Application of Basic QinQ
As shown in Figure 6-4, tenant 1 and tenant 2 in a data center are located in different positions, and are connected to SwitchA and SwitchB on the core/backbone network. To ensure security of services and save core/backbone network VLAN IDs, traffic between two tenants needs to be transparently transmitted through the core/backbone network, tenants using the same service in different branches are allowed to communicate, and tenants using different services need to be isolated. Basic QinQ is configured to meet the preceding requirements.
Table 6-1 describes VLAN assignment for tenant 1 and tenant 2.
Tenant Name |
VLAN ID Range |
Outer VLAN ID |
|---|---|---|
Tenant 1 |
2 to 500 |
10 |
Tenant 2 |
500 to 2500 |
20 |
Configure QinQ on SwitchA and SwitchB so that tenants using the same service in different branches are allowed to communicate and tenants using different services need to be isolated.
Configure SwitchA to encapsulate outer VLAN 10 to packets entering Interface1 and outer VLAN 20 to packets entering Interface2.
Configure SwitchB to encapsulate outer VLAN 10 to packets entering Interface1 and outer VLAN 20 to packets entering Interface2.
Configure Interface3 on SwitchA and SwitchB to allow packets from VLAN 10 and VLAN 20.