Mac Address Replicating - H3C S5600 Series Operation Manual

In this implementation, Switch A is an access device of the service provider. The users connecting to it
include common customers (in VLAN 8 to VLAN 100), VIPs (in VLAN 101 to VLAN 200), and IP
telephone users (in VLAN 201 to VLAN 300). Packets of all these users are forwarded by Switch A to
the public network.
After the selective QinQ feature and the inner-to-outer tag mapping feature are enabled on the port
connecting Switch A to these users, the port will add different outer VLAN tags to the packets according
to their inner VLAN tags. For example, you can configure to add the tag of VLAN 1002 to the packets of
IP telephone users in VLAN 201 to VLAN 300 and forward the packets to the VoIP device, which is
responsible for processing IP telephone services.
To guarantee the quality of voice packet transmission, you can configure QoS policies in the public
network to reserve bandwidth for packets of VLAN 1002 and forward them preferentially.
In this way, you can configure different forwarding policies for data of different type of users, thus
improving the flexibility of network management. On the other hand, network resources are well utilized,
and users of the same type are also isolated by their inner VLAN tags. This helps to improve network
security.

MAC Address Replicating

Like the VLAN-VPN feature, a port with the selective QinQ enabled adds the source MAC addresses of
user packets to the MAC address table of the default VLAN on the port. However, the port with selective
QinQ enabled can insert an outer VLAN tag other than that of the default VLAN to the packets. Thus,
when packets are forwarded from the service provider to users, they may be broadcast if their
destination MAC addresses cannot be found in the MAC address table of the outer VLANs.
Figure 2-2 Learn MAC addresses of selective QinQ packets
Public
Network
PVID=2
Private
Network
Receives the data that the
private network sends to the
service provider's network
As shown in Figure
configured to receive packets of VLAN 3, tag the received packets with the outer tag of VLAN 4, and add
the source MAC addresses (MAC-A) of the packets to the MAC address table of its default VLAN (VLAN
2).
When a response packet is returned to the device from VLAN 4 of the service provider network, the
device searches the outbound port for MAC-A in the MAC address table of VLAN 4. However, because
the corresponding entry is not added to the MAC address table of VLAN 4, this packet is considered to
be a unicast packet with unknown destination MAC address. As a result, this packet will be broadcast to
all the ports in VLAN 4, which wastes the network resources and incurs potential security risks.
Public
Network
VLAN4
VLAN4
MAC-A
MAC-A
PVID=2
VLAN3
MAC-A
Private
Network
Receives the data that the
service provider's network
sends to the private network
2-2, the default VLAN of the port used to receive packets is VLAN 2. The port is
2-2