normally without changing the current
configurations.
In addition, the switch supports the feature to adjust the TPID Values of VLAN VPN Packets.
TPID (Tag Protocol Identifier) is a field of the VLAN tag. IEEE 802.1Q specifies the value of TPID
to be 0x8100. This switch adopts the default value of TPID (0x8100) defined by the protocol.
Other manufacturers use other TPID values (such as 0x9100 or 0x9200) in the outer tags of
VLAN-VPN packets. To be compatible with devices coming from other manufacturers, this
switch can adjust the TPID values of VLAN-VPN packets globally. You can configure TPID
values by yourself. When a port receives a packet, this port will replace the TPID value in the
outer VLAN tag of this packet with the user-defined value and then send the packet again. Thus,
the VLAN-VPN packets sent to the public network can be recognized by devices of other
manufacturers.
Description
Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
VLAN with its VLAN ID as 20, owning Port 3 and Port 5, and configure
the egress rule of Port 3 as Untag.
Required. On VLAN→Protocol VLAN→Protocol Template page,
configure the protocol templates practically. The Ether Type of IP
network packets is 0800 and that of AppleTalk network packets is
809B.
On VLAN→Protocol VLAN→Protocol Group page, create protocol
VLAN 10 with Protocol as IP. Select and enable Port 3, Port 4 and
Port 5 for Protocol VLAN feature.
On VLAN→Protocol VLAN→Protocol Group page, create protocol
VLAN 20 with Protocol as AppleTalk. Select and enable Port 3, Port 4
and Port 5 for Protocol VLAN feature.
93