Table of Contents

1 VLAN-VPN Configuration Commands· 1-1

VLAN-VPN Configuration Commands· 1-1

display port vlan-vpn· 1-1

vlan-vpn enable· 1-1

vlan-vpn tpid· 1-2

vlan-vpn uplink enable· 1-3

2 Selective QinQ Configuration Commands· 2-1

Selective QinQ Configuration Commands· 2-1

raw-vlan-id inbound· 2-1

vlan-vpn priority· 2-2

vlan-vpn vid· 2-3

 

VLAN-VPN Configuration Commands

display port vlan-vpn

Syntax

display port vlan-vpn

View

Any view

Parameters

None

Description

Use the display port vlan-vpn command to display the information about VLAN-VPN configuration of the current system. including current TPID value, VLAN-VPN ports, and VLAN-VPN uplink ports.

Examples

# Display the information about VLAN-VPN configuration of the current system

<device> display port vlan-vpn

 VLAN-VPN TPID: 8100

 

GigabitEthernet1/0/4

 VLAN-VPN status: enabled

 VLAN-VPN VLAN: 1

 

GigabitEthernet1/0/11

 VLAN-VPN uplink status: enabled

 

GigabitEthernet1/0/12

 VLAN-VPN uplink status: enabled         

vlan-vpn enable

Syntax

vlan-vpn enable

undo vlan-vpn

View

Ethernet port view

Parameters

None

Description

Use the vlan-vpn enable command to enable the VLAN-VPN feature for a port.

Use the undo vlan-vpn command to disable the VLAN-VPN feature for a port.

By default, the VLAN-VPN feature is disabled.

With the VLAN-VPN feature enabled, a received packet is tagged with the default VLAN tag of the receiving port no matter whether or not the packet already carries a VLAN tag.

l          If the packet already carries a VLAN tag, the packet becomes a dual-tagged packet.

l          Otherwise, the packet becomes a packet carrying the default VLAN tag of the port.

 

 

Examples

# Enable the VLAN-VPN feature for GigabitEthernet 1/0/1.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] interface GigabitEthernet 1/0/1

[device-GigabitEthernet1/0/1] vlan-vpn enable

vlan-vpn tpid

Syntax

vlan-vpn tpid value

undo vlan-vpn tpid

View

System view

Parameters

value: User-defined TPID value (in hexadecimal format), in the range 0x0001 to 0xFFFF.

Description

Use the vlan-vpn tpid command to set the TPID value.

Use the undo vlan-vpn tpid command to restore the default TPID value.

The default TPID value is 0x8100.

The position of the TPID field in an Ethernet packet is the same as the position of the protocol type field in a packet without VLAN Tag. Thus, to avoid confusion happening when the device forwards or receives a packet, do not configure the protocol type values listed in Table 1-1 as the TPID value.

Table 1-1 Common Ethernet frame protocol type values

Protocol type	Value
ARP	0x0806
IP	0x0800
MPLS	0x8847/0x8848
IPX	0x8137
IS-IS	0x8000
LACP	0x8809
802.1x	0x888E

 

Examples

# Set the TPID value to 0x9100.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] vlan-vpn tpid 9100

vlan-vpn uplink enable

Syntax

vlan-vpn uplink enable

undo vlan-vpn uplink

View

Ethernet port view

Parameters

None

Description

Use the vlan-vpn uplink enable command to configure a port to be a VLAN-VPN uplink port.

Use the undo vlan-vpn uplink command to remove the configuration.

By default, no port is configured to VLAN-VPN uplink port.

When sending a VLAN-VPN packet, a VLAN-VPN uplink port replaces the TPID value in the outer VLAN tag of the packet with the customized TPID value. You can use the vlan-vpn tpid command to set the TPID value used by the VLAN-VPN uplink port.

 

 

Examples

# Configure GigabitEthernet1/0/2 to be a VLAN-VPN uplink port.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] interface GigabitEthernet 1/0/2

[device-GigabitEthernet1/0/2] vlan-vpn uplink enable

 

Selective QinQ Configuration Commands

raw-vlan-id inbound

Syntax

raw-vlan-id inbound vlan-id-list

undo raw-vlan-id inbound { all | vlan-id-list }

View

QinQ view

Parameters

vlan-id-list: Lists of VLAN IDs to be tagged as outer VLAN tags. You need to provide this argument in the form of { vlan-id [ to vlan-id ] }&<1-10>, where the VLAN ID after the to keyword must be larger than or equal to the VLAN ID before the to keyword and &<1-10> means that you can specify up to 10 VLANs/VLAN ranges for this argument.

all: Specifies not to tag any packet carrying an inner VLAN tag with an outer VLAN tag.

Description

Use the raw-vlan-id inbound command to specify the outer tag for the packets with the specified inner VLAN tags. This command must be configured on ports receiving packets from the private network.

Use the undo raw-vlan-id inbound command to remove the configuration.

 

 

Related commands: vlan-vpn vid.

Examples

# Specify to add the tag of VLAN 20 as the outer tag to the packets with their inner VLAN IDs being 8 through 15 for GigabitEthernet 1/0/1.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] interface GigabitEthernet 1/0/1

[device-GigabitEthernet1/0/1] vlan-vpn vid 20

[device-GigabitEthernet1/0/1-vid-20] raw-vlan-id inbound 8 to 15

vlan-vpn priority

Syntax

vlan-vpn priority old-priority remark new-priority

undo vlan-vpn priority old-priority

View

Ethernet port view

Parameters

old-priority: 802.1p priority of the inner VLAN tag in a packet. This argument can be in the range 0 to 7 or a keyword listed in Table 2-1.

new-priority: Priority for the outer VLAN tag in a packet. This argument can be in the range 0 to 7 or a keyword listed in Table 2-1.

Table 2-1 Description on 802.1p priority

IP Precedence (decimal)	Keyword
0	Best-effort
1	Background
2	Spare
3	Excellent-effort
4	Controlled-load
5	Video
6	Voice
7	Network-management

 

 

Description

Use the vlan-vpn priority command to configure the mapping relationship between the inner VLAN priority and the outer VLAN priority.

Use the undo vlan-vpn priority command to remove the configuration.

When the outer VLAN tag is inserted, the VLAN-VPN feature assigns a priority to the outer VLAN tag based on the inner VLAN tag priority according to the configured mapping relationship.

By default, the priority in the outer VLAN tag is the port priority.

Examples

# Enable the inner-to-outer tag priority mapping feature for GigabitEthernet 1/0/1. Insert outer tags with the priorities being 5 to packets with the priorities of their inner tags being 3.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] interface GigabitEthernet 1/0/1

[device-GigabitEthernet1/0/1] vlan-vpn priority 3 remark 5

vlan-vpn vid

Syntax

vlan-vpn vid vlan-id

undo vlan-vpn vid vlan-id

View

Ethernet port view

Parameters

vlan-id: VLAN ID, in the range 1 to 4094.

Description

Use the vlan-vpn vid command to configure the outer VLAN tag for a selective-QinQ-enabled port. This command also leads you to QinQ view. A selective-QinQ-enabled port adds user-defined outer VLAN tags to the packets received. You can use the raw-vlan-id inbound command to add outer VLAN tags to the packets with the specified inner VLAN tags.

Use the undo vlan-vpn vid command to remove the configuration.

Before configuring this command, make sure that the vlan-vpn enable command is configured.

 

 

By default, the outer VLAN tag added in the selective QinQ feature is the VLAN tag corresponding to the port’s default VLAN ID.

This command must be coupled with the raw-vlan-id inbound command to add different outer VLAN tags for packets of different VLANs.

Related commands: raw-vlan-id inbound.

Examples

# Specify to add VLAN 20 tag as the outer tags to the packets with their inner VLAN IDs being 2 through 14 for GigabitEthernet 1/0/1.

<device> system-view

System View: return to User View with Ctrl+Z.

[device] interface GigabitEthernet 1/0/1

[device-GigabitEthernet1/0/1] vlan-vpn vid 20

[device-GigabitEthernet1/0/1-vid-20] raw-vlan-id inbound 2 to 1