目  录

1 QinQ典型配置举例

1.1 基本QinQ典型配置举例

1.1.1 适用产品和版本

1.1.2 组网需求

1.1.3 配置思路

1.1.4 配置注意事项

1.1.5 配置步骤

1.1.6 验证配置

1.1.7 配置文件

1.2 灵活QinQ典型配置举例（基于QoS策略配置）

1.2.1 适用产品和版本

1.2.2 组网需求

1.2.3 配置思路

1.2.4 配置注意事项

1.2.5 配置步骤

1.2.6 验证配置

1.2.7 配置文件

1.3 灵活QinQ典型配置举例（基于端口配置）

1.3.1 适用产品和版本

1.3.2 组网需求

1.3.3 配置思路

1.3.4 配置注意事项

1.3.5 配置步骤

1.3.6 验证配置

1.3.7 配置文件

1.4 TPID典型配置举例（S10500、S5800&S5820X、S5830适用）

1.4.1 适用产品和版本

1.4.2 组网需求

1.4.3 配置思路

1.4.4 配置注意事项

1.4.5 配置步骤

1.4.6 验证配置

1.4.7 配置文件

1.5 TPID典型配置举例（S5500-EI适用）

1.5.1 适用产品和版本

1.5.2 组网需求

1.5.3 配置思路

1.5.4 配置注意事项

1.5.5 配置步骤

1.5.6 验证配置

1.5.7 配置文件

1.6 TPID典型配置举例（S5500-SI适用）

1.6.1 适用产品和版本

1.6.2 组网需求

1.6.3 配置思路

1.6.4 配置注意事项

1.6.5 配置步骤

1.6.6 验证配置

1.6.7 配置文件

 

1  QinQ典型配置举例

本章主要介绍了使用QinQ功能在运营商网络中传输用户数据的配置方式，包括基本QinQ和灵活QinQ两种主要功能。

基本QinQ是基于端口配置的。当端口上配置了基本QinQ功能后，不论从该端口收到的报文是否带有VLAN Tag，设备都会为该报文封装本端口缺省VLAN的Tag。如果同一端口接收到不同用户的报文或同一用户不同业务的报文，基本QinQ功能无法隔离不同用户的报文或用户不同业务的报文。

灵活QinQ功能对基本QinQ的功能进行了扩展，对同一端口接收的报文，灵活QinQ可以根据用户网络VLAN的不同或用户不同业务VLAN的不同为报文封装不同的外层VLAN Tag。

 

1.1  基本QinQ典型配置举例

1.1.1  适用产品和版本

表1 配置适用的产品与软件版本关系

产品	软件版本
S10500系列以太网交换机	Release 1120系列，Release 1130系列，Release 1200系列
S5800&S5820X系列以太网交换机	Release 1808
S5830系列以太网交换机	Release 1115，Release 1118
S5500-EI&S5500-SI系列以太网交换机	Release 2220

 

1.1.2  组网需求

如图1所示，Customer A和Customer B各有两个分支机构需要通过运营商网络进行通信。运营商网络中可用的VLAN资源包括VLAN 1000和VLAN 2000。现要求通过配置基本QinQ功能，运营商网络能够利用VLAN 1000传输Customer A的数据，利用VLAN2000传输Customer B的数据。

图1 基本QinQ组网示意图

 

1.1.3  配置思路

·     请在PE A和PE B连接用户网络的端口上配置基本QinQ功能。

·     为了保证用户网络接收的数据中不会包含运营商网络的VLAN信息，需要配置开启基本QinQ功能的端口发送PVID的报文时不带VLAN Tag。开启基本QinQ功能的端口的链路类型可以是Access，Hybrid或Trunk。如果配置为Hybrid类型，需要配置该端口允许PVID的报文不带VLAN Tag通过。如果配置为Trunk类型，需要配置该端口允许PVID的报文通过。

·     在PE A和PE B的上行端口以及运营商网络的中间设备上，需要保证经QinQ封装过的报文的外层VLAN Tag不被修改或移除。

1.1.4  配置注意事项

·     开启基本QinQ的端口，需要配置端口的缺省VLAN为QinQ封装的外层VLAN（SVLAN）。

·     在QinQ报文的传输路径上，配置各端口的MTU值为至少1504字节。

1.1.5  配置步骤

(1)     PE A的配置

# 创建VLAN 1000和VLAN 2000。

<PE_A> system-view

[PE_A] vlan 1000

[PE_A-vlan1000] quit

[PE_A] vlan 2000

[PE_A-vlan2000] quit

# 配置端口GigabitEthernet 1/0/1为Hybrid端口，缺省VLAN为1000，且在发送VLAN 1000的报文时去掉VLAN Tag，取消允许VLAN 1通过。

[PE_A] interface GigabitEthernet 1/0/1

[PE_A-GigabitEthernet1/0/1] port link-type hybrid

[PE_A-GigabitEthernet1/0/1] port hybrid pvid vlan 1000

[PE_A-GigabitEthernet1/0/1] port hybrid vlan 1000 untagged

[PE_A-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 开启端口GigabitEthernet 1/0/1的QinQ功能。

[PE_A-GigabitEthernet1/0/1] qinq enable

[PE_A-GigabitEthernet1/0/1] quit

# 配置端口GigabitEthernet1/0/2为Access端口，允许VLAN 2000的报文通过。

[PE_A] interface GigabitEthernet 1/0/2

[PE_A-GigabitEthernet1/0/2] port access vlan 2000

# 开启端口GigabitEthernet1/0/2的QinQ功能。

[PE_A-GigabitEthernet1/0/2] qinq enable

[PE_A-GigabitEthernet1/0/2] quit

# 配置端口GigabitEthernet1/0/3为Trunk端口，且允许VLAN 1000和VLAN 2000的报文通过，取消允许VLAN 1通过。

[PE_A] interface GigabitEthernet 1/0/3

[PE_A-GigabitEthernet1/0/3] port link-type trunk

[PE_A-GigabitEthernet1/0/3] port trunk permit vlan 1000 2000

[PE_A-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_A-GigabitEthernet1/0/3] quit

(2)     PE B的配置

# 创建VLAN 1000和VLAN 2000。

<PE_B> system-view

[PE_B] vlan 1000

[PE_B-vlan1000] quit

[PE_B] vlan 2000

[PE_B-vlan2000] quit

# 配置端口GigabitEthernet1/0/1为Hybrid端口，缺省VLAN为2000，且在发送VLAN 2000的报文时去掉VLAN Tag，取消允许VLAN 1通过。

[PE_B] interface GigabitEthernet 1/0/1

[PE_B-GigabitEthernet1/0/1] port link-type hybrid

[PE_B-GigabitEthernet1/0/1] port hybrid pvid vlan 2000

[PE_B-GigabitEthernet1/0/1] port hybrid vlan 2000 untagged

[PE_B-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 开启端口GigabitEthernet1/0/1的QinQ功能。

[PE_B-GigabitEthernet1/0/1] qinq enable

[PE_B-GigabitEthernet1/0/1] quit

# 配置端口GigabitEthernet1/0/2为Access端口，允许VLAN 1000的报文通过。

[PE_B] interface GigabitEthernet 1/0/2

[PE_B-GigabitEthernet1/0/2] port access vlan 1000

# 开启GigabitEthernet1/0/2端口的QinQ功能。

[PE_B-GigabitEthernet1/0/2] qinq enable

[PE_B-GigabitEthernet1/0/2] quit

# 配置端口GigabitEthernet1/0/3为Trunk端口，且允许VLAN 1000和VLAN 2000的报文通过，取消允许VLAN 1通过。

[PE_B] interface GigabitEthernet 1/0/3

[PE_B-GigabitEthernet1/0/3] port link-type trunk

[PE_B-GigabitEthernet1/0/3] port trunk permit vlan 1000 2000

[PE_B-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_B-GigabitEthernet1/0/3] quit

(3)     公共网络设备的配置

配置运营商网络中PE A到PE B之间的路径上的设备端口都允许VLAN 1000和VLAN 2000的报文携带VLAN Tag通过，且这些端口的MTU值至少为1504字节。

1.1.6  验证配置

使用display this命令查看各端口的配置，例如：

#查看设备PE A端口GigabitEthernet1/0/1的配置。

[PE_A] interface GigabitEthernet 1/0/1

[PE_A-GigabitEthernet1/0/1]display this

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1000 untagged

 port hybrid pvid vlan 1000

 qinq enable

#

return

1.1.7  配置文件

 

·     PE A

#

vlan 1000

#

vlan 2000

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1000 untagged

 port hybrid pvid vlan 1000

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 2000

 qinq enable

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000 2000 

·     PE B

#

vlan 1000

#

vlan 2000

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2000 untagged

 port hybrid pvid vlan 2000

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 1000

 qinq enable

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000 2000 

#

1.2  灵活QinQ典型配置举例（基于QoS策略配置）

1.2.1  适用产品和版本

表2 配置适用的产品与软件版本关系

产品	软件版本
S10500系列以太网交换机	Release 1120系列，Release 1130系列，Release 1200系列
S5800&S5820X系列以太网交换机	Release 1808
S5830系列以太网交换机	Release 1115，Release 1118
S5500-EI系列以太网交换机	Release 2220

 

1.2.2  组网需求

如图2所示，Customer A和Customer B各有两个分支机构需要通过运营商网络进行通信。Customer A和Customer B的网络中各有三种不同业务类型的数据，且这三种业务类型的数据需要不同的传输优先级。

现要求通过在运营商网络中配置灵活QinQ功能使用户不同业务类型的数据使用不同的外层VLAN Tag在运营商网络中传输，并使优先级高的业务得到优先传输。外层VLAN Tag的添加策略如图2表3所示，传输效果如图3所示。

图2 灵活QinQ组网示意图

 

表3 灵活QinQ外层VLAN Tag添加策略

用户的业务类型	用户网络VLAN	运营商网络VLAN	传输优先级
Customer A:
Video	31 to 40	1003	High
Voice	21 to 30	1002	Medium
Data	10 to 20	1001	Low
Customer B:
Storage	36 to 40	2003	High
Voice	26 to 35	2002	Medium
Data	15 to 25	2001	Low

 

图3 配置灵活QinQ后用户数据的传输情况

 

1.2.3  配置思路

·     请在PE A和PE B连接用户网络的端口上配置灵活QinQ功能。

·     为了保证用户网络接收的数据中不会包含运营商网络的VLAN信息，需要将配置灵活QinQ的端口的链路类型配置为Hybrid，并允许所有QinQ外层VLAN的报文不带VLAN Tag通过。

·     在PE A和PE B的上行端口以及运营商网络的中间设备上，需要保证经QinQ封装过的报文的外层VLAN Tag不被修改或移除。

·     本举例中根据用户网络不同的VLAN ID为报文封装不同的外层VLAN Tag，您也可以根据IP、MAC等原则为报文封装不同的外层VLAN Tag。

1.2.4  配置注意事项

·     在端口上应用含有nest命令的策略时，只能应用到端口的入方向（inbound），并且在应用策略之前必须在端口上开启基本QinQ功能，否则策略将不能成功应用。

·     当配置了灵活QinQ的端口接收到报文时，满足灵活QinQ配置的报文将按灵活QinQ处理，不满足灵活QinQ配置的报文将按基本QinQ处理。

·     在S10500和S5830系列交换机上：缺省情况下，端口为报文封装外层VLAN Tag时，会将内层VLAN Tag的802.1p优先级复制为外层VLAN Tag的802.1p优先级。如果入报文没有携带VLAN Tag，那么端口为报文封装的外层VLAN Tag中的802.1p优先级为端口优先级（端口优先级的缺省值为0）。

·     在S5800&S5820X和S5500-EI系列交换机上：缺省情况下，端口为报文封装外层VLAN Tag时，如果端口信任报文的802.1p优先级，会将内层VLAN Tag的802.1p优先级复制到外层VLAN Tag的802.1p优先级，如果端口不信任报文的802.1p优先级或入报文没有携带VLAN Tag，会将接收报文的端口的端口优先级作为外层VLAN Tag的802.1p优先级。

·     使能了基本QinQ功能（qinq enable）的端口只能识别一层VLAN Tag（即外层VLAN Tag），因此在使能了基本QinQ功能的端口上无法对入报文的内层VLAN Tag进行操作。如果需要修改入报文内层VLAN ID的值，请在PE设备的连接运营商网络的端口上进行配置。

·     在QinQ报文的传输路径上，配置各端口的MTU值为至少1504字节。

1.2.5  配置步骤

1. Provider A的配置

# 创建为用户数据分配的VLAN，即VLAN 1001～VLAN 1003、VLAN 2001～VLAN 2003。

<PE_A> system-view

[PE_A] vlan 1001 to 1003

[PE_A] vlan 2001 to 2003

(1)     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，允许VLAN 1001～VLAN 1003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/1

[PE_A-GigabitEthernet1/0/1] port link-type hybrid

[PE_A-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_A-GigabitEthernet1/0/1] port hybrid vlan 1001 to 1003 untagged

# 开启该端口的基本QinQ功能。

[PE_A-GigabitEthernet1/0/1] qinq enable

·     在S10500系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/1] undo qos trust

[PE_A-GigabitEthernet1/0/1] quit

·     在S5830、S5800&S5820X、S5500-EI系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/1] qos trust dot1p

[PE_A-GigabitEthernet1/0/1] quit

(2)     GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口，允许VLAN 2001～VLAN 2003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/2

[PE_A-GigabitEthernet1/0/2] port link-type hybrid

[PE_A-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_A-GigabitEthernet1/0/2] port hybrid vlan 2001 to 2003 untagged

# 开启该端口的基本QinQ功能。

[PE_A-GigabitEthernet1/0/2] qinq enable

·     在S10500系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/2] undo qos trust

[PE_A-GigabitEthernet1/0/2] quit

·     在S5830、S5800&S5820X、S5500-EI系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/2] qos trust dot1p

[PE_A-GigabitEthernet1/0/2] quit

(3)     GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口，且允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文通过，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/3

[PE_A-GigabitEthernet1/0/3] port link-type trunk

[PE_A-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_A-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003 

[PE_A-GigabitEthernet1/0/3] quit

(4)     QoS策略的配置

# 为Customer A创建一个流分类，匹配规则为用户网络中普通业务数据对应的VLAN。

[PE_A] traffic classifier customer_A_pc 

[PE_A-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_A-classifier-customer_A_pc] quit

# 按同样方法创建匹配Customer A网络中语音数据和视讯数据的流分类。

[PE_A] traffic classifier customer_A_voice

[PE_A-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_A-classifier-customer_A_voice] quit

[PE_A] traffic classifier customer_A_video  

[PE_A-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_A-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为，动作为封装相应的外层VLAN和重标记报文外层VLAN Tag的802.1p优先级。

[PE_A] traffic behavior customer_A_pc

[PE_A-behavior-customer_A_pc] nest top-most vlan-id 1001

[PE_A-behavior-customer_A_pc] remark dot1p 3

[PE_A-behavior-customer_A_pc] quit

[PE_A] traffic behavior customer_A_voice

[PE_A-behavior-customer_A_voice] nest top-most vlan-id 1002

[PE_A-behavior-customer_A_voice] remark dot1p 5

[PE_A-behavior-customer_A_voice] quit

[PE_A] traffic behavior customer_A_video

[PE_A-behavior-customer_A_video] nest top-most vlan-id 1003

[PE_A-behavior-customer_A_video] remark dot1p 7

[PE_A-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略，将匹配用户业务数据的流分类与封装相应外层VLAN的流行为进行一一关联。

[PE_A] qos policy customer_A

[PE_A-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_A-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_A-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_A-qospolicy-customer_A] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/1端口的入方向。

[PE_A] interface gigabitethernet 1/0/1

[PE_A-GigabitEthernet1/0/1] qos apply policy customer_A inbound

[PE_A-GigabitEthernet1/0/1] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_A] traffic classifier customer_B_pc 

[PE_A-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_A-classifier-customer_B_pc] quit

[PE_A] traffic classifier customer_B_voice

[PE_A-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_A-classifier-customer_B_voice] quit

[PE_A] traffic classifier customer_B_storage  

[PE_A-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_A-classifier-customer_B_storage] quit

#为Customer B的三种业务数据创建三个流行为，动作为封装相应的外层VLAN和重标记报文外层VLAN Tag的802.1p优先级。

[PE_A] traffic behavior customer_B_pc

[PE_A-behavior-customer_B_pc] nest top-most vlan-id 2001

[PE_A-behavior-customer_B_pc] remark dot1p 3

[PE_A-behavior-customer_B_pc] quit

[PE_A] traffic behavior customer_B_voice

[PE_A-behavior-customer_B_voice] nest top-most vlan-id 2002

[PE_A-behavior-customer_B_voice] remark dot1p 5

[PE_A-behavior-customer_B_voice] quit

[PE_A] traffic behavior customer_B_storage

[PE_A-behavior-customer_B_storage] nest top-most vlan-id 2003

[PE_A-behavior-customer_B_storage] remark dot1p 7

[PE_A-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略，将匹配用户业务数据的流分类与封装相应外层VLAN的流行为进行一一关联。

[PE_A] qos policy customer_B

[PE_A-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_A-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_A-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_A-qospolicy-customer_B] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/2端口的入方向。

[PE_A] interface gigabitethernet 1/0/2

[PE_A-GigabitEthernet1/0/2] qos apply policy customer_B inbound

[PE_A-GigabitEthernet1/0/2] quit

2. Provider B的配置

# 创建为用户数据分配的VLAN，即VLAN 1001～VLAN 1003、VLAN 2001～VLAN 2003。

<PE_B> system-view

[PE_B] vlan 1001 to 1003

[PE_B] vlan 2001 to 2003

(1)     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，允许VLAN 2001～VLAN 2003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/1

[PE_B-GigabitEthernet1/0/1] port link-type hybrid

[PE_B-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_B-GigabitEthernet1/0/1] port hybrid vlan 2001 to 2003 untagged

# 开启该端口的基本QinQ功能。

[PE_B-GigabitEthernet1/0/1] qinq enable

·     在S10500系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/1] undo qos trust

[PE_B-GigabitEthernet1/0/1] quit

·     在S5830、S5800&S5820X、S5500-EI系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/1] qos trust dot1p

[PE_B-GigabitEthernet1/0/1] quit

(2)     GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口，允许VLAN 1001～VLAN 1003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/2

[PE_B-GigabitEthernet1/0/2] port link-type hybrid

[PE_B-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_B-GigabitEthernet1/0/2] port hybrid vlan 1001 to 1003 untagged

# 开启该端口的基本QinQ功能。

[PE_B-GigabitEthernet1/0/2] qinq enable

·     在S10500系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/2] undo qos trust

[PE_B-GigabitEthernet1/0/2] quit

·     在S5830、S5800&S5820X、S5500-EI系列交换机上：

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/2] qos trust dot1p

[PE_B-GigabitEthernet1/0/2] quit

(3)     GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口，且允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文通过，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/3

[PE_B-GigabitEthernet1/0/3] port link-type trunk

[PE_B-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_B-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003 

[PE_B-GigabitEthernet1/0/3] quit

(4)     QoS策略的配置

# 按PE A设备的配置方法，为Customer A的业务数据配置流分类。

[PE_B] traffic classifier customer_A_pc 

[PE_B-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_B-classifier-customer_A_pc] quit

[PE_B] traffic classifier customer_A_voice

[PE_B-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_B-classifier-customer_A_voice] quit

[PE_B] traffic classifier customer_A_video  

[PE_B-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_B-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为，动作为封装相应的外层VLAN和重标记报文外层VLAN Tag的802.1p优先级。

[PE_B] traffic behavior customer_A_pc

[PE_B-behavior-customer_A_pc] nest top-most vlan-id 1001

[PE_B-behavior-customer_A_pc] remark dot1p 3

[PE_B-behavior-customer_A_pc] quit

[PE_B] traffic behavior customer_A_voice

[PE_B-behavior-customer_A_voice] nest top-most vlan-id 1002

[PE_B-behavior-customer_A_voice] remark dot1p 5

[PE_B-behavior-customer_A_voice] quit

[PE_B] traffic behavior customer_A_video

[PE_B-behavior-customer_A_video] nest top-most vlan-id 1003

[PE_B-behavior-customer_A_video] remark dot1p 7

[PE_B-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略，将匹配用户业务数据的流分类与封装相应外层VLAN的流行为进行一一关联。

[PE_B] qos policy customer_A

[PE_B-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_B-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_B-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_B-qospolicy-customer_A] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/2端口的入方向。

[PE_B] interface gigabitethernet 1/0/2

[PE_B-GigabitEthernet1/0/2] qos apply policy customer_A inbound

[PE_B-GigabitEthernet1/0/2] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_B] traffic classifier customer_B_pc 

[PE_B-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_B-classifier-customer_B_pc] quit

[PE_B] traffic classifier customer_B_voice

[PE_B-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_B-classifier-customer_B_voice] quit

[PE_B] traffic classifier customer_B_storage  

[PE_B-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_B-classifier-customer_B_storage] quit

#为Customer B的三种业务数据创建三个流行为，动作为封装相应的外层VLAN和重标记报文外层VLAN Tag的802.1p优先级。

[PE_B] traffic behavior customer_B_pc

[PE_B-behavior-customer_B_pc] nest top-most vlan-id 2001

[PE_B-behavior-customer_B_pc] remark dot1p 3

[PE_B-behavior-customer_B_pc] quit

[PE_B] traffic behavior customer_B_voice

[PE_B-behavior-customer_B_voice] nest top-most vlan-id 2002

[PE_B-behavior-customer_B_voice] remark dot1p 5

[PE_B-behavior-customer_B_voice] quit

[PE_B] traffic behavior customer_B_storage

[PE_B-behavior-customer_B_storage] nest top-most vlan-id 2003

[PE_B-behavior-customer_B_storage] remark dot1p 7

[PE_B-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略，将匹配用户业务数据的流分类与封装相应外层VLAN的流行为进行一一关联。

[PE_B] qos policy customer_B

[PE_B-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_B-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_B-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_B-qospolicy-customer_B] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/1端口的入方向。

[PE_B] interface gigabitethernet 1/0/1

[PE_B-GigabitEthernet1/0/1] qos apply policy customer_B inbound

[PE_B-GigabitEthernet1/0/1] quit

3. 公共网络设备的配置

配置运营商网络中PE A到PE B之间的路径上的设备端口都允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文携带VLAN Tag通过，并配置各端口的MTU值为至少1504字节。

1.2.6  验证配置

 

(1)     使用display this命令查看端口的配置，例如：

# 查看PE A上端口GigabitEthernet1/0/1的配置。

[PE_A] interface GigabitEthernet 1/0/1

[PE_A-GigabitEthernet1/0/1] display this

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

 qos apply policy customer_A inbound

 qos trust dot1p

#

Return

[PE_A-GigabitEthernet1/0/1] quit

(2)     查看配置的策略是否正确下发到端口，例如：

# 查看PE A上端口GigabitEthernet 1/0/1上应用的策略。

[PE_A]display qos policy interface GigabitEthernet 1/0/1

Interface: GigabitEthernet1/0/1

 

  Direction: Inbound

 

  Policy: customer_A

   Classifier: customer_A_pc

     Operator: AND

     Rule(s) : If-match customer-vlan-id 10 to 20

     Behavior: customer_A_pc

      Nesting:

        Nest top-most vlan-id 1001

      Marking:

        Remark dot1p COS 3

   Classifier: customer_A_voice

     Operator: AND

     Rule(s) : If-match customer-vlan-id 21 to 30

     Behavior: customer_A_voice

      Nesting:

        Nest top-most vlan-id 1002

      Marking:

        Remark dot1p COS 5

   Classifier: customer_A_video

     Operator: AND

     Rule(s) : If-match customer-vlan-id 31 to 40

     Behavior: customer_A_video

      Nesting:

        Nest top-most vlan-id 1003

      Marking:

        Remark dot1p COS 7

1.2.7  配置文件

 

·     PE A

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40

#

traffic behavior customer_A_pc

 nest top-most vlan-id 1001

 remark dot1p 3

traffic behavior customer_A_voice

 nest top-most vlan-id 1002

 remark dot1p 5

traffic behavior customer_A_video

 nest top-most vlan-id 1003

 remark dot1p 7

traffic behavior customer_B_pc

 nest top-most vlan-id 2001

 remark dot1p 3

traffic behavior customer_B_voice

 nest top-most vlan-id 2002

 remark dot1p 5

traffic behavior customer_B_storage

 nest top-most vlan-id 2003

 remark dot1p 7

#

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage 

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

 qos apply policy customer_A inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qinq enable

 qos apply policy customer_B inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

·     ProviderB的配置

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40

#

traffic behavior customer_A_pc

 nest top-most vlan-id 1001

 remark dot1p 3

traffic behavior customer_A_voice

 nest top-most vlan-id 1002

 remark dot1p 5

traffic behavior customer_A_video

 nest top-most vlan-id 1003

 remark dot1p 7

traffic behavior customer_B_pc

 nest top-most vlan-id 2001

 remark dot1p 3

traffic behavior customer_B_voice

 nest top-most vlan-id 2002

 remark dot1p 5

traffic behavior customer_B_storage

 nest top-most vlan-id 2003

 remark dot1p 7

#

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage 

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qinq enable

 qos apply policy customer_B inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

 qos apply policy customer_A inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

1.3  灵活QinQ典型配置举例（基于端口配置）

1.3.1  适用产品和版本

表4 配置适用的产品与软件版本关系

产品	软件版本
S5500-EI&S5500-SI系列以太网交换机	Release 2220

 

1.3.2  组网需求

如1.2.2  图2所示，Customer A和Customer B各有两个分支机构需要通过运营商网络进行通信。Customer A和Customer B的网络中各有三种不同业务类型的数据，且这三种业务类型的数据需要不同的传输优先级。

现要求通过在运营商网络中配置灵活QinQ功能使用户不同业务类型的数据使用不同的外层VLAN Tag在运营商网络中传输，并使优先级高的业务得到优先传输。外层VLAN Tag的添加策略如1.2.2  图2表3所示，传输效果如1.2.2  图3所示。

图4 灵活QinQ组网示意图

 

表5 灵活QinQ外层VLAN Tag添加策略

用户的业务类型	用户网络VLAN	运营商网络VLAN	传输优先级
Customer A:
Video	31 to 40	1003	High
Voice	21 to 30	1002	Medium
Data	10 to 20	1001	Low
Customer B:
Storage	36 to 40	2003	High
Voice	26 to 35	2002	Medium
Data	15 to 25	2001	Low

 

图5 配置灵活QinQ后用户数据的传输情况

 

1.3.3  配置思路

·     请在PE A和PE B连接用户网络的端口上配置灵活QinQ功能。

·     为了保证用户网络接收的数据中不会包含运营商网络的VLAN信息，需要将配置灵活QinQ的端口的链路类型配置为Hybrid，并允许所有QinQ外层VLAN的报文不带VLAN Tag通过。

·     在PE A和PE B的上行端口以及运营商网络的中间设备上，需要保证经QinQ封装过的报文的外层VLAN Tag不被修改或移除。

1.3.4  配置注意事项

·     在开启端口的灵活QinQ功能前，需要先开启端口的基本QinQ功能。端口上同时配置了基本QinQ和灵活QinQ功能后，满足灵活QinQ配置的报文将按灵活QinQ处理，不满足灵活QinQ配置的报文将按基本QinQ处理。

·     在S5500-EI系列交换机上，缺省情况下，端口为报文封装外层VLAN Tag时，如果端口信任报文的802.1p优先级，会将内层VLAN Tag的802.1p优先级复制到外层VLAN Tag的802.1p优先级，如果端口不信任报文的802.1p优先级或入报文没有携带VLAN Tag，会将接收报文的端口的端口优先级作为外层VLAN Tag的802.1p优先级。

·     在S5500-SI系列交换机上，缺省情况下，端口为报文封装外层VLAN Tag时，会将接收报文的端口的端口优先级作为外层VLAN Tag的802.1p优先级。

·     使能了基本QinQ功能（qinq enable）的端口只能识别一层VLAN Tag（即外层VLAN Tag），因此在使能了基本QinQ功能的端口上无法对入报文的内层VLAN Tag进行操作。如果需要修改入报文内层VLAN ID的值，请在PE设备的连接运营商网络的端口上进行配置。修改报文内层VLAN ID功能仅S5500-EI系列交换机支持。

·     在QinQ报文的传输路径上，配置各端口的MTU值为至少1504字节。

1.3.5  配置步骤

1. Provider A的配置

# 创建为用户数据分配的VLAN，即VLAN 1001～VLAN 1003、VLAN 2001～VLAN 2003。

<PE_A> system-view

[PE_A] vlan 1001 to 1003

[PE_A] vlan 2001 to 2003

(1)     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，允许VLAN 1001～VLAN 1003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/1

[PE_A-GigabitEthernet1/0/1] port link-type hybrid

[PE_A-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_A-GigabitEthernet1/0/1] port hybrid vlan 1001 to 1003 untagged

# 开启该端口的基本QinQ功能。

[PE_A-GigabitEthernet1/0/1] qinq enable

# 配置端口将来自VLAN 10～VLAN 20的报文打上VLAN ID为1001的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/1] qinq vid 1001

[PE_A-GigabitEthernet1/0/1-vid-1001] raw-vlan-id inbound 10 to 20

[PE_A-GigabitEthernet1/0/1-vid-1001] quit

# 配置端口将来自VLAN 21～VLAN 30的报文打上VLAN ID为1002的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/1] qinq vid 1002

[PE_A-GigabitEthernet1/0/1-vid-1002] raw-vlan-id inbound 21 to 30

[PE_A-GigabitEthernet1/0/1-vid-1002] quit

# 配置端口将来自VLAN 31～VLAN 40的报文打上VLAN ID为1003的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/1] qinq vid 1003

[PE_A-GigabitEthernet1/0/1-vid-1003] raw-vlan-id inbound 31 to 40

[PE_A-GigabitEthernet1/0/1-vid-1003] quit

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/1] qos trust dot1p

[PE_A-GigabitEthernet1/0/1] quit

(2)     GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口，允许VLAN 2001～VLAN 2003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/2

[PE_A-GigabitEthernet1/0/2] port link-type hybrid

[PE_A-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_A-GigabitEthernet1/0/2] port hybrid vlan 2001 to 2003 untagged

# 开启该端口的基本QinQ功能。

[PE_A-GigabitEthernet1/0/2] qinq enable

# 配置端口将来自VLAN 15～VLAN 25的报文打上VLAN ID为2001的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/2] qinq vid 2001

[PE_A-GigabitEthernet1/0/2-vid-2001] raw-vlan-id inbound 15 to 25

[PE_A-GigabitEthernet1/0/2-vid-2001] quit

# 配置端口将来自VLAN 26～VLAN 35的报文打上VLAN ID为2002的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/2] qinq vid 2002

[PE_A-GigabitEthernet1/0/2-vid-2002] raw-vlan-id inbound 26 to 35

[PE_A-GigabitEthernet1/0/2-vid-2002] quit

# 配置端口将来自VLAN 36～VLAN 40的报文打上VLAN ID为2003的外层VLAN Tag。

[PE_A-GigabitEthernet1/0/2] qinq vid 2003

[PE_A-GigabitEthernet1/0/2-vid-2003] raw-vlan-id inbound 36 to 40

[PE_A-GigabitEthernet1/0/2-vid-2003] quit

#配置端口信任报文的802.1p优先级。

[PE_A-GigabitEthernet1/0/2] qos trust dot1p

[PE_A-GigabitEthernet1/0/2] quit

(3)     GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口，且允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文通过，取消允许VLAN 1通过。

[PE_A] interface gigabitethernet 1/0/3

[PE_A-GigabitEthernet1/0/3] port link-type trunk

[PE_A-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_A-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003 

[PE_A-GigabitEthernet1/0/3] quit

(4)     QoS策略的配置

# 为Customer A创建一个流分类，匹配规则为用户网络中普通业务数据对应的VLAN。

[PE_A] traffic classifier customer_A_pc 

[PE_A-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_A-classifier-customer_A_pc] quit

# 按同样方法创建匹配Customer A网络中语音数据和视讯数据的流分类。

[PE_A] traffic classifier customer_A_voice

[PE_A-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_A-classifier-customer_A_voice] quit

[PE_A] traffic classifier customer_A_video  

[PE_A-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_A-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为，动作为重标记报文外层VLAN Tag的802.1p优先级。

[PE_A] traffic behavior customer_A_pc

[PE_A-behavior-customer_A_pc] remark dot1p 3

[PE_A-behavior-customer_A_pc] quit

[PE_A] traffic behavior customer_A_voice

[PE_A-behavior-customer_A_voice] remark dot1p 5

[PE_A-behavior-customer_A_voice] quit

[PE_A] traffic behavior customer_A_video

[PE_A-behavior-customer_A_video] remark dot1p 7

[PE_A-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略，将匹配用户业务数据的流分类与重标记报文外层VLAN Tag的802.1p优先级的流行为进行一一关联。

[PE_A] qos policy customer_A

[PE_A-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_A-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_A-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_A-qospolicy-customer_A] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/1端口的入方向。

[PE_A] interface gigabitethernet 1/0/1

[PE_A-GigabitEthernet1/0/1] qos apply policy customer_A inbound

[PE_A-GigabitEthernet1/0/1] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_A] traffic classifier customer_B_pc 

[PE_A-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_A-classifier-customer_B_pc] quit

[PE_A] traffic classifier customer_B_voice

[PE_A-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_A-classifier-customer_B_voice] quit

[PE_A] traffic classifier customer_B_storage  

[PE_A-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_A-classifier-customer_B_storage] quit

#为Customer B的三种业务数据创建三个流行为，动作为重标记报文外层VLAN Tag的802.1p优先级。

[PE_A] traffic behavior customer_B_pc

[PE_A-behavior-customer_B_pc] remark dot1p 3

[PE_A-behavior-customer_B_pc] quit

[PE_A] traffic behavior customer_B_voice

[PE_A-behavior-customer_B_voice] remark dot1p 5

[PE_A-behavior-customer_B_voice] quit

[PE_A] traffic behavior customer_B_storage

[PE_A-behavior-customer_B_storage] remark dot1p 7

[PE_A-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略，将匹配用户业务数据的流分类与重标记报文外层VLAN Tag的802.1p优先级的流行为进行一一关联。

[PE_A] qos policy customer_B

[PE_A-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_A-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_A-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_A-qospolicy-customer_B] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/2端口的入方向。

[PE_A] interface gigabitethernet 1/0/2

[PE_A-GigabitEthernet1/0/2] qos apply policy customer_B inbound

[PE_A-GigabitEthernet1/0/2] quit

2. Provider B的配置

# 创建为用户数据分配的VLAN，即VLAN 1001～VLAN 1003、VLAN 2001～VLAN 2003。

<PE_B> system-view

[PE_B] vlan 1001 to 1003

[PE_B] vlan 2001 to 2003

(1)     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，允许VLAN 2001～VLAN 2003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/1

[PE_B-GigabitEthernet1/0/1] port link-type hybrid

[PE_B-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_B-GigabitEthernet1/0/1] port hybrid vlan 2001 to 2003 untagged

# 开启该端口的基本QinQ功能。

[PE_B-GigabitEthernet1/0/1] qinq enable

# 配置端口将来自VLAN 15～VLAN 25的报文打上VLAN ID为2001的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/1] qinq vid 2001

[PE_B-GigabitEthernet1/0/1-vid-2001] raw-vlan-id inbound 15 to 25

[PE_B-GigabitEthernet1/0/1-vid-2001] quit

# 配置端口将来自VLAN 26～VLAN 35的报文打上VLAN ID为2002的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/1] qinq vid 2002

[PE_B-GigabitEthernet1/0/1-vid-2002] raw-vlan-id inbound 26 to 35

[PE_B-GigabitEthernet1/0/1-vid-2002] quit

# 配置端口将来自VLAN 36～VLAN 40的报文打上VLAN ID为2003的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/1] qinq vid 2003

[PE_B-GigabitEthernet1/0/1-vid-2003] raw-vlan-id inbound 36 to 40

[PE_B-GigabitEthernet1/0/1-vid-2003] quit

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/1] qos trust dot1p

[PE_B-GigabitEthernet1/0/1] quit

(2)     GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口，允许VLAN 1001～VLAN 1003的报文通过，并且在发送时去掉外层Tag，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/2

[PE_B-GigabitEthernet1/0/2] port link-type hybrid

[PE_B-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_B-GigabitEthernet1/0/2] port hybrid vlan 1001 to 1003 untagged

# 开启该端口的基本QinQ功能。

[PE_B-GigabitEthernet1/0/2] qinq enable

# 配置端口将来自VLAN 10～VLAN 20的报文打上VLAN ID为1001的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/2] qinq vid 1001

[PE_B-GigabitEthernet1/0/2-vid-1001] raw-vlan-id inbound 10 to 20

[PE_B-GigabitEthernet1/0/2-vid-1001] quit

# 配置端口将来自VLAN 21～VLAN 30的报文打上VLAN ID为1002的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/2] qinq vid 1002

[PE_B-GigabitEthernet1/0/2-vid-1002] raw-vlan-id inbound 21 to 30

[PE_B-GigabitEthernet1/0/2-vid-1002] quit

# 配置端口将来自VLAN 31～VLAN 40的报文打上VLAN ID为1003的外层VLAN Tag。

[PE_B-GigabitEthernet1/0/2] qinq vid 1003

[PE_B-GigabitEthernet1/0/2-vid-1003] raw-vlan-id inbound 31 to 40

[PE_B-GigabitEthernet1/0/2-vid-1003] quit

#配置端口信任报文的802.1p优先级。

[PE_B-GigabitEthernet1/0/2] qos trust dot1p

[PE_B-GigabitEthernet1/0/2] quit

(3)     GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口，且允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文通过，取消允许VLAN 1通过。

[PE_B] interface gigabitethernet 1/0/3

[PE_B-GigabitEthernet1/0/3] port link-type trunk

[PE_B-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_B-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003 

[PE_B-GigabitEthernet1/0/3] quit

(4)     QoS策略的配置

# 按PE A设备的配置方法，为Customer A的业务数据配置流分类。

[PE_B] traffic classifier customer_A_pc 

[PE_B-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_B-classifier-customer_A_pc] quit

[PE_B] traffic classifier customer_A_voice

[PE_B-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_B-classifier-customer_A_voice] quit

[PE_B] traffic classifier customer_A_video  

[PE_B-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_B-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为，动作为重标记报文外层VLAN Tag的802.1p优先级。

[PE_B] traffic behavior customer_A_pc

[PE_B-behavior-customer_A_pc] remark dot1p 3

[PE_B-behavior-customer_A_pc] quit

[PE_B] traffic behavior customer_A_voice

[PE_B-behavior-customer_A_voice] remark dot1p 5

[PE_B-behavior-customer_A_voice] quit

[PE_B] traffic behavior customer_A_video

[PE_B-behavior-customer_A_video] remark dot1p 7

[PE_B-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略，将匹配用户业务数据的流分类与重标记报文外层VLAN Tag的802.1p优先级的流行为进行一一关联。

[PE_B] qos policy customer_A

[PE_B-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_B-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_B-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_B-qospolicy-customer_A] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/2端口的入方向。

[PE_B] interface gigabitethernet 1/0/2

[PE_B-GigabitEthernet1/0/2] qos apply policy customer_A inbound

[PE_B-GigabitEthernet1/0/2] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_B] traffic classifier customer_B_pc 

[PE_B-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_B-classifier-customer_B_pc] quit

[PE_B] traffic classifier customer_B_voice

[PE_B-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_B-classifier-customer_B_voice] quit

[PE_B] traffic classifier customer_B_storage  

[PE_B-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_B-classifier-customer_B_storage] quit

#为Customer B的三种业务数据创建三个流行为，动作为重标记报文外层VLAN Tag的802.1p优先级。

[PE_B] traffic behavior customer_B_pc

[PE_B-behavior-customer_B_pc] remark dot1p 3

[PE_B-behavior-customer_B_pc] quit

[PE_B] traffic behavior customer_B_voice

[PE_B-behavior-customer_B_voice] remark dot1p 5

[PE_B-behavior-customer_B_voice] quit

[PE_B] traffic behavior customer_B_storage

[PE_B-behavior-customer_B_storage] remark dot1p 7

[PE_B-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略，将匹配用户业务数据的流分类与重标记报文外层VLAN Tag的802.1p优先级的流行为进行一一关联。

[PE_B] qos policy customer_B

[PE_B-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_B-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_B-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_B-qospolicy-customer_B] quit

# 将上面创建的策略应用到GigabitEthernet 1/0/1端口的入方向。

[PE_B] interface gigabitethernet 1/0/1

[PE_B-GigabitEthernet1/0/1] qos apply policy customer_B inbound

[PE_B-GigabitEthernet1/0/1] quit

3. 公共网络设备的配置

配置运营商网络中PE A到PE B之间的路径上的设备端口都允许VLAN 1001～VLAN 1003和VLAN 2001～VLAN 2003的报文携带VLAN Tag通过，并配置各端口的MTU值为至少1504字节。

1.3.6  验证配置

(1)     使用display this命令查看端口的配置，例如：

# 查看PE A上端口GigabitEthernet1/0/1的配置。

[PE_A] interface GigabitEthernet 1/0/1

[PE_A-GigabitEthernet1/0/1] display this

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

 qinq vid 1001

  raw-vlan-id inbound 10 to 20

 qinq vid 1002

  raw-vlan-id inbound 21 to 30

 qinq vid 1003

  raw-vlan-id inbound 31 to 40

 qos apply policy customer_A inbound

 qos trust dot1p

#

Return

[PE_A-GigabitEthernet1/0/1] quit

(2)     查看配置的策略是否正确下发到端口，例如：

# 查看PE A上端口GigabitEthernet 1/0/1上应用的策略。

[PE_A]display qos policy interface GigabitEthernet 1/0/1

Interface: GigabitEthernet1/0/1

 

  Direction: Inbound

 

  Policy: customer_A

   Classifier: customer_A_pc

     Operator: AND

     Rule(s) : If-match customer-vlan-id 10 to 20

     Behavior: customer_A_pc

      Marking:

        Remark dot1p COS 3

   Classifier: customer_A_voice

     Operator: AND

     Rule(s) : If-match customer-vlan-id 21 to 30

     Behavior: customer_A_voice

      Marking:

        Remark dot1p COS 5

   Classifier: customer_A_video

     Operator: AND

     Rule(s) : If-match customer-vlan-id 31 to 40

     Behavior: customer_A_video

      Marking:

        Remark dot1p COS 7

1.3.7  配置文件

 

·     PE A

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40

#

traffic behavior customer_A_pc

 remark dot1p 3

traffic behavior customer_A_voice

 remark dot1p 5

traffic behavior customer_A_video

 remark dot1p 7

traffic behavior customer_B_pc

 remark dot1p 3

traffic behavior customer_B_voice

 remark dot1p 5

traffic behavior customer_B_storage

 remark dot1p 7

#

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage 

 

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

qinq vid 1001

  raw-vlan-id inbound 10 to 20

 qinq vid 1002

  raw-vlan-id inbound 21 to 30

 qinq vid 1003

  raw-vlan-id inbound 31 to 40

 qos apply policy customer_A inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qinq enable

 qinq vid 2001

  raw-vlan-id inbound 15 to 25

 qinq vid 2002

  raw-vlan-id inbound 26 to 35

 qinq vid 2003

  raw-vlan-id inbound 36 to 40

 qos apply policy customer_B inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003   

·     ProviderB的配置

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40               #

#

traffic behavior customer_A_pc

 remark dot1p 3

traffic behavior customer_A_voice

 remark dot1p 5

traffic behavior customer_A_video

 remark dot1p 7

traffic behavior customer_B_pc

 remark dot1p 3

traffic behavior customer_B_voice

 remark dot1p 5

traffic behavior customer_B_storage

 remark dot1p 7

#

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage 

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qinq enable

 qinq vid 2001

  raw-vlan-id inbound 15 to 25

 qinq vid 2002

  raw-vlan-id inbound 26 to 35

 qinq vid 2003

  raw-vlan-id inbound 36 to 40

 qos apply policy customer_B inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qinq enable

qinq vid 1001

  raw-vlan-id inbound 10 to 20

 qinq vid 1002

  raw-vlan-id inbound 21 to 30

 qinq vid 1003

  raw-vlan-id inbound 31 to 40

 qos apply policy customer_A inbound

 qos trust dot1p

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

1.4  TPID典型配置举例（S10500、S5800&S5820X、S5830适用）

1.4.1  适用产品和版本

表6 配置适用的产品与软件版本关系

产品	软件版本
S10500系列以太网交换机	Release 1120系列，Release 1130系列，Release 1200系列
S5800&S5820X系列以太网交换机	Release 1808
S5830系列以太网交换机	Release 1115，Release 1118

 

1.4.2  组网需求

TPID（Tag Protocol Identifier，标签协议标识符）是VLAN Tag中的一个字段，用来判断报文中是否携带有VLAN Tag。TPID分为用户网络TPID和运营商网络TPID，缺省取值都是0x8100。

如图6所示，PE是一台运营商网络边缘设备。PE的下行端口GigabitEthernet1/0/1开启了基本QinQ功能。CE发送的报文的VLAN Tag中的TPID值为0x8200。P设备发送的报文的VLAN Tag中的TPID值为0x9100。

现要求通过配置PE设备用户网络TPID使设备能够正确识别用户网络报文的VLAN Tag，配置运营商网络TPID，使端口能正确识别运营商网络报文的VLAN Tag，并且P设备也能够正确识别PE发送的报文中的VLAN Tag。

图6 配置VLAN Tag的TPID组网示意图

 

1.4.3  配置思路

·     对于配置了基本QinQ功能（qinq enable）或用户侧QinQ功能（qinq enable downlink）的端口，交换机将根据全局配置的用户网络的TPID值来判断接收到的报文是否携带VLAN Tag。配置用户网络TPID值仅用于判断入报文是否携带VLAN Tag，不会对报文内层VLAN Tag的TPID值进行修改。S10500系列交换机不支持qinq enable downlink。

·     开启基本QinQ功能的端口如果接收的报文的TPID和全局配置的用户网络TPID不同，设备会认为该报文没有携带VLAN Tag。如果没有正确配置用户网络的TPID，配置灵活QinQ功能的端口将无法正确识别用户网络VLAN，从而不能为不同用户网络VLAN封装不同的外层VLAN Tag。

·     为了使PE设备能正确识别接收的用户网络的报文是否携带VLAN Tag，需要在PE设备上配置用户网络的TPID值为0x8200。

·     对于没有配置基本QinQ功能（qinq enable）或用户侧QinQ功能（qinq enable downlink）的端口，交换机将根据端口上配置的运营商网络的TPID值来判断接收到的报文是否携带VLAN Tag。由于第三方厂商的设备可能将QinQ报文外层VLAN Tag的TPID设为不同的值，为了与这些厂商的设备兼容，配置了运营商网络的TPID值的端口会将出报文中外层VLAN Tag的TPID值修改为配置值，使发送到公网中的QinQ报文携带的TPID值与第三方厂商的相同，从而实现与这些厂商的设备互通。S10500系列交换机不支持qinq enable downlink。

·     为了使PE设备能够正确识别接收的运营商网络的报文是否携带VLAN Tag，和发送给P设备的报文能被P设备正常的接收处理，需要在PE设备连接P设备的端口GigabitEthernet1/0/2上配置运营商网络的TPID值为0x9100。

1.4.4  配置注意事项

·     运营商网络中的TPID值和QinQ功能不能在端口上同时配置。

·     QinQ功能为报文添加的外层VLAN Tag中的TPID值是0x8100。

1.4.5  配置步骤

# 创建VLAN 1000（假设PE设备为用户网络封装的外层VLAN为VLAN 1000）。

<PE> system-view

[PE] vlan 1000

[PE-vlan1000] quit

# 全局配置用户网络中的TPID值为0x8200。

[PE] qinq ethernet-type customer-tag 8200

·     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，缺省VLAN为1000，且在发送VLAN 1000的报文时去掉VLAN Tag，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/1

[PE-GigabitEthernet1/0/1] port link-type hybrid

[PE-GigabitEthernet1/0/1] port hybrid pvid vlan 1000

[PE-GigabitEthernet1/0/1] port hybrid vlan 1000 untagged

[PE-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 开启GigabitEthernet1/0/1端口的QinQ功能。

[PE-GigabitEthernet1/0/1] qinq enable

[PE-GigabitEthernet1/0/1] quit

·     GigabitEthernet1/0/2端口的配置

# 配置端口为Trunk端口，且允许VLAN 1000的报文通过，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/2

[PE-GigabitEthernet1/0/2] port link-type trunk

[PE-GigabitEthernet1/0/2] port trunk permit vlan 1000

[PE-GigabitEthernet1/0/2] undo port trunk permit vlan 1

# 配置运营商网络的TPID值为0x9100。

[PE-GigabitEthernet1/0/2] qinq ethernet-type service-tag 9100

[PE-GigabitEthernet1/0/2] quit

1.4.6  验证配置

# 使用display current-configuration | include qinq ethernet-type customer-tag查看用户网络中的TPID是否正确配置。

[PE]display current-configuration | include qinq ethernet-type customer-tag

 qinq ethernet-type customer-tag 8200

# 在端口上使用display this查看运营商网络的TPID是否正确配置。

[PE] interface GigabitEthernet 1/0/2

[PE-GigabitEthernet1/0/2] display this

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000

 qinq ethernet-type service-tag 9100

#

return

 

1.4.7  配置文件

#

qinq ethernet-type customer-tag 8200

#

vlan 1000

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1000 untagged

 port hybrid pvid vlan 1000

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000

 qinq ethernet-type service-tag 9100

1.5  TPID典型配置举例（S5500-EI适用）

1.5.1  适用产品和版本

表7 配置适用的产品与软件版本关系

产品	软件版本
S5500-EI系列以太网交换机	Release 2220

 

1.5.2  组网需求

TPID（Tag Protocol Identifier，标签协议标识符）是VLAN Tag中的一个字段，用来判断报文中是否携带有VLAN Tag。TPID分为用户网络TPID和运营商网络TPID，缺省取值都是0x8100。

如1.4.2  图6所示，PE是一台运营商网络边缘设备。PE的下行端口GigabitEthernet1/0/1开启了基本QinQ功能。CE发送的报文的VLAN Tag中的TPID值为0x8200。P设备发送的报文的VLAN Tag中的TPID值为0x9100。

现要求通过配置PE设备用户网络TPID使设备能够正确识别用户网络报文的VLAN Tag，配置运营商网络TPID，使端口能正确识别运营商网络报文的VLAN Tag，并且P设备也能够正确识别PE发送的报文中的VLAN Tag。

图7 配置VLAN Tag的TPID组网示意图

 

1.5.3  配置思路

·     对于配置了基本QinQ功能（qinq enable）或用户侧QinQ功能（qinq enable downlink）的端口，交换机将根据用户网络的TPID值来判断接收到的报文是否携带VLAN Tag。配置用户网络TPID值仅用于判断入报文是否携带VLAN Tag，不会对报文内层VLAN Tag的TPID值进行修改。

·     开启基本QinQ功能的端口如果接收的报文的TPID和全局配置的用户网络TPID不同，设备会认为该报文没有携带VLAN Tag。如果没有正确配置用户网络的TPID，配置灵活QinQ功能的端口将无法正确识别用户网络VLAN，从而不能为不同用户网络VLAN封装不同的外层VLAN Tag。

·     为了使PE设备能正确识别接收的用户网络的报文是否携带VLAN Tag，需要在PE设备上配置用户网络的TPID值为0x8200。

·     对于没有配置基本QinQ功能（qinq enable）或用户侧QinQ功能（qinq enable downlink）的端口，交换机将根据运营商网络的TPID值来判断接收到的报文是否携带VLAN Tag。由于第三方厂商的设备可能将QinQ报文外层VLAN Tag的TPID设为不同的值，为了与这些厂商的设备兼容，QinQ报文的出端口会将出报文中外层VLAN Tag的TPID值修改为运营商网络的TPID值，使发送到公网中的QinQ报文携带的TPID值与第三方厂商的相同，从而实现与这些厂商的设备互通。

·     为了使PE设备能够正确识别接收的运营商网络的报文是否携带VLAN Tag，和发送给P设备的报文能被P设备正常的接收处理，需要在PE设备上配置运营商网络的TPID值为0x9100。

1.5.4  配置注意事项

QinQ功能为报文添加的外层VLAN Tag中的TPID值是0x8100。

1.5.5  配置步骤

# 创建VLAN 1000（假设PE设备为用户网络封装的外层VLAN为VLAN 1000）。

<PE> system-view

[PE] vlan 1000

[PE-vlan1000] quit

# 配置用户网络中的TPID值为0x8200。

[PE] qinq ethernet-type customer-tag 8200

# 配置运营商网络中的TPID值为0x9100。

[PE] qinq ethernet-type service-tag 9100

·     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，缺省VLAN为1000，且在发送VLAN 1000的报文时去掉VLAN Tag，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/1

[PE-GigabitEthernet1/0/1] port link-type hybrid

[PE-GigabitEthernet1/0/1] port hybrid pvid vlan 1000

[PE-GigabitEthernet1/0/1] port hybrid vlan 1000 untagged

[PE-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 开启GigabitEthernet1/0/1端口的QinQ功能。

[PE-GigabitEthernet1/0/1] qinq enable

[PE-GigabitEthernet1/0/1] quit

·     GigabitEthernet1/0/2端口的配置

# 配置端口为Trunk端口，且允许VLAN 1000的报文通过，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/2

[PE-GigabitEthernet1/0/2] port link-type trunk

[PE-GigabitEthernet1/0/2] port trunk permit vlan 1000

[PE-GigabitEthernet1/0/2] undo port trunk permit vlan 1

1.5.6  验证配置

# 使用display current-configuration | include qinq ethernet-type查看用户网络中的TPID和运营商网络中的TPID是否正确配置。

[PE]display current-configuration | include qinq ethernet-type

 qinq ethernet-type service-tag 9100

 qinq ethernet-type customer-tag 8200

 

1.5.7  配置文件

#

qinq ethernet-type service-tag 9100

qinq ethernet-type customer-tag 8200

#

vlan 1000

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1000 untagged

 port hybrid pvid vlan 1000

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000

#

1.6  TPID典型配置举例（S5500-SI适用）

1.6.1  适用产品和版本

表8 配置适用的产品与软件版本关系

产品	软件版本
S5500-SI系列以太网交换机	Release 2220

 

1.6.2  组网需求

TPID（Tag Protocol Identifier，标签协议标识符）是VLAN Tag中的一个字段，用来判断报文中是否携带有VLAN Tag。

如1.4.2  图6所示，PE是一台运营商网络边缘设备。PE的下行端口GigabitEthernet1/0/1开启了基本QinQ功能。CE设备和P设备发送的报文的VLAN Tag中的TPID值都为0x9100。

现要求通过配置PE设备的TPID值，使PE设备能正确识别CE设备和P设备发送报文的VLAN Tag，并且P设备也能够正确识别PE发送的报文中的VLAN Tag。

图8 配置VLAN Tag的TPID组网示意图

 

1.6.3  配置思路

·     对于配置了基本QinQ功能的端口，交换机根据TPID值来判断接收到的报文是否携带VLAN Tag，但不会对报文VLAN Tag的TPID值进行修改。

·     开启基本QinQ功能的端口如果接收的报文的TPID和全局配置的TPID不同，设备会认为该报文没有携带VLAN Tag。如果没有正确配置用户网络的TPID，配置灵活QinQ功能的端口将无法正确识别用户网络VLAN，从而不能为不同用户网络VLAN封装不同的外层VLAN Tag。

·     为了使PE设备能正确识别接收的用户网络的报文是否携带VLAN Tag，需要在PE设备上配置用户网络的TPID值为0x8200。

·     对于没有配置基本QinQ功能的端口，交换机除了根据TPID值来判断接收到的报文是否携带VLAN Tag外，QinQ报文的出端口会将出报文中外层VLAN Tag的TPID值修改为配置的TPID值，使发送到公网中的QinQ报文携带的TPID值与第三方厂商设备的TPID值相同，从而实现与这些厂商的设备互通。

1.6.4  配置注意事项

·     在S5500-SI系列交换机上配置TPID值时，同时配置了用户网络TPID值和运营商网络TPID值。

·     QinQ功能为报文添加的外层VLAN Tag中的TPID值是0x8100。

1.6.5  配置步骤

# 创建VLAN 1000（假设PE设备为用户网络封装的外层VLAN为VLAN 1000）。

<PE> system-view

[PE] vlan 1000

[PE-vlan1000] quit

# 配置TPID值为0x9100。

[PE] qinq ethernet-type 9100

·     GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口，缺省VLAN为1000，且在发送VLAN 1000的报文时去掉VLAN Tag，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/1

[PE-GigabitEthernet1/0/1] port link-type hybrid

[PE-GigabitEthernet1/0/1] port hybrid pvid vlan 1000

[PE-GigabitEthernet1/0/1] port hybrid vlan 1000 untagged

[PE-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 开启GigabitEthernet1/0/1端口的QinQ功能。

[PE-GigabitEthernet1/0/1] qinq enable

[PE-GigabitEthernet1/0/1] quit

·     GigabitEthernet1/0/2端口的配置

# 配置端口为Trunk端口，且允许VLAN 1000的报文通过，取消允许VLAN 1通过。

[PE] interface GigabitEthernet 1/0/2

[PE-GigabitEthernet1/0/2] port link-type trunk

[PE-GigabitEthernet1/0/2] port trunk permit vlan 1000

[PE-GigabitEthernet1/0/2] undo port trunk permit vlan 1

1.6.6  验证配置

# 使用display current-configuration | include qinq ethernet-type查看TPID值是否正确配置。

[PE]display current-configuration | include qinq ethernet-type

 qinq ethernet-type 9100

 

1.6.7  配置文件

#

qinq ethernet-type 9100

#

vlan 1000

#

interface GigabitEthernet1/0/1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1000 untagged

 port hybrid pvid vlan 1000

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1000

#