Chapter 1 Vlan-Vpn Configuration; Vlan-Vpn Overview; Introduction To Vlan-Vpn - H3C S3100-52P Operation Manual

Operation Manual – VLAN-VPN
H3C S3100-52P Ethernet Switch

Chapter 1 VLAN-VPN Configuration

When configuring VLAN-VPN, go to these sections for information you are interested
in:

VLAN-VPN Overview

VLAN-VPN Configuration
Displaying and Maintaining VLAN-VPN Configuration
VLAN-VPN Configuration Example
1.1 VLAN-VPN Overview

1.1.1 Introduction to VLAN-VPN

Virtual private network (VPN) is a new technology that emerges with the expansion of
the Internet. It can be used for establishing private networks over the public network.
With VPN, you can specify to process packets on the client or the access end of the
service provider in specific ways, establish dedicated tunnels for user traffic on public
network devices, and thus improve data security.
VLAN-VPN feature is a simple yet flexible Layer 2 tunneling technology. It tags private
network packets with outer VLAN tags, thus enabling the packets to be transmitted
through the service providers' backbone networks with both inner and outer VLAN tags.
In public networks, packets of this type are transmitted by their outer VLAN tags (that is,
the VLAN tags of public networks), and the inner VLAN tags are treated as part of the
payload.
Figure 1-1
0
Figure 1-1 Structure of packets with single-layer VLAN tags
Figure 1-2
describes the structure of the packets with single-layer VLAN tags.
Destination MAC address
describes the structure of the packets with double-layer VLAN tags.
Chapter 1 VLAN-VPN Configuration
15
Source MAC address
VLAN Tag
Data
1-1
31