H3C S3100 Series Operation Manual

Vlan-vpn

Hide thumbs Also See for S3100 Series:

Command manual (1186 pages)

Operation manual (1057 pages)

Installation manual (94 pages)

Table of Contents

Quick Links

Download this manual See also: Command Manual, Operating Manual

Operation Manual (For Soliton) - VLAN-VPN

H3C S3100 Series Ethernet Switches

Chapter 1 VLAN-VPN Configuration............................................................................................ 1-1

1.1 VLAN-VPN Overview......................................................................................................... 1-1

1.1.1 Introduction to VLAN-VPN ...................................................................................... 1-1

1.1.2 Implementation of VLAN-VPN................................................................................. 1-2

1.1.3 Configuring the TPID for VLAN-VPN Packets ........................................................ 1-2

1.2 VLAN-VPN Configuration .................................................................................................. 1-3

1.2.1 VLAN-VPN Configuration Task List ........................................................................ 1-3

1.2.2 Enabling the VLAN-VPN Feature for a Port............................................................ 1-3

1.2.3 Configuring the TPID Value for VLAN-VPN Packets .............................................. 1-4

1.3 Displaying and Maintaining VLAN-VPN Configuration ...................................................... 1-4

1.4 VLAN-VPN Configuration Example ................................................................................... 1-4

1.4.1 Transmitting User Packets through a Tunnel in the Public Network by Using

VLAN-VPN ....................................................................................................................... 1-4

Chapter 2 Selective QinQ Configuration..................................................................................... 2-1

2.1 Selective QinQ Overview................................................................................................... 2-1

2.1.1 Selective QinQ Overview ........................................................................................ 2-1

2.2 Selective QinQ Configuration ............................................................................................ 2-2

2.2.1 Selective QinQ Configuration Task List .................................................................. 2-2

2.2.2 Configuring Global Tag Mapping Rules for Selective QinQ.................................... 2-2

2.2.3 Enabling the Selective QinQ Feature for a Port...................................................... 2-3

2.3 Selective QinQ Configuration Example ............................................................................. 2-3

2.3.1 Processing Private Network Packets by Their Types ............................................. 2-3

Chapter 3 VLAN Mapping Configuration..................................................................................... 3-1

3.1 VLAN Mapping Overview................................................................................................... 3-1

3.1.1 Introduction to VLAN Mapping ................................................................................ 3-1

3.1.2 VLAN Mapping Implementation .............................................................................. 3-1

3.2 Configuring VLAN Mapping ............................................................................................... 3-2

3.2.1 VLAN Mapping Configuration Task List .................................................................. 3-2

3.2.2 Enabling the VLAN Mapping Function Based on a Global VLAN Mapping Rule............ 3-2

3.2.3 Enabling the VLAN Mapping Function Based on a Port-level VLAN Mapping Rule ............. 3-3

3.3 VLAN Mapping Configuration Example ............................................................................. 3-4

3.3.1 Replacing the Private Network VLAN Tag through VLAN Mapping ....................... 3-4

Chapter 4 BPDU Tunnel Configuration ....................................................................................... 4-1

4.1 BPDU Tunnel Overview..................................................................................................... 4-1

4.1.1 Introduction to the BPDU Tunnel Feature............................................................... 4-1

4.1.2 BPDU Tunnel Fundamental .................................................................................... 4-1

4.2 BPDU Tunnel Configuration .............................................................................................. 4-3

Table of Contents

Need help?

Do you have a question about the S3100 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C S3100 Series

Page 1: Table Of Contents
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 VLAN-VPN Configuration.................... 1-1 1.1 VLAN-VPN Overview......................1-1 1.1.1 Introduction to VLAN-VPN ..................1-1 1.1.2 Implementation of VLAN-VPN................. 1-2 1.1.3 Configuring the TPID for VLAN-VPN Packets ............1-2 1.2 VLAN-VPN Configuration ....................
Page 2 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Table of Contents 4.2.1 Configuration Prerequisites..................4-4 4.2.2 Configuring a BPDU Tunnel..................4-4 4.3 Displaying and Maintaining BPDU Tunnel Configuration ..........4-5 4.4 BPDU Tunnel Configuration Example ................4-5...
Page 3: Chapter 1 Vlan-Vpn Configuration
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Chapter 1 VLAN-VPN Configuration When configuring VLAN-VPN, go to these sections for information you are interested VLAN-VPN Overview VLAN-VPN Configuration Displaying and Maintaining VLAN-VPN Configuration VLAN-VPN Configuration Example 1.1 VLAN-VPN Overview...
Page 4: Implementation Of Vlan-Vpn
TPID values such as 0x9100. For compatibility with these systems, the S3100 series switches allow you to change the TPID that a port uses when tagging a received VLAN-VPN frame as needed. When doing that, you should set the same TPID on both the customer-side port and the service provider-side port.
Page 5: Vlan-Vpn Configuration
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Table 1-1 Commonly used protocol type values in Ethernet frames Protocol type Value 0x0806 0x0800 MPLS 0x8847/0x8848 0x8137 IS-IS 0x8000 LACP 0x8809 802.1x 0x888E 1.2 VLAN-VPN Configuration 1.2.1 VLAN-VPN Configuration Task List...
Page 6: Configuring The Tpid Value For Vlan-Vpn Packets
As shown in Figure 1-4, Switch A and Switch B are both S3100 series switches. They connect the users to the servers through the public network. PC users and PC servers are in VLAN 100 created in the private network, while terminal users and terminal servers are in VLAN 200, which is also created in the private network.
Page 7 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Employ VLAN-VPN on Switch A and Switch B to enable the PC users and PC servers to communicate with each through a VPN, and employ VLAN-VPN on Switch A and Switch B to enable the Terminal users and Terminal servers to communicate with each other through a VPN.
Page 8 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration [SwitchA-Ethernet1/0/12] port link-type trunk [SwitchA-Ethernet1/0/12] port trunk permit vlan 1040 Configure Switch B. # Enable the VLAN-VPN feature on Ethernet 1/0/21 of Switch B and tag the packets received on this port with the tag of VLAN 1040 as the outer VLAN tag.
Page 9 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration As Ethernet 1/0/11 of Switch A is a VLAN-VPN port, when a packet from the customer’s network side reaches this port, it is tagged with the default VLAN tag of the port (VLAN 1040).
Page 10: Chapter 2 Selective Qinq Configuration
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration Chapter 2 Selective QinQ Configuration When configuring selective QinQ, go to these sections for information you are interested in: Selective QinQ Overview Selective QinQ Configuration Selective QinQ Configuration Example 2.1 Selective QinQ Overview...
Page 11: Selective Qinq Configuration
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration In this implementation, Switch A is an access device of the service provider. The users connecting to it include common customers (in VLAN 8 to VLAN 100), VIPs (in VLAN 101 to VLAN 200), and IP telephone users (in VLAN 201 to VLAN 300).
Page 12: Enabling The Selective Qinq Feature For A Port
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration Note: Do not enable both the selective QinQ function and the DHCP snooping function on a switch. Otherwise, the DHCP snooping function may operate improperly.
Page 13 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration To reduce broadcast packets in the network, enable the inter-VLAN MAC address replicating feature for selective QinQ. II. Network diagram For PC User VLAN100~108...
Page 14 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration [SwitchA-Ethernet1/0/5] quit # Configure Ethernet 1/0/3 as a hybrid port and configure VLAN 5 as its default VLAN. Configure Ethernet 1/0/3 to remove VLAN tags when forwarding packets of VLAN 5, VLAN 1000, and VLAN 1200.
Page 15 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration <SwitchB> system-view [SwitchB] interface Ethernet 1/0/11 [SwitchB-Etherent1/0/11] port link-type hybrid [SwitchB-Etherent1/0/11] port hybrid vlan 12 13 1000 1200 tagged # Configure Ethernet1/0/12 as a hybrid port and configure VLAN 12 as its default VLAN .
Page 16: Chapter 3 Vlan Mapping Configuration
3.1.2 VLAN Mapping Implementation You can configure VLAN mapping rules for each port of an S3100 series switch. With the VLAN mapping function enabled on a port, the port maps private network VLAN tags to the corresponding public network VLAN tags for packets to be forwarded to the public network and performs the converse operation for the packets to be forwarded to the destination private network.
Page 17: Configuring Vlan Mapping
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration 3.2 Configuring VLAN Mapping 3.2.1 VLAN Mapping Configuration Task List Table 3-1 VLAN mapping configuration task list Task Description Enabling the VLAN Mapping Function Based on a Global...
Page 18: Enabling The Vlan Mapping Function Based On A Port-Level Vlan Mapping Rule
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration Operation Command Description Required Enable the VLAN mapping vlan-mapping By default, the VLAN function enable mapping function is disabled. Note: A port that is in a link aggregation port group cannot have the VLAN Mapping feature enabled.
Page 19: Vlan Mapping Configuration Example
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration Note: A port that is in a link aggregation port group cannot have the VLAN Mapping feature enabled. When configuring a VLAN mapping rule, make sure that the mapping relationship between private network VLANs and public network VLANs is one-to-one.
Page 20 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration II. Network diagram Figure 3-3 Network diagram for VLAN mapping configuration III. Configuration procedure Note: In this example, the VLAN mapping function is enabled based on port-level VLAN mapping rules.
Page 21 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration # As Ethernet 1/0/11 of Switch A not only receives packets of the customer VLAN but also forward packets from the service provider network, you need to configure the port as a trunk port or hybrid port.
Page 22 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration [SwitchA-Ethernet1/0/12] vlan-mapping vlan 200 remark 600 After the above configurations, Switch A maps the VLAN tags of the customer packets received through Ethernet 1/0/11 and Ethernet 1/0/12 to the corresponding public network VLAN tags as defined in the VLAN mapping rules and then forwards the packet to public network for transmission.
Page 23: Chapter 4 Bpdu Tunnel Configuration
Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Chapter 4 BPDU Tunnel Configuration When configuring BPDU tunnel, go to these sections for information you are interested BPDU Tunnel Overview BPDU Tunnel Configuration...
Page 24 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration devices connecting the customer network to the service provider network. The customer network contains Network A and Network B. You can make the BPDU...
Page 25: Bpdu Tunnel Configuration
BPDU tunnel in the service provider network. 4.2 BPDU Tunnel Configuration You can establish BPDU tunnels between S3100 series Ethernet switches for the packets of the following protocols: LACP (link aggregation control protocol) STP (spanning tree protocol)
Page 26 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration 4.2.1 Configuration Prerequisites The edge devices can communicate with the user devices properly. 4.2.2 Configuring a BPDU Tunnel Follow these steps to configure a BPDU tunnel: To do...
Page 27 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Note: If BPDU tunnel transparent transmission is enabled for packets of a protocol, the protocol cannot be enabled on the port. For example, if you execute the bpdu-tunnel lacp command, the lacp enable command cannot be executed on the port.
Page 28 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Enable the service provider network to transmit STP packets of the customer network through BPDU tunnel. The destination MAC address for tunnel packets is 010f-e233-8b22.
Page 29 Operation Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Configure Provider2. # Disable STP on Ethernet1/0/4. <Sysname> system-view [Sysname] interface Ethernet 1/0/4 [Sysname-Ethernet1/0/4] stp disable # Enable BPDU tunnel for STP packets. [Sysname-Ethernet1/0/4] bpdu-tunnel stp # Enable VLAN-VPN and use VLAN 100 to transmit user data packets through BPDU tunnels.

H3C S3100 Series Operation Manual

Chapter 1 VLAN-VPN Configuration

Chapter 2 Selective Qinq Configuration

Chapter 3 VLAN Mapping Configuration

Chapter 4 BPDU Tunnel Configuration

Quick Links

Table of Contents

Need help?

Questions and answers

Related Manuals for H3C S3100 Series

Summary of Contents for H3C S3100 Series

Table of Contents