Vlan-Vpn Tunnel Configuration Example - H3C S5100-SI Operation Manual

VLAN-VPN Tunnel Configuration Example

Network requirements
S5100 switches operate as the access devices of the service provider network, that is, Switch C
and Switch D in the network diagram.
Switch A and Switch B are the access devices for the customer networks.
Switch C and Switch D are connected to each other through the configured trunk ports of the
switches. The VLAN-VPN tunnel function is enabled in system view, thus implementing
transparent transmission between the customer networks and the service provider network.
Network diagram
Figure 1-11 Network diagram for VLAN-VPN tunnel configuration
Switch C
GE 1/0/2
GE 1/0/1
Eth 1/0/1
Switch A
Configuration procedure
1) Configure Switch A
# Enable MSTP.
<Sysname> system-view
[Sysname] stp enable
# Add Ethernet 1/0/1 to VLAN 10.
[Sysname] vlan 10
[Sysname-Vlan10] port Ethernet 1/0/1
2) Configure Switch B
# Enable MSTP.
<Sysname> system-view
[Sysname] stp enable
# Add Ethernet 1/0/1 to VLAN 10.
[Sysname] vlan 10
[Sysname-Vlan10] port Ethernet 1/0/1
3) Configure Switch C
# Enable MSTP.
<Sysname> system-view
[Sysname] stp enable
# Enable the VLAN-VPN tunnel function.
Switch D
GE 1/0/1
GE 1/0/2
Eth 1/0/1
Switch B
1-49