Contents

VLAN termination commands· 1

second-dot1q· 1

vlan-termination broadcast enable· 2

vlan-termination broadcast ra· 3

vlan-termination user-mode· 4

vlan-type dot1q vid· 5

vlan-type dot1q vid second-dot1q· 5

 

VLAN termination commands

To use VLAN termination, first set the system operating mode to enhanced Layer 2. For more information about the system operating mode, see device management in Fundamentals Configuration Guide.

second-dot1q

Use second-dot1q to enable QinQ termination on an interface, and specify the Layer 2 VLAN IDs of the VLAN-tagged packets that can be terminated by the interface.

Use undo second-dot1q to disable QinQ termination on an interface.

Syntax

second-dot1q { vlan-id-list | any }

undo second-dot1q { vlan-id-list | any }

Default

QinQ termination is disabled on an interface.

Views

VLAN interface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 Layer 2 VLAN ID items. Each item specifies a Layer 2 VLAN ID or a range of Layer 2 VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

any: Specifies all values between 1 and 4094.

Usage guidelines

When you execute this command, the Layer 1 VLAN ID of VLAN-tagged packets that can be terminated by the interface is the interface number. This Layer 1 VLAN ID is not configurable.

Examples

# Configure VLAN-interface 10 to terminate VLAN-tagged packets with Layer 2 VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] second-dot1q 10 to 20

[Sysname-Vlan-interface10] quit

# Configure VLAN-interface 12 to terminate VLAN-tagged packets with Layer 2 VLAN ID 100.

[Sysname] interface vlan-interface 12

[Sysname-Vlan-interface12] second-dot1q 100

[Sysname-Vlan-interface12] quit

# Configure VLAN-interface 100 to terminate VLAN-tagged packets with any Layer 2 VLAN IDs.

[Sysname] interface vlan-interface 100

[Sysname-Vlan-interface100] second-dot1q any

The following table describes the configuration results:

 

VLAN interface	Layer 1 VLAN ID of VLAN-tagged packets that the VLAN interface can terminate	Layer 2 VLAN IDs of VLAN-tagged packets that the VLAN interface can terminate
VLAN-interface 10	10	10–20
VLAN-interface 12	12	100
VLAN-interface 100	100	1–4094

‌

vlan-termination broadcast enable

Use vlan-termination broadcast enable to enable an interface to transmit broadcasts and multicasts.

Use undo vlan-termination broadcast enable to disable an interface from transmitting broadcasts and multicasts.

Syntax

vlan-termination broadcast enable

undo vlan-termination broadcast enable

Default

Broadcast and multicast packets are dropped on an interface configured with Dot1q/QinQ termination to terminate packets of multiple VLANs.

Views

Layer 3 aggregate/Ethernet subinterface view

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

	IMPORTANT: This command affects system performance. If system performance is seriously affected by this command, execute the undo form of this command to remove the command configuration.

 

To transmit a broadcast or multicast packet, the interface starts a traversal over all the VLAN IDs specified for Dot1q/QinQ termination. It copies the packet and tags each copy with VLAN IDs, until all combinations of VLAN IDs are traversed.

Examples

·     Configure Ten-GigabitEthernet 1/0/1.10 to tag a multicast or broadcast packet with each VLAN tag in the range of 10 to 20.

# Enable Dot1q termination on Ten-GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.10

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-type dot1q vid 10 to 20

# Enable Ten-GigabitEthernet 1/0/1.10 to transmit broadcast and multicast packets.

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-termination broadcast enable

·     Configure Ten-GigabitEthernet 1/0/1.10 to tag a multicast or broadcast packet with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

# Configure Ten-GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.10

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

# Enable Ten-GigabitEthernet 1/0/1.10 to transmit broadcast and multicast packets.

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-termination broadcast enable

vlan-termination broadcast ra

Use vlan-termination broadcast ra to enable an interface to transmit router advertisement (RA) multicast packets.

Use undo vlan-termination broadcast ra to disable an interface from transmitting RA multicast packets.

Syntax

vlan-termination broadcast ra

undo vlan-termination broadcast ra

Default

Broadcast and multicast packets are dropped on an interface configured with Dot1q/QinQ termination to terminate packets of multiple VLANs.

Views

Layer 3 aggregate/Ethernet subinterface view

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

To transmit an RA multicast packet, the interface starts a traversal over all the VLAN IDs specified for Dot1q/QinQ termination. It copies the packet and tags each copy with VLAN IDs, until all combinations of VLAN IDs are traversed.

You must use this command to enable an ambiguous Dot1q or QinQ termination-enabled interface to transmit RA multicast packets on an IPv6 network. This command prohibits transmission of broadcast packets and other types of multicast packets, and consumes less CPU resources than the vlan-termination broadcast enable command.

Examples

·     Configure Ten-GigabitEthernet 1/0/1.10 to tag RA multicast packets with each VLAN tag in the range of 10 to 20.

# Enable Dot1q termination on Ten-GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.10

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-type dot1q vid 10 to 20

# Enable Ten-GigabitEthernet 1/0/1.10 to transmit RA multicast packets.

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-termination broadcast ra

·     Configure Ten-GigabitEthernet 1/0/1.10 to tag RA multicast packets with each Layer 1 VLAN ID and each Layer 2 VLAN ID. The Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

# Configure Ten-GigabitEthernet 1/0/1.10 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are in the range of 300 to 400 and 500 to 600, respectively.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.10

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

# Enable Ten-GigabitEthernet 1/0/1.10 to transmit RA multicast packets.

[Sysname-Ten-GigabitEthernet1/0/1.10] vlan-termination broadcast ra

vlan-termination user-mode

Use vlan-termination user-mode to enable user mode of VLAN termination.

Use undo vlan-termination user-mode to disable user mode of VLAN termination.

Syntax

vlan-termination user-mode

undo vlan-termination user-mode

Default

User mode of VLAN termination is disabled.

Views

Layer 3 aggregate/Ethernet subinterface view

Predefined user roles

network-admin

Usage guidelines

After you modify VLAN termination on a subinterface, the subinterface automatically restarts. In some networks, the subinterface restart logs off online users. To prevent the subinterface restart and protect the online user state, enable user mode of VLAN termination before you modify VLAN termination on the subinterface.

After you enable user mode of VLAN termination and modify VLAN termination on a subinterface, clear entries of VLANs that are no longer terminated by the subinterface. If you do not clear these entries, running services might be affected. For example, after you modify VLAN termination on a subinterface, perform the following tasks for the subinterface:

·     Use the reset arp interface command in user view to clear all ARP entries.

·     Use the reset ipv6 neighbors interface command in user view to clear all dynamic neighbors.

For more information about the reset arp and reset ipv6 neighbors commands, see ARP and IPv6 basics commands in Layer 3—IP Services Command Reference.

Examples

# Enable user mode of VLAN termination on Ten-GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.1

[Sysname-Ten-GigabitEthernet1/0/1.1] vlan-termination user-mode

vlan-type dot1q vid

Use vlan-type dot1q vid to enable Dot1q termination on a subinterface, and specify the outermost VLAN IDs in the VLAN-tagged packets that can be terminated by the subinterface.

Use undo vlan-type dot1q vid to disable Dot1q termination on a subinterface.

Syntax

vlan-type dot1q vid vlan-id-list

undo vlan-type dot1q vid vlan-id-list

Default

Dot1q termination is disabled on a subinterface.

Views

Layer 3 aggregate/Ethernet subinterface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 outermost VLAN ID items. Each item specifies an outermost VLAN ID or a range of outermost VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

Usage guidelines

The outermost VLAN ID ranges specified by the vlan-id-list argument for different subinterfaces of a main interface cannot overlap.

Examples

# Configure Ten-GigabitEthernet 1/0/1.1 to terminate VLAN-tagged packets with outermost VLAN IDs in the range of 2 to 100.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.1

[Sysname-Ten-GigabitEthernet1/0/1.1] vlan-type dot1q vid 2 to 100

vlan-type dot1q vid second-dot1q

Use vlan-type dot1q vid second-dot1q to enable QinQ termination on a subinterface, and specify the outermost two layers of VLAN IDs of VLAN-tagged packets that can be terminated by the subinterface.

Use undo vlan-type dot1q vid second-dot1q to disable QinQ termination on a subinterface.

Syntax

vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }

undo vlan-type dot1q vid vlan-id-list second-dot1q { vlan-id-list | any }

Default

QinQ termination is disabled on a subinterface.

Views

Layer 3 aggregate/Ethernet/VE subinterface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN ID items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

any: Specifies all values between 1 and 4094.

Usage guidelines

Two subinterfaces of the same main interface cannot terminate packets that include the same two layers of VLAN IDs. If you configure the subinterfaces to terminate the same Layer 1 VLAN ID, make sure their Layer 2 VLAN ID ranges do not overlap. If you specify both any and vlan-id-list as the respective Layer 2 VLAN ID ranges of the subinterfaces, the any keyword does not include the VLAN IDs specified by vlan-id-list.

You can configure QinQ termination once on the same subinterface. To modify the QinQ termination settings, perform the following tasks:

1.     Execute the undo vlan-type dot1q vid second-dot1q command to delete the existing QinQ termination settings.

2.     Configure QinQ termination again.

Examples

# Enable QinQ termination on the Layer 3 Ethernet subinterfaces, and configure each subinterface to terminate VLAN-tagged packets with the specified Layer 1 and Layer 2 VLAN IDs.

·     Configure Ten-GigabitEthernet 1/0/1.1 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 VLAN IDs are both 100.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1.1

[Sysname-Ten-GigabitEthernet1/0/1.1] vlan-type dot1q vid 100 second-dot1q 100

[Sysname-Ten-GigabitEthernet1/0/1.1] quit

·     Configure Ten-GigabitEthernet 1/0/1.2 to terminate VLAN-tagged packets with Layer 1 VLAN ID 100 and Layer 2 VLAN IDs in the range of 200 to 300.

[Sysname] interface ten-gigabitethernet 1/0/1.2

[Sysname-Ten-GigabitEthernet1/0/1.2] vlan-type dot1q vid 100 second-dot1q 200 to 300

[Sysname-Ten-GigabitEthernet1/0/1.2] quit

·     Configure Ten-GigabitEthernet 1/0/1.3 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is any value between 1 and 4094.

[Sysname] interface ten-gigabitethernet 1/0/1.3

[Sysname-Ten-GigabitEthernet1/0/1.3] vlan-type dot1q vid 100 second-dot1q any

[Sysname-Ten-GigabitEthernet1/0/1.3] quit

·     Configure Ten-GigabitEthernet 1/0/1.4 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 100 and Layer 2 VLAN ID is in the range of 500 to 600.

[Sysname] interface ten-gigabitethernet 1/0/1.4

[Sysname-Ten-GigabitEthernet1/0/1.4] vlan-type dot1q vid 100 second-dot1q 500 to 600

[Sysname-Ten-GigabitEthernet1/0/1.4] quit

·     Configure Ten-GigabitEthernet 1/0/1.5 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is 200 and Layer 2 VLAN ID is in the range of 500 to 600.

[Sysname] interface ten-gigabitethernet 1/0/1.5

[Sysname-Ten-GigabitEthernet1/0/1.5] vlan-type dot1q vid 200 second-dot1q 500 to 600

[Sysname-Ten-GigabitEthernet1/0/1.5] quit

·     Configure Ten-GigabitEthernet 1/0/1.6 to terminate VLAN-tagged packets whose Layer 1 VLAN ID is in the range of 300 to 400 and Layer 2 VLAN ID is 100.

[Sysname] interface ten-gigabitethernet 1/0/1.6

[Sysname-Ten-GigabitEthernet1/0/1.6] vlan-type dot1q vid 300 to 400 second-dot1q 100

[Sysname-Ten-GigabitEthernet1/0/1.6] quit

·     Configure Ten-GigabitEthernet 1/0/1.7 to terminate VLAN-tagged packets whose Layer 1 and Layer 2 IDs are in the range of 300 to 400 and 500 to 600, respectively.

[Sysname] interface ten-gigabitethernet 1/0/1.7

[Sysname-Ten-GigabitEthernet1/0/1.7] vlan-type dot1q vid 300 to 400 second-dot1q 500 to 600

[Sysname-Ten-GigabitEthernet1/0/1.7] quit

·     Configure Ten-GigabitEthernet 1/0/1.8 to terminate VLAN-tagged packets with a Layer 1 VLAN ID in the range of 300 to 400 and any Layer 2 VLAN ID.

[Sysname] interface ten-gigabitethernet 1/0/1.8

[Sysname-Ten-GigabitEthernet1/0/1.8] vlan-type dot1q vid 300 to 400 second-dot1q any

The following table describes the configuration results:

 

Layer 3 Ethernet subinterface	Layer 1 VLAN IDs of VLAN-tagged packets that the subinterface can terminate	Layer 2 VLAN IDs of VLAN-tagged packets that the subinterface can terminate
Ten-GigabitEthernet 1/0/1.1	100	100
Ten-GigabitEthernet 1/0/1.2	100	200–300
Ten-GigabitEthernet 1/0/1.3	100	1–99, 101–199, 301–499, and 601–4094
Ten-GigabitEthernet 1/0/1.4	100	500–600
Ten-GigabitEthernet 1/0/1.5	200	500–600
Ten-GigabitEthernet 1/0/1.6	300–400	100
Ten-GigabitEthernet 1/0/1.7	300–400	500–600
Ten-GigabitEthernet 1/0/1.8	300–400	1–99, 101–499, and 601–4094

‌