HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
![Page 386
175
# Display the local VLAN information that GVRP maintains on port GigabitEthernet 1/0/1 of
Device B.
[DeviceB] display gvrp local-vlan interface gigabitethernet 1/0/1
Following VLANs exist in GVRP local database:
1(default)
According to the output, information about VLAN 1 is registered through GVRP, but static VLAN
information of VLAN 3 on the local device and dynamic VLAN information of VLAN 2 on Device
A are not.](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-385.png "Page 386
175
# Display the local VLAN information that GVRP maintains on port GigabitEthernet 1/0/1 of
Device B.
[DeviceB] display gvrp local-vlan interface gigabitethernet 1/0/1
Following VLANs exist in GVRP local database:
1(default)
According to the output, information about VLAN 1 is registered through GVRP, but static VLAN
information of VLAN 3 on the local device and dynamic VLAN information of VLAN 2 on Device
A are not.")
180 • On a port with basic QinQ enabled, you must configure the port to allow packets from its PVID to pass through. On a port with selective QinQ enab led, you must configure the port to allow packets from the inner and outer VLANs of QinQ packets to pass through. Complete the follows tasks to configure QinQ: Task Remarks Configuring basic QinQ Enabling basic QinQ Required Configuring VLAN transparent transmission Optional Configuring selective QinQ Configuring an outer VLAN tagging policy Required Perform at least one of these tasks. Configuring an inner-outer VLAN 802.1p priority mapping Configuring inner VLAN ID substitution (available only on the 5500 EI) Configuring the TPID value in VLAN tags Optional Configuring basic QinQ Enabling basic QinQ A basic QinQ-enabled port tags an incoming packet with its PVID tag. To enable basic QinQ: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter interface view or port group view. • Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view: interface interface-type interface-number • Enter port group view: port-group manual port-group-name Use either command. 3. Enable basic QinQ. qinq enable Disabled by default. Configuring VLAN transparent transmission When basic QinQ is enabled on a port, all packets passing through the port are tagged with the port’s PVID tag. However, by configuring the VLAN transparent transmission function on a port, you can specify the port not to add its PVID tag to packets carrying specific inner VL AN tags when they pass through it, so that these packets are transmitted in the service provider network with single tags. Configuration restrictions and guidelines • When you are configuring transparent transmission for a VLAN, you must configure all the devices on the transmission path to permit packets of this VLAN to pass through.
181
• For VLANs whose packets are to be transparentl y transmitted through a port, do not configure
VLAN mapping for them on the port. For mo re information about VLAN mapping, see Configuring
VL
AN mapping (available only on the 5500 EI) .
Configuration procedure
To configure VLAN transparent transmission:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view or port
group view.
• Enter Layer 2 Ethernet interface view
or Layer 2 aggregate interface view:
interface interface-type
interface-number
• Enter port group view:
port-group manual port-group-name Use either command.
3.
Configure the link type of
the ports. port link-type
{ hybrid | trunk } N/A
4. Configure the ports to allow
packets from the
transparent VLANs, and
inner and outer VLANs of
QinQ packets to pass
through. • When the ports are hybrid ports:
port hybrid vlan vlan-id-list { tagged |
untagged }
• When the ports are trunk ports:
port trunk permit vlan { vlan-id-list |
all } Use either command.
5.
Enable basic QinQ on the
ports. qinq enable
By default, basic QinQ is
disabled on ports.
6.
Configure VLAN
transparent transmission on
the ports. qinq transparent-vlan
vlan-list By default, VLAN transparent
transmission is not configured.
Configuring selective QinQ
Configuring an outer VLAN tagging policy
Basic QinQ can only tag received frames with the PVID tag of the receiving port. Selective QinQ allows
adding different outer VLAN tags ba
sed on different inner VLAN tags.
You can configure an outer VLAN tagging po licy in one of the following approaches:
• Port-based approach
• QoS policy-based approach (available only on the 5500 EI)
If multiple outer VLAN tagging policies are configured in both approaches on the same port, the one in
the QoS policy-based approach takes effect.
Configuring an outer VLAN tagging policy in the port-based approach
Before enabling selective QinQ on a port, enable basi c QinQ on the port first. When both features are
enabled on the port, frames that meet the selective QinQ condition are handled with selective QinQ on
this port first, and the left frames are handled with basic QinQ.
To configure an outer VLAN tagging policy in the port-based approach:
182
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view or port
group view.
• Enter Layer 2 Ethernet interface view
or Layer 2 aggregate interface view:
interface interface-type
interface-number
• Enter port group view:
port-group manual port-group-name Use either command.
3. Enable basic QinQ.
qinq enable Disabled by default.
4. Enter QinQ view and
configure the SVLAN tag
for the port to add. qinq vid
vlan-id By default, the SVLAN tag to
be added is the PVID tag of the
receiving port.
5.
Tag frames of the specified
CVLANs with the current
SVL AN. raw-vlan-id inbound
{ all | vlan-list } N/A
NOTE:
• An inner VLAN tag corresponds to only one outer VLAN tag.
• To c h a n
ge an outer VLAN tag, you must delete the old outer VLAN tag configuration and configure a
new outer VLAN tag.
Configuring an outer VLAN tagging policy in the QoS policy-based approach (available only on the
5500 EI)
To enable the switch to tag tagged packets based on inner VLAN tags, follow these steps:
• Configure a class to match packets with certain tags.
• Configure a traffic behavior to tag packets with an outer VLAN tag.
• Create a QoS policy and associate the class with the behavior in the policy.
• Apply the QoS policy to the port that connects to the user.
To configure selective QinQ:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Create a class and enter class
view. traffic classifier
classifier-name
[ operator { and | or } ] By default, the operator of a class
is AND.
3.
Specify the inner VLAN IDs of
matching frames. if-match customer-vlan-id
vlan-id-list N/A
4.
Return to system view.
quit N/A
5. Create a traffic behavior and
enter traffic behavior view. traffic behavior
behavior-name N/A
6. Specify an outer VLAN ID.
nest top-most vlan-id vlan-id N/A
7. Return to system view.
quit N/A
8. Create a QoS policy and
enter QoS policy view. qos policy
policy-name N/A
183
Step Command Remarks
9. Associate the traffic class with
the traffic behavior defined
earlier. classifier classifier-name behavior
behavior-name
N/A
10.
Return to system view.
quit N/A
11. Enter Ethernet interface view
or port group view of the
customer network-side port.
• Enter Ethernet interface view:
interface interface-type
interface-number
• Enter port group view:
port-group manual
port-group-name Use either command.
12.
Enable basic QinQ.
qinq enable N/A
13. Apply the QoS policy to the
incoming traffic. qos apply
policy policy-name
inbound N/A
NOTE:
Selective QinQ has hi
gher priority than basic QinQ. A received frame is tagged with an outer VLAN ID
based on basic QinQ only after it fails to match the match criteria defined in the traffic class.
Configuring an inner-outer VLAN 802.1p priority mapping
Through QoS policies, the 5500 SI&5500 EI switches achieve the following inner-outer VLAN 802.1p
priority mapping modes:
• Marking the 802.1p priorities in outer VLAN tags according to the inner VLAN IDs or the 802.1p
priorities in the inner VLAN tags.
• Copying the 802.1p priority in the inner VLAN tags to the outer VLAN tags.
To mark the 802.1p priorities in outer VLAN tags according to the inner VLAN IDs or the 802.1p priorities
in the inner VLAN tags:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Create a class and enter
class view. traffic classifier
classifier-name [ operator
{ and | or } ] By default, the operator of a
class is AND.
3.
Configure a match criterion.
• Match the specified inner VLAN IDs:
if-match customer-vlan-id vlan-id-list
• Match the specified inner VLAN tag
priorities:
if-match customer-dot1p 8021p-list Use either command.
4.
Return to system view.
quit N/A
5. Create a traffic behavior
and enter traffic behavior
view. traffic behavior
behavior-name N/A
184 Step Command Remarks 6. Configure a marking action or an inner-to-outer tag priority copying action. • Mark the 802.1p priorities in outer VLAN tags: remark dot1p 8021p • Copy the inner 802.1p priorities to outer 802.1p priorities: remark dot1p customer-dot1p-trust Use either command. 7. Return to system view. quit N/A 8. Create a QoS policy and enter QoS policy view. qos policy policy-name N/A 9. Associate the traffic class with the traffic behavior defined earlier. classifier classifier-name behavior behavior-name N/A 10. Return to system view. quit N/A 11. Enter Ethernet interface view or port group view of the customer network-side port. • Enter Ethernet interface view: interface interface-type interface-number • Enter port group view: port-group manual port-group-name Use either command. 12. Enable basic QinQ. qinq enable N/A 13. Apply the QoS policy to the incoming traffic. qos apply policy policy-name inbound N/A Configuring inner VLAN ID substitution (available only on the 5500 EI) When you configure basic QinQ or an outer VLAN tagging policy for selective QinQ on a port connecting the device to the customer network, basi c QinQ or the outer VLAN tagging policy can add outer VLAN tags to packets, but cannot modify the inner VLAN IDs of packets. To modify the inner VLAN IDs of packets, follow these steps on the port connecting the device to the service provider network: 1. Configure a class to match th e specified inner VLAN IDs an d outer VLAN ID of packets. 2. Configure a behavior to modify the inner VLAN IDs of packets. 3. Associate the class with the behavior in a QoS policy. 4. Apply the QoS policy to the outgoing traffic of the port connecting the device to the service provider network. To configure inner VLAN ID substitution: Step Command Remarks 1. Enter system view. system-view N/A 2. Create a class and enter class view. traffic classifier classifier-name [ operator and ] By default, the operator of a class is AND. 3. Configure a match criterion to match the specified inner VLAN IDs. if-match customer-vlan-id vlan-id-list N/A
185
Step Command Remarks
4. Configure a match criterion to match
the specified outer VLAN IDs. if-match service-vlan-id
vlan-id N/A
5. Return to system view.
quit N/A
6. Create a traffic behavior and enter
traffic behavior view. traffic behavior
behavior-name N/A
7. Configure the action of marking the
inner VLAN IDs. remark customer-vlan-id
vlan-id N/A
8. Return to system view.
quit N/A
9. Create a QoS policy and enter QoS
policy view. qos policy
policy-name N/A
10. Associate the traffic class with the
traffic behavior defined earlier. classifier classifier-name behavior
behavior-name
N/A
11.
Return to system view.
quit N/A
12. Enter Ethernet interface view or port
group view of the service provider
network-side ports.
• Enter Ethernet interface view:
interface interface-type
interface-number
• Enter port group view:
port-group manual port-group-name Use either command.
13.
Apply the QoS policy to the
outgoing traffic. qos apply policy
policy-name outbound N/A
Configuring the TPID value in VLAN tags
Configuring the TPID value on the 5500 EI
To configure the TPID value:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Configure the TPID value. qinq ethernet-type
{ customer-tag |
service-tag } hex-value Optional.
By default, the TPID value is
0x8100.
The configuration applies to all
ports.
Configuring the TPID value on the 5500 SI
To configure the TPID value:
Step Command Remarks
1. Enter system view.
system-view N/A
186 Step Command Remarks 2. Configure the TPID value. qinq ethernet-type hex-value Optional. By default, the TPID value is 0x8100. The configuration applies to all ports. NOTE: The TPID value configured on the 5500 SI Switch Series applies to both the CVLAN ta gs and the SVLAN tags. QinQ configuration examples Basic QinQ configuration example Network requirements As shown in Figure 60: • T he two branches of Company A, Site 1 and Site 2, are connected through the service provider network and use CVLANs 10 through 70. The two branches of Company B, Site 3 and Site 4, are connected through the service provider network and use CVLANs 30 through 90. • PE 1 and PE 2 are edge devices on the service provider network and are connected through third-party devices with a TPID value of 0x8200. Configure the edge and third-party devices to enable communication between the branches of Company A through SVLAN 100, and communication between the branches of Company B through SVLAN 200. Figure 60 Network diagram Configuration procedure
187
IMPORTANT:
Make sure that you have configured the devices in the service provider network to allow QinQ packets to
pass through.
1.
Configure PE 1:
{ Configure GigabitEthernet 1/0/1:
# Configure GigabitEthernet 1/0/1 as a trunk port and assign it to VLAN 100 and VLANs 10
through 70..
system-view
[PE1] interface gigabitethernet 1/0/1
[PE1-GigabitEthernet1/0/1] port link-type trunk
[PE1-GigabitEthernet1/0/1] port trunk permit vlan 100 10 to 70
# Configure VLAN 100 as the PVID for the port.
[PE1-GigabitEthernet1/0/1] port trunk pvid vlan 100
# Enable basic QinQ on the port.
[PE1-GigabitEthernet1/0/1] qinq enable
[PE1-GigabitEthernet1/0/1] quit
{ Configure GigabitEthernet 1/0/2:
# Configure GigabitEthernet 1/0/2 as a trunk po rt and assign it to VLAN 100 and VLAN 200.
[PE1] interface gigabitethernet 1/0/2
[PE1-GigabitEthernet1/0/2] port link-type trunk
[PE1-GigabitEthernet1/0/2] port trunk permit vlan 100 200
# Set the TPID value in the outer VLAN tag to 0x8200 on the port.
[PE1-GigabitEthernet1/0/2] quit
[PE1] qinq ethernet-type service-tag 8200
NOTE:
The previous command is available only on the 5500 EI Switch Series. For how to confi
gure the TPID value
on the 5500 SI Switch Series, see Configuring the TPID value on the 5500 SI .
{
Configure GigabitEthernet 1/0/3:
# Configure GigabitEthernet 1/0/3 as a trunk port and assign it to VLAN 200 and VLANs 30
through 90..
[PE1] interface gigabitethernet 1/0/3
[PE1-GigabitEthernet1/0/3] port link-type trunk
[PE1-GigabitEthernet1/0/3] port trunk permit vlan 200 30 to 90
# Configure VLAN 200 as the PVID for the port.
[PE1-GigabitEthernet1/0/3] port trunk pvid vlan 200
# Enable basic QinQ on the port.
[PE1-GigabitEthernet1/0/3] qinq enable
[PE1-GigabitEthernet1/0/3] quit
2. Configure PE 2:
{ Configure GigabitEthernet 1/0/1:
# Configure GigabitEthernet 1/0/1 as a trunk port and assign it to VLAN 200 and VLANs 30
through 90..
system-view
188
[PE2] interface gigabitethernet 1/0/1
[PE2-GigabitEthernet1/0/1] port link-type trunk
[PE2-GigabitEthernet1/0/1] port trunk permit vlan 200 30 to 90
# Configure VLAN 200 as the PVID for the port.
[PE2-GigabitEthernet1/0/1] port trunk pvid vlan 200
# Enable basic QinQ on the port.
[PE2-GigabitEthernet1/0/1] qinq enable
[PE2-GigabitEthernet1/0/1] quit
{ Configure GigabitEthernet 1/0/2:
# Configure GigabitEthernet 1/0/2 as a trunk po rt and assign it to VLAN 100 and VLAN 200.
[PE2] interface gigabitethernet 1/0/2
[PE2-GigabitEthernet1/0/2] port link-type trunk
[PE2-GigabitEthernet1/0/2] port trunk permit vlan 100 200
# Set the TPID value in the outer VLAN tag to 0x8200 on the port.
[PE2-GigabitEthernet1/0/2] quit
[PE2] qinq ethernet-type service-tag 8200
NOTE:
The previous command is available only on the 5500 EI Switch Series. For how to confi
gure the TPID value
on the 5500 SI Switch Series, see Configuring the TPID value on the 5500 SI .
{
Configure GigabitEthernet 1/0/3:
# Configure GigabitEthernet 1/0/3 as a trunk port and assign it to VLAN 100 and VLANs 10
through 70..
[PE2] interface gigabitethernet 1/0/3
[PE2-GigabitEthernet1/0/3] port link-type trunk
[PE2-GigabitEthernet1/0/3] port trunk permit vlan 100 10 to 70
# Configure VLAN 100 as the PVID for the port.
[PE2-GigabitEthernet1/0/3] port trunk pvid vlan 100
# Enable basic QinQ on the port.
[PE2-GigabitEthernet1/0/3] qinq enable
[PE2-GigabitEthernet1/0/3] quit
3. Configure third-party devices:
On the third-party devices between PE 1 and PE 2, configure the port that connects to PE 1 and that
connecting to PE 2 to allow tagged frames of VLAN 100 and VLAN 200 to pass through.
Selective QinQ configuration example (configuring an outer
VLAN tagging policy in port-based approach)
Network requirements
As shown in Figure 61:
• T
he two branches of a company, Site 1 and Site 2, are connected through the service provider
network and use CVLAN 10 and CVLAN 20 to transmit voice traffic and data traffic separately.
• PE 1 and PE 2 are edge devices on the service provider network and are connected through
third-party devices with a TPID value of 0x8200.
189
Configure the edge and third-party devices to allow frames from CVLAN 10 to be transmitted between
the branches via SVLAN 100 and frames from CVLAN 20 to be transmitted between the branches via
SVLAN 200.
Figure 61 Network diagram
Configuration procedure
IMPORTANT:
Make sure that you have configured the devices in the service provider network to allow QinQ packets to
pass through.
1.
Configure PE 1:
{ Configure GigabitEthernet 1/0/1:
# Configure GigabitEthernet 1/0/1 as a hybrid port to permit frames of VLAN 10 and VLAN
20 to pass through tagged, and frames of VLAN 100 and VLAN 200 to pass through
untagged.
system-view
[PE1] interface gigabitethernet 1/0/1
[PE1-GigabitEthernet1/0/1] port link-type hybrid
[PE1-GigabitEthernet1/0/1] port hybrid vlan 10 20 tagged
[PE1-GigabitEthernet1/0/1] port hybrid vlan 100 200 untagged
# Enable basic QinQ on the port.
[PE1-GigabitEthernet1/0/1] qinq enable
# Configure the port to tag VLAN 10 frames with outer VLAN ID 100.
[PE1-GigabitEthernet1/0/1] qinq vid 100
[PE1-GigabitEthernet1/0/1-vid-100] raw-vlan-id inbound 10
[PE1-GigabitEthernet1/0/1-vid-100] quit
# Configure the port to tag VLAN 20 frames with outer VLAN ID 200.
[PE1-GigabitEthernet1/0/1] qinq vid 200
[PE1-GigabitEthernet1/0/1-vid-200] raw-vlan-id inbound 20