No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR500, AR510, and AR530 V200R007 CLI-based Configuration Guide - Ethernet Switching

This document describes the configuration of Ethernet services, including configuring transparent bridge, MAC table, link aggregation, VLANs, STP/RSTP/MSTP, and so on.The document provides the configuration procedures and configuration examples to illustrate the service configuration methods and application scenario.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Basic QinQ

Configuring Basic QinQ


Dot1q tunnel isolates a carrier network from a user network and is widely used when users connect to a carrier network. When private networks connect to a carrier network through CEs and PEs, run the vlan dot1q-tunnel command on CE interfaces connected to PEs so that the CE interfaces add the outer VLAN tag allocated by the carrier to user packets. This implementation saves VLAN IDs and allows user packets to be transparently transmitted on the carrier network.


  • Configure basic QinQ on a sub-interface.
    1. Run:


      The system view is displayed.

    2. Run:

      bridge bridge-id

      A bridge group is created and the bridge group view is displayed.

    3. Run:


      Exit from the bridge group view.

    4. Run:

      interface { ethernet | gigabitethernet } interface-number.subinterface-number

      The Ethernet sub-interface view is displayed.


      Sub-interfaces can only be created on Layer 3 Ethernet interfaces. If an interface works in Layer 2 mode and supports switching between Layer 2 and Layer 3 modes, run the undo portswitch command to switch the interface in Layer 3 mode before creating a sub-interface on the interface.

    5. Run:

      bridge bridge-id

      The Ethernet sub-interface is added to the bridge group.

    6. Run:

      bridge vlan-transmit enable

      The Ethernet sub-interface is enabled to transparently transmit VLAN IDs.

    7. Run:

      vlan allow-pass { vid vlan-id1 [ to vlan-id2 ] | default }

      The VLANs allowed by the Ethernet sub-interface are configured.


      VLANs allowed by all sub-interfaces of a main interface cannot overlap.

      The vlan allow-pass default command can be executed only on a sub-interface among all sub-interfaces of each main interface. Packets are forwarded through the default sub-interface when the packets do not match other QinQ or VLAN mapping entries on a sub-interface.

    8. Run:

      vlan dot1q-tunnel tunnel-vlan-id [ native vid native-vlan-id ]

      The vlan dot1q-tunnel command can be only executed at one time on a sub-interface and the VLAN specified by tunnel-vlan-id must be allowed by the sub-interface.

      Basic QinQ is configured on the sub-interface.

Updated: 2019-05-25

Document ID: EDOC1000097279

Views: 19664

Downloads: 64

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next