H3C S3100-52P Operation Manual page 838

Operation Manual – VLAN-VPN
H3C S3100-52P Ethernet Switch
# Enable the VLAN-VPN feature on Ethernet 1/0/21 of Switch B and tag the packets
received on this port with the tag of VLAN 1040 as the outer VLAN tag.
<SwitchB> system-view
[SwitchB] vlan 1040
[SwitchB-vlan1040] port Ethernet 1/0/21
[SwitchB-vlan1040] quit
[SwitchB] interface Ethernet 1/0/21
[SwitchB-Ethernet1/0/21] vlan-vpn enable
# Set the TPID value of Ethernet1/0/22 to 0x9200 (for intercommunication with the
devices in the public network) and set the port as a trunk port permitting packets of
VLAN 1040.
[SwitchB-Ethernet1/0/22] vlan-vpn tpid 9200
[SwitchB-Ethernet1/0/22] quit
[SwitchB] interface Ethernet 1/0/21
[SwitchB-Ethernet1/0/22] port link-type trunk
[SwitchB-Ethernet1/0/22] port trunk permit vlan 1040
Note:
Do not configure VLAN 1040 as the default VLAN of Ethernet 1/0/12 of Switch A and
Ethernet 1/0/22 of Switch B. Otherwise, the outer VLAN tag of a packet will be
removed during transmission.
In this example, both Ethernet1/0/11 of Switch A and Ethernet1/0/21 of Switch B are
access ports. In cases where the ports are trunk ports or hybrid ports, you need to
configure the two ports to remove the outer VLAN tags before transmitting packets
of VLAN 1040. Refer to VLAN in this manual for detailed configuration.
Configure the devices in the public network
# As the devices in the public network are from other vendors, only the basic principles
are introduced here. That is, you need to configure the devices connecting to Ethernet
1/0/12 of Switch A and Ethernet 1/0/22 of Switch B to permit the corresponding ports to
transmit tagged packets of VLAN 1040.
IV. Data transfer process
The following describes how a packet is forwarded from Switch A to Switch B in this
example.
1) As Ethernet 1/0/11 of Switch A is a VLAN-VPN port, when a packet from the
customer's network side reaches this port, it is tagged with the default VLAN tag of
the port (VLAN 1040).
Chapter 1 VLAN-VPN Configuration
1-8