No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - VPN

S1720, S2700, S5700, and S6720 V200R010C00

This document describes the VPN configuration procedures and provides configuration examples.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Binding VSIs to AC Interfaces

Binding VSIs to AC Interfaces

Context

Based on the type of link between a PE and a CE, a VSI is bound to an AC interface on the PE in one of the following modes:

  • Binding the VSI with the GE interface, or XGE interface when the PE and the CE are connected through the Ethernet interface

  • Binding the VSI with the GE sub-interface, 40GE sub-interface or XGE sub-interface when the PE and the CE are connected through the Ethernet sub-interface

  • Binding the VSI with the VLANIF interface when the PE and the CE are connected through the VLANIF interface

  • Binding the VSI with the Eth-Trunk when the PE and the CE are connected through the Eth-Trunk interface

  • Binding the VSI with the Eth-Trunk sub-interface when the PE and the CE are connected through the Eth-Trunk sub-interface

The sub-interfaces can be dotlq sub-interfaces, QinQ sub-interfaces, VLAN mapping sub-interfaces, or VLAN stacking sub-interfaces. For details on how to access the VPLS through a sub-interface, see Configuring a Dot1q Termination Sub-interface and Connecting It to an L2VPN and Configuring a QinQ Termination Sub-interface and Connecting It to an L2VPN in "VLAN Termination Configuration" in the S1720, S2700, S5700, and S6720 V200R010C00 Configuration Guide - Ethernet Switching.

When XGE, GE, 40GE, or Eth-Trunk interfaces are used as AC interfaces, the outer Tags carried in the packets sent from the AC to the PW are U Tags (inserted by user devices, which are meaningless to the SP) by default.

When VLANIF interfaces are used as AC interfaces, the outer Tags carried in the packets sent from the AC to the PW are P Tags (inserted by SP devices, which are used to differentiate user traffic) by default.

NOTE:
  • If the VLANIF interface configured based on a PVID is bound to a VSI, interfaces corresponding to this PVID cannot forward Layer 2 protocol BPDUs.

  • In the VPLS application, different CEs are transparently connected in the same LAN segment through VSIs, and the IP addresses of the CEs must be different.

  • When using GE, XGE, 40GE, or Eth-Trunk interfaces as AC interfaces, ensure that these interfaces do not contain any sub-interfaces.
  • When used on an AC-side interface, the qinq protocol command enables the system to identify incoming packets and Tag outgoing packets with the TPID. The TPID must use the default value 8100. Do not change the TPID.

  • If an interface is used as a VPLS AC-side interface and a multicast inbound interface at the same time, multicast data cannot be forwarded normally on this interface. (S5720HI does not have this restriction.)

Procedure

  • Bind a VSI to an Ethernet interface.

    Do as follows on the PEs at both ends of a PW:

    1. Run:

      system-view

      The system view is displayed.

    2. Run:

      interface interface-type interface-number

      The Ethernet interface view is displayed.

    3. (Optional) Run:

      undo portswitch

      The Layer 2 interface is configured as a Layer 3 interface.

    4. Run:

      l2 binding vsi vsi-name

      The VSI is bound to the Ethernet interface.

      NOTE:
      • If the peer PE accepts only packets with VLAN tags, before binding the Ethernet interface to a VSI, run the mpls l2vpn default vlan command to configure the default VLAN for the primary interface.

      • If the peer PE accepts packets with one more VLAN tag, before binding the Ethernet interface to a VSI, run the mpls l2vpn vlan-stacking stack-vlan command to configure the stack VLAN for the primary interface.

  • Bind a VSI to an Ethernet sub-interface.

    Do as follows on the PEs at both ends of a PW:

    1. Run:

      system-view

      The system view is displayed.

    2. Run:

      interface interface-type interface-number

      The interface view is displayed.

    3. Run:

      port link-type { hybrid | trunk }

      The port link-type is set.

    4. Run:

      quit

      Return to the system view.

    5. Run:

      interface interface-type interface-number.subinterface-number

      The Ethernet sub-interface view is displayed.

    6. Run one of the following commands to configure an Ethernet sub-interface based on site requirements.

      • Run:

        dot1q termination vid low-pe-vid

        The single VLAN ID for dot1q encapsulation on a sub-interface is configured.

      • Run:

        qinq termination pe-vid pe-vid ce-vid ce-vid1 [ to ce-vid2 ]

        The double VLAN IDs for QinQ encapsulation on a sub-interface are configured.

      • Run:

        qinq mapping vid vlan-id1 [ to vlan-id2 ] map-vlan vid vlan-id3

        Single-tagged VLAN mapping is configured on the sub-interface.

      • Run:

        qinq mapping pe-vid vlan-id1 ce-vid vlan-id2 [ to vlan-id3 ] map-vlan vid vlan-id4

        Double-tagged VLAN mapping is configured on the sub-interface.

      • Run:

        qinq stacking vid vlan-id1 [ to vlan-id2 ] pe-vid vlan-id3

        VLAN stacking is configured on the sub-interface.

    7. Run:

      l2 binding vsi vsi-name

      The VSI is bound with the Ethernet sub-interface.

  • Bind a VSI to a VLANIF interface.

    Do as follows on the PEs at both ends of a PW:

    1. Run:

      system-view

      The system view is displayed.

    2. Run:

      interface vlanif vlan-id

      The VLANIF interface view is displayed.

    3. Run:

      l2 binding vsi vsi-name

      The VLANIF interface is bound to the VSI.

      NOTE:
      • The VLANIF interfaces of the VLAN before VLAN mapping and VLAN before VLAN stacking cannot be bound to VSIs. Otherwise, the configured VSI and VLAN mapping or VLAN stacking do not take effect.

      • If a VLAN is configured with IGMP snooping or MLD snooping, the VLANIF interface of the VLAN cannot be used as an AC interface. To bind the VLANIF interface to a VSI, delete the IGMP snooping or MLD snooping configuration from the VLAN first.

  • Bind a VSI to an Eth-Trunk interface.

    Do as follows on the PEs at both ends of a PW:

    1. Run:

      system-view

      The system view is displayed.

    2. Run:

      interface eth-trunk trunk-id

      An Eth-Trunk interface is created.

    3. Run:

      quit

      Return to the system view.

    4. Run:

      interface interface-type interface-number

      The view of the interface to be added into the Eth-Trunk is displayed.

      An Eth-Trunk member interface cannot be configured with a static MAC address.

      NOTE:

      Member interfaces of a trunk cannot be Eth-Trunk interfaces.

    5. Run:

      eth-trunk trunk-id

      The interface is added into the Eth-Trunk.

      Before adding an interface into an Eth-Trunk, ensure the interface is not configured with any Layer 3 attributes such as IP address and any services.

      An Ethernet interface can join only one Eth-Trunk interface. To join another Eth-Trunk interface, the Ethernet interface must quit from the original one.

      Member interfaces of an Eth-Trunk interface must be of the same type. That is, GE interfaces, 40GE interfaces and XGE interfaces cannot join an Eth-Trunk interface.

    6. Run:

      quit

      Return to the system view.

    7. Run:

      interface eth-trunk trunk-id

      The Eth-Trunk interface view is displayed.

    8. (Optional) Run:

      undo portswitch

      The Layer 2 interface is configured as a Layer 3 interface.

    9. Run:

      l2 binding vsi vsi-name

      The Eth-Trunk interface is bound with the VSI.

      NOTE:
      • If the peer PE accepts only packets with VLAN tags, before binding the Ethernet interface to a VSI, run the mpls l2vpn default vlan command to configure the default VLAN for the primary interface.

      • If the peer PE accepts packets with one more VLAN tag, before binding the Ethernet interface to a VSI, run the mpls l2vpn vlan-stacking stack-vlan command to configure the stack VLAN for the primary interface.

  • Bind a VSI to an Eth-Trunk sub-interface.

    Do as follows on the PEs at both ends of a PW:

    1. Run:

      system-view

      The system view is displayed.

    2. Run:

      interface eth-trunk trunk-id

      An Eth-Trunk interface is created.

    3. Run:

      quit

      The system view is displayed.

    4. Run:

      interface interface-type interface-number

      The view of the interface to be added into the Eth-Trunk is displayed.

      An Eth-Trunk member interface cannot be configured with a static MAC address.

      NOTE:

      Member interfaces of a trunk cannot be Eth-Trunk interfaces.

    5. Run:

      eth-trunk trunk-id

      The interface is added into the Eth-Trunk.

      Before adding an interface into an Eth-Trunk, ensure the interface is not configured with any Layer 3 attributes such as IP address and any services.

      An Ethernet interface can join only one Eth-Trunk interface. To join another Eth-Trunk interface, the Ethernet interface must quit from the original one.

      Member interfaces of an Eth-Trunk interface must be of the same type. That is, GE interfaces, 40GE interfaces and XGE interfaces cannot join an Eth-Trunk interface.

    6. Run:

      port link-type { hybrid | trunk }

      The port link-type is set.

    7. Run:

      quit

      Return to the system view.

    8. Run:

      interface eth-trunk trunk-id .subnumber

      The Eth-Trunk sub-interface view is displayed.

    9. Run one of the following commands to configure an Ethernet sub-interface based on site requirements.

      • Run:

        dot1q termination vid low-pe-vid

        The single VLAN ID for dot1q encapsulation on a sub-interface is configured.

      • Run:

        qinq termination pe-vid pe-vid ce-vid ce-vid1 [ to ce-vid2 ]

        The double VLAN IDs for QinQ encapsulation on a sub-interface are configured.

      • Run:

        qinq mapping vid vlan-id1 [ to vlan-id2 ] map-vlan vid vlan-id3

        Single-tagged VLAN mapping is configured on the sub-interface.

      • Run:

        qinq mapping pe-vid vlan-id1 ce-vid vlan-id2 [ to vlan-id3 ] map-vlan vid vlan-id4

        Double-tagged VLAN mapping is configured on the sub-interface.

      • Run:

        qinq stacking vid vlan-id1 [ to vlan-id2 ] pe-vid vlan-id3

        VLAN stacking is configured on the sub-interface.

    10. Run:

      l2 binding vsi vsi-name

      The Eth-Trunk sub-interface is bound with the VSI.

Translation
Download
Updated: 2019-04-18

Document ID: EDOC1000141944

Views: 73076

Downloads: 507

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next