Command Manual QinQ-BPDU Tunneling H3C S3610&S5510 Series Ethernet Switches. Table of Contents

Transcription

1 Table of Contents Table of Contents QinQ Configuration Commands mac-mirroring raw-vlan-id inbound qinq enable qinq ethernet-type qinq vid Chapter 2 BPDU Tunneling Configuration Commands BPDU Tunneling Configuration Commands bpdu-tunnel dot1q stp bpdu-tunnel dot1q enable bpdu-tunnel tunnel-dmac i

2 1.1 QinQ Configuration Commands mac-mirroring mac-mirroring index src-vlan source-vlan-list dest-vlan destination-vlan-id mac-mirroring index src-vlan source-vlan-id dest-vlan destination-vlan-list undo mac-mirroring [ index ] Ethernet port view index: MAC address synchronization rule index, in the range of 0 to 7. That is, you can configure up to eight MAC address synchronization rules. source-vlan-list: Defines one or multiple source VLANs. You can provide up to 10 VLAN lists, by each of which you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of vlan-id1 to vlan-id2, where the end VLAN ID must be greater than the starting VLAN ID. destination-vlan-id: Destination VLAN ID, in the range 1 to source-vlan-id: Source VLAN ID, in the range of 1 to destination-vlan-list: Defines one or multiple destination VLANs. You can provide up to 10 VLAN lists, by each of which you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of vlan-id1 to vlan-id2, where the end VLAN ID must be greater than the starting VLAN ID. Use the mac-mirroring command to configure MAC address synchronization. Use the undo mac-mirroring command to disable MAC address synchronization. By default, MAC address synchronization is disabled. This feature can synchronize MAC addresses of the specified source VLAN(s) to the MAC address table(s) of the specified destination VLAN(s). You can synchronize MAC addresses of multiple source VLANs to the MAC address table of a destination VLAN, or MAC addresses of a source VLAN to the MAC address tables of multiple destination VLANs. 1-1

3 Note that you cannot specify multiple source VLANs and multiple destination VLANs at the same time for the same MAC address synchronization rule. Use the undo mac-mirroring command to cancel the configuration. Note: You cannot modify an existing MAC address synchronization rule. To do that, you must remove the rule and then create a new one. If you synchronize MAC addresses of the same source VLAN to different destination VLANs through configuring multiple MAC address synchronization rules, the destination VLANs will be the set of all destination VLANs specified in these rules. It is the same case for synchronizing MAC addresses of different source VLANs to the same destination VLAN through configuring multiple rules. # Synchronize MAC addresses of VLAN 10 and VLAN 15 to the MAC address table of VLAN 200 on Ethernet 1/0/10. [Sysname] interface Ethernet 1/0/10 [Sysname-Ethernet1/0/10] mac-mirroring 1 src-vlan des-vlan 200 # Remove MAC address synchronization rule 1. [Sysname-Ethernet1/0/10] undo mac- mirroring raw-vlan-id inbound raw-vlan-id inbound { all vlan-id-list } undo raw-vlan-id inbound { all vlan-id-list } QinQ view vlan-id-list: Specifies one or multiple VLAN IDs. You can provide up to 10 VLAN ID lists, by each of which you can specify an individual VLAN ID in the form of vlan-id, or a VLAN ID range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. all: Specifies all VLAN IDs. 1-2

4 Use the raw-vlan-id inbound command to add the current outer VLAN tag for the specified inner VLAN IDs. Use the undo raw-vlan-id inbound command to remove the configuration. Note: An inner VLAN Tag corresponds to only one outer VLAN Tag. When you want to alter the external VLAN Tag, please first delete the configuration of the old external, and then configure new external VLAN Tag. Related commands: qinq vid. # Configure port Ethernet 1/0/1 to tag frames of VLAN 3, VLAN 5, and VLAN 20 through VLAN 100 with the outer tag of VLAN 100. [Sysname] interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] qinq vid 100 [Sysname-Ethernet1/0/1-vid-100] raw-vlan-id inbound to qinq enable qinq enable undo qinq enable Ethernet port view, port group view None Use the qinq enable command to enable basic QinQ for the current Ethernet port. Use the undo qinq enable command to disable basic QinQ for the current Ethernet port. By default, basic QinQ is disabled for Ethernet port. After basic QinQ is enabled on the port, frames on this port will be tagged with a new VLAN tag, the VLAN ID in which is the default VLAN ID of the port. Configured in Ethernet port view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group. 1-3

5 # Enable basic QinQ on port Ethernet 1/0/1. [Sysname] interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] qinq enable # Enable basic QinQ on all the ports in port group 1. [Sysname] link-aggregation group 1 mode manual [Sysname] interface ethernet 1/0/2 [Sysname-Ethernet1/0/2] port link-aggregation group 1 [Sysname-Ethernet1/0/2] interface ethernet 1/0/3 [Sysname-Ethernet1/0/3] port link-aggregation group 1 [Sysname-Ethernet1/0/3] quit [Sysname] port-group aggregation 1 [Sysname-port-group-aggregation-1] qinq enable qinq ethernet-type qinq ethernet-type hex-value undo qinq ethernet-type Ethernet port view, port group view hex-value: Hexadecimal protocol type ID, in the range of 0x0001 to 0xFFFF, but you cannot set it to any of the protocol type values listed in Table 1-1. Table 1-1 Common protocol type values Protocol type Value ARP PUP RARP IP IPv6 PPPoE MPLS 0x0806 0x0200 0x8035 0x0800 0x86DD 0x8863/0x8864 0x8847/0x

6 Protocol type IPX/SPX IS-IS LACP Value 0x8137 0x8000 0x x 0x888E Cluster Reserved 0x88A7 0xFFFD/0xFFFE/0xFFFF Use the qinq ethernet-type command to configure the TPID value to be used in the outer tag. Use the undo qinq ethernet-type command in system view to restore the system default. By default, the TPID value to be used in the outer tag is 0x8100. Configured in Ethernet port view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group. # Set the TPID value to be used in the outer tag to 0x9100 on Ethernet 1/0/1. [Sysname]interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] qinq ethernet-type 9100 # Set the TPID value to be used in the outer tag to 0x9100 for all the ports in port group 1. [Sysname] link-aggregation group 1 mode manual [Sysname] interface ethernet 1/0/2 [Sysname-Ethernet1/0/2] port link-aggregation group 1 [Sysname-Ethernet1/0/2] interface ethernet 1/0/3 [Sysname-Ethernet1/0/3] port link-aggregation group 1 [Sysname-Ethernet1/0/3] quit [Sysname] port-group aggregation 1 [Sysname-port-group-aggregation-1] qinq ethernet-type

7 1.1.5 qinq vid qinq vid vlan-id undo qinq vid vlan-id Ethernet port view, port group view vlan-id: Outer VLAN ID, in the range of 1 to Use the qinq vid command to enter QinQ view and configure the outer VLAN tag for the port to add. Use the undo qinq vid command to remove all configurations corresponding to the VLAN ID performed in QinQ view. By default, the outer VLAN tag is the VLAN tag corresponding to the port s default VLAN ID. Configured in Ethernet port view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group. This command must be used in conjunction with the raw-vlan-id inbound command to add different outer VLAN tags for frames of different VLANs. This command is meaningless when used alone. Related commands: raw-vlan-id inbound. # Configure Ethernet 1/0/1 to tag frames with outer tag of VLAN 10. [Sysname] interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] qinq vid 10 [Sysname-Ethernet1/0/1-vid-10] # Configure all the port in port group 1 to tag frames with outer tag of VLAN 10. [Sysname] link-aggregation group 1 mode manual [Sysname] interface ethernet 1/0/2 [Sysname-Ethernet1/0/2] port link-aggregation group 1 [Sysname-Ethernet1/0/2] interface ethernet 1/0/3 [Sysname-Ethernet1/0/3] port link-aggregation group 1 [Sysname-Ethernet1/0/3] quit 1-6

8 [Sysname] port-group aggregation 1 [Sysname-port-group-aggregation-1] qinq vid 10 [Sysname-port-group-aggregation-1-vid-10] 1-7

9 Chapter 2 BPDU Tunneling Configuration Commands Chapter 2 BPDU Tunneling Configuration Commands 2.1 BPDU Tunneling Configuration Commands bpdu-tunnel dot1q stp bpdu-tunnel dot1q stp undo bpdu-tunnel dot1q stp Ethernet port view, port group view None Use the bpdu-tunnel dot1q stp command to enable STP BPDU tunneling for a port or a group of ports. Use the undo bpdu-tunnel dot1q stp command to disable STP BPDU tunneling for a port or a group of ports. By default, the STP BPDU tunneling feature is disabled for all ports. Configured in Ethernet port view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group. Before you can enable the STP BPDU tunneling feature on a port, you need to enable the BPDU tunneling feature and disable STP on the port. Relative command: bpdu-tunnel dot1q enable. # Enable STP BPDU tunneling on Ethernet 1/0/1. [Sysname] interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] stp disable [Sysname-Ethernet1/0/1] bpdu-tunnel dot1q stp # Enable STP BPDU tunneling on all the ports of the port group

10 Chapter 2 BPDU Tunneling Configuration Commands [Sysname] link-aggregation group 1 mode manual [Sysname] interface ethernet 1/0/2 [Sysname-Ethernet1/0/2] port link-aggregation group 1 [Sysname-Ethernet1/0/2] interface ethernet 1/0/3 [Sysname-Ethernet1/0/3] port link-aggregation group 1 [Sysname-Ethernet1/0/3] quit [Sysname] port-group aggregation 1 [Sysname-port-group-aggregation-1] stp disable [Sysname-port-group-aggregation-1] bpdu-tunnel dot1q stp bpdu-tunnel dot1q enable bpdu-tunnel dot1q enable undo bpdu-tunnel dot1q enable System view, Ethernet port view, port group view None Use the bpdu-tunnel dot1q enable command to enable BPDU tunneling. Use the undo bpdu-tunnel dot1q enable command to disable BPDU tunneling. Configured in system view, the setting takes effect globally; configured in Ethernet port view, the setting takes effect on the current port only; configured in port group view, the setting takes effect on all ports in the port group. By default, BPDU tunneling is enabled globally but disabled for all ports. Note: BPDU tunneling must be enabled globally before the BPDU tunnel configuration for a port can take effect. # Enable BPDU tunneling globally. [Sysname] bpdu-tunnel dot1q enable # Enable BPDU tunneling on the Ethernet 1/0/1 port. [Sysname] interface ethernet 1/0/1 2-2

11 Chapter 2 BPDU Tunneling Configuration Commands [Sysname-Ethernet1/0/1] bpdu-tunnel dot1q enable # Enable BPDU tunneling on all the ports in the port group 1. [Sysname] link-aggregation group 1 mode manual [Sysname] interface ethernet 1/0/2 [Sysname-Ethernet1/0/2] port link-aggregation group 1 [Sysname-Ethernet1/0/2] interface ethernet 1/0/3 [Sysname-Ethernet1/0/3] port link-aggregation group 1 [Sysname-Ethernet1/0/3] quit [Sysname] port-group aggregation 1 [Sysname-port-group-aggregation-1] bpdu-tunnel dot1q enable bpdu-tunnel tunnel-dmac bpdu-tunnel tunnel-dmac mac-address undo bpdu-tunnel tunnel-dmac System view mac-address: Destination multicast MAC address for BPDU Tunnel frames, in the format of H-H-H. The allowed values are CCD-CDD0, CCD-CDD1, CCD-CDD2, and 010F-E Use the bpdu-tunnel tunnel-dmac command to configure the destination multicast MAC address for BPDU Tunnel frames. Use the undo bpdu-tunnel tunnel-dmac command to restore the default value. By default, the destination multicast MAC address for BPDU Tunnel frames is 0x010F-E # Set the destination multicast MAC address for BPDU Tunnel frames to CCD-CDD0. [Sysname] bpdu-tunnel tunnel-dmac ccd-cdd0 2-3