H3C S3100 8C SI Operation Manual page 822

Operation Manual – VLAN-VPN
H3C S3100 Series Ethernet Switches
II. Network diagram
PC User
VLAN 100
VLAN 200
Terminal User
Figure 1-4 Network diagram for VLAN-VPN configuration
III. Configuration procedure
Configure Switch A.
# Enable the VLAN-VPN feature on Ethernet 1/0/11 of Switch A and tag the packets
received on this port with the tag of VLAN 1040 as the outer VLAN tag.
<SwitchA> system-view
[SwitchA] vlan 1040
[SwitchA-vlan1040] port Ethernet 1/0/11
[SwitchA-vlan1040] quit
[SwitchA] interface Ethernet 1/0/11
[SwitchA-Ethernet1/0/11] vlan-vpn enable
[SwitchA-Ethernet1/0/11] quit
# Set the global TPID value to 0x9200 (for intercommunication with the devices in the
public network) and configure Ethernet 1/0/12 as a trunk port permitting packets of
VLAN 1024.
[SwitchA] vlan-vpn tpid 9200
[SwitchA] interface Ethernet 1/0/12
[SwitchA-Ethernet1/0/12] port link-type trunk
[SwitchA-Ethernet1/0/12] port trunk permit vlan 1040
Configure Switch B.
SwitchB
Eth1/0/21
Eth1/0/22
TPID=0x9200
VLAN 1040
Eth1/0/12
Eth1/0/11
SwitchA
1-6
Chapter 1 VLAN-VPN Configuration
PC Server
VLAN 100
VLAN 200
Terminal Server