14-VLAN映射配置
本章节下载: 14-VLAN映射配置 (231.32 KB)
目 录
VLAN映射(VLAN Mapping)功能可以修改报文携带的VLAN Tag,通过执行1:1 VLAN映射,将报文携带VLAN Tag中的VLAN ID修改为另一个VLAN ID。
下面将详细介绍1:1映射关系的应用以及工作原理。
图1-1 1:1 VLAN映射应用示意图
如图1-1所示,是1:1 VLAN映射应用的组网环境,其中每个家庭用户的不同业务(PC、IPTV和VoIP)分别采用不同的VLAN进行发送,为了区分不同的家庭用户,需要在用户接入交换机处将不同家庭用户的相同业务采用不同的VLAN进行发送,即进行1:1 VLAN映射。
为了更好的理解后面的配置过程,此处定义几个概念:
l 上行数据流:从家庭用户网络发往汇聚层网络的数据流、或者从用户网络发往SP网络的数据流,都称之为上行数据流。
l 下行数据流:从汇聚层网络发往家庭用户的数据流、或者从SP网络发往用户网络的数据流,都称之为下行数据流。
l 上行端口:发送上行数据流、接收下行数据流的端口称为上行端口。
l 下行端口:发送下行数据流、接收上行数据流的端口称为下行端口。
l 上行策略:负责上行数据流VLAN映射规则的QoS策略。
l 下行策略:负责下行数据流VLAN映射规则的QoS策略。
通过在下行端口应用不同的策略来实现1:1 VLAN映射
l 对于上行数据流,通过在下行端口上应用上行策略,将原来的CVLAN映射到SVLAN。
l 对于下行数据流,通过在下行端口上应用下行策略,将报文的SVLAN修改为原来的CVLAN。
关于QoS策略的介绍请参见手册中的“QoS配置”。
在图1-1所示的用户接入交换机上需要进行1:1 VLAN映射配置,以便将不同用户的不同业务用不同的VLAN进行隔离。
需要事先规划好CVLAN和SVLAN的映射关系。
表1-1 配置1:1 VLAN映射
操作 |
命令 |
说明 |
|
进入系统视图 |
system-view |
- |
|
创建VLAN(包括CVLAN和SVLAN) |
创建VLAN |
vlan vlan-id |
必选 缺省情况下,系统只有一个缺省VLAN(VLAN 1) |
退回系统视图 |
quit |
||
配置上行策略,将不同用户的不同业务VLAN(CVLAN)映射到不同的VLAN(SVLAN) |
必选 |
||
配置下行策略,将SVLAN映射回原来的CVLAN |
必选 |
||
进入下行端口的端口视图 |
interface interface-type interface-number |
- |
|
配置下行端口的链路类型为Hybrid类型 |
port link-type hybrid |
必选 对于OLT端口,缺省情况下,链路类型为Hybrid类型,且不能配置为其它类型 |
|
允许CVLAN和SVLAN通过当前Hybrid端口 |
port hybrid vlan vlan-id-list tagged |
必选 缺省情况下,所有Hybrid端口只允许VLAN 1通过 |
|
开启端口的基本QinQ功能 |
qinq enable |
必选 |
|
在下行端口上应用上行策略 |
qos apply policy policy-name inbound |
必选 |
|
在下行端口上应用下行策略 |
qos apply policy policy-name outbound |
必选 |
|
退回系统视图 |
quit |
- |
|
进入上行端口的端口视图 |
interface interface-type interface-number |
- |
|
配置上行端口的链路类型为Trunk类型 |
port link-type trunk |
必选 |
|
允许SVLAN通过当前Trunk端口 |
port trunk permit vlan { vlan-id-list | all } |
必选 缺省情况下,所有Trunk端口只允许VLAN 1通过 |
qinq enable用来开启端口的基本QinQ功能,有关命令的详细介绍请参见手册中的“QinQ命令”。
操作 |
命令 |
说明 |
进入系统视图 |
system-view |
- |
定义类并进入类映射视图 |
traffic classifier tcl-name [ operator { and | or } ] |
必选 |
定义匹配家庭用户不同业务VLAN(CVLAN)的规则 |
if-match customer-vlan-id vlan-id-value |
必选 |
退回系统视图 |
quit |
- |
定义一个流行为并进入流行为视图 |
traffic behavior behavior-name |
必选 |
配置重标记后报文的VLAN为SVLAN |
remark service-vlan-id vlan-id-value |
必选 |
退回系统视图 |
quit |
- |
定义QoS策略并进入QoS策略视图 |
qos policy policy-name |
必选 |
在策略中为类指定采用的流行为 |
classifier tcl-name behavior behavior-name |
必选 |
退回系统视图 |
quit |
- |
操作 |
命令 |
说明 |
进入系统视图 |
system-view |
- |
定义类并进入类映射视图 |
traffic classifier tcl-name [ operator { and | or } ] |
必选 |
定义匹配SVLAN的规则 |
if-match service-vlan-id vlan-id-value |
必选 |
退回系统视图 |
quit |
- |
定义一个流行为并进入流行为视图 |
traffic behavior behavior-name |
必选 |
配置重标记后报文的VLAN为CVLAN |
remark customer-vlan-id vlan-id-value |
必选 |
退回系统视图 |
quit |
- |
定义QoS策略并进入QoS策略视图 |
qos policy policy-name |
必选 |
在策略中为类指定采用的流行为 |
classifier tcl-name behavior behavior-name |
必选 |
退回系统视图 |
quit |
- |
每个家庭用户的不同业务分别采用不同的VLAN进行发送,在用户接入交换机处将不同家庭用户的相同业务采用不同的VLAN进行发送,使不同家庭的相同业务报文之间要进行隔离,不会产生混淆。
图1-2 1:1 VLAN映射配置组网图
(1) 配置Device A
# 创建CVLAN和SVLAN。
<DeviceA> system-view
[DeviceA] vlan 2 to 3
[DeviceA] vlan 101 to 102
[DeviceA] vlan 201 to 202
[DeviceA] vlan 301 to 302
# 配置上行策略,将不同用户的不同业务CVLAN映射到不同的SVLAN。
[DeviceA] traffic classifier c1
[DeviceA-classifier-c1] if-match customer-vlan-id 1
[DeviceA-classifier-c1] traffic classifier c2
[DeviceA-classifier-c2] if-match customer-vlan-id 2
[DeviceA-classifier-c2] traffic classifier c3
[DeviceA-classifier-c3] if-match customer-vlan-id 3
[DeviceA-classifier-c3] quit
[DeviceA] traffic behavior b1
[DeviceA-behavior-b1] remark service-vlan-id 101
[DeviceA-behavior-b1] traffic behavior b2
[DeviceA-behavior-b2] remark service-vlan-id 201
[DeviceA-behavior-b2] traffic behavior b3
[DeviceA-behavior-b3] remark service-vlan-id 301
[DeviceA-behavior-b3] traffic behavior b4
[DeviceA-behavior-b4] remark service-vlan-id 102
[DeviceA-behavior-b4] traffic behavior b5
[DeviceA-behavior-b5] remark service-vlan-id 202
[DeviceA-behavior-b5] traffic behavior b6
[DeviceA-behavior-b6] remark service-vlan-id 302
[DeviceA-behavior-b6] quit
[DeviceA] qos policy p1
[DeviceA-policy-p1] classifier c1 behavior b1
[DeviceA-policy-p1] classifier c2 behavior b2
[DeviceA-policy-p1] classifier c3 behavior b3
[DeviceA-policy-p1] quit
[DeviceA] qos policy p2
[DeviceA-policy-p2] classifier c1 behavior b4
[DeviceA-policy-p2] classifier c2 behavior b5
[DeviceA-policy-p2] classifier c3 behavior b6
[DeviceA-policy-p2] quit
# 配置下行策略,将SVLAN映射回原来的CVLAN。
[DeviceA] traffic classifier c11
[DeviceA-classifier-c11] if-match service-vlan-id 101
[DeviceA-classifier-c11] traffic classifier c22
[DeviceA-classifier-c22] if-match service-vlan-id 201
[DeviceA-classifier-c22] traffic classifier c33
[DeviceA-classifier-c33] if-match service-vlan-id 301
[DeviceA-classifier-c33] traffic classifier c44
[DeviceA-classifier-c44] if-match service-vlan-id 102
[DeviceA-classifier-c44] traffic classifier c55
[DeviceA-classifier-c55] if-match service-vlan-id 202
[DeviceA-classifier-c55] traffic classifier c66
[DeviceA-classifier-c66] if-match service-vlan-id 302
[DeviceA-classifier-c66] quit
[DeviceA] traffic behavior b11
[DeviceA-behavior-b11] remark customer-vlan-id 1
[DeviceA-behavior-b11] traffic behavior b22
[DeviceA-behavior-b22] remark customer-vlan-id 2
[DeviceA-behavior-b22] traffic behavior b33
[DeviceA-behavior-b33] remark customer-vlan-id 3
[DeviceA-behavior-b33] quit
[DeviceA] qos policy p11
[DeviceA-policy-p11] classifier c11 behavior b11
[DeviceA-policy-p11] classifier c22 behavior b22
[DeviceA-policy-p11] classifier c33 behavior b33
[DeviceA-policy-p11] quit
[DeviceA] qos policy p22
[DeviceA-policy-p22] classifier c44 behavior b11
[DeviceA-policy-p22] classifier c55 behavior b22
[DeviceA-policy-p22] classifier c66 behavior b33
[DeviceA-policy-p22] quit
# 配置端口Olt1/0/1允许CVLAN和SVLAN的报文通过。
[DeviceA] interface olt 1/0/1
[DeviceA-Olt1/0/1] port hybrid vlan 1 2 3 101 201 301 tegged
# 开启端口Olt1/0/1的基本QinQ功能。
[DeviceA-Olt1/0/1] qinq enable
# 在端口Olt1/0/1的入方向应用上行策略p1。
[DeviceA-Olt1/0/1] qos apply policy p1 inbound
# 在端口Olt1/0/1的出方向应用下行策略p11。
[DeviceA-Olt1/0/1] qos apply policy p11 outbound
[DeviceA-Olt1/0/1] quit
# 配置端口Olt1/0/2允许CVLAN和SVLAN的报文通过。
[DeviceA] interface olt1 1/0/2
[DeviceA-Olt1/0/2] port hybrid vlan 1 2 3 102 202 302 tegged
# 开启端口Olt1/0/2的基本QinQ功能。
[DeviceA-Olt1/0/2] qinq enable
# 在端口Olt1/0/2的入方向应用上行策略p2。
[DeviceA-Olt1/0/2] qos apply policy p2 inbound
# 在端口Olt1/0/2的出方向应用下行策略p22。
[DeviceA-Olt1/0/2] qos apply policy p22 outbound
[DeviceA-Olt1/0/2] quit
# 配置端口GigabitEthernet1/1/1允许SVLAN的报文通过。
[DeviceA] interface gigabitethernet 1/1/1
[DeviceA-GigabitEthernet1/1/1] port link-type trunk
[DeviceA-GigabitEthernet1/1/1] port trunk permit vlan 101 201 301 102 202 302
(2) 配置OLT B
# 创建CVLAN和SVLAN。
<DeviceB> system-view
[DeviceB] vlan 2 to 3
[DeviceB] vlan 111 to 112
[DeviceB] vlan 211 to 212
[DeviceB] vlan 311 to 312
# 配置上行策略,将不同用户的不同业务CVLAN映射到不同的SVLAN。
[DeviceB] traffic classifier c1
[DeviceB-classifier-c1] if-match customer-vlan-id 1
[DeviceB-classifier-c1] traffic classifier c2
[DeviceB-classifier-c2] if-match customer-vlan-id 2
[DeviceB-classifier-c2] traffic classifier c3
[DeviceB-classifier-c3] if-match customer-vlan-id 3
[DeviceB-classifier-c3] quit
[DeviceB] traffic behavior b1
[DeviceB-behavior-b1] remark service-vlan-id 111
[DeviceB-behavior-b1] traffic behavior b2
[DeviceB-behavior-b2] remark service-vlan-id 211
[DeviceB-behavior-b2] traffic behavior b3
[DeviceB-behavior-b3] remark service-vlan-id 311
[DeviceB-behavior-b3] traffic behavior b4
[DeviceB-behavior-b4] remark service-vlan-id 112
[DeviceB-behavior-b4] traffic behavior b5
[DeviceB-behavior-b5] remark service-vlan-id 212
[DeviceB-behavior-b5] traffic behavior b6
[DeviceB-behavior-b6] remark service-vlan-id 312
[DeviceB-behavior-b6] quit
[DeviceB] qos policy p1
[DeviceB-policy-p1] classifier c1 behavior b1
[DeviceB-policy-p1] classifier c2 behavior b2
[DeviceB-policy-p1] classifier c3 behavior b3
[DeviceB-policy-p1] quit
[DeviceB] qos policy p2
[DeviceB-policy-p2] classifier c1 behavior b4
[DeviceB-policy-p2] classifier c2 behavior b5
[DeviceB-policy-p2] classifier c3 behavior b6
[DeviceB-policy-p2] quit
# 配置下行策略,将SVLAN映射回原来的CVLAN。
[DeviceB] traffic classifier c11
[DeviceB-classifier-c11] if-match service-vlan-id 111
[DeviceB-classifier-c11] traffic classifier c22
[DeviceB-classifier-c22] if-match service-vlan-id 211
[DeviceB-classifier-c22] traffic classifier c33
[DeviceB-classifier-c33] if-match service-vlan-id 311
[DeviceB-classifier-c33] traffic classifier c44
[DeviceB-classifier-c44] if-match service-vlan-id 112
[DeviceB-classifier-c44] traffic classifier c55
[DeviceB-classifier-c55] if-match service-vlan-id 212
[DeviceB-classifier-c55] traffic classifier c66
[DeviceB-classifier-c66] if-match service-vlan-id 312
[DeviceB-classifier-c66] quit
[DeviceB] traffic behavior b11
[DeviceB-behavior-b11] remark customer-vlan-id 1
[DeviceB-behavior-b11] traffic behavior b22
[DeviceB-behavior-b22] remark customer-vlan-id 2
[DeviceB-behavior-b22] traffic behavior b33
[DeviceB-behavior-b33] remark customer-vlan-id 3
[DeviceB-behavior-b33] quit
[DeviceB] qos policy p11
[DeviceB-policy-p11] classifier c11 behavior b11
[DeviceB-policy-p11] classifier c22 behavior b22
[DeviceB-policy-p11] classifier c33 behavior b33
[DeviceB-policy-p11] quit
[DeviceB] qos policy p22
[DeviceB-policy-p22] classifier c44 behavior b11
[DeviceB-policy-p22] classifier c55 behavior b22
[DeviceB-policy-p22] classifier c66 behavior b33
[DeviceB-policy-p22] quit
# 配置端口Olt1/0/1允许CVLAN和SVLAN的报文通过。
[DeviceB] interface olt 1/0/1
[DeviceB-Olt1/0/1] port hybrid vlan 1 2 3 111 211 311 tagged
# 开启端口Olt1/0/1的基本QinQ功能。
[DeviceB-Olt1/0/1] qinq enable
# 在端口Olt1/0/1的入方向应用上行策略p1。
[DeviceB-Olt1/0/1] qos apply policy p1 inbound
# 在端口Olt1/0/1的出方向应用下行策略p11。
[DeviceB-Olt1/0/1] qos apply policy p11 outbound
[DeviceB-Olt1/0/1] quit
# 配置端口Olt1/0/2允许CVLAN和SVLAN的报文通过。
[DeviceB] interface olt1/0/2
[DeviceB-Olt1/0/2] port hybrid vlan 1 2 3 112 212 312 tagged
# 开启端口Olt1/0/2的基本QinQ功能。
[DeviceB-Olt1/0/2] qinq enable
# 在端口Olt1/0/2的入方向应用上行策略p2。
[DeviceB-Olt1/0/2] qos apply policy p2 inbound
# 在端口Olt1/0/2的出方向应用下行策略p22。
[DeviceB-Olt1/0/2] qos apply policy p22 outbound
[DeviceB-Olt1/0/2] quit
# 配置端口GigabitEthernet1/1/1允许SVLAN的报文通过。
[DeviceB] interface gigabitethernet1/1/1
[DeviceB-GigabitEthernet1/1/1] port link-type trunk
[DeviceB-GigabitEthernet1/1/1] port trunk permit vlan 111 211 311 112 212 312
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!