- Table of Contents
-
- 02-Layer 2-LAN Switching Command Reference
- 00-Preface
- 01-MAC address table commands
- 02-Bulk interface commands
- 03-Ethernet interface commands
- 04-Ethernet link aggregation commands
- 05-Port isolation commands
- 06-VLAN commands
- 07-Loopback, null, and inloopback interface commands
- 08-VLAN mapping commands
- 09-VLAN termination commands
- 10-Loop detection commands
- 11-LLDP commands
- 12-Service loopback group commands
- 13-Spanning tree commands
- 14-Cut-through Layer 2 forwarding commands
- Related Documents
-
Title | Size | Download |
---|---|---|
09-VLAN termination commands | 97.39 KB |
Contents
user-vlan dot1q vid second-dot1q
vlan-termination broadcast enable
vlan-type dot1q vid second-dot1q
VLAN termination commands
To use VLAN termination, first set the system operating mode to enhanced Layer 2. For more information about the system operating mode, see device management in Fundamentals Configuration Guide.
display user-vlan
Use display user-vlan to display user VLAN information.
Syntax
display user-vlan interface interface-type interface-number.subnumber [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface-type: Specifies an interface type.
interface-number.subnumber: Specifies a subinterface by its number. The interface-number argument specifies the main interface number, and the subnumber argument specifies a subinterface number.
slot slot-number: Specifies a card by its slot number.
Usage guidelines
This command displays user VLAN information on a subinterface only if the following conditions exist:
· The user-vlan dot1q vid or user-vlan dot1q vid second-dot1q command has been configured on the subinterface.
· Online users are present on the subinterface.
When you specify the slot slot-number option, following these restrictions and guidelines:
· To display user VLAN information on a Layer 3 Ethernet subinterface, do not specify this option.
· If member ports of an aggregation group belong to different slots, user this option to specify a slot. If you do not specify this option, the command displays user VLAN information on the slot that hosts the aggregation member port with the smallest port number. The Port Number field of the display link-aggregation member-port command output displays the port number of an aggregation member port.
Examples
# Display user VLAN information on Layer 3 Ethernet subinterface HundredGigE1/0/1.1.
<Sysname> display user-vlan interface hundredgige 1/0/1.1
Service VLAN Customer VLAN Number of online users
20 100 1
20 101 10
Number of user VLANs: 2
Table 1 Command output
Field |
Description |
Service VLAN |
Service provider network VLAN: · This field indicates the outermost layer VLAN (customer network VLAN) for user VLAN Dot1q termination. · This field indicates Layer 1 VLAN for user VLAN QinQ termination. |
Customer VLAN |
Customer network VLAN: · This field displays N/A for user VLAN Dot1q termination. · This field indicates Layer 2 VLAN for user VLAN QinQ termination. |
Number of online users |
Number of online users in the VLAN. |
Number of user VLANs |
Number of VLANs that have online users. |
Related commands
user-vlan dot1q vid
user-vlan dot1q vid second-dot1q
dot1q ethernet-type
Use dot1q ethernet-type to set the TPID value in the outermost VLAN tag of packets received and sent by an interface.
Use undo dot1q ethernet-type to restore the default.
Syntax
dot1q ethernet-type hex-value
undo dot1q ethernet-type
Default
The TPID value for the outermost VLAN tag of a VLAN-tagged packet received and sent by the interface is 0x8100.
Views
Layer 3 aggregate/Ethernet interface view
Predefined user roles
network-admin
Parameters
hex-value: Sets a hexadecimal TPID value in the range of 1 to ffff, excluding the common protocol type values listed in Table 2.
Table 2 Common protocol type values
Protocol |
Value |
ARP |
0x0806 |
PUP |
0x0200 |
RARP |
0x8035 |
IP |
0x0800 |
IPv6 |
0x86DD |
PPPoE |
0x8863/0x8864 |
MPLS |
0x8847/0x8848 |
IPX/SPX |
0x8137 |
IS-IS |
0x8000 |
LACP |
0x8809 |
LLDP |
0x88CC |
802.1X |
0x888E |
802.1ag |
0x8902 |
Cluster |
0x88A7 |
Reserved on the device |
0xFFFD/0xFFFE/0xFFFF |
Usage guidelines
After you execute this command, only packets whose TPID in the outermost VLAN tag is 0x8100 or the configured value are processed as VLAN-tagged packets.
When sending a packet, the interface sets the TPID value in the outermost VLAN tag to the configured value. If the packet includes two or more layers of VLAN tags, the interface sets the TPID values in the other VLAN tags to 0x8100.
Do not use this command in subinterface view. Configurations made on a main interface (Layer 3 interface for example) take effect on all subinterfaces of the interface.
For more information about Layer 3 VE interfaces, see ATM configuration in Layer 2—WAN Access Configuration Guide. For more information about L3VE interfaces, see L2VPN access to L3VPN or IP backbone configuration in MPLS Configuration Guide.
Examples
# Set the TPID value to 0x9100 in the outermost VLAN tag of VLAN-tagged packets received and sent by the subinterfaces of HundredGigE 1/0/1.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] dot1q ethernet-type 9100
second-dot1q
Use second-dot1q to enable QinQ termination on an interface, and specify the Layer 2 VLAN IDs of the VLAN-tagged packets that can be terminated by the interface.
Use undo second-dot1q to disable QinQ termination on an interface.
Syntax
second-dot1q { vlan-id-list | any }
undo second-dot1q { vlan-id-list | any }
Default
QinQ termination is disabled on an interface.
Views
VLAN interface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 Layer 2 VLAN ID items. Each item specifies a Layer 2 VLAN ID or a range of Layer 2 VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
any: Specifies all values between 1 and 4094.
Usage guidelines
When you execute this command, the Layer 1 VLAN ID of VLAN-tagged packets that can be terminated by the interface is the interface number. This Layer 1 VLAN ID is not configurable.
Examples
# Configure VLAN-interface 10 to terminate VLAN-tagged packets with Layer 2 VLAN IDs in the range of 10 to 20.
<Sysname> system-view
[Sysname] interface vlan-interface 10
[Sysname-Vlan-interface10] second-dot1q 10 to 20
[Sysname-Vlan-interface10] quit
# Configure VLAN-interface 12 to terminate VLAN-tagged packets with Layer 2 VLAN ID 100.
[Sysname] interface vlan-interface 12
[Sysname-Vlan-interface12] second-dot1q 100
[Sysname-Vlan-interface12] quit
# Configure VLAN-interface 100 to terminate VLAN-tagged packets with any Layer 2 VLAN IDs.
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] second-dot1q any
The following table describes the configuration results:
VLAN interface |
Layer 1 VLAN ID of VLAN-tagged packets that the VLAN interface can terminate |
Layer 2 VLAN IDs of VLAN-tagged packets that the VLAN interface can terminate |
VLAN-interface 10 |
10 |
10–20 |
VLAN-interface 12 |
12 |
100 |
VLAN-interface 100 |
100 |
1–4094 |
user-vlan dot1q vid
Use user-vlan dot1q vid to enable user VLAN Dot1q termination on a subinterface, and specify the outermost VLAN IDs in the VLAN-tagged packets that can be terminated by the subinterface.
Use undo user-vlan dot1q vid to disable user VLAN Dot1q termination on a subinterface.
Syntax
user-vlan dot1q vid vlan-id-list
undo user-vlan dot1q vid vlan-id-list
Default
User VLAN Dot1q termination is disabled on a subinterface.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 outermost VLAN ID items. Each item specifies an outermost VLAN ID or a range of outermost VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
Usage guidelines
The outermost VLAN ID ranges specified by the vlan-id-list argument for different subinterfaces of a main interface cannot overlap.
This command and the vlan-type dot1q vid command are mutually exclusive on the same subinterface.
Examples
# Enable user VLAN Dot1q termination on HundredGigE 1/0/1.1, and configure the interface to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 2 to 100.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.1
[Sysname-HundredGigE1/0/1.1] user-vlan dot1q vid 2 to 100
Related commands
display user-vlan
user-vlan dot1q vid second-dot1q
Use user-vlan dot1q vid second-dot1q to enable user VLAN QinQ termination on a subinterface, and specify the outermost two layers of VLAN IDs in VLAN-tagged packets that are terminated by the subinterface.
Use undo user-vlan dot1q vid second-dot1q to disable user VLAN QinQ termination on a subinterface.
Syntax
user-vlan dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }
undo user-vlan dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }
Default
User VLAN QinQ termination is disabled on a subinterface.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN ID items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
any: Specifies all values between 1 and 4094.
Usage guidelines
Two subinterfaces of the same Ethernet interface cannot terminate packets that include the same two layers of VLAN IDs. If you configure the subinterfaces to terminate the same Layer 1 VLAN ID, make sure their Layer 2 VLAN ID ranges do not overlap. If you specify both any and vlan-id-list as the respective Layer 2 VLAN ID ranges of the subinterfaces, the any keyword does not include the VLAN IDs specified by vlan-id-list.
This command and the vlan-type dot1q vid second-dot1q command are mutually exclusive on the same subinterface.
Examples
# Enable user VLAN QinQ termination on HundredGigE1/0/1.1. Configure the interface to terminate VLAN-tagged packets with Layer 1 VLAN IDs in the range of 1 to 100 and Layer 2 VLAN IDs in the range of 500 to 600.
[Sysname] interface hundredgige 1/0/1.1
[Sysname-HundredGigE1/0/1.1] user-vlan dot1q vid 1 to 100 second-dot1q 500 to 600
Related commands
display user-vlan
vlan-termination broadcast enable
Use vlan-termination broadcast enable to enable an interface to transmit broadcasts and multicasts.
Use undo vlan-termination broadcast enable to disable an interface from transmitting broadcasts and multicasts.
Syntax
vlan-termination broadcast enable
undo vlan-termination broadcast enable
Default
Broadcast and multicast packets are dropped on an interface configured with Dot1q/QinQ termination to terminate packets of multiple VLANs.
Views
Layer 3 aggregate/Ethernet subinterface view
VLAN interface view
Predefined user roles
network-admin
Usage guidelines
IMPORTANT: This command affects system performance. If system performance is seriously affected by this command, execute the undo form of this command to remove the command configuration. |
To transmit a broadcast or multicast packet, the interface starts a traversal over all the VLAN IDs specified for Dot1q/QinQ termination. It copies the packet and tags each copy with VLAN IDs, until all combinations of VLAN IDs are traversed.
Examples
· Configure HundredGigE 1/0/1.10 to tag a multicast or broadcast packet with each VLAN tag in the range of 10 to 20.
# Enable Dot1q termination on HundredGigE 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.10
[Sysname-HundredGigE1/0/1.10] vlan-type dot1q vid 10 to 20
# Enable HundredGigE 1/0/1.10 to transmit broadcast and multicast packets.
[Sysname-HundredGigE1/0/1.10] vlan-termination broadcast enable
· Configure HundredGigE 1/0/1.10 to tag a multicast or broadcast packet with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.
# Configure HundredGigE 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.10
[Sysname-HundredGigE1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600
# Enable HundredGigE 1/0/1.10 to transmit broadcast and multicast packets.
[Sysname-HundredGigE1/0/1.10] vlan-termination broadcast enable
vlan-termination broadcast ra
Use vlan-termination broadcast ra to enable an interface to transmit router advertisement (RA) multicast packets.
Use undo vlan-termination broadcast ra to disable an interface from transmitting RA multicast packets.
Syntax
vlan-termination broadcast ra
undo vlan-termination broadcast ra
Default
Broadcast and multicast packets are dropped on an interface configured with Dot1q/QinQ termination to terminate packets of multiple VLANs.
Views
Layer 3 aggregate/Ethernet subinterface view
VLAN interface view
Predefined user roles
network-admin
Usage guidelines
To transmit an RA multicast packet, the interface starts a traversal over all the VLAN IDs specified for Dot1q/QinQ termination. It copies the packet and tags each copy with VLAN IDs, until all combinations of VLAN IDs are traversed.
You must use this command to enable an ambiguous Dot1q or QinQ termination-enabled interface to transmit RA multicast packets on an IPv6 network. This command prohibits transmission of broadcast packets and other types of multicast packets, and consumes less CPU resources than the vlan-termination broadcast enable command.
Examples
· Configure HundredGigE 1/0/1.10 to tag RA multicast packets with each VLAN tag in the range of 10 to 20.
# Enable Dot1q termination on HundredGigE 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.10
[Sysname-HundredGigE1/0/1.10] vlan-type dot1q vid 10 to 20
# Enable HundredGigE 1/0/1.10 to transmit RA multicast packets.
[Sysname-HundredGigE1/0/1.10] vlan-termination broadcast ra
· Configure HundredGigE 1/0/1.10 to tag RA multicast packets with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.
# Configure HundredGigE 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.10
[Sysname-HundredGigE1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600
# Enable HundredGigE 1/0/1.10 to transmit RA multicast packets.
[Sysname-HundredGigE1/0/1.10] vlan-termination broadcast ra
vlan-termination user-mode
Use vlan-termination user-mode to enable user mode of VLAN termination.
Use undo vlan-termination user-mode to disable user mode of VLAN termination.
Syntax
vlan-termination user-mode
undo vlan-termination user-mode
Default
User mode of VLAN termination is disabled.
Views
Layer 3 aggregate/Ethernet subinterface view
Predefined user roles
network-admin
Usage guidelines
After you modify VLAN termination on a subinterface, the subinterface automatically restarts. In some networks, the subinterface restart logs off online users. To prevent the subinterface restart and protect the online user state, enable user mode of VLAN termination before you modify VLAN termination on the subinterface.
After you enable user mode of VLAN termination and modify VLAN termination on a subinterface, clear entries of VLANs that are no longer terminated by the subinterface. If you do not clear these entries, running services might be affected. For example, after you modify VLAN termination on a subinterface, perform the following tasks for the subinterface:
· Use the reset arp interface command in user view to clear all ARP entries.
· Use the reset ipv6 neighbors interface command in user view to clear all dynamic neighbors.
For more information about the reset arp and reset ipv6 neighbors commands, see ARP and IPv6 basics commands in Layer 3—IP Services Command Reference.
Examples
# Enable user mode of VLAN termination on HundredGigE 1/0/1.1.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.1
[Sysname-HundredGigE1/0/1.1] vlan-termination user-mode
vlan-type dot1q vid
Use vlan-type dot1q vid to enable Dot1q termination on a subinterface, and specify the outermost VLAN IDs in the VLAN-tagged packets that can be terminated by the subinterface.
Use undo vlan-type dot1q vid to disable Dot1q termination on a subinterface.
Syntax
vlan-type dot1q vid vlan-id-list
undo vlan-type dot1q vid vlan-id-list
Default
Dot1q termination is disabled on a subinterface.
Views
Layer 3 aggregate/Ethernet subinterface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 outermost VLAN ID items. Each item specifies an outermost VLAN ID or a range of outermost VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
Usage guidelines
The outermost VLAN ID ranges specified by the vlan-id-list argument for different subinterfaces of a main interface cannot overlap.
This command and the user-vlan dot1q vid command are mutually exclusive on the same subinterface.
Examples
# Configure HundredGigE 1/0/1.1 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 2 to 100.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.1
[Sysname-HundredGigE1/0/1.1] vlan-type dot1q vid 2 to 100
vlan-type dot1q vid second-dot1q
Use vlan-type dot1q vid second-dot1q to enable QinQ termination on a subinterface, and specify the outermost two layers of VLAN IDs of VLAN-tagged packets that can be terminated by the subinterface.
Use undo vlan-type dot1q vid second-dot1q to disable QinQ termination on a subinterface.
Syntax
vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }
undo vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }
Default
QinQ termination is disabled on a subinterface.
Views
Layer 3 aggregate/Ethernet/VE subinterface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN ID items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
any: Specifies all values between 1 and 4094.
Usage guidelines
Two subinterfaces of the same main interface cannot terminate packets that include the same two layers of VLAN IDs. If you configure the subinterfaces to terminate the same Layer 1 VLAN ID, make sure their Layer 2 VLAN ID ranges do not overlap. If you specify both any and vlan-id-list as the respective Layer 2 VLAN ID ranges of the subinterfaces, the any keyword does not include the VLAN IDs specified by vlan-id-list.
This command and the user-vlan dot1q vid second-dot1q command are mutually exclusive on the same subinterface.
Examples
# Enable QinQ termination on the Layer 3 Ethernet subinterfaces, and configure each subinterface to terminate VLAN-tagged packets with the specified Layer 1 and Layer 2 VLAN IDs.
· Configure HundredGigE 1/0/1.1 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are both 100.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1.1
[Sysname-HundredGigE1/0/1.1] vlan-type dot1q vid 100 second-dot1q 100
[Sysname-HundredGigE1/0/1.1] quit
· Configure HundredGigE 1/0/1.2 to terminate VLAN-tagged packets with Layer 1 VLAN ID 100 and Layer 2 VLAN IDs in the range of 200 to 300.
[Sysname] interface hundredgige 1/0/1.2
[Sysname-HundredGigE1/0/1.2] vlan-type dot1q vid 100 second-dot1q 200 to 300
[Sysname-HundredGigE1/0/1.2] quit
· Configure HundredGigE 1/0/1.3 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is any value between 1 and 4094.
[Sysname] interface hundredgige 1/0/1.3
[Sysname-HundredGigE1/0/1.3] vlan-type dot1q vid 100 second-dot1q any
[Sysname-HundredGigE1/0/1.3] quit
· Configure HundredGigE 1/0/1.4 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is in the range of 500 to 600.
[Sysname] interface hundredgige 1/0/1.4
[Sysname-HundredGigE1/0/1.4] vlan-type dot1q vid 100 second-dot1q 500 to 600
[Sysname-HundredGigE1/0/1.4] quit
· Configure HundredGigE 1/0/1.5 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 200 and Layer 2 VLAN ID is in the range of 500 to 600.
[Sysname] interface hundredgige 1/0/1.5
[Sysname-HundredGigE1/0/1.5] vlan-type dot1q vid 200 second-dot1q 500 to 600
[Sysname-HundredGigE1/0/1.5] quit
· Configure HundredGigE 1/0/1.6 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is in the range of 300 to 400 and Layer 2 VLAN ID is 100.
[Sysname] interface hundredgige 1/0/1.6
[Sysname-HundredGigE1/0/1.6] vlan-type dot1q vid 300 to 400 second-dot1q 100
[Sysname-HundredGigE1/0/1.6] quit
· Configure HundredGigE 1/0/1.7 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 IDs are in the range of 300 to 400 and 500 to 600, respectively.
[Sysname] interface hundredgige 1/0/1.7
[Sysname-HundredGigE1/0/1.7] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600
[Sysname-HundredGigE1/0/1.7] quit
· Configure HundredGigE 1/0/1.8 to terminate VLAN-tagged packets with a Layer 1 VLAN ID in the range of 300 to 400 and any Layer 2 VLAN ID.
[Sysname] interface hundredgige 1/0/1.8
[Sysname-HundredGigE1/0/1.8] vlan-type dot1q vid 300 to 400 second-dot1q any
The following table describes the configuration results:
Layer 3 Ethernet subinterface |
Layer 1 VLAN IDs of VLAN-tagged packets that the subinterface can terminate |
Layer 2 VLAN IDs of VLAN-tagged packets that the subinterface can terminate |
HundredGigE 1/0/1.1 |
100 |
100 |
HundredGigE 1/0/1.2 |
100 |
200–300 |
HundredGigE 1/0/1.3 |
100 |
1–99, 101–199, 301–499, and 601–4094 |
HundredGigE 1/0/1.4 |
100 |
500–600 |
HundredGigE 1/0/1.5 |
200 |
500–600 |
HundredGigE 1/0/1.6 |
300–400 |
100 |
HundredGigE 1/0/1.7 |
300–400 |
500–600 |
HundredGigE 1/0/1.8 |
300–400 |
1–99, 101–499, and 601–4094 |