HP 4800G Series Configuration Manual page 210

To do...
Exit to system view
Enter the interface view of the uplink
port
Configure the uplink port as a DHCP
snooping trusted port
Configure the uplink port as an ARP
trusted port
Set the link type of the uplink port to
trunk
Configure the uplink port to permit the
specified SVLANs to pass through
Enable service provider side QinQ
To defend against attacks, you are recommended to enable ARP detection for each CVLAN.
Before applying a QoS policy to the downlink port, enable customer-side QinQ on the port; before
disabling customer-side QinQ on the downlink port, remove the QoS policy.
To change a VLAN mapping, you must first use the reset dhcp-snooping command to clear the
corresponding DHCP snooping address binding entry (refer to DHCP Commands in the IP
Services Volume) or disable the dynamic address binding function of IP Source Guard on the
downlink port and then enable dynamic address binding again (refer to IP Source Guard
Commands in the Security Volume).
You can configure the qinq enable uplink command or the qinq enable downlink command in
port group view to make it take effect on all ports in the port group.
Table 1-3 Configure an uplink policy
To do...
Enter system view
Create a class and enter class
view
Specify the CVLANs for the
VLAN mapping
Exit to system view
Use the command...
quit
interface interface-type
interface-number
dhcp-snooping trust
arp detection trust
port link-type trunk
port trunk permit vlan
{ vlan-id-list | all }
qinq enable uplink
Use the command...
system-view
traffic classifier tcl-name
operator or
if-match customer-vlan-id
{ vlan-id-list | vlan-id1 to
vlan-id2 }
quit
1-9
Remarks
—
—
Required
By default, all ports with
DHCP snooping
enabled are DHCP
snooping untrusted
ports.
Required
By default, all ports are
ARP untrusted ports.
Required
Required
By default, a trunk port
permits only VLAN 1 to
pass through.
Required
Disabled by default.
Remarks
—
Required
Required
—