目  录

1 VLAN映射典型配置举例

1.1 简介

1.2 1:1 VLAN映射典型配置举例

1.1.1 适用产品和版本

1.1.2 组网需求

1.1.3 配置注意事项

1.1.4 配置步骤

1.1.5 验证配置

1.1.6 配置文件

1.2 2:2 VLAN映射典型配置举例

1.2.1 适用产品和版本

1.2.2 组网需求

1.2.3 配置注意事项

1.2.4 配置步骤

1.2.5 验证配置

1.2.6 配置文件

 

1  VLAN映射典型配置举例

1.1  简介

VLAN映射是指将报文原有的VLAN Tag进行替换，使其能够在转发后的网络中应用基于VLAN的各种传输策略。

·     1:1 VLAN映射：将来自某一特定VLAN的报文所携带的VLAN Tag替换为新的VLAN Tag。

·     2:2 VLAN映射：将携带有两层VLAN Tag的报文的内、外层VLAN Tag都替换为新的VLAN Tag。

1.2  1:1 VLAN映射典型配置举例

1.1.1  适用产品和版本

表1 配置适用的产品与软件版本关系

产品	软件版本
S10500系列以太网交换机	Release 1120系列，Release 1130系列，Release 1200系列
S5800&S5820X系列以太网交换机	Release 1808
S5830系列以太网交换机	Release 1115，Release 1118
S5500-EI系列以太网交换机	Release 2220

 

1.1.2  组网需求

如图1所示：

·     某公司的两个分支机构Site 1和Site 2通过运营商网络进行通信，该公司的语音和数据业务分别使用VLAN 10和VLAN 20加以区分。

·     PE 1和PE 2为运营商网络的边缘设备，且在运营商的网络规划中，仅VLAN 100和VLAN 200可以用来传输该公司的数据。

现要求通过配置1:1 VLAN映射功能，使Site 1和Site 2利用运营商提供的VLAN 100和VLAN 200实现语音和数据业务的互通。VLAN Tag的替换效果如图2所示。

图1 1:1 VLAN映射组网示意图

图2 1:1 VLAN映射配置效果示意图（以数据流从Site 1到Site 2为例，反之亦然）

 

1.1.3  配置注意事项

配置1：1 VLAN映射功能时，下行端口上需要开启基本QinQ功能。

1.1.4  配置步骤

1. 配置PE 1

(1)     创建映射前的用户网络VLAN（CVLAN）和映射后的运营商网络VLAN（SVLAN）。

<PE1> system-view

[PE1] vlan 10

[PE1-vlan10] quit

[PE1] vlan 20

[PE1-vlan20] quit

[PE1] vlan 100

[PE1-vlan100] quit

[PE1] vlan 200

[PE1-vlan200] quit

(2)     配置上行策略

# 创建流分类规则，将来自Site 1的VLAN 10的报文定义为“uplink10”类。

[PE1] traffic classifier uplink10

[PE1-classifier-uplink10] if-match customer-vlan-id 10

[PE1-classifier-uplink10] quit

# 定义流行为，重标记报文SVLAN ID为VLAN 100，流行为命名为“remark_to_100”。

[PE1] traffic behavior remark_to_100

[PE1-behavior-remark_to_100] remark service-vlan-id 100

[PE1-behavior-remark_to_100] quit

# 与以上配置类似，创建流分类“uplink20”匹配CVLAN ID为20的报文，并创建流行为“remark_to_200”，重标记报文的SVLAN ID为VLAN 200。

[PE1] traffic classifier uplink20

[PE1-classifier-uplink20] if-match customer-vlan-id 20

[PE1-classifier-uplink20] quit

[PE1] traffic behavior remark_to_200

[PE1-behavior-remark_to_200] remark service-vlan-id 200

[PE1-behavior-remark_to_200] quit

# 创建QoS策略，将流分类“uplink10”和流行为“remark_to_100”关联，将流分类“uplink20”和流行为“remark_to_200”关联，策略命名为“uplink”。

[PE1] qos policy uplink

[PE1-qospolicy-uplink] classifier uplink10 behavior remark_to_100

[PE1-qospolicy-uplink] classifier uplink20 behavior remark_to_200

[PE1-qospolicy-uplink] quit

(3)     配置下行策略

# 创建流分类规则，将来自运营商网络的VLAN 100的报文定义为“downlink100”类。

[PE1] traffic classifier downlink100

[PE1-classifier-downlink100] if-match service-vlan-id 100

[PE1-classifier-downlink100] quit

# 定义流行为，重标记报文CVLAN ID为VLAN 10，流行为命名为“remark_to_10”。

[PE1] traffic behavior remark_to_10

[PE1-behavior-remark_to_10] remark customer-vlan-id 10

[PE1-behavior-remark_to_10] quit

# 与以上配置类似，创建流分类“downlink200”匹配SVLAN ID为200的报文，并创建流行为“remark_to_20”，重标记报文的CVLAN ID为VLAN 20。

[PE1] traffic classifier downlink200

[PE1-classifier-downlink200] if-match service-vlan-id 200

[PE1-classifier-downlink200] quit

[PE1] traffic behavior remark_to_20

[PE1-behavior-remark_to_20] remark customer-vlan-id 20

[PE1-behavior-remark_to_20] quit

# 创建QoS策略，将流分类“downlink100”和流行为“remark_to_10”关联，将流分类“downlink200”和流行为“remark_to_20”关联，策略命名为“downlink”。

[PE1] qos policy downlink

[PE1-qospolicy-downlink] classifier downlink100 behavior remark_to_10

[PE1-qospolicy-downlink] classifier downlink200 behavior remark_to_20

[PE1-qospolicy-downlink] quit

(4)     配置下行端口GigabitEthernet1/0/1

# 配置端口为Hybrid端口，且允许VLAN 10、VLAN 20、VLAN 100、VLAN 200的报文携带Tag通过。

[PE1] interface gigabitethernet 1/0/1

[PE1-GigabitEthernet1/0/1] port link-type hybrid

[PE1-GigabitEthernet1/0/1] port hybrid vlan 10 20 100 200 tagged

[PE1-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 使能端口的基本QinQ功能。

[PE1-GigabitEthernet1/0/1] qinq enable

# 在端口GigabitEthernet1/0/1的接收方向应用“uplink”规则，发送方向应用“downlink”规则。

[PE1-GigabitEthernet1/0/1] qos apply policy uplink inbound

[PE1-GigabitEthernet1/0/1] qos apply policy downlink outbound

[PE1-GigabitEthernet1/0/1] quit

(5)     配置上行端口GigabitEthernet1/0/2

# 配置端口为Trunk端口，且允许VLAN 100和200的报文通过。

[PE1] interface gigabitethernet 1/0/2

[PE1-GigabitEthernet1/0/2] port link-type trunk

[PE1-GigabitEthernet1/0/2] port trunk permit vlan 100 200

[PE1-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[PE1-GigabitEthernet1/0/2] quit

2. 配置PE 2

(1)     创建映射前的用户网络VLAN（CVLAN）和映射后的运营商网络VLAN（SVLAN）。

<PE2> system-view

[PE2] vlan 10

[PE2-vlan10] quit

[PE2] vlan 20

[PE2-vlan20] quit

[PE2] vlan 100

[PE2-vlan100] quit

[PE2] vlan 200

[PE2-vlan200] quit

(2)     配置上行策略

# 创建流分类规则，将来自Site 2的VLAN 10的报文定义为“uplink10”类。

[PE2] traffic classifier uplink10

[PE2-classifier-uplink10] if-match customer-vlan-id 10

[PE2-classifier-uplink10] quit

# 定义流行为，重标记报文SVLAN ID为VLAN 100，流行为命名为“remark_to_100”。

[PE2] traffic behavior remark_to_100

[PE2-behavior-remark_to_100] remark service-vlan-id 100

[PE2-behavior-remark_to_100] quit

# 与以上配置类似，创建流分类“uplink20”匹配CVLAN ID为20的报文，并创建流行为“remark_to_200”，重标记报文的SVLAN ID为VLAN 200。

[PE2] traffic classifier uplink20

[PE2-classifier-uplink20] if-match customer-vlan-id 20

[PE2-classifier-uplink20] quit

[PE2] traffic behavior remark_to_200

[PE2-behavior-remark_to_200] remark service-vlan-id 200

[PE2-behavior-remark_to_200] quit

# 创建QoS策略，将流分类“uplink10”和流行为“remark_to_100”关联，将流分类“uplink20”和流行为“remark_to_200”关联，策略命名为“uplink”。

[PE2] qos policy uplink

[PE2-qospolicy-uplink] classifier uplink10 behavior remark_to_100

[PE2-qospolicy-uplink] classifier uplink20 behavior remark_to_200

[PE2-qospolicy-uplink] quit

(3)     配置下行策略

# 创建流分类规则，将来自运营商网络的VLAN 100的报文定义为“downlink100”类。

[PE2] traffic classifier downlink100

[PE2-classifier-downlink100] if-match service-vlan-id 100

[PE2-classifier-downlink100] quit

# 定义流行为，重标记报文CVLAN ID为VLAN 10，流行为命名为“remark_to_10”。

[PE2] traffic behavior remark_to_10

[PE2-behavior-remark_to_10] remark customer-vlan-id 10

[PE2-behavior-remark_to_10] quit

# 与以上配置类似，创建流分类“downlink200”匹配SVLAN ID为200的报文，并创建流行为“remark_to_20”，重标记报文的CVLAN ID为VLAN 20。

[PE2] traffic classifier downlink200

[PE2-classifier-downlink200] if-match service-vlan-id 200

[PE2-classifier-downlink200] quit

[PE2] traffic behavior remark_to_20

[PE2-behavior-remark_to_20] remark customer-vlan-id 20

[PE2-behavior-remark_to_20] quit

# 创建QoS策略，将流分类“downlink100”和流行为“remark_to_10”关联，将流分类“downlink200”和流行为“remark_to_20”关联，策略命名为“downlink”。

[PE2] qos policy downlink

[PE2-qospolicy-downlink] classifier downlink100 behavior remark_to_10

[PE2-qospolicy-downlink] classifier downlink200 behavior remark_to_20

[PE2-qospolicy-downlink] quit

(4)     配置下行端口GigabitEthernet1/0/1

# 配置端口为Hybrid端口，且允许VLAN 10、VLAN 20、VLAN 100、VLAN 200的报文携带Tag通过。

[PE2] interface gigabitethernet 1/0/1

[PE2-GigabitEthernet1/0/1] port link-type hybrid

[PE2-GigabitEthernet1/0/1] port hybrid vlan 10 20 100 200 tagged

[PE2-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 使能端口的基本QinQ功能。

[PE2-GigabitEthernet1/0/1] qinq enable

# 在端口GigabitEthernet1/0/1的接收方向应用“uplink”规则，发送方向应用“downlink”规则。

[PE2-GigabitEthernet1/0/1] qos apply policy uplink inbound

[PE2-GigabitEthernet1/0/1] qos apply policy downlink outbound

[PE2-GigabitEthernet1/0/1] quit

(5)     配置上行端口GigabitEthernet1/0/2

# 配置端口为Trunk端口，且允许VLAN 100和200的报文通过。

[PE2] interface gigabitethernet 1/0/2

[PE2-GigabitEthernet1/0/2] port link-type trunk

[PE2-GigabitEthernet1/0/2] port trunk permit vlan 100 200

[PE2-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[PE2-GigabitEthernet1/0/2] quit

3. 配置运营商网络其它设备

PE 1与PE 2之间的设备的关键配置如下：在连通PE 1与PE 2的端口上，都允许VLAN 100和200的报文携带VLAN Tag通过。

1.1.5  验证配置

(1)     查看端口的配置，以查看PE 1上GigabitEthernet1/0/1的配置为例。

[PE1] interface gigabitethernet 1/0/1

[PE1-GigabitEthernet1/0/1]display this

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 20 100 200 tagged

 qinq enable

 qos apply policy uplink inbound

 qos apply policy downlink outbound

#

return

(2)     查看策略是否成功下发到端口上，以查看PE 1上GigabitEthernet1/0/1应用的策略为例。

[PE1]display qos policy interface GigabitEthernet 1/0/1

 

  Interface: GigabitEthernet1/0/1

 

  Direction: Inbound

 

  Policy: uplink

   Classifier: uplink10

     Operator: AND

     Rule(s) : If-match customer-vlan-id 10

     Behavior: remark_to_100

      Marking:

        Remark Service VLAN ID 100

   Classifier: uplink20

     Operator: AND

     Rule(s) : If-match customer-vlan-id 20

     Behavior: remark_to_200

      Marking:

        Remark Service VLAN ID 200

 

  Direction: Outbound

 

  Policy: downlink

   Classifier: downlink100

     Operator: AND

     Rule(s) : If-match service-vlan-id 100

     Behavior: remark_to_10

      Marking:

        Remark Customer VLAN ID 10

   Classifier: downlink200

     Operator: AND

     Rule(s) : If-match service-vlan-id 200

     Behavior: remark_to_20

      Marking:

        Remark Customer VLAN ID 20

1.1.6  配置文件

 

(1)     PE 1

#

vlan 10

#

vlan 20

#

vlan 100

#

vlan 200

#

traffic classifier uplink10 operator and

 if-match customer-vlan-id 10

traffic classifier uplink20 operator and

 if-match customer-vlan-id 20

traffic classifier downlink100 operator and

 if-match service-vlan-id 100

traffic classifier downlink200 operator and

 if-match service-vlan-id 200

#

traffic behavior remark_to_100

 remark service-vlan-id 100

traffic behavior remark_to_200

 remark service-vlan-id 200

traffic behavior remark_to_10

 remark customer-vlan-id 10

traffic behavior remark_to_20

 remark customer-vlan-id 20

#

qos policy uplink

 classifier uplink10 behavior remark_to_100

 classifier uplink20 behavior remark_to_200

qos policy downlink

 classifier downlink100 behavior remark_to_10

 classifier downlink200 behavior remark_to_20

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 20 100 200 tagged

 qinq enable

 qos apply policy uplink inbound

 qos apply policy downlink outbound

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100 200

#

(2)     PE 2

#

vlan 10

#

vlan 20

#

vlan 100

#

vlan 200

#

traffic classifier uplink10 operator and

 if-match customer-vlan-id 10

traffic classifier uplink20 operator and

 if-match customer-vlan-id 20

traffic classifier downlink100 operator and

 if-match service-vlan-id 100

traffic classifier downlink200 operator and

 if-match service-vlan-id 200

#

traffic behavior remark_to_100

 remark service-vlan-id 100

traffic behavior remark_to_200

 remark service-vlan-id 200

traffic behavior remark_to_10

 remark customer-vlan-id 10

traffic behavior remark_to_20

 remark customer-vlan-id 20

#

qos policy uplink

 classifier uplink10 behavior remark_to_100

 classifier uplink20 behavior remark_to_200

qos policy downlink

 classifier downlink100 behavior remark_to_10

 classifier downlink200 behavior remark_to_20

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 20 100 200 tagged

 qinq enable

 qos apply policy uplink inbound

 qos apply policy downlink outbound

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100 200

#

1.2  2:2 VLAN映射典型配置举例

1.2.1  适用产品和版本

表2 配置适用的产品与软件版本关系

产品	软件版本
S10500系列以太网交换机	Release 1120系列，Release 1130系列，Release 1200系列
S5800&S5820X系列以太网交换机	Release 1808
S5830系列以太网交换机	Release 1115，Release 1118
S5500-EI系列以太网交换机	Release 2220

 

1.2.2  组网需求

如图3所示，Site 1和Site 2是同一家公司的两个分支机构，同属于VLAN 10，通过运营商A提供的QinQ服务实现VPN连接，外层VLAN Tag为VLAN 100。当该公司被另一家公司收购之后，需要Site 1和Site 2接入新公司的网络。新公司的VPN服务由运营商B提供，外层VLAN Tag为VLAN 200，总部中能够为Site 1和Site 2提供服务的业务VLAN为VLAN 30。

现要求通过配置2:2 VLAN映射功能，在不改变Site 1、Site 2和运营商网络VLAN的配置的情况下，使Site 1和Site 2能够访问总部VLAN 30的资源。

图3 2:2 VLAN映射典型配置组网示意图

 

1.2.3  配置注意事项

2:2 VLAN映射只需要在两个运营商的边缘设备中的其中一台上配置即可，本例中我们以在Switch C上配置为例进行介绍。

1.2.4  配置步骤

1. Switch A的配置

# 创建VLAN100。

<SwitchA> system-view

[SwitchA] vlan 100

[SwitchA-vlan100] quit

# 配置GigabitEthernet1/0/1端口的QinQ功能，为VLAN 10报文添加VLAN ID为100的外层VLAN Tag。

[SwitchA] interface gigabitethernet 1/0/1

[SwitchA-GigabitEthernet1/0/1] port access vlan 100

[SwitchA-GigabitEthernet1/0/1] qinq enable

[SwitchA-GigabitEthernet1/0/1] quit

# 配置上行端口GigabitEthernet1/0/2允许VLAN 100的报文通过。

[SwitchA] interface gigabitethernet 1/0/2

[SwitchA-GigabitEthernet1/0/2] port link-type trunk

[SwitchA-GigabitEthernet1/0/2] port trunk permit vlan 100

[SwitchA-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SwitchA-GigabitEthernet1/0/2] quit

2. Switch B的配置

# 创建VLAN100。

<SwitchB> system-view

[SwitchB] vlan 100

[SwitchB-vlan100] quit

# 配置GigabitEthernet1/0/3端口的QinQ功能，为VLAN 10报文添加VLAN ID为100的外层VLAN Tag。

[SwitchB] interface gigabitethernet 1/0/3

[SwitchB-GigabitEthernet1/0/3] port access vlan 100

[SwitchB-GigabitEthernet1/0/3] qinq enable

[SwitchB-GigabitEthernet1/0/3] quit

# 配置端口GigabitEthernet1/0/1允许VLAN 100的报文通过。

[SwitchB] interface gigabitethernet 1/0/1

[SwitchB-GigabitEthernet1/0/1] port link-type trunk

[SwitchB-GigabitEthernet1/0/1] port trunk permit vlan 100

[SwitchB-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[SwitchB-GigabitEthernet1/0/1] quit

# 配置端口GigabitEthernet1/0/2允许VLAN 100的报文通过。

[SwitchB] interface gigabitethernet 1/0/2

[SwitchB-GigabitEthernet1/0/2] port link-type trunk

[SwitchB-GigabitEthernet1/0/2] port trunk permit vlan 100

[SwitchB-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SwitchB-GigabitEthernet1/0/2] quit

3. Switch C的配置

(1)     创建映射后的SVLAN 200。

<SwitchC> system-view

[SwitchC] vlan 200

[SwitchC-vlan200] quit

(2)     对GigabitEthernet1/0/1端口接收的流量进行映射的配置

# 配置流分类，匹配内层VLAN ID为10，外层VLAN ID为100的报文。

[SwitchC] traffic classifier uplink_in

[SwitchC-classifier-uplink_in] if-match customer-vlan-id 10

[SwitchC-classifier-uplink_in] if-match service-vlan-id 100

[SwitchC-classifier-uplink_in] quit

# 配置流行为，将外层VLAN ID重标记为VLAN 200。

[SwitchC] traffic behavior uplink_in

[SwitchC-behavior-uplink_in] remark service-vlan-id 200

[SwitchC-behavior-uplink_in] quit

# 创建QoS策略，将以上流分类和流行为进行关联。

[SwitchC] qos policy uplink_in

[SwitchC-qospolicy-uplink_in] classifier uplink_in behavior uplink_in

[SwitchC-qospolicy-uplink_in] quit

# 配置端口GigabitEthernet1/0/1允许VLAN 200的报文通过。

[SwitchC] interface gigabitethernet 1/0/1

[SwitchC-GigabitEthernet1/0/1] port link-type trunk

[SwitchC-GigabitEthernet1/0/1] port trunk permit vlan 200

[SwitchC-GigabitEthernet1/0/1] undo port trunk permit vlan 1

# 在端口GigabitEthernet1/0/1的入方向应用QoS策略。

[SwitchC-GigabitEthernet1/0/1] qos apply policy uplink_in inbound

[SwitchC-GigabitEthernet1/0/1] quit

(3)     对GigabitEthernet1/0/2端口发送的流量进行映射的配置

# 配置流分类，匹配内层VLAN ID为10，外层VLAN ID为200的报文。

[SwitchC] traffic classifier uplink_out

[SwitchC-classifier-uplink_out] if-match customer-vlan-id 10

[SwitchC-classifier-uplink_out] if-match service-vlan-id 200

[SwitchC-classifier-uplink_out] quit

# 配置流行为，将内层VLAN ID重标记为VLAN 30。

[SwitchC] traffic behavior uplink_out

[SwitchC-behavior-uplink_out] remark customer-vlan-id 30

[SwitchC-behavior-uplink_out] quit

# 创建QoS策略，将以上流分类和流行为进行关联。

[SwitchC] qos policy uplink_out

[SwitchC-qospolicy-uplink_out] classifier uplink_out behavior uplink_out

[SwitchC-qospolicy-uplink_out] quit

# 配置端口GigabitEthernet1/0/2允许VLAN 200的报文通过。

[SwitchC] interface gigabitethernet 1/0/2

[SwitchC-GigabitEthernet1/0/2] port link-type trunk

[SwitchC-GigabitEthernet1/0/2] port trunk permit vlan 200

[SwitchC-GigabitEthernet1/0/2] undo port trunk permit vlan 1

# 在端口GigabitEthernet1/0/2的出方向应用QoS策略。

[SwitchC-GigabitEthernet1/0/2] qos apply policy uplink_out outbound

[SwitchC-GigabitEthernet1/0/2] quit

(4)     对GigabitEthernet1/0/1端口发送的流量进行映射的配置

# 配置流分类，匹配内层VLAN ID为30，外层VLAN ID为200的报文。

[SwitchC] traffic classifier downlink_out

[SwitchC-classifier-downlink_out] if-match customer-vlan-id 30

[SwitchC-classifier-downlink_out] if-match service-vlan-id 200

[SwitchC-classifier-downlink_out] quit

# 配置流行为，将内层VLAN ID重标记为VLAN 10，将外层VLAN ID重标记为VLAN 100。

[SwitchC] traffic behavior downlink_out

[SwitchC-behavior-downlink_out] remark customer-vlan-id 10

[SwitchC-behavior-downlink_out] remark service-vlan-id 100

[SwitchC-behavior-downlink_out] quit

# 创建QoS策略，将以上流分类和流行为进行关联。

[SwitchC] qos policy downlink_out

[SwitchC-qospolicy-downlink_out] classifier downlink_out behavior downlink_out

[SwitchC-qospolicy-downlink_out] quit

# 在端口GigabitEthernet1/0/1的出方向应用QoS策略。

[SwitchC] interface GigabitEthernet 1/0/1

[SwitchC-GigabitEthernet1/0/1] qos apply policy downlink_out outbound

[SwitchC-GigabitEthernet1/0/1] quit

4. Switch D的配置

# 创建VLAN 200。

<SwitchD> system-view

[SwitchD] vlan 200

[SwitchD-vlan200] quit

# 配置GigabitEthernet1/0/2的QinQ功能，为VLAN 30报文添加VLAN ID为200的外层VLAN Tag。

[SwitchD] interface gigabitethernet 1/0/2

[SwitchD-GigabitEthernet1/0/2] port access vlan 200

[SwitchD-GigabitEthernet1/0/2] qinq enable

[SwitchD-GigabitEthernet1/0/2] quit

# 配置端口GigabitEthernet1/0/1允许VLAN 200的报文通过。

[SwitchD] interface gigabitethernet 1/0/1

[SwitchD-GigabitEthernet1/0/1] port link-type trunk

[SwitchD-GigabitEthernet1/0/1] port trunk permit vlan 200

[SwitchD-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[SwitchD-GigabitEthernet1/0/1] quit

1.2.5  验证配置

(1)     查看端口的配置，以查看Switch C上端口GigabitEthernet 1/0/1的配置为例。

[SwitchC] interface gigabitethernet 1/0/1

[SwitchC-GigabitEthernet1/0/1]display this

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200

 qos apply policy uplink_in inbound

 qos apply policy downlink_out outbound

#

return

(2)     查看Switch C上端口GigabitEthernet 1/0/1应用的策略。

[SwitchC]display qos policy interface GigabitEthernet 1/0/1

Interface: GigabitEthernet1/0/1

 

  Direction: Inbound

 

  Policy: uplink_in

   Classifier: uplink_in

     Operator: AND

     Rule(s) : If-match customer-vlan-id 10

               If-match service-vlan-id 100

     Behavior: uplink_in

      Marking:

        Remark Service VLAN ID 200

 

  Direction: Outbound

 

  Policy: downlink_out

   Classifier: downlink_out

     Operator: AND

     Rule(s) : If-match customer-vlan-id 30

               If-match service-vlan-id 200

     Behavior: downlink_out

      Marking:

        Remark Customer VLAN ID 10

      Marking:

        Remark Service VLAN ID 100

(3)     查看Switch C上端口GigabitEthernet 1/0/2应用的策略。

[SwitchC]display qos policy interface GigabitEthernet 1/0/2

 

  Interface: GigabitEthernet1/0/2

 

  Direction: Outbound

 

  Policy: uplink_out

   Classifier: uplink_out

     Operator: AND

     Rule(s) : If-match customer-vlan-id 10

               If-match service-vlan-id 200

     Behavior: uplink_out

      Marking:

        Remark Customer VLAN ID 30

1.2.6  配置文件

 

·     Switch A

#

vlan 100

#

interface GigabitEthernet1/0/1

 port access vlan 100

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

·     Switch B

#

vlan 100

#

interface GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

 qinq enable

#

interface GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

#

interface GigabitEthernet1/0/3

 port access vlan 100

 qinq enable

·     Switch C

#

vlan 200

#

traffic classifier uplink_in operator and

 if-match customer-vlan-id 10

 if-match service-vlan-id 100

traffic classifier uplink_out operator and

 if-match customer-vlan-id 10

 if-match service-vlan-id 200

traffic classifier downlink_out operator and

 if-match customer-vlan-id 30

 if-match service-vlan-id 200

#

traffic behavior uplink_in

 remark service-vlan-id 200

traffic behavior uplink_out

 remark customer-vlan-id 30

traffic behavior downlink_out

 remark customer-vlan-id 10

 remark service-vlan-id 100

#

qos policy uplink_in

 classifier uplink_in behavior uplink_in

qos policy uplink_out

 classifier uplink_out behavior uplink_out

qos policy downlink_out

 classifier downlink_out behavior downlink_out

#

interface GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200

 qos apply policy uplink_in inbound

 qos apply policy downlink_out outbound

#

interface GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200

 qos apply policy uplink_out outbound 

·     Switch D

#

vlan 200

#

interface GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200 

#

interface GigabitEthernet1/0/2

 port access vlan 200

 qinq enable