HP 5500 Ei 5500 Si Switch Series Configuration Guide

 200 
Figure 64 Application scenario of one-to-o ne and many-to-one VLAN mapping 
 
 
To further sub-classify each type of traffic by customer, perform one-to-one VLAN mapping on the 
wiring-closet switches, and assign a separate VLAN for each type of traffic from each customer. The 
re qu i re d  to ta l  nu m b e r  of  V L A N s  i n  t h e  ne t wo rk  c a n  b e  l a rg e.  To  p reve nt  t h e  m a xi mu m  nu m b e r  of  V L A Ns  
from being exceeded on the distribution layer device, perform...

 201 
Figure 65 Application scenario of  two-to-two VLAN mapping 
 
 
Site 1 and Site 2 are in VLAN 2 and VLAN 3, respectively. The VLAN assigned for VPN A is VLAN 10 
in the SP 1 network and VLAN 20 in the SP 2 network.  
If Site 1 sends a packet to Site 2, the packet is processed on the way to its destination using the following 
workflow:  
1. When the packet tagged with VLAN 2 arrives at  the edge of network SP 1, PE 1 tags the packet 
with outer VLAN 10 through basic QinQ or selective QinQ.  
2....

 202 
•  Downlink traffic —Traffic transmitted from the service provider network to the customer network. 
•   Network-side port —A port connected to or closer to the service provider network.  
•   Customer-side port—A port connected to or closer to the customer network.  
•   Uplink policy —A QoS policy that defines VLAN mapping rules for uplink traffic. 
•   Downlink policy—A QoS policy that defines VLAN mapping rules for downlink traffic. 
•   Customer VLANs (CVLANs) —VLANs assigned for customers. 
•...

 203 
Figure 68 Many-to-one VLAN mapping implementation 
 
 
Each DHCP snooping entry contains information about one DHCP client, including its IP address, MAC 
address, and CVLAN. For more information about DHCP snooping, see Layer 3—IP Services 
Configuration Guide . 
Two-to-two VLAN mapping 
Implement two-to-two VLAN mapping through the following configurations, as shown in  Figure 69. 
•   F
or uplink traffic, apply an inbound policy on th e customer-side port to replace the SVLAN with a 
new SVLAN,...

 204 
Configuring one-to-one VLAN mapping 
Perform one-to-one VLAN mapping on wiring-closet switches (see  Figure 64) to iso late traffic by both user 
and traffic type.  
Perform these tasks to configure one-to-one VLAN mapping: 
 
Task Description 
Configuring an uplink policy  Creates CVLAN-to-SVLAN mappings (required). 
Configuring a downlink policy Creates SVLAN-to-CVLAN mappings (required). 
Configuring the customer-side port Configures settings required for one-to-one VLAN mapping (required)....

 205 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Create a class and enter class 
view.   traffic classifier
 tcl-name  [ operator  
{  and  | or } ] 
Repeat these steps to configure 
one class for each SVLAN. 
3.  Configure an SVLAN as the 
match criterion.   if-match service-vlan-id 
vlan-id 
4.  Return to system view.  
quit 
5.  Create a traffic behavior and 
enter traffic behavior view.  traffic behavior 
behavior-name 
Repeat these steps to configure 
a behavior for each...

 206 
Step Command Remarks 
3.  Configure the port as a 
trunk port.   port link-type
 trunk  The default link type of ports is access.   
4.  Assign the port to SVLANs.  port trunk permit vlan
 
{  vlan-id-list  | all }  By default, a trunk port is in only VLAN 1. 
 
Configuring many-to-one VLAN mapping 
 
 
CAUTION: 
Before changing VLAN mappings on a port, 
clear all DHCP snooping entries by using the reset 
dhcp-snooping  command (see 
Layer 3—IP Services Command Reference).  
Perform many-to-one...

 207 
Enabling ARP detection in SVLANs 
The ARP detection function enables a switch to modify the VLAN attributes of ARP packets, which is 
impossible under the normal ARP packet processi ng procedure. For more information about ARP 
detection, see  Security Configuration Guide .  
To enable ARP detection in all SVLANs: 
 
Step Command Remarks 
1.   Enter system view. 
system-view  N/A 
2.  Enter VLAN view.  
vlan vlan-id  N/A 
3.  Enable ARP detection. 
arp detection enable  Disabled by default....

 208 
Step Command Remarks 
1.  Enter system view. 
system-view N/A 
2.  Enter Ethernet interface view.  interface
 interface-type 
interface-number  N/A 
3.
  Configure the port as a trunk 
port.   port link-type
 trunk   The default link type of an Ethernet port is 
access.  
4.
  Assign the port to CVLANs 
and SVLANs.   port trunk permit vlan
 
{  vlan-id-list  | all }  By default, a trunk port is in only VLAN 1. 
5.
  Enable customer-side QinQ. 
qinq enable downlink  By default, customer-side QinQ is...

 209 
Task Description 
Configuring an uplink policy for the 
customer-side port Replaces foreign SVLANs with local SVLANs for uplink traffic 
(required).  
Configuring an uplink policy for the 
network-side port Replaces foreign CVLANs with lo
cal CVLANs for uplink traffic 
(required). 
Configuring a downlink policy for the 
customer-side port  Replaces local SVLANs and CVLANs with foreign SVLANs and 
CVLANs (required).  
Configuring the customer-side port 
Configures VLAN and other settings
 required...