H3C S3100-52P Instrucciones de instalación

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Table of Contents

Table of Contents

Chapter 1 VLAN-VPN Configuration Commands.......................................................................1-1

1.1 VLAN-VPN Configuration Commands...............................................................................1-1

1.1.1 display port vlan-vpn ...............................................................................................1-1

1.1.2 vlan-vpn enable.......................................................................................................1-2

1.1.3 vlan-vpn inner-cos-trust...........................................................................................1-3

1.1.4 vlan-vpn priority.......................................................................................................1-3

1.1.5 vlan-vpn tpid............................................................................................................1-5

Chapter 2 Selective QinQ Configuration Commands................................................................2-1

2.1 Selective QinQ Configuration Commands.........................................................................2-1

2.1.1 mac-address-mapping ............................................................................................2-1

2.1.2 raw-vlan-id inbound.................................................................................................2-2

2.1.3 vlan-vpn vid.............................................................................................................2-3

Chapter 3 BPDU Tunnel Configuration Commands .................................................................. 3-1

3.1 BPDU Tunnel Configuration Commands...........................................................................3-1

3.1.1 bpdu-tunnel .............................................................................................................3-1

3.1.2 bpdu-tunnel tunnel-dmac ........................................................................................3-3

3.1.3 display bpdu-tunnel.................................................................................................3-4

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-1

Chapter 1 VLAN-VPN Configuration Commands

1.1 VLAN-VPN Configuration Commands

1.1.1 display port vlan-vpn

Syntax

display port vlan-vpn

View

Any view

Parameters

None

Description

Use the display port vlan-vpn command to display the information about VLAN-VPN

configuration of the current system.

Related commands: vlan-vpn enable, vlan-vpn inner-cos-trust, vlan-vpn tpid.

Examples

# Display the VLAN-VPN configuration of the current system.

<Sysname> display port vlan-vpn

Ethernet1/0/6

VLAN-VPN status: enabled

VLAN-VPN VLAN: 1

VLAN-VPN inner-cos-trust status: disable

VLAN-VPN TPID: 8100

Table 1-1 Description on the fields of the display port vlan-vpn command

Field Description

Ethernet1/0/6 The port with the VLAN VPN feature enabled

VLAN-VPN status

The operation status of the VLAN VPN feature on the port

enabled indicates that VLAN VPN is enabled on the port.

You can use the vlan-vpn enable command to enable

VLAN VPN on a port.

VLAN-VPN VLAN The VLAN corresponding to the tag that the port tags

packets with, that is, the default VLAN of the port. For

descriptions on default VLAN, refer to VLAN Operation.

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-2

Field Description

VLAN-VPN

inner-cos-trust

The status of the inner-to-outer tag priority replicating

feature, enable (enabled) or disable (disabled).

You can use the vlan-vpn inner-cos-trust command to

configure the feature.

VLAN-VPN TPID TPID value of the port, which can be configured through

the vlan-vpn tpid command.

1.1.2 vlan-vpn enable

Syntax

vlan-vpn enable

undo vlan-vpn

View

Ethernet port view

Parameters

None

Description

Use the vlan-vpn enable command to enable the VLAN-VPN feature for a port.

Use the undo vlan-vpn command to disable the VLAN-VPN feature for a port.

By default, the VLAN-VPN feature is disabled.

With the VLAN-VPN feature enabled, a received packet is tagged with the default

VLAN tag of the receiving port no matter whether or not the packet already carries a

VLAN tag.

zIf the packet already carries a VLAN tag, the packet becomes a dual-tagged

packet.

zOtherwise, the packet becomes a packet carrying the default VLAN tag of the port.

You can use the display port vlan-vpn command to display the configuration

information of VLAN-VPN on the ports to verity your configuration.

After the VLAN-VPN function is enabled, you can use the vlan-vpn vid command and

the raw-vlan-id inbound command to configure the selective QinQ function. Refer to

Selective QinQ Configuration Commands for details.

Examples

# Enable the VLAN-VPN feature for Ethernet 1/0/1 port.

<Sysname> system-view

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-3

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] vlan-vpn enable

1.1.3 vlan-vpn inner-cos-trust

Syntax

vlan-vpn inner-cos-trust enable

undo vlan-vpn inner-cos-trust

View

Ethernet port view

Parameters

None

Description

Use the vlan-vpn inner-cos-trust enable command to enable the inner-to-outer tag

priority replicating feature.

With the feature enabled, a port replicates the inner tag priority to the outer tag when

adding an outer tag for a packet.

Use the undo vlan-vpn inner-cos-trust command to disable the feature.

By default, the inner-to-outer tag priority replicating feature is disabled, and the switch

will use the priority of the receiving port as the outer tag priority of packets. For

descriptions on receiving port priority, refer to QoS-QoS Profile Operation.

Note that:

zThis feature can be enabled only on VLAN-VPN-enabled ports.

zThis command is mutually exclusive with the vlan-vpn priority command.

Examples

# Enable the inner-to-outer tag priority replicating feature for Ethernet 1/0/2.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/2

[Sysname-Ethernet1/0/2] vlan-vpn inner-cos-trust enable

1.1.4 vlan-vpn priority

Syntax

vlan-vpn priority inner-priority remark outer-priority

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-4

undo vlan-vpn priority inner-priority

View

Ethernet port view

Parameters

inner-priority: 802.1p priority of the inner VLAN tag in a packet. This argument can be in

the range 0 to 7 or a keyword listed in Table 1-2.

outer-priority: Priority for the outer VLAN tag in a packet. This argument can be in the

range 0 to 7 or a keyword listed Table 1-2.

Table 1-2 Description on 802.1p priority

IP Precedence (decimal) Keyword

0 Best-effort

1 Background

2 Spare

3 Excellent-effort

4 Controlled-load

5 Video

6 Voice

7 Network-management

Note:

For descriptions on the 802.1p priority values and the keywords listed in Table 1-2,

refer to Qos-QoS Profile Operation.

Description

Use the vlan-vpn priority command to configure the mapping between the inner VLAN

priority and the outer VLAN priority. With the mapping configured, a port will

encapsulate a packet with the specified inner tag priority with an outer tag that has the

corresponding priority.

Use the undo vlan-vpn priority command to remove the configuration.

By default, no mapping between the inner tag priority and the outer tag priority is

configured, and the switch uses the priority of the receiving port as the outer tag priority

of packets. For descriptions on receiving port priority, refer to QoS-QoS Profile

Operation.

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-5

Note that:

zThis command is applicable to only the VLAN-VPN enabled ports.

zThis command is mutually exclusive with the vlan-vpn inner-cos-trust command.

Examples

# Enable the inner-to-outer tag priority mapping feature for Ethernet 1/0/1. Insert outer

tags with the priorities being 5 to packets with the priorities of their inner tags being 3.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] vlan-vpn priority 3 remark 5

1.1.5 vlan-vpn tpid

Syntax

vlan-vpn tpid value

undo vlan-vpn tpid

View

Ethernet port view

Parameters

value: User-defined TPID value (in hexadecimal format), in the range 0x0001 to

0xFFFF.

Description

Use the vlan-vpn tpid command to set the TPID value for a port. With the TPID value

set on a port, the port fills the value to the TPID field of the outer tag to be added for a

packet and, upon receiving a packet, compares the TPID value with the TPID field of

the packet to determine whether the packet carries a VLAN tag or not.

Use the undo vlan-vpn tpid command to restore the default TPID value.

The default TPID value is 0x8100.

For the position and function of the TPID field in a packet, refer to VLAN Operation.

The TPID field in an Ethernet frame has the same position with the protocol type field in

a frame without a VLAN tag. To prevent other devices in the network from recognizing

the tag-encapsulated packets of the current switch as protocol packets, you are not

allowed to set the TPID value to any of the values in the table below.

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 1 VLAN-VPN Configuration Commands

1-6

Table 1-3 Common Ethernet frame protocol type values

Protocol type Value

ARP 0x0806

IP 0x0800

MPLS 0x8847/0x8848

IPX 0x8137

IS-IS 0x8000

LACP 0x8809

802.1x 0x888E

Note:

Besides the default TPID value, you can configure only one TPID value on an

S3100-52P switch.

Examples

# Set the TPID value to 0x9100 for Ethernet 1/0/2 port.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/2

[Sysname-Ethernet1/0/2] vlan-vpn tpid 9100

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 2 Selective QinQ Configuration Commands

2-1

Chapter 2 Selective QinQ Configuration

Commands

Note:

The selective QinQ feature is new to H3C S3100-52P Ethernet Switch.

2.1 Selective QinQ Configuration Commands

2.1.1 mac-address-mapping

Syntax

mac-address-mapping index source-vlan source-vlan-list destination-vlan

dest-vlan-id

undo mac-address-mapping {index | all }

View

Ethernet port view

Parameters

index: Index of the inter-VLAN MAC address replicating configuration to be created or

removed. This argument is in the range 0 to 7.

source-vlan source-vlan-list: Specifies a list of the IDs of the VLANs, whose MAC

address entries are to be replicated to the MAC address table of the destination VLAN.

You need to provide the source-vlan-list argument in the form of { vlan-id [ to

vlan-id ] }&<1-10>, where the VLAN ID after the to keyword must be larger than or

equal to the VLAN ID before the to keyword and &<1-10> means that you can specify

up to 10 VLANs/VLAN ranges for this argument.

dest-vlan-id: ID of the destination VLAN for replication, in the range 1 to 4094.

all: Removes all the inter-VLAN MAC address replicating configurations created on the

current port.

Description

Use the mac-address-mapping command to configure the inter-VLAN MAC address

replicating feature for a port. This feature can replicate MAC address entries of the

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 2 Selective QinQ Configuration Commands

2-2

MAC address tables of specified source VLANs to the MAC address table of the

specified destination VLAN.

Use the undo mac-address-mapping command to disable this feature.

The inter-VLAN MAC address replicating feature is disabled on any port by default.

In a selective QinQ application, you can configure this feature to:

zReplicate MAC address entries in the MAC address tables of the outer VLANs

configured in selective QinQ to the MAC address table of the default VLAN of the

downlink port. This is for forwarding uplink packets to the operator network.

zReplicate MAC address entries in the MAC address table of the default VLAN of

the downlink port to the MAC address tables of all the outer VLANs configured in

selective QinQ. This is for forwarding packets from the operator network to the

user networks.

Examples

# Enable the inter-VLAN MAC address replicating feature for Ethernet1/0/1 to replicate

the MAC address entries between the MAC address table of VLAN 4 (the default VLAN)

and that of the outer VLAN 10.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] mac-address-mapping 0 source-vlan 4 destination-vlan

[Sysname-Ethernet1/0/1] mac-address-mapping 1 source-vlan 10

destination-vlan 4

2.1.2 raw-vlan-id inbound

Syntax

raw-vlan-id inbound vlan-id-list

undo raw-vlan-id inbound {all | vlan-id-list }

View

QinQ view

Parameters

vlan-id-list: Lists of VLAN IDs. After receiving packets of these VLANs, the switch will

encapsulate the packets with the specified outer VLAN tag. You need to provide this

argument in the form of { vlan-id [ to vlan-id ] }&<1-10>, where the VLAN ID after the to

keyword must be larger than or equal to the VLAN ID before the to keyword and

&<1-10> means that you can specify up to 10 VLANs/VLAN ranges for this argument.

Command Manual – VLAN-VPN

H3C S3100-52P Ethernet Switch Chapter 2 Selective QinQ Configuration Commands

2-3

all: Removes all configurations of encapsulating an outer VLAN tag for specified inner

VLANs in the current view.

Description

Use the raw-vlan-id inbound command to specify to encapsulate packets with the

specified inner VLAN tags with the specified outer tag. This command must be

configured on ports connecting the user network.

Use the undo raw-vlan-id inbound command to remove the configuration.

By default, the switch does not encapsulate packets with any outer VLAN tag.

Caution:

A packet cannot be tagged with different outer VLAN tags. To change the outer VLAN

tag of a packet, you need to remove the existing outer VLAN tag configuration and

configure a new outer VLAN tag.

Before configuring this command in QinQ view, you need to use the vlan-vpn vid

command to configure the outer VLAN tag to be used in the selective QinQ policy.

Related commands: vlan-vpn vid.

Examples

# Configure Ethernet 1/0/1 to add the tag of VLAN 20 as the outer tag to packets with

their inner VLAN IDs being 8 through 15.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] vlan-vpn vid 20

[Sysname-Ethernet1/0/1-vid-20] raw-vlan-id inbound 8 to 15

2.1.3 vlan-vpn vid

Syntax

vlan-vpn vid vlan-id

undo vlan-vpn vid vlan-id

View

Ethernet port view

Otros manuales para S3100-52P

Tabla de contenidos

Otros manuales de Enrutador de red de H3C

H3C

H3C H3C S3600 Series Manual de usuario

H3C

H3C MSR 5660 Manual de uso y cuidado

H3C

H3C MSR Series Manual de usuario

H3C

H3C MSR Series Manual de usuario

H3C

H3C CR16000-FA Series Manual de instrucciones

H3C

H3C S5830V2 series Manual de usuario

H3C

H3C MSR810 Manual de instalación

H3C

H3C SR6600 SPE-FWM Manual de usuario

H3C

H3C H3C S7500E-X Manual de instalación

H3C

H3C S12500R Series Guía rápida

H3C

H3C SR6602-X Manual de usuario

H3C

H3C S6300 Series Manual de usuario

H3C

H3C MSR810 Manual de usuario

H3C

H3C CR16000-F Manual de usuario

H3C

H3C CR16000-F Manual de instalación

H3C

H3C SR6604 Manual de usuario

H3C

H3C MSR 2600 Series Manual de usuario

H3C

H3C MSR2600-6-X1-GL Manual de usuario

H3C

H3C SR8803-F Manual de usuario

H3C

H3C S3100 Series Instrucciones de instalación

H3C

H3C SR8800 Series Manual de usuario

H3C

H3C MSR 20-20 Manual de instalación

H3C

H3C S9500 Series Manual de usuario

H3C

H3C SecPath F5010 Manual de operación y mantenimiento

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Digi

Digi IX14 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad