ESR Series Routers Operation Manual 39
7.2 QinQ termination configuration
QinQ is a technology of packet transmission with two 802.1q tags. The technology is used for
extending quantity of VLANs in data networks. 802.1q header, which is closer to payload, is an Inner Tag
also known as C-VLAN (Custimer VLAN). 802.1q header, which is comes before C-VLAN, is an Outer Tag
also known as S-VLAN (Service VLAN). Using of double tags in Ethernet frames is describing by 802.1ad
protocol.
Objective: Configure 192.168.1.1/24 subnet termination (Combinations C-VLAN: 741, S-VLAN: 828)
on gigabitethernet 1/0/1 physical interface.
Solution:
Enable 802.1ad protocol support on physical interface:
esr(config)# interface gigabitethernet 1/0/1
esr(config-if-gi)# switchport dot1q ethertype egress stag 802.1ad
esr(config-if-gi)# exit
Create subinterface for S-VLAN: 828
esr(config)# interface gigabitethernet 1/0/1.828
esr(config-subif)# exit
Create QinQ subinterface for C-VLAN: 741
esr(config)# interface gigabitethernet 1/0/1.828.741
esr(config-qinq-if)# ip address 192.168.1.1/24
esr(config-qinq-if)# exit
Configuration changes will take effect when the configuration is applied:
esr-1000# commit
Configuration has been successfully committed
esr-1000# confirm
Configuration has been successfully confirmed
7.3 AAA configuration
AAA (Authentication, Authorization, Accounting) is used for description of access provisioning and
control.
Authentication is a matching of a person (request) for the existing account in the security
system. Performed by the login and password.
Authorization (authorization, privilege verification, access level verification) is a matching of
the existing account in the system (passed authentication) and specific privileges.
Accounting (accounting)is a monitoring of user connection or changes made by the user.
Objective: Configure authentication for users being connected via Telnet and RADIUS
(192.168.16.1/24).
To Next Page
Loading...
