Huawei Quidway S5600 Series - VLAN-VPN Configuration Example

Operation Manual – VLAN VPN
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
VLAN-VPN Configuration
Huawei Technologies Proprietary
1-4
Caution:
If you have configured the port priority, (refer to the ”QoS&QoS profile” part of Quidway
S5600 Series Ethernet Switches Operation Manual), after you configure to replicate the
tag priority of the inner VLAN tag of a VLAN-VPN packet, the switch will prompt that the
port priority configuration on the current port is disabled.
1.4 VLAN-VPN Configuration Example
I. Network requirements
z Switch A and Switch C are S5600 series switches. Switch B is a switch comes
from another vendor, which uses the TPID value of 0x9100.
z Two networks are connected to the GigabitEthernet1/0/1 ports of Switch A and
Switch C respectively.
z Switch B only permits packets of VLAN 10.
z It is required that packets of VLANs other than VLAN 10 can be exchanged
between the networks connected to Switch A and Switch C.
II. Network diagram
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port)
Switch A
Switch C
Switch B
GE3/1/1 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port)
Switch A
Switch C
Switch B
GE3/1/1 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port)
Switch A
Switch C
Switch B
GE3/1/1 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port)
Switch A
Switch C
Switch B
GE3/1/1 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
GE1/0/1 (access VLAN 10, VLAN VPN port)
GE1/0/2 (trunk permit VLAN 10)
GE1/0/1 (access VLAN 10, VLAN VPN port)
Switch A
Switch C
Switch B
GE3/1/1 (trunk permit VLAN 10)
GE3/1/2 (trunk permit VLAN 10)
Switch A
Switch C
Switch B
Switch A
Switch C
Switch B
Figure 1-3 Network diagram for VLAN-VPN
III. Configuration Procedure
1) Configure Switch A and Switch C.
As the configuration performed on Switch A and Switch C is the same, configuration on
Switch C is omitted.