Example for Configuring Transparent Transmission of Protocol Packets in a VLAN
Networking Requirements
A company has multiple subsidiary companies. When the parent company communicates with a subsidiary company through the core switch, the core switch processes the packets before forwarding them. If multiple subsidiary companies communicate with the parent company simultaneously, then network performance deteriorates, lowering communication efficiency and increasing communication costs. Transparent transmission of protocol packets in a VLAN can be configured on the core switch to solve this problem.
As shown in Figure 4-35, after transparent transmission of protocol packets in a VLAN is enabled, the Switch forwards data from the specified VLAN without sending the data to its CPU. This improves the processing efficiency, reduces communication costs, and minimizes the probability of malicious attacks on the Switch.
Configuration Roadmap
The configuration roadmap is as follows:
Create VLANs.
Enable transparent transmission of protocol packets in a VLAN.
Add Ethernet interfaces to VLANs.
Procedure
- Configure the Switch.
# Create VLANs.
<HUAWEI> system-view [HUAWEI] sysname Switch [Switch] vlan batch 10 20
# Enable transparent transmission of protocol packets in a VLAN.
[Switch] vlan 20 [Switch-vlan20] protocol-transparent [Switch-vlan20] quit
# Add interfaces to the VLANs.
[Switch] interface gigabitethernet 1/0/1 [Switch-GigabitEthernet1/0/1] port link-type hybrid [Switch-GigabitEthernet1/0/1] port hybrid tagged vlan 10 [Switch-GigabitEthernet1/0/1] quit [Switch] interface gigabitethernet 1/0/2 [Switch-GigabitEthernet1/0/2] port link-type hybrid [Switch-GigabitEthernet1/0/2] port hybrid tagged vlan 10 20 [Switch-GigabitEthernet1/0/2] quit [Switch] interface gigabitethernet 1/0/3 [Switch-GigabitEthernet1/0/3] port link-type hybrid [Switch-GigabitEthernet1/0/3] port hybrid tagged vlan 20 [Switch-GigabitEthernet1/0/3] quit
- Configure SwitchA and SwitchB. Add upstream interfaces on SwitchA and SwitchB to VLAN 10 and VLAN 20 in tagged mode, and add downstream interfaces to VLAN 10 and VLAN 20 in default mode. The configuration details are not mentioned here.
- Verify the configuration.
# After the configuration is complete, run the display this command in the view of VLAN 20. The command output shows that transparent transmission of protocol packets in a VLAN is enabled.
[Switch] vlan 20[Switch-vlan20] display this # vlan 20 protocol-transparent # return
Configuration Files
Switch configuration file
# sysname Switch # vlan batch 10 20 # vlan 20 protocol-transparent # interface GigabitEthernet1/0/1 port link-type hybrid port hybrid tagged vlan 10 # interface GigabitEthernet1/0/2 port link-type hybrid port hybrid tagged vlan 10 20 # interface GigabitEthernet1/0/3 port link-type hybrid port hybrid tagged vlan 20 # return