Contents

VLAN termination commands· 1

second-dot1q· 2

vlan-termination broadcast enable· 3

vlan-termination broadcast ra· 4

vlan-type dot1q default 5

vlan-type dot1q untagged· 6

vlan-type dot1q vid· 6

vlan-type dot1q vid second-dot1q· 7

 

VLAN termination commands

The following compatibility matrixes show the support of hardware platforms for VLAN termination:

 

Hardware series	Model	Product code	VLAN termination compatibility
WX1800H series	WX1804H	EWP-WX1804H-PWR-CN	Yes
WX2500H series	WX2508H-PWR-LTE WX2510H WX2510H-F WX2540H WX2540H-F WX2560H	EWP-WX2508H-PWR-LTE EWP-WX2510H-PWR EWP-WX2510H-F-PWR EWP-WX2540H EWP-WX2540H-F EWP-WX2560H	Yes
WX3000H series	WX3010H WX3010H-X WX3010H-L WX3024H WX3024H-L WX3024H-F	EWP-WX3010H EWP-WX3010H-X-PWR EWP-WX3010H-L-PWR EWP-WX3024H EWP-WX3024H-L-PWR EWP-WX3024H-F	Yes: ·     WX3010H ·     WX3024H ·     WX3024H-F No: ·     WX3010H-L ·     WX3010H-X ·     WX3024H-L
WX3500H series	WX3508H WX3510H WX3520H WX3520H-F WX3540H	EWP-WX3508H EWP-WX3510H EWP-WX3520H EWP-WX3520H-F EWP-WX3540H	Yes
WX5500E series	WX5510E WX5540E	EWP-WX5510E EWP-WX5540E	No
WX5500H series	WX5540H WX5560H WX5580H	EWP-WX5540H EWP-WX5560H EWP-WX5580H	Yes
Access controller modules	LSUM1WCME0 EWPXM1WCME0 LSQM1WCMX20 LSUM1WCMX20RT LSQM1WCMX40 LSUM1WCMX40RT EWPXM2WCMD0F EWPXM1MAC0F	LSUM1WCME0 EWPXM1WCME0 LSQM1WCMX20 LSUM1WCMX20RT LSQM1WCMX40 LSUM1WCMX40RT EWPXM2WCMD0F EWPXM1MAC0F	No

‌

Hardware series	Model	Product code	VLAN termination compatibility
WX1800H series	WX1804H WX1810H WX1820H WX1840H	EWP-WX1804H-PWR EWP-WX1810H-PWR EWP-WX1820H EWP-WX1840H-GL	Yes
WX3800H series	WX3820H WX3840H	EWP-WX3820H-GL EWP-WX3840H-GL	No
WX5800H series	WX5860H	EWP-WX5860H-GL	No

‌

second-dot1q

Use second-dot1q to enable QinQ termination on an interface, and specify the Layer 2 VLAN IDs of the VLAN-tagged packets that can be terminated by the interface.

Use undo second-dot1q to disable QinQ termination on an interface.

Syntax

second-dot1q { vlan-id-list | any }

undo second-dot1q { vlan-id-list | any }

Default

QinQ termination is disabled on an interface.

Views

VLAN interface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 Layer 2 VLAN ID items. Each item specifies a Layer 2 VLAN ID or a range of Layer 2 VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

any: Specifies all values between 1 and 4094.

Usage guidelines

When you execute this command, the Layer 1 VLAN ID of VLAN-tagged packets that can be terminated by the interface is the interface number. This Layer 1 VLAN ID is not configurable.

Examples

# Configure VLAN-interface 10 to terminate VLAN-tagged packets with Layer 2 VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] second-dot1q 10 to 20

[Sysname-Vlan-interface10] quit

# Configure VLAN-interface 12 to terminate VLAN-tagged packets with Layer 2 VLAN ID 100.

[Sysname] interface vlan-interface 12

[Sysname-Vlan-interface12] second-dot1q 100

[Sysname-Vlan-interface12] quit

# Configure VLAN-interface 100 to terminate VLAN-tagged packets with any Layer 2 VLAN IDs.

[Sysname] interface vlan-interface 100

[Sysname-Vlan-interface100] second-dot1q any

The following table describes the configuration results:

 

VLAN interface	Layer 1 VLAN ID of VLAN-tagged packets that the VLAN interface can terminate	Layer 2 VLAN IDs of VLAN-tagged packets that the VLAN interface can terminate
VLAN-interface 10	10	10–20
VLAN-interface 12	12	100
VLAN-interface 100	100	1–4094

 

vlan-termination broadcast enable

Use vlan-termination broadcast enable to enable an interface to transmit broadcasts and multicasts.

Use undo vlan-termination broadcast enable to disable an interface from transmitting broadcasts and multicasts.

Syntax

vlan-termination broadcast enable

undo vlan-termination broadcast enable

Default

An ambiguous Dot1q or QinQ termination-enabled interface drops broadcast and multicast packets.

Views

Layer 3 Ethernet subinterface view

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

	IMPORTANT: This command affects system performance. If system performance is seriously affected by this command, execute the undo form of this command to remove the command configuration.

 

.To transmit a broadcast or multicast packet, the interface starts a traversal over the VLAN IDs specified for ambiguous termination. It copies the packet and tags each copy with a VLAN ID, until all VLAN IDs in the specified range are traversed. For example, when ambiguous QinQ termination is configured, both layers of VLAN ID ranges are traversed.

Use this command when ambiguous Dot1q or QinQ termination is enabled on an interface.

Examples

Configure GigabitEthernet 1/0/1.10 to tag a multicast or broadcast packet with each VLAN tag in the range of 10 to 20.

# Enable Dot1q termination on GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.10

[Sysname-GigabitEthernet1/0/1.10] vlan-type dot1q vid 10 to 20

# Enable GigabitEthernet 1/0/1.10 to transmit broadcast and multicast packets.

[Sysname-GigabitEthernet1/0/1.10] vlan-termination broadcast enable

Configure GigabitEthernet 1/0/1.10 to tag a multicast or broadcast packet with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

# Configure GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.10

[Sysname-GigabitEthernet1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

# Enable GigabitEthernet 1/0/1.10 to transmit broadcast and multicast packets.

[Sysname-GigabitEthernet1/0/1.10] vlan-termination broadcast enable.

Configure VLAN-interface 10 to tag a multicast or broadcast packet with two layers of VLAN IDs. The Layer 1 VLAN ID is 10. The Layer 2 VLAN ID is each VLAN ID in the range of 10 to 20.

# Configure VLAN-interface 10 to terminate VLAN-tagged packets with Layer 2 VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] second-dot1q 10 to 20

# Enable VLAN-interface 10 to transmit broadcast and multicast packets.

[Sysname-Vlan-interface10] vlan-termination broadcast enable

vlan-termination broadcast ra

Use vlan-termination broadcast ra to enable an interface to transmit router advertisement (RA) multicast packets.

Use undo vlan-termination broadcast ra to disable an interface from transmitting RA multicast packets.

Syntax

vlan-termination broadcast ra

undo vlan-termination broadcast ra

Default

An ambiguous Dot1q or QinQ termination-enabled interface drops broadcast and multicast packets.

Views

Layer 3 Ethernet subinterface view

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

To transmit an RA multicast packet, the interface starts a traversal over the VLAN IDs specified for ambiguous termination. It copies the packet and tags each copy with a VLAN ID, until all VLAN IDs in the specified range are traversed. For example, when ambiguous QinQ termination is configured, both layers of VLAN ID ranges are traversed.

As a best practice, use this command to enable an ambiguous Dot1q or QinQ termination-enabled interface to transmit RA multicast packets on an IPv6 network. This command prohibits transmission of broadcast packets and other types of multicast packets, and consumes less CPU resources than the vlan-termination broadcast enable command.

Examples

Configure GigabitEthernet 1/0/1.10 to tag RA multicast packets with each VLAN tag in the range of 10 to 20.

# Enable Dot1q termination on GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.10

[Sysname-GigabitEthernet1/0/1.10] vlan-type dot1q vid 10 to 20

# Enable GigabitEthernet 1/0/1.10 to transmit RA multicast packets.

[Sysname-GigabitEthernet1/0/1.10] vlan-termination broadcast ra

Configure GigabitEthernet 1/0/1.10 to tag RA multicast packets with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

# Configure GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.10

[Sysname-GigabitEthernet1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

# Enable GigabitEthernet 1/0/1.10 to transmit RA multicast packets.

[Sysname-GigabitEthernet1/0/1.10] vlan-termination broadcast ra

Configure VLAN-interface 10 to tag RA multicast packets with two layers of VLAN IDs. The Layer 1 VLAN ID is 10. The Layer 2 VLAN ID is each VLAN ID in the range of 10 to 20.

# Configure VLAN-interface 10 to terminate VLAN-tagged packets with Layer 2 VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] second-dot1q 10 to 20

# Enable VLAN-interface 10 to transmit RA multicast packets.

[Sysname-Vlan-interface10] vlan-termination broadcast ra

vlan-type dot1q default

Use vlan-type dot1q default to enable default termination on a subinterface.

Use undo vlan-type dot1q default to disable default termination on a subinterface.

Syntax

vlan-type dot1q default

undo vlan-type dot1q default

Default

Default termination is disabled on a subinterface.

Views

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

Usage guidelines

This command enables the subinterface to process packets that cannot be terminated by other subinterfaces on the same main interface.

Examples

# Enable default termination on GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] vlan-type dot1q default

[Sysname-GigabitEthernet1/0/1.1] quit

vlan-type dot1q untagged

Use vlan-type dot1q untagged to enable untagged termination on a subinterface.

Use undo vlan-type dot1q untagged to disable untagged termination on a subinterface.

Syntax

vlan-type dot1q untagged

undo vlan-type dot1q untagged

Default

Untagged termination is disabled on a subinterface.

Views

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

Usage guidelines

This command enables the subinterface to process untagged packets.

Examples

# Enable untagged termination on GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] vlan-type dot1q untagged

[Sysname-GigabitEthernet1/0/1.1] quit

vlan-type dot1q vid

Use vlan-type dot1q vid to enable Dot1q termination on a subinterface, and specify the outermost VLAN IDs in the VLAN-tagged packets that can be terminated by the subinterface.

Use undo vlan-type dot1q vid to disable Dot1q termination on a subinterface.

Syntax

vlan-type dot1q vid vlan-id-list

undo vlan-type dot1q vid vlan-id-list

Default

Dot1q termination is disabled on a subinterface.

Views

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 outermost VLAN ID items. Each item specifies an outermost VLAN ID or a range of outermost VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

Usage guidelines

The VLAN ID ranges specified by the vlan-id-list argument for different subinterfaces of a main interface cannot overlap.

Examples

# Configure GigabitEthernet 1/0/1.1 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 2 to 100.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] vlan-type dot1q vid 2 to 100

vlan-type dot1q vid second-dot1q

Use vlan-type dot1q vid second-dot1q to enable QinQ termination on a subinterface, and specify the outermost two layers of VLAN IDs of VLAN-tagged packets that can be terminated by the subinterface.

Use undo vlan-type dot1q vid second-dot1q to disable QinQ termination on a subinterface.

Syntax

vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }

undo vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }

Default

QinQ termination is disabled on a subinterface.

Views

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN ID items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

any: Specifies all values between 1 and 4094.

Usage guidelines

L2VE subinterfaces support only unambiguous QinQ termination, and do not support the loose keyword.

Two subinterfaces of the same Ethernet interface cannot terminate packets that include the same two layers of VLAN IDs. If you configure the subinterfaces to terminate the same Layer 1 VLAN ID, make sure their Layer 2 VLAN ID ranges do not overlap. If you specify both any and vlan-id-list as the respective Layer 2 VLAN ID ranges of the subinterfaces, the any keyword does not include the VLAN IDs specified by vlan-id-list.

Examples

# Enable QinQ termination on the Layer 3 Ethernet subinterfaces, and configure each subinterface to terminate VLAN-tagged packets with the specified Layer 1 and Layer 2 VLAN IDs.

·     Configure GigabitEthernet 1/0/1.1 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are both 100.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] vlan-type dot1q vid 100 second-dot1q 100

[Sysname-GigabitEthernet1/0/1.1] quit

·     Configure GigabitEthernet 1/0/1.2 to terminate VLAN-tagged packets with Layer 1 VLAN ID 100 and Layer 2 VLAN IDs in the range of 200 to 300.

[Sysname] interface gigabitethernet 1/0/1.2

[Sysname-GigabitEthernet1/0/1.2] vlan-type dot1q vid 100 second-dot1q 200 to 300

[Sysname-GigabitEthernet1/0/1.2] quit

·     Configure GigabitEthernet 1/0/1.3 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is any value between 1 and 4094.

[Sysname] interface gigabitethernet 1/0/1.3

[Sysname-GigabitEthernet1/0/1.3] vlan-type dot1q vid 100 second-dot1q any

[Sysname-GigabitEthernet1/0/1.3] quit

·     Configure GigabitEthernet 1/0/1.4 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is in the range of 500 to 600.

[Sysname] interface gigabitethernet 1/0/1.4

[Sysname-GigabitEthernet1/0/1.4] vlan-type dot1q vid 100 second-dot1q 500 to 600

[Sysname-GigabitEthernet1/0/1.4] quit

·     Configure GigabitEthernet 1/0/1.5 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 200 and Layer 2 VLAN ID is in the range of 500 to 600.

[Sysname] interface gigabitethernet 1/0/1.5

[Sysname-GigabitEthernet1/0/1.5] vlan-type dot1q vid 200 second-dot1q 500 to 600

[Sysname-GigabitEthernet1/0/1.5] quit

·     Configure GigabitEthernet 1/0/1.6 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is in the range of 300 to 400 and Layer 2 VLAN ID is 100.

[Sysname] interface gigabitethernet 1/0/1.6

[Sysname-GigabitEthernet1/0/1.6] vlan-type dot1q vid 300 to 400 second-dot1q 100

[Sysname-GigabitEthernet1/0/1.6] quit

·     Configure GigabitEthernet 1/0/1.7 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 IDs are in the range of 300 to 400 and 500 to 600, respectively.

[Sysname] interface gigabitethernet 1/0/1.7

[Sysname-GigabitEthernet1/0/1.7] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

[Sysname-GigabitEthernet1/0/1.7] quit

·     Configure GigabitEthernet 1/0/1.8 to terminate VLAN-tagged packets with a Layer 1 VLAN ID in the range of 300 to 400 and any Layer 2 VLAN ID.

[Sysname] interface gigabitethernet 1/0/1.8

[Sysname-GigabitEthernet1/0/1.8] vlan-type dot1q vid 300 to 400 second-dot1q any

The following table describes the configuration results:

 

Layer 3 Ethernet subinterface	Layer 1 VLAN IDs of VLAN-tagged packets that the subinterface can terminate	Layer 2 VLAN IDs of VLAN-tagged packets that the subinterface can terminate
GigabitEthernet 1/0/1.1	100	100
GigabitEthernet 1/0/1.2	100	200–300
GigabitEthernet 1/0/1.3	100	1–99, 101–199, 301–499, and 601–4094
GigabitEthernet 1/0/1.4	100	500–600
GigabitEthernet 1/0/1.5	200	500–600
GigabitEthernet 1/0/1.6	300–400	100
GigabitEthernet 1/0/1.7	300–400	500–600
GigabitEthernet 1/0/1.8	300–400	1–99, 101–499, and 601–4094