ACL Filter Policy Overview
494 Router Configuration Guide
configure>system>ethernet>new-qinq-untagged-sap is a special QinQ function for single
tagged QinQ frames with a null second tag. Using this in combination with VID filters is not
recommended. The outer-tag is the only tag available for filtering on egress for frames
arriving from MPLS SDPs or from PBB services even though additional tags may be carried
transparently.
Port Group Configuration Example
Figure 21: Port Groups
Figure 21 shows a customer use example where some VLANs are prevented from ingressing
or egressing certain ports. In the example, port A sap 1/1/1:1.* would have a filter as shown
below while port A sap 1/1/1:2.* would not.:
mac-filter 4 create
default-action forward
type vid
entry 1 create
match frame-type ethernet_II
outer-tag 30 4095
exit
action drop
exit
exit
OSSG734
C-VID Filters are Configured per
Sub-group (S-VID)
Legend
10
1
20
1
30
1
30
2
20
(Example)
SVID=1 / CVID=30: Discard
SVID=2 / CVID=30: Forward
Discards Frames
With C-VID
Not in Contract
S-TAG
C-TAG
: Data
: Discard
Sub-group 2
D
A
B
C
Sub-group 1
10 30 30
30 40
To Next Page
Loading...
