Zte ZXR10 8900 Product Description page 57

The QinQ functional module in the 89 series software system just configures QinQ
statically before configuring the chip. There are two types of VLANs in the context of
QinQ:
SVLAN (Service VLAN): VLANs defined over the backbone network.
CVLAN (Customers VLAN): User-defined VLANs.
The software QinQ functional module provides an attribute in the VLAN table to identify
this VLAN a SVLAN or CVLAN. The associated QinQ function for the chip can be set
through the lower layer driving interface function.
4.3.7.4 PVLAN Module
When all servers are in the same subnet, and they can only communicate with their
default gateways, this new VLAN feature is of private VLAN. In the context of private
VLAN, the switch port can be isolated port, Community port or Promiscuous port. Each
of them corresponds to a VLAN type: The Isolated port is subject to the Isolated PVLAN,
and the Community port to Community PVLAN. The Primary VLAN represents a Private
VLAN. The Isolated and the Community VLANs can be bind together, so can the
Promiscuous port. In an Isolated PVLAN, the isolated port can only communicate with
the Promiscuous port with no exchange of stream. In a Community PVLAN, the
Community port can either communicate or exchange steams with the Promiscuous port.
The Promiscuous port can be connected to the router or L3 switch. It can forward its
received traffic stream to either isolated port or the Community port.
The application of PVLAN is effective to ensure the security of the communication of the
access network. Users only need to attach to their default gateways. A single PVLAN
provides secure connections as the L2 does with no multiple VLANs and IP subnets. All
users are accessed to the PVLAN to connect to the default gateway with no access to
any other user within the PVLAN. The PVLAN ensures no communication between ports
of the same VLAN, but is capable of trunk port penetration. In this way, users within the
same VLAN will not affected by the broadcast.
The PVLAN does not need the support of the protocol packet.
4.3.7.5 VLAN Translation Module
VLAN translation is a functional extension of the VLAN. If a port of the switch enables
VLAN translation, the packets flowing through this port should be tagged packet. VLAN
translation searches in the MAC – VLAN table with the port number plus VID of the
tagged packet as the index to get a new VID. Then the data stream is switched within
the new VLAN. Hence, the translation from one VLAN to another is implemented.
VLAN translation itself needs no support of the protocol packet. It can be implemented
through static configuration on ZXR10 8900 series switches. Note that the VLAN cannot
be partitioned on the MAC address basis one VLAN translation is enabled, and vice
versa.
ZTE Confidential Proprietary © 2009 ZTE Corporation. All rights reserved.
ZXR10 8900 Product Description
49