• 产品与解决方案
  • 行业解决方案
  • 服务
  • 支持
  • 合作伙伴
  • 新华三人才研学中心
  • 关于我们

H3C S12500X-AF & S12500-X & S9800系列以太网交换机 典型配置举例-Release 27xx系列-6W100

目录

10-添加或修改报文的VLAN Tag典型配置举例

本章节下载 10-添加或修改报文的VLAN Tag典型配置举例  (683.65 KB)

docurl=/cn/Service/Document_Software/Document_Center/Home/Switches/00-Public/Configure/Typical_Configuration_Example/H3C_S12500X-AF_S12500-X_S9800_CE-6W100/201907/1212630_30005_0.htm

10-添加或修改报文的VLAN Tag典型配置举例

H3C S12500X-AF & S12500-X & S9800产品添加或修改报文的VLAN Tag配置举例

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

资料版本:6W100-20190628

 

Copyright © 2019 新华三技术有限公司 版权所有,保留一切权利。

非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。

除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。

本文档中的信息可能变动,恕不另行通知。



1  简介

本文档介绍了使用VLAN映射功能、QoS功能添加或修改报文的VLAN Tag的配置方式。

由于802.1Q定义的VLAN ID域只有12个比特,最多只能提供4094个VLAN,不能满足运营商网络对VLAN个数的需求。因此,用户网络报文在进入运营商网络时,运营商网络可以为用户网络报文添加一层VLAN Tag,使运营商网络可以利用一个VLAN为用户网络的多个VLAN的报文提供服务。

根据应用需求的不同,添加报文的VLAN Tag可以采用下面方法:

·     1:2 VLAN映射:如果运营商网络需要区分用户网络不同VLAN的报文,可以在运营商网络设备连接用户网络的端口上配置1:2 VLAN映射功能,使端口可以为用户网络不同VLAN的报文添加不同的外层VLAN Tag。

·     0:2 VLAN映射:为没有携带VLAN Tag的报文添加两层VLAN Tag。

·     2:3 VLAN映射:为携带两层VLAN Tag的报文添加外层VLAN Tag,使报文携带三层VLAN Tag。

·     QoS策略:如果运营商网络需要使用VLAN ID之外的匹配条件更灵活的匹配用户网络报文,或在为报文添加外层VLAN Tag时,需要同时配置其它流行为,例如重标记报文外层VLAN Tag的优先级,可以通过配置QoS策略实现。

上述添加报文VLAN Tag的方法,在满足需求的情况下,建议依次考虑1:2 VLAN映射和QoS策略。例如,需求是为用户网络不同业务类型的VLAN添加不同的外层VLAN Tag,使用1:2 VLAN映射和QoS策略均可以满足需求,建议采用1:2 VLAN映射,如果在为用户网络不同业务类型的VLAN添加不同的外层VLAN Tag的同时还需要重标记报文外层VLAN Tag的优先级,则需要使用QoS策略。

用户网络和运营商网络各自有不同的VLAN划分策略,因此用户网络和运营商网络互联,以及不同运营商网络之间互联时可能需要进行VLAN Tag的修改,从而在不修改原有配置的情况下实现互通。

根据应用需求的不同,修改报文的VLAN Tag可以采用下面方法:

·     1:1 VLAN映射:将来自某一特定VLAN的报文所携带的VLAN Tag替换为新的VLAN Tag。

·     N:1 VLAN映射:将来自多个VLAN的报文所携带的不同VLAN Tag替换为相同的VLAN Tag。

·     2:2 VLAN映射:将携带有两层VLAN Tag的报文的内、外层VLAN Tag都替换为新的VLAN Tag。

·     QoS策略:通过定义流分类的匹配规则,可以更灵活的匹配用户网络报文;通过使用流行为的remark service-vlan-id动作可以为匹配不同流分类的报文修改外层VLAN Tag。

上述修改报文VLAN Tag的方法,在满足需求的情况下,建议优先采用VLAN映射。

说明

端口配置添加或修改报文的VLAN Tag功能后,设备会将用户网络的MAC地址学习到SVLAN中。

 

2  配置前提

本文档中的配置均是在实验室环境下进行的配置和验证,配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置,为了保证配置效果,请确认现有配置和以下举例中的配置不冲突。

本文档假设您已了解VLAN映射特性、QoS Nest特性和QoS重标记特性。

3  1:2 VLAN映射配置举例

3.1  组网需求

图1所示,Customer A和Customer B各有两个分支机构需要通过运营商网络进行通信。Customer A和Customer B的网络中各有三种不同业务类型的数据,这三种业务类型的数据需要通过运营商网络提供的三个VLAN分开传输,以便运营商网络针对不同业务类型的数据配置不同的传输策略。

现要求通过配置1:2 VLAN映射功能实现:

·     用户不同业务类型的数据使用不同的外层VLAN Tag在运营商网络中传输;

·     外层VLAN Tag的添加策略如表1所示,传输效果如图2所示;

·     添加外层VLAN Tag时,设备复制内层VLAN Tag的802.1p优先级作为外层VLAN Tag的802.1p优先级。

图1 1:2 VLAN映射组网图

 

 

表1 外层VLAN Tag添加策略

用户的业务类型

用户网络VLAN

运营商网络VLAN

Customer A

Video

31 to 40

1003

Voice

21 to 30

1002

Data

10 to 20

1001

Customer B

Storage

36 to 40

2003

Voice

26 to 35

2002

Data

15 to 25

2001

 

图2 用户数据的传输情况

 

 

3.2  配置思路

·     请在PE A和PE B连接用户网络的端口上配置1:2 VLAN映射功能,为用户不同业务类型的数据报文添加不同的外层VLAN Tag。

·     为了保证用户网络接收的数据中不会包含运营商网络的VLAN信息,需要将PE A和PE B连接用户网络的端口的链路类型配置为Hybrid,并允许运营商封装的外层VLAN的报文不带VLAN Tag通过。

·     为了使设备在添加外层VLAN Tag时复制内层VLAN Tag的802.1p优先级做为外层VLAN Tag的802.1p优先级,配置端口信任报文的802.1p优先级。

3.3  使用版本

本举例进行配置和验证所使用的版本,如表2所示。

表2 产品与软件版本适配关系

产品

软件版本

S12500X-AF系列交换机

S12500X-CMW710-R2712

S12500-X系列交换机

S12500X-CMW710-R2712

S9800系列交换机

S9800-CMW710-R2712

 

3.4  配置注意事项

·     在携带两层VLAN Tag的报文的传输路径上,配置各端口的MTU值至少为1504字节。

·     在PE A和PE B的上行端口以及运营商网络的中间设备上,需要保证1:2 VLAN映射封装的外层VLAN Tag不被修改或移除。

·     缺省情况下,S12500X-AF系列、S12500-X系列、S9800系列交换机的接口处于ADM(Administratively Down)状态,请根据实际需要在对应接口视图下使用undo shutdown命令开启接口。

3.5  配置步骤

3.5.1  PE A的配置

# 创建CVLAN 10~40。

<PE_A> system-view

[PE_A] vlan 10 to 40

# 创建SVLAN 1001~1003和SVLAN 2001~2003。

[PE_A] vlan 1001 to 1003

[PE_A] vlan 2001 to 2003

(1)     Ten-GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口。

[PE_A] interface ten-gigabitethernet 1/0/1

[PE_A-Ten-GigabitEthernet1/0/1] port link-type hybrid

# 配置端口允许CVLAN 10~40的报文携带VLAN Tag通过。

[PE_A-Ten-GigabitEthernet1/0/1] port hybrid vlan 10 to 40 tagged

# 配置端口允许SVLAN 1001~1003的报文通过,并且在发送时去掉外层Tag。

[PE_A-Ten-GigabitEthernet1/0/1] port hybrid vlan 1001 to 1003 untagged

# 配置端口取消允许VLAN 1通过。

[PE_A-Ten-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 配置1:2 VLAN映射功能,为用户网络VLAN 10~20的报文封装VLAN 1001的外层VLAN Tag,为用户网络VLAN 21~30的报文封装VLAN 1002的外层VLAN Tag,为用户网络VLAN 31~40的报文封装VLAN 1003的外层VLAN Tag。

[PE_A-Ten-GigabitEthernet1/0/1] vlan mapping nest range 10 to 20 nested-vlan 1001

[PE_A-Ten-GigabitEthernet1/0/1] vlan mapping nest range 21 to 30 nested-vlan 1002

[PE_A-Ten-GigabitEthernet1/0/1] vlan mapping nest range 31 to 40 nested-vlan 1003

# 配置端口信任报文的802.1p优先级。

[PE_A-Ten-GigabitEthernet1/0/1] qos trust dot1p

[PE_A-Ten-GigabitEthernet1/0/1] quit

(2)     Ten-GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口。

[PE_A] interface ten-gigabitethernet 1/0/2

[PE_A-Ten-GigabitEthernet1/0/2] port link-type hybrid

# 配置端口允许CVLAN 15~40的报文携带VLAN Tag通过。

[PE_A-Ten-GigabitEthernet1/0/2] port hybrid vlan 15 to 40 tagged

# 配置端口允许SVLAN 2001~2003的报文通过,并且在发送时去掉外层Tag。

[PE_A-Ten-GigabitEthernet1/0/2] port hybrid vlan 2001 to 2003 untagged

# 配置端口取消允许VLAN 1通过。

[PE_A-Ten-GigabitEthernet1/0/2] undo port hybrid vlan 1

# 配置1:2 VLAN映射功能,为用户网络VLAN 15~25的报文封装VLAN 2001的外层VLAN Tag,为用户网络VLAN 26~35的报文封装VLAN 2002的外层VLAN Tag,为用户网络VLAN 36~40的报文封装VLAN 2003的外层VLAN Tag。

[PE_A-Ten-GigabitEthernet1/0/2] vlan mapping nest range 15 to 25 nested-vlan 2001

[PE_A-Ten-GigabitEthernet1/0/2] vlan mapping nest range 26 to 35 nested-vlan 2002

[PE_A-Ten-GigabitEthernet1/0/2] vlan mapping nest range 36 to 40 nested-vlan 2003

# 配置端口信任报文的802.1p优先级。

[PE_A-Ten-GigabitEthernet1/0/2] qos trust dot1p

[PE_A-Ten-GigabitEthernet1/0/2] quit

(3)     Ten-GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口,且允许VLAN 1001~1003和VLAN 2001~2003的报文通过,取消允许VLAN 1通过。

[PE_A] interface ten-gigabitethernet 1/0/3

[PE_A-Ten-GigabitEthernet1/0/3] port link-type trunk

[PE_A-Ten-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_A-Ten-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003

[PE_A-Ten-GigabitEthernet1/0/3] quit

3.5.2  PE B的配置

# 创建CVLAN 10~40。

<PE_B> system-view

[PE_B] vlan 10 to 40

# 创建SVLAN 1001~1003、SVLAN 2001~2003。

[PE_B] vlan 1001 to 1003

[PE_B] vlan 2001 to 2003

(1)     Ten-GigabitEthernet1/0/1端口的配置

# 配置端口为Hybrid端口。

[PE_B] interface ten-gigabitethernet 1/0/1

[PE_B-Ten-GigabitEthernet1/0/1] port link-type hybrid

# 配置端口允许CVLAN 15~40的报文携带VLAN Tag通过。

[PE_B-Ten-GigabitEthernet1/0/1] port hybrid vlan 15 to 40 tagged

# 配置端口允许SVLAN 2001~2003的报文通过,并且在发送时去掉外层Tag。

[PE_B-Ten-GigabitEthernet1/0/1] port hybrid vlan 2001 to 2003 untagged

# 配置端口取消允许VLAN 1通过。

[PE_B-Ten-GigabitEthernet1/0/1] undo port hybrid vlan 1

# 配置1:2 VLAN映射功能,为用户网络VLAN 15~25的报文封装VLAN 2001的外层VLAN Tag,为用户网络VLAN 26~35的报文封装VLAN 2002的外层VLAN Tag,为用户网络VLAN 36~40的报文封装VLAN 2003的外层VLAN Tag。

[PE_B-Ten-GigabitEthernet1/0/1] vlan mapping nest range 15 to 25 nested-vlan 2001

[PE_B-Ten-GigabitEthernet1/0/1] vlan mapping nest range 26 to 35 nested-vlan 2002

[PE_B-Ten-GigabitEthernet1/0/1] vlan mapping nest range 36 to 40 nested-vlan 2003

# 配置端口信任报文的802.1p优先级。

[PE_B-Ten-GigabitEthernet1/0/1] qos trust dot1p

[PE_B-Ten-GigabitEthernet1/0/1] quit

(2)     Ten-GigabitEthernet1/0/2端口的配置

# 配置端口为Hybrid端口。

[PE_B] interface ten-gigabitethernet 1/0/2

[PE_B-Ten-GigabitEthernet1/0/2] port link-type hybrid

# 配置端口允许CVLAN 10~40的报文携带VLAN Tag通过。

[PE_B-Ten-GigabitEthernet1/0/2] port hybrid vlan 10 to 40 tagged

# 配置端口允许SVLAN 1001~1003的报文通过,并且在发送时去掉外层Tag。

[PE_B-Ten-GigabitEthernet1/0/2] port hybrid vlan 1001 to 1003 untagged

# 配置端口取消允许VLAN 1通过。

[PE_B-Ten-GigabitEthernet1/0/2] undo port hybrid vlan 1

# 配置1:2 VLAN映射功能,为用户网络VLAN 10~20的报文封装VLAN 1001的外层VLAN Tag,为用户网络VLAN 21~30的报文封装VLAN 1002的外层VLAN Tag,为用户网络VLAN 31~40的报文封装VLAN 1003的外层VLAN Tag。

[PE_B-Ten-GigabitEthernet1/0/2] vlan mapping nest range 10 to 20 nested-vlan 1001

[PE_B-Ten-GigabitEthernet1/0/2] vlan mapping nest range 21 to 30 nested-vlan 1002

[PE_B-Ten-GigabitEthernet1/0/2] vlan mapping nest range 31 to 40 nested-vlan 1003

# 配置端口信任报文的802.1p优先级。

[PE_B-Ten-GigabitEthernet1/0/2] qos trust dot1p

[PE_B-Ten-GigabitEthernet1/0/2] quit

(3)     Ten-GigabitEthernet1/0/3端口的配置

# 配置端口为Trunk端口,且允许VLAN 1001~1003和VLAN 2001~2003的报文通过,取消允许VLAN 1通过。

[PE_B] interface ten-gigabitethernet 1/0/3

[PE_B-Ten-GigabitEthernet1/0/3] port link-type trunk

[PE_B-Ten-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_B-Ten-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003

[PE_B-Ten-GigabitEthernet1/0/3] quit

3.5.3  公共网络设备的配置

配置运营商网络中PE A到PE B之间的路径上的设备端口都允许VLAN 1001~1003和VLAN 2001~2003的报文携带VLAN Tag通过,并配置各端口的MTU值至少为1504字节。

3.6  验证配置

(1)     查看PE A上和PE B上VLAN映射的配置信息。

[PE_A] display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  10-20         N/A           1001                     10-20

  21-30         N/A           1002                     21-30

  31-40         N/A           1003                     31-40

Interface Ten-GigabitEthernet1/0/2:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  15-25         N/A           2001                     15-25

  26-35         N/A           2002                     26-35

  36-40         N/A           2003                     36-40

[PE_B] display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  15-25         N/A           2001                     15-25

  26-35         N/A           2002                     26-35

  36-40         N/A           2003                     36-40

Interface Ten-GigabitEthernet1/0/2:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  10-20         N/A           1001                     10-20

  21-30         N/A           1002                     21-30

  31-40         N/A           1003                     31-40

显示信息表明1:2 VLAN映射的配置正确。

(2)     Customer A中跨越运营商网络的两个分支机构中处于同一CVLAN的两台PC互相进行Ping操作,可以Ping通,且这两台PC能够互相学习到对方的MAC地址。可见CVLAN信息能够跨越运营商网络进行透明传输。Customer B中的情况同理。

(3)     Customer A和Customer B中处于同一CVLAN(例如VLAN 30)中的两台PC互相进行Ping操作。在其中一台PC上查看ARP表项,发现它没有学到对方的MAC地址。可见不同公司中同一CVLAN的流量被二层隔离。

3.7  配置文件

·     PE A

#

vlan 10 to 40

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

interface Ten-GigabitEthernet1/0/1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 to 40 tagged

 port hybrid vlan 1001 to 1003 untagged

 vlan mapping nest range 10 to 20 nested-vlan 1001

 vlan mapping nest range 21 to 30 nested-vlan 1002

 vlan mapping nest range 31 to 40 nested-vlan 1003

#

interface Ten-GigabitEthernet1/0/2

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 to 40 tagged

 port hybrid vlan 2001 to 2003 untagged

 vlan mapping nest range 15 to 25 nested-vlan 2001

 vlan mapping nest range 26 to 35 nested-vlan 2002

 vlan mapping nest range 36 to 40 nested-vlan 2003

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

·     PE B

#

vlan 10 to 40

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

interface Ten-GigabitEthernet1/0/1

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 15 to 40 tagged

 port hybrid vlan 2001 to 2003 untagged

 vlan mapping nest range 15 to 25 nested-vlan 2001

 vlan mapping nest range 26 to 35 nested-vlan 2002

 vlan mapping nest range 36 to 40 nested-vlan 2003

#

interface Ten-GigabitEthernet1/0/2

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 to 40 tagged

 port hybrid vlan 1001 to 1003 untagged

 vlan mapping nest range 10 to 20 nested-vlan 1001

 vlan mapping nest range 21 to 30 nested-vlan 1002

 vlan mapping nest range 31 to 40 nested-vlan 1003

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

4  使用QoS策略添加外层VLAN Tag配置举例

4.1  组网需求

图3所示,Customer A和Customer B各有两个分支机构需要通过运营商网络进行通信。Customer A和Customer B的网络中各有三种不同业务类型的数据,这三种业务类型的数据需要通过运营商网络提供的三个VLAN分开传输,以便运营商网络针对不同业务类型的数据配置不同的传输策略。

现要求通过在运营商网络中配置QoS策略使用户不同业务类型的数据使用不同的外层VLAN Tag在运营商网络中传输。外层VLAN Tag的添加策略如表3所示,传输效果如图4所示。

图3 QoS Nest配置组网图

 

表3 外层VLAN Tag添加策略

用户的业务类型

用户网络VLAN

运营商网络VLAN

Customer A:

Video

3140

1003

Voice

2130

1002

Data

1020

1001

Customer B:

Storage

3640

2003

Voice

2635

2002

Data

1525

2001

 

图4 用户数据的传输情况

 

4.2  配置思路

·     请在PE A和PE B连接用户网络的端口上配置QoS策略为用户不同业务类型的数据报文添加不同的外层VLAN Tag。

·     为了保证用户网络接收的数据中不会包含运营商网络的VLAN信息,需要将PE A和PE B连接用户网络的端口的链路类型配置为Hybrid,并允许运营商封装的外层VLAN的报文不带VLAN Tag通过。

·     本举例中通过配置QoS策略为用户不同业务类型的数据报文添加不同的外层VLAN Tag,您也可以使用1:2 VLAN映射功能为用户不同业务类型的数据报文添加不同的外层VLAN Tag。

4.3  使用版本

本举例进行配置和验证所使用的版本,如3.3  表2所示。

表4 产品与软件版本适配关系

产品

软件版本

S12500X-AF系列交换机

S12500X-CMW710-R2712

S12500-X系列交换机

S12500X-CMW710-R2712

S9800系列交换机

S9800-CMW710-R2712

 

4.4  配置注意事项

·     缺省情况下,端口为报文封装外层VLAN Tag时,如果端口信任报文的802.1p优先级,会将内层VLAN Tag的802.1p优先级复制到外层VLAN Tag的802.1p优先级,如果端口不信任报文的802.1p优先级或入报文没有携带VLAN Tag,会将接收报文的端口的端口优先级作为外层VLAN Tag的802.1p优先级。

·     需要保证报文传输路径上,报文的外层VLAN Tag不被修改或移除。

·     为报文加上外层VLAN Tag后,内层VLAN Tag将被当作报文的数据部分进行传输,报文长度将增加4个字节。因此建议用户适当增加报文传输路径上各接口的MTU值(至少为1504字节)。

·     缺省情况下,S12500X-AF系列、S12500-X系列、S9800系列交换机的接口处于ADM(Administratively Down)状态,请根据实际需要在对应接口视图下使用undo shutdown命令开启接口。

4.5  配置步骤

4.5.1  Provider A的配置

# 创建为用户数据分配的VLAN,即VLAN 1001~VLAN 1003、VLAN 2001~VLAN 2003。

<PE_A> system-view

[PE_A] vlan 1001 to 1003

[PE_A] vlan 2001 to 2003

(1)     配置端口Ten-GigabitEthernet1/0/1

# 配置端口为Hybrid端口,允许VLAN 1001~VLAN 1003的报文通过,并且在发送时去掉外层Tag,取消允许VLAN 1通过。

[PE_A] interface ten-gigabitethernet 1/0/1

[PE_A-Ten-GigabitEthernet1/0/1] port link-type hybrid

[PE_A-Ten-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_A-Ten-GigabitEthernet1/0/1] port hybrid vlan 1001 to 1003 untagged

# 配置端口信任报文的802.1p优先级。

[PE_A-Ten-GigabitEthernet1/0/1] qos trust dot1p

[PE_A-Ten-GigabitEthernet1/0/1] quit

(2)     配置端口Ten-GigabitEthernet1/0/2

# 配置端口为Hybrid端口,允许VLAN 2001~VLAN 2003的报文通过,并且在发送时去掉外层Tag,取消允许VLAN 1通过。

[PE_A] interface ten-gigabitethernet 1/0/2

[PE_A-Ten-GigabitEthernet1/0/2] port link-type hybrid

[PE_A-Ten-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_A-Ten-GigabitEthernet1/0/2] port hybrid vlan 2001 to 2003 untagged

# 配置端口信任报文的802.1p优先级。

[PE_A-Ten-GigabitEthernet1/0/2] qos trust dot1p

[PE_A-Ten-GigabitEthernet1/0/2] quit

(3)     配置端口Ten-GigabitEthernet1/0/3

# 配置端口为Trunk端口,且允许VLAN 1001~VLAN 1003和VLAN 2001~VLAN 2003的报文通过,取消允许VLAN 1通过。

[PE_A] interface ten-gigabitethernet 1/0/3

[PE_A-Ten-GigabitEthernet1/0/3] port link-type trunk

[PE_A-Ten-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_A-Ten-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003

[PE_A-Ten-GigabitEthernet1/0/3] quit

(4)     配置QoS策略

# 为Customer A创建一个流分类,匹配规则为用户网络中普通业务数据对应的VLAN。

[PE_A] traffic classifier customer_A_pc

[PE_A-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_A-classifier-customer_A_pc] quit

# 按同样方法创建匹配Customer A网络中语音数据和视频数据的流分类。

[PE_A] traffic classifier customer_A_voice

[PE_A-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_A-classifier-customer_A_voice] quit

[PE_A] traffic classifier customer_A_video

[PE_A-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_A-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为,动作为封装相应的外层VLAN Tag。

[PE_A] traffic behavior customer_A_pc

[PE_A-behavior-customer_A_pc] nest top-most vlan 1001

[PE_A-behavior-customer_A_pc] quit

[PE_A] traffic behavior customer_A_voice

[PE_A-behavior-customer_A_voice] nest top-most vlan 1002

[PE_A-behavior-customer_A_voice] quit

[PE_A] traffic behavior customer_A_video

[PE_A-behavior-customer_A_video] nest top-most vlan 1003

[PE_A-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略,将匹配用户业务数据的流分类与封装相应外层VLAN Tag的流行为进行一一关联。

[PE_A] qos policy customer_A

[PE_A-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_A-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_A-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_A-qospolicy-customer_A] quit

# 将上面创建的策略应用到Ten-GigabitEthernet 1/0/1端口的入方向。

[PE_A] interface ten-gigabitethernet 1/0/1

[PE_A-Ten-GigabitEthernet1/0/1] qos apply policy customer_A inbound

[PE_A-Ten-GigabitEthernet1/0/1] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_A] traffic classifier customer_B_pc

[PE_A-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_A-classifier-customer_B_pc] quit

[PE_A] traffic classifier customer_B_voice

[PE_A-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_A-classifier-customer_B_voice] quit

[PE_A] traffic classifier customer_B_storage

[PE_A-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_A-classifier-customer_B_storage] quit

# 为Customer B的三种业务数据创建三个流行为,动作为封装相应的外层VLAN Tag。

[PE_A] traffic behavior customer_B_pc

[PE_A-behavior-customer_B_pc] nest top-most vlan 2001

[PE_A-behavior-customer_B_pc] quit

[PE_A] traffic behavior customer_B_voice

[PE_A-behavior-customer_B_voice] nest top-most vlan 2002

[PE_A-behavior-customer_B_voice] quit

[PE_A] traffic behavior customer_B_storage

[PE_A-behavior-customer_B_storage] nest top-most vlan 2003

[PE_A-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略,将匹配用户业务数据的流分类与封装相应外层VLAN Tag的流行为进行一一关联。

[PE_A] qos policy customer_B

[PE_A-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_A-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_A-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_A-qospolicy-customer_B] quit

# 将上面创建的策略应用到Ten-GigabitEthernet 1/0/2端口的入方向。

[PE_A] interface ten-gigabitethernet 1/0/2

[PE_A-Ten-GigabitEthernet1/0/2] qos apply policy customer_B inbound

[PE_A-Ten-GigabitEthernet1/0/2] quit

4.5.2  Provider B的配置

# 创建为用户数据分配的VLAN,即VLAN 1001~VLAN 1003、VLAN 2001~VLAN 2003。

<PE_B> system-view

[PE_B] vlan 1001 to 1003

[PE_B] vlan 2001 to 2003

(1)     配置端口Ten-GigabitEthernet1/0/1

# 配置端口为Hybrid端口,允许VLAN 2001~VLAN 2003的报文通过,并且在发送时去掉外层Tag,取消允许VLAN 1通过。

[PE_B] interface ten-gigabitethernet 1/0/1

[PE_B-Ten-GigabitEthernet1/0/1] port link-type hybrid

[PE_B-Ten-GigabitEthernet1/0/1] undo port hybrid vlan 1

[PE_B-Ten-GigabitEthernet1/0/1] port hybrid vlan 2001 to 2003 untagged

# 配置端口信任报文的802.1p优先级。

[PE_B-Ten-GigabitEthernet1/0/1] qos trust dot1p

[PE_B-Ten-GigabitEthernet1/0/1] quit

(2)     配置端口Ten-GigabitEthernet1/0/2

# 配置端口为Hybrid端口,允许VLAN 1001~VLAN 1003的报文通过,并且在发送时去掉外层Tag,取消允许VLAN 1通过。

[PE_B] interface ten-gigabitethernet 1/0/2

[PE_B-Ten-GigabitEthernet1/0/2] port link-type hybrid

[PE_B-Ten-GigabitEthernet1/0/2] undo port hybrid vlan 1

[PE_B-Ten-GigabitEthernet1/0/2] port hybrid vlan 1001 to 1003 untagged

# 配置端口信任报文的802.1p优先级。

[PE_B-Ten-GigabitEthernet1/0/2] qos trust dot1p

[PE_B-Ten-GigabitEthernet1/0/2] quit

(3)     配置端口Ten-GigabitEthernet1/0/3

# 配置端口为Trunk端口,且允许VLAN 1001~VLAN 1003和VLAN 2001~VLAN 2003的报文通过,取消允许VLAN 1通过。

[PE_B] interface ten-gigabitethernet 1/0/3

[PE_B-Ten-GigabitEthernet1/0/3] port link-type trunk

[PE_B-Ten-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[PE_B-Ten-GigabitEthernet1/0/3] port trunk permit vlan 1001 to 1003 2001 to 2003

[PE_B-Ten-GigabitEthernet1/0/3] quit

(4)     配置QoS策略

# 按PE A设备的配置方法,为Customer A的业务数据配置流分类。

[PE_B] traffic classifier customer_A_pc

[PE_B-classifier-customer_A_pc] if-match customer-vlan-id 10 to 20

[PE_B-classifier-customer_A_pc] quit

[PE_B] traffic classifier customer_A_voice

[PE_B-classifier-customer_A_voice] if-match customer-vlan-id 21 to 30

[PE_B-classifier-customer_A_voice] quit

[PE_B] traffic classifier customer_A_video

[PE_B-classifier-customer_A_video] if-match customer-vlan-id 31 to 40

[PE_B-classifier-customer_A_video] quit

# 为Customer A的三种业务数据创建三个流行为,动作为封装相应的外层VLAN Tag。

[PE_B] traffic behavior customer_A_pc

[PE_B-behavior-customer_A_pc] nest top-most vlan 1001

[PE_B-behavior-customer_A_pc] quit

[PE_B] traffic behavior customer_A_voice

[PE_B-behavior-customer_A_voice] nest top-most vlan 1002

[PE_B-behavior-customer_A_voice] quit

[PE_B] traffic behavior customer_A_video

[PE_B-behavior-customer_A_video] nest top-most vlan 1003

[PE_B-behavior-customer_A_video] quit

# 创建用于Customer A的QoS策略,将匹配用户业务数据的流分类与封装相应外层VLAN Tag的流行为进行一一关联。

[PE_B] qos policy customer_A

[PE_B-qospolicy-customer_A] classifier customer_A_pc behavior customer_A_pc

[PE_B-qospolicy-customer_A] classifier customer_A_voice behavior customer_A_voice

[PE_B-qospolicy-customer_A] classifier customer_A_video behavior customer_A_video

[PE_B-qospolicy-customer_A] quit

# 将上面创建的策略应用到Ten-GigabitEthernet 1/0/2端口的入方向。

[PE_B] interface ten-gigabitethernet 1/0/2

[PE_B-Ten-GigabitEthernet1/0/2] qos apply policy customer_A inbound

[PE_B-Ten-GigabitEthernet1/0/2] quit

# 使用类似方法为Customer B的三种业务数据创建流分类。

[PE_B] traffic classifier customer_B_pc

[PE_B-classifier-customer_B_pc] if-match customer-vlan-id 15 to 25

[PE_B-classifier-customer_B_pc] quit

[PE_B] traffic classifier customer_B_voice

[PE_B-classifier-customer_B_voice] if-match customer-vlan-id 26 to 35

[PE_B-classifier-customer_B_voice] quit

[PE_B] traffic classifier customer_B_storage

[PE_B-classifier-customer_B_storage] if-match customer-vlan-id 36 to 40

[PE_B-classifier-customer_B_storage] quit

# 为Customer B的三种业务数据创建三个流行为,动作为封装相应的外层VLAN Tag。

[PE_B] traffic behavior customer_B_pc

[PE_B-behavior-customer_B_pc] nest top-most vlan 2001

[PE_B-behavior-customer_B_pc] quit

[PE_B] traffic behavior customer_B_voice

[PE_B-behavior-customer_B_voice] nest top-most vlan 2002

[PE_B-behavior-customer_B_voice] quit

[PE_B] traffic behavior customer_B_storage

[PE_B-behavior-customer_B_storage] nest top-most vlan 2003

[PE_B-behavior-customer_B_storage] quit

# 创建用于Customer B的QoS策略,将匹配用户业务数据的流分类与封装相应外层VLAN Tag的流行为进行一一关联。

[PE_B] qos policy customer_B

[PE_B-qospolicy-customer_B] classifier customer_B_pc behavior customer_B_pc

[PE_B-qospolicy-customer_B] classifier customer_B_voice behavior customer_B_voice

[PE_B-qospolicy-customer_B] classifier customer_B_storage behavior customer_B_storage

[PE_B-qospolicy-customer_B] quit

# 将上面创建的策略应用到Ten-GigabitEthernet 1/0/1端口的入方向。

[PE_B] interface ten-gigabitethernet 1/0/1

[PE_B-Ten-GigabitEthernet1/0/1] qos apply policy customer_B inbound

[PE_B-Ten-GigabitEthernet1/0/1] quit

4.5.3  运营商网络设备的配置

配置运营商网络中PE A到PE B之间的路径上的设备端口都允许VLAN 1001~VLAN 1003和VLAN 2001~VLAN 2003的报文携带VLAN Tag通过,并配置各端口的MTU值为至少1504字节。

4.6  验证配置

(1)     使用display this命令查看端口的配置,例如:

# 查看PE A上端口Ten-GigabitEthernet1/0/1的配置。

[PE_A] interface ten-gigabitethernet 1/0/1

[PE_A-Ten-GigabitEthernet1/0/1] display this

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qos apply policy customer_A inbound

#

Return

[PE_A-Ten-GigabitEthernet1/0/1] quit

(2)     查看配置的策略是否正确下发到端口,例如:

# 查看PE A上端口Ten-GigabitEthernet 1/0/1上应用的策略。

[PE_A] display qos policy interface ten-gigabitethernet 1/0/1

Interface: Ten-GigabitEthernet1/0/1

  Direction: Inbound

  Policy: customer_A

   Classifier: customer_A_pc

     Operator: AND

     Rule(s) :

      If-match customer-vlan-id 10 to 20

     Behavior: customer_A_pc

      Nesting:

        Nest top-most vlan-id 1001

   Classifier: customer_A_voice

     Operator: AND

     Rule(s) :

      If-match customer-vlan-id 21 to 30

     Behavior: customer_A_voice

      Nesting:

        Nest top-most vlan-id 1002

   Classifier: customer_A_video

     Operator: AND

     Rule(s) :

      If-match customer-vlan-id 31 to 40

     Behavior: customer_A_video

      Nesting:

        Nest top-most vlan-id 1003

4.7  配置文件

·     PE A

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

#

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

#

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

#

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

#

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

#

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40

#

traffic behavior customer_A_pc

 nest top-most vlan 1001

#

traffic behavior customer_A_voice

 nest top-most vlan 1002

#

traffic behavior customer_A_video

 nest top-most vlan 1003

 #

traffic behavior customer_B_pc

 nest top-most vlan 2001

 #

traffic behavior customer_B_voice

 nest top-most vlan 2002

#

traffic behavior customer_B_storage

 nest top-most vlan 2003

 #

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

#

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qos apply policy customer_A inbound

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qos apply policy customer_B inbound

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

·     ProviderB的配置

#

vlan 1001 to 1003

#

vlan 2001 to 2003

#

traffic classifier customer_A_pc operator and

 if-match customer-vlan-id 10 to 20

#

traffic classifier customer_A_voice operator and

 if-match customer-vlan-id 21 to 30

#

traffic classifier customer_A_video operator and

 if-match customer-vlan-id 31 to 40

#

traffic classifier customer_B_pc operator and

 if-match customer-vlan-id 15 to 25

#

traffic classifier customer_B_voice operator and

 if-match customer-vlan-id 26 to 35

#

traffic classifier customer_B_storage operator and

 if-match customer-vlan-id 36 to 40

#

traffic behavior customer_A_pc

 nest top-most vlan 1001

#

traffic behavior customer_A_voice

 nest top-most vlan 1002

#

traffic behavior customer_A_video

 nest top-most vlan 1003

#

traffic behavior customer_B_pc

 nest top-most vlan 2001

#

traffic behavior customer_B_voice

 nest top-most vlan 2002

#

traffic behavior customer_B_storage

 nest top-most vlan 2003

#

qos policy customer_A

 classifier customer_A_pc behavior customer_A_pc

 classifier customer_A_voice behavior customer_A_voice

 classifier customer_A_video behavior customer_A_video

#

qos policy customer_B

 classifier customer_B_pc behavior customer_B_pc

 classifier customer_B_voice behavior customer_B_voice

 classifier customer_B_storage behavior customer_B_storage

#

interface Ten-GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 2001 to 2003 untagged

 qos apply policy customer_B inbound

#

interface Ten-GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 1001 to 1003 untagged

 qos apply policy customer_A inbound

#

interface Ten-GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 1001 to 1003 2001 to 2003

#

 

5  1:1和N:1 VLAN映射配置举例

5.1  组网需求

图5所示:在某小区,服务提供商为每个家庭都提供了PC、VoD和VoIP这三种数据服务,每个家庭都通过各自的家庭网关接入楼道交换机。每个家庭网关都分别将PC、VoD和VoIP业务依次划分到VLAN 1~3。

现要求通过配置1:1和N:1 VLAN映射功能实现以下功能:

·     在楼道交换机上,为了隔离不同家庭的同类业务,将每个家庭的每种业务都划分到不同的VLAN;

·     在园区交换机上,为了节省VLAN资源,将所有家庭的同类业务都划分到相同的VLAN,即分别将PC、VoD和VoIP业务依次划分到VLAN 501~503。

图5 1:1和N:1 VLAN映射组网示意图

 

5.2  使用版本

本举例进行配置和验证所使用的版本,如3.3  表2所示。

表5 产品与软件版本适配关系

产品

软件版本

S12500X-AF系列交换机

S12500X-CMW710-R2712

S12500-X系列交换机

S12500X-CMW710-R2712

S9800系列交换机

S9800-CMW710-R2712

 

5.3  配置注意事项

缺省情况下,S12500X-AF系列、S12500-X系列、S9800系列交换机的接口处于ADM(Administratively Down)状态,请根据实际需要在对应接口视图下使用undo shutdown命令开启接口。

5.4  配置步骤

5.4.1  Switch A的配置

# 创建原始VLAN——VLAN 2~ 3(原始VLAN 1设备缺省已创建)。

<SwitchA> system-view

[SwitchA] vlan 2 to 3

# 创建转换后VLAN——VLAN 101102VLAN 201202VLAN 301302

[SwitchA] vlan 101 to 102

[SwitchA] vlan 201 to 202

[SwitchA] vlan 301 to 302

# 配置下行端口Ten-GigabitEthernet1/0/1为Trunk端口且允许原始VLAN及转换后VLAN通过。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchA-Ten-GigabitEthernet1/0/1] port trunk permit vlan 1 2 3 101 201 301

# 在端口Ten-GigabitEthernet1/0/1上配置1:1 VLAN映射功能,将VLAN 1的Tag替换为VLAN 101的Tag,将VLAN 2的Tag替换为VLAN 201的Tag,将VLAN 3的Tag替换为VLAN 301的Tag。

[SwitchA-Ten-GigabitEthernet1/0/1] vlan mapping 1 translated-vlan 101

[SwitchA-Ten-GigabitEthernet1/0/1] vlan mapping 2 translated-vlan 201

[SwitchA-Ten-GigabitEthernet1/0/1] vlan mapping 3 translated-vlan 301

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 配置下行端口Ten-GigabitEthernet1/0/2为Trunk端口且允许原始VLAN及转换后VLAN通过。

[SwitchA] interface ten-gigabitethernet 1/0/2

[SwitchA-Ten-GigabitEthernet1/0/2] port link-type trunk

[SwitchA-Ten-GigabitEthernet1/0/2] port trunk permit vlan 1 2 3 102 202 302

# 在端口Ten-GigabitEthernet1/0/2上配置1:1 VLAN映射功能,将VLAN 1的Tag替换为VLAN 102的Tag,将VLAN 2的Tag替换为VLAN 202的Tag,将VLAN 3的Tag替换为VLAN 302的Tag。

[SwitchA-Ten-GigabitEthernet1/0/2] vlan mapping 1 translated-vlan 102

[SwitchA-Ten-GigabitEthernet1/0/2] vlan mapping 2 translated-vlan 202

[SwitchA-Ten-GigabitEthernet1/0/2] vlan mapping 3 translated-vlan 302

[SwitchA-Ten-GigabitEthernet1/0/2] quit

# 配置上行端口Ten-GigabitEthernet1/0/3为Trunk端口,且允许转换后VLAN通过。

[SwitchA] interface ten-gigabitethernet 1/0/3

[SwitchA-Ten-GigabitEthernet1/0/3] port link-type trunk

[SwitchA-Ten-GigabitEthernet1/0/3] port trunk permit vlan 101 201 301 102 202 302

[SwitchA-Ten-GigabitEthernet1/0/3] quit

5.4.2  Switch B的配置

Switch B的配置与Switch A相似,配置过程略。

5.4.3  Switch C的配置

# 创建原始VLAN和转换后VLAN

<SwitchC> system-view

[SwitchC] vlan 101 to 104

[SwitchC] vlan 201 to 204

[SwitchC] vlan 301 to 304

[SwitchC] vlan 501 to 503

# 配置下行端口Ten-GigabitEthernet1/0/1为Trunk端口且允许原始VLAN通过。

[SwitchC] interface ten-gigabitethernet 1/0/1

[SwitchC-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchC-Ten-GigabitEthernet1/0/1] port trunk permit vlan 101 102 201 202 301 302

# 在端口Ten-GigabitEthernet1/0/1上配置N:1 VLAN映射,将VLAN 101~102的Tag替换为VLAN 501的Tag,将VLAN 201~202的Tag替换为VLAN 502的Tag,将VLAN 301~302的Tag替换为VLAN 503的Tag。

[SwitchC-Ten-GigabitEthernet1/0/1] vlan mapping uni range 101 to 102 translated-vlan 501

[SwitchC-Ten-GigabitEthernet1/0/1] vlan mapping uni range 201 to 202 translated-vlan 502

[SwitchC-Ten-GigabitEthernet1/0/1] vlan mapping uni range 301 to 302 translated-vlan 503

[SwitchC-Ten-GigabitEthernet1/0/1] quit

# 配置下行端口Ten-GigabitEthernet1/0/2为Trunk端口且允许原始VLAN通过。

[SwitchC] interface ten-gigabitethernet 1/0/2

[SwitchC-Ten-GigabitEthernet1/0/2] port link-type trunk

[SwitchC-Ten-GigabitEthernet1/0/2] port trunk permit vlan 103 104 203 204 303 304 501 to 503

# 在端口Ten-GigabitEthernet1/0/2上配置N:1 VLAN映射,将VLAN 103~104的Tag替换为VLAN 501的Tag,将VLAN 203~204的Tag替换为VLAN 502的Tag,将VLAN 303~304的Tag替换为VLAN 503的Tag。

[SwitchC-Ten-GigabitEthernet1/0/2] vlan mapping uni range 103 to 104 translated-vlan 501

[SwitchC-Ten-GigabitEthernet1/0/2] vlan mapping uni range 203 to 204 translated-vlan 502

[SwitchC-Ten-GigabitEthernet1/0/2] vlan mapping uni range 303 to 304 translated-vlan 503

[SwitchC-Ten-GigabitEthernet1/0/2] quit

# 配置端口Ten-GigabitEthernet1/0/3为Trunk端口且允许转换后VLAN通过。

[SwitchC-Ten-GigabitEthernet1/0/3] port link-type trunk

[SwitchC-Ten-GigabitEthernet1/0/3] port trunk permit vlan 501 to 503

[SwitchC-Ten-GigabitEthernet1/0/3] quit

5.4.4  Switch D的配置

# 创建转换后VLAN——VLAN 501~503。

<SwitchD> system-view

[SwitchD] vlan 501 to 503

# 配置端口Ten-GigabitEthernet1/0/1为Trunk端口且允许转换后VLAN通过。

[SwitchD] interface ten-gigabitethernet 1/0/1

[SwitchD-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchD-Ten-GigabitEthernet1/0/1] port trunk permit vlan 501 to 503

[SwitchD-Ten-GigabitEthernet1/0/1] quit

5.5  验证配置

(1)     查看Switch A上的VLAN映射配置信息

[SwitchA] display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  1             N/A           101                      N/A

  2             N/A           201                      N/A

  3             N/A           301                      N/A

Interface Ten-GigabitEthernet1/0/2:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  1             N/A           102                      N/A

  2             N/A           202                      N/A

  3             N/A           302                      N/A

(2)     查看Switch B上的VLAN映射配置信息

Switch B上的VLAN映射配置信息与Switch A相似,显示信息略。

(3)     查看Switch C上的VLAN映射配置信息

[SwitchC] display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  101-102       N/A           501                      N/A

  201-202       N/A           502                      N/A

  301-302       N/A           503                      N/A

Interface Ten-GigabitEthernet1/0/2:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  103-104       N/A           501                      N/A

  203-204       N/A           502                      N/A

  303-304       N/A           503                      N/A

以上信息表明,Switch A和Switch B上的1:1 VLAN映射,以及Switch C上的N:1 VLAN映射配置成功。

5.6  配置文件

·     Switch A

#

vlan 1

#

vlan 2 to 3

#

vlan 101 to 102

#

vlan 201 to 202

#

vlan 301 to 302

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 to 3 101 201 301

 vlan mapping 1 translated-vlan 101

 vlan mapping 2 translated-vlan 201

 vlan mapping 3 translated-vlan 301

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan 1 to 3 102 202 302

 vlan mapping 1 translated-vlan 102

 vlan mapping 2 translated-vlan 202

 vlan mapping 3 translated-vlan 302

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 port trunk permit vlan 1 101 to 102 201 to 202 301 to 302

#

·     Switch B

#

vlan 1

#

vlan 2 to 3

#

vlan 103 to 104

#

vlan 203 to 204

#

vlan 303 to 304

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 to 3 103 203 303

 vlan mapping 1 translated-vlan 103

 vlan mapping 2 translated-vlan 203

 vlan mapping 3 translated-vlan 303

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan 1 to 3 104 204 304

 vlan mapping 1 translated-vlan 104

 vlan mapping 2 translated-vlan 204

 vlan mapping 3 translated-vlan 304

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 port trunk permit vlan 1 103 to 104 203 to 204 303 to 304

#

·     Switch C

#

vlan 101

#

vlan 102

#

vlan 103

#

vlan 104

#

vlan 201

#

vlan 202

#

vlan 203

#

vlan 204

#

vlan 301

#

vlan 302

#

vlan 303

#

vlan 304

#

vlan 501

#

vlan 502

#

vlan 503

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 101 to 102 201 to 202 301 to 302

 vlan mapping uni range 101 to 102 translated-vlan 501

 vlan mapping uni range 201 to 202 translated-vlan 502

 vlan mapping uni range 301 to 302 translated-vlan 503

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan 103 to 104 203 to 204 303 to 304

 vlan mapping uni range 103 to 104 translated-vlan 501

 vlan mapping uni range 203 to 204 translated-vlan 502

 vlan mapping uni range 303 to 304 translated-vlan 503

#

interface Ten-GigabitEthernet1/0/3

 port link-type trunk

 port trunk permit vlan 501 to 503

#

·     Switch D

#

vlan 501 to 503

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 501 to 503

#

6  2:2 VLAN映射配置举例

6.1  组网需求

图6所示,Site 1和Site 2是同一家公司的两个分支机构,同属于VLAN 10,通过运营商A提供的VPN接入服务,外层VLAN Tag为VLAN 100。当该公司被另一家公司收购之后,需要Site 1和Site 2接入新公司的网络。新公司的VPN服务由运营商B提供,外层VLAN Tag为VLAN 200,总部中能够为Site 1和Site 2提供服务的业务VLAN为VLAN 30。

现要求通过配置2:2 VLAN映射功能,在不改变Site 1、Site 2和运营商网络VLAN的配置的情况下,使Site 1和Site 2能够访问总部(Headquarts)VLAN 30的资源。

图6 2:2 VLAN映射典型配置组网示意图

 

 

6.2  使用版本

本举例进行配置和验证所使用的版本,如3.3  表2所示。

表6 产品与软件版本适配关系

产品

软件版本

S12500X-AF系列交换机

S12500X-CMW710-R2712

S12500-X系列交换机

S12500X-CMW710-R2712

S9800系列交换机

S9800-CMW710-R2712

 

6.3  配置注意事项

·     2:2 VLAN映射功能只需要在两个运营商的边缘设备中的其中一台上配置即可,本例中我们以在Switch C上配置为例进行介绍。

·     缺省情况下,S12500X-AF系列、S12500-X系列、S9800系列交换机的接口处于ADM(Administratively Down)状态,请根据实际需要在对应接口视图下使用undo shutdown命令开启接口。

 

6.4  配置步骤

6.4.1  Switch A的配置

# 创建VLAN 10和VLAN 100。

<SwitchA> system-view

[SwitchA] vlan 10

[SwitchA-vlan10] quit

[SwitchA] vlan 100

[SwitchA-vlan100] quit

# 在下行端口Ten-GigabitEthernet1/0/1上配置1:2 VLAN映射,为VLAN 10报文添加VLAN 100的外层VLAN Tag。

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] vlan mapping nest single 10 nested-vlan 100

# 配置Ten-GigabitEthernet1/0/1为Hybrid端口且允许VLAN 10的报文携带VLAN Tag通过、VLAN 100的报文不携带VLAN Tag通过,取消允许VLAN 1通过。

[SwitchA-Ten-GigabitEthernet1/0/1] port link-type hybrid

[SwitchA-Ten-GigabitEthernet1/0/1] port hybrid vlan 10 tagged

[SwitchA-Ten-GigabitEthernet1/0/1] port hybrid vlan 100 untagged

[SwitchA-Ten-GigabitEthernet1/0/1] undo port hybrid vlan 1

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# 配置上行端口Ten-GigabitEthernet1/0/2允许VLAN 100的报文通过,取消允许VLAN 1通过。

[SwitchA] interface ten-gigabitethernet 1/0/2

[SwitchA-Ten-GigabitEthernet1/0/2] port link-type trunk

[SwitchA-Ten-GigabitEthernet1/0/2] port trunk permit vlan 100

[SwitchA-Ten-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SwitchA-Ten-GigabitEthernet1/0/2] quit

6.4.2  Switch B的配置

# 创建VLAN 10和VLAN 100。

<SwitchB> system-view

[SwitchB] vlan 10

[SwitchB-vlan10] quit

[SwitchB] vlan 100

[SwitchB-vlan100] quit

# 在下行端口Ten-GigabitEthernet1/0/3上配置1:2 VLAN映射,为VLAN 10报文添加VLAN 100的外层VLAN Tag。

[SwitchB] interface ten-gigabitethernet 1/0/3

[SwitchB-Ten-GigabitEthernet1/0/3] vlan mapping nest single 10 nested-vlan 100

# 配置Ten-GigabitEthernet1/0/3为Hybrid端口且允许VLAN 10的报文携带VLAN Tag通过、VLAN100的报文不携带VLAN Tag通过,取消允许VLAN 1通过。

[SwitchB-Ten-GigabitEthernet1/0/3] port link-type hybrid

[SwitchB-Ten-GigabitEthernet1/0/3] port hybrid vlan 10 tagged

[SwitchB-Ten-GigabitEthernet1/0/3] port hybrid vlan 100 untagged

[SwitchB-Ten-GigabitEthernet1/0/3] undo port hybrid vlan 1

[SwitchB-Ten-GigabitEthernet1/0/3] quit

# 配置端口Ten-GigabitEthernet1/0/1允许VLAN 100的报文通过,取消允许VLAN 1通过。

[SwitchB] interface ten-gigabitethernet 1/0/1

[SwitchB-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchB-Ten-GigabitEthernet1/0/1] port trunk permit vlan 100

[SwitchB-Ten-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[SwitchB-Ten-GigabitEthernet1/0/1] quit

# 配置端口Ten-GigabitEthernet1/0/2允许VLAN 100的报文通过,取消允许VLAN 1通过。

[SwitchB] interface ten-gigabitethernet 1/0/2

[SwitchB-Ten-GigabitEthernet1/0/2] port link-type trunk

[SwitchB-Ten-GigabitEthernet1/0/2] port trunk permit vlan 100

[SwitchB-Ten-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SwitchB-Ten-GigabitEthernet1/0/2] quit

6.4.3  Switch C的配置

# 创建映射前外层VLAN 100和映射后外层VLAN 200。

<SwitchC> system-view

[SwitchC] vlan 100

[SwitchC-vlan100] quit

[SwitchC] vlan 200

[SwitchC-vlan200] quit

# 配置端口Ten-GigabitEthernet1/0/1允许VLAN 100和VLAN 200的报文通过,取消允许VLAN 1通过。

[SwitchC] interface ten-gigabitethernet 1/0/1

[SwitchC-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchC-Ten-GigabitEthernet1/0/1] port trunk permit vlan 100 200

[SwitchC-Ten-GigabitEthernet1/0/1] undo port trunk permit vlan 1

# 在端口Ten-GigabitEthernet1/0/1上配置2:2 VLAN映射,将外层VLAN为100、内层VLAN为10的报文的VLAN ID转换为外层VLAN为200、内层VLAN为30。

[SwitchC-Ten-GigabitEthernet1/0/1] vlan mapping tunnel 100 10 translated-vlan 200 30

[SwitchC-Ten-GigabitEthernet1/0/1] quit

# 配置端口Ten-GigabitEthernet1/0/2允许VLAN 200的报文通过。

[SwitchC] interface ten-gigabitethernet 1/0/2

[SwitchC-Ten-GigabitEthernet1/0/2] port link-type trunk

[SwitchC-Ten-GigabitEthernet1/0/2] port trunk permit vlan 200

[SwitchC-Ten-GigabitEthernet1/0/2] undo port trunk permit vlan 1

[SwitchC-Ten-GigabitEthernet1/0/2] quit

6.4.4  Switch D的配置

# 创建VLAN 30和VLAN 200。

<SwitchD> system-view

[SwitchD] vlan 30

[SwitchD-vlan30] quit

[SwitchD] vlan 200

[SwitchD-vlan200] quit

# 配置端口Ten-GigabitEthernet1/0/1允许VLAN 200的报文通过,取消允许VLAN 1通过。

[SwitchD] interface ten-gigabitethernet 1/0/1

[SwitchD-Ten-GigabitEthernet1/0/1] port link-type trunk

[SwitchD-Ten-GigabitEthernet1/0/1] port trunk permit vlan 200

[SwitchD-Ten-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[SwitchD-Ten-GigabitEthernet1/0/1] quit

# 配置Ten-GigabitEthernet1/0/2为Hybrid端口且允许VLAN 30的报文携带VLAN Tag通过、VLAN 200的报文不携带VLAN Tag通过,取消允许VLAN 1通过。

[SwitchD] interface ten-gigabitethernet 1/0/2

[SwitchD-Ten-GigabitEthernet1/0/2] port link-type hybrid

[SwitchD-Ten-GigabitEthernet1/0/2] port hybrid vlan 30 tagged

[SwitchD-Ten-GigabitEthernet1/0/2] port hybrid vlan 200 untagged

[SwitchD-Ten-GigabitEthernet1/0/2] undo port hybrid vlan 1

# 在端口Ten-GigabitEthernet1/0/2上配置1:2 VLAN映射,为VLAN 30报文添加VLAN 200的外层VLAN Tag。

[SwitchD-Ten-GigabitEthernet1/0/2] vlan mapping nest single 30 nested-vlan 200

[SwitchD-Ten-GigabitEthernet1/0/2] quit

6.5  验证配置

# 查看Switch C上的VLAN映射配置信息。

[SwitchC] display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  100           10            200                      30

显示信息表明2:2 VLAN映射已经正确配置。

6.6  配置文件

·     Switch A

#

vlan 10

vlan 100

#

interface Ten-GigabitEthernet1/0/1

 port link-type hybrid

 port hybrid vlan 10 tagged

 port hybrid vlan 100 untagged

 vlan mapping nest single 10 nested-vlan 100

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

·     Switch B

#

vlan 10

vlan 100

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

 #

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100

#

interface Ten-GigabitEthernet1/0/3

 port link-type hybrid

 port hybrid vlan 10 tagged

 port hybrid vlan 100 untagged

 vlan mapping nest single 10 nested-vlan 100

Switch C

#

vlan 100

#

vlan 200

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 100 200

 vlan mapping tunnel 100 10 translated-vlan 200 30

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200

#

·     Switch D

#

vlan 30

vlan 200

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 200

#

interface Ten-GigabitEthernet1/0/2

 port link-type hybrid

 port hybrid vlan 30 tagged

 port hybrid vlan 200 untagged

 vlan mapping nest single 30 nested-vlan 200

#

7  相关资料

·     H3C S12500X-AF & S12500-X & S9800系列交换机 二层技术-以太网交换配置指导(R27xx)

·     H3C S12500X-AF & S12500-X & S9800系列交换机 二层技术-以太网交换命令参考(R27xx)

·     H3C S12500X-AF & S12500-X & S9800系列交换机 ACL和QoS配置指导(R27xx)

·     H3C S12500X-AF & S12500-X & S9800系列交换机 ACL和QoS命令参考(R27xx)

不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!

新华三官网
联系我们