No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S12700 V200R011C10 Configuration Guide - VPN

This document describes the VPN configuration procedures and provides configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for VLL

Licensing Requirements and Limitations for VLL

Involved Network Elements

Other network elements are not required.

License Requirements

You can use the VLL feature only after the MPLS function is enabled. The MPLS function is controlled by a license. By default, MPLS is disabled on a new device. To use the MPLS function, apply for and purchase the license from the equipment supplier.

Version Requirements

Table 5-8  Products and versions supporting VLL


Product Model

Software Version


S12708, S12712

V200R005C00, V200R006C00, V200R007C00, V200R007C20, V200R008C00, V200R009C00, V200R010C00, V200R011C10


V200R010C00, V200R011C10


V200R008C00, V200R009C00, V200R010C00, V200R011C10

To know details about software mappings, see Hardware Query Tool.

Feature Limitations

  • The SA series cards do not support VLL.

    In V200R006 and earlier versions, the X1E series cards do not support VLL.

    The XGE interface connected to ACU2, ET1D2IPS0S00, ET1D2FW00S00, ET1D2FW00S01, or ET1D2FW00S02 does not support the VLL function.

  • When VLL is deployed on ET1D2T36SEA0, the card processes each packet as follows:
    • Removes the VLAN tag from the packet if the PVID on the outbound interface is the same as the VLAN ID of the packet.
    • Retains the VLAN tag if the PVID on the outbound interface is different from the VLAN ID of the packet.
  • For E series cards, do not add the PW to VLAN 1. If the PW is added to VLAN 1, the AC joins VLAN 1 in untagged mode and VLAN tags of packets are removed.

  • When you configure L2VPN on a switch, the following configuration is recommended if the PW-side interface is a 100GE interface on the EE series cards or a 40GE interface split from the 100GE interface.
    • When the device functions as the PE device, you can configure the enhanced load balancing function to load balance outgoing traffic on the card by the source MAC address, destination MAC address, source port number, and VLAN based on the packet type. For details, see Configuring a Load Balancing Mode in "Link Aggregation Configuration" in the Configuration Guide - Ethernet Switching.
      To configure enhanced load balancing, perform the following operations:
      • Run the load-balance-profile profile-name command in the system view to create a load balancing profile and enter the load balancing profile view.
      • Run the mpls field [ dmac | smac | sport | vlan ] * command to specify the load balancing mode of MPLS packets in the profile.

      If the PE device equipped with the specified card also functions as the P device, run the mpls field [ dmac | smac | sport | vlan ] * top-label 2nd-label command to enable load balancing by the label, source MAC address, destination MAC address, source port number, and VLAN.

    • When the switch functions as the P device, packet loss may occur if traffic passing through each PW exceeds 30 Gbit/s. Run the display traffic-statistics l2vpn interface interface-type interface-number command on the PE device to view VLL traffic statistics on the AC-side interface.
  • During the L2VPN configuration on a switch equipped with the ET1D2C04HX2H, ET1D2C04HX2S, ET1D2C04HX2E, ET1D2H02QX2S, or ET1D2H02QX2E series cards: When the switch functions as the P device, it is recommended that traffic passing through each PW do not exceed 30 Gbit/s.
  • By default, link type negotiation is enabled globally on the device. If a VLANIF interface is used as an AC-side interface for VLL, the configuration conflicts with link type negotiation. In this case, run the lnp disable command in the system view to disable link type negotiation.

  • A PE device receives Layer 2 protocol packets such as STP, VBST, SMLK, LBT/LBDT, LACP, 3AH, 1AG, Y.1731, HGMP, LLDP, DLDP, GVRP, HVRP, DAD, LNP, VCMP, and BFD packets from an AC interface, and determines whether it needs to process the packets. If not (for example, Layer 2 protocols are disabled), the PE device transparently transmits the Layer 2 protocol packets through the VLL.
  • If L2VPN is configured on the device, the AC-side outbound interface does not support IP address-based load balancing when the interface is an Eth-Trunk interface.
  • If the PW-side interface is a Layer 3 interface switched by the undo portswitch command, the AC-side interface cannot be a Layer 3 interface or subinterface belonging to a Layer 3 interface; otherwise, traffic forwarding is abnormal.

Updated: 2019-04-01

Document ID: EDOC1000178118

Views: 159229

Downloads: 159

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next