ACL Filter Policy Overview
492 Router Configuration Guide
• SAP such as 1/1/1, 1/1/1:* or 1/1/1:*.* can have as many as 2 tags for VID MAC
filter to match on
• For the remaining tags, the left (outermost) tag is what is used as the outer-tag in the
MAC VID Filter. The following tag is used as the inner-tag in the filter. If any of
these positions do not have tags, a value of 0 is used in the filter. At Egress the VID
MAC filter is applied to the frame prior to adding the additional service tags.
In the industry the QinQ tags are often referred to as the C-VID (Customer VID) and S-VID
(service VID). The terms outer tag and inner tag allow flexibility without having to refer to
C-TAG and an S-TAG explicitly. The position of inner and outer tags is relative to the port
configuration and SAP configuration. Matching of tags is allowed for up to the first two tags
on a frame. Since service delimiting tags may be 0, 1 or 2 tags.
The meaning of inner and outer has been designed to be consistent for egress and ingress
when the number of non service delimiting tags is consistent. Service 1 in Figure 20 shows a
conversion from qinq to a single dot1q example where there is one non-service delimiting tag
on ingress and egress. Service 2 shows a symmetric example with two non-service delimiting
tags (plus and additional tag for illustration) to two non-service delimiting tags on egress.
Service 3 illustrates single non-service delimiting tags on ingress and to two tags with one
non-service delimiting tag on ingress and egress.
SAP-ingress QoS setting allows for MAC-criteria type VID which uses the VID filter
matching capabilities QoS and VID Filters (moved to QoS guide) on page 313.
A VID filter entry can also be used as a debug or lawful intercept mirror source entry.
To Next Page
Loading...
