Configuring VLAN is a prerequisite for configuring a service. Hence, before configuring a
service, make sure that the VLAN configuration based on planning is complete.
Prerequisite: The ID of the planned VLAN is not occupied.
The configuration overview:
Step 1 Create a VLAN.
Run the vlan command to create a VLAN. VLANs of different types are applicable to different scenarios.
NOTE
1To add VLANs with consecutive IDs in batches, run the vlan vlanid to end-vlanid command.
2 To add VLANs with inconsecutive IDs in batches, run the vlan vlan-list command.
Step 2 (Optional) Configure the VLAN attribute.
The default attribute for a new VLAN is “common”. You can run the vlan attrib command to
configure the attribute of the VLAN.
Configure the attribute according to VLAN planning.
NOTE
1 To configure attributes for the VLANs with consecutive IDs in batches, run the vlan attrib vlanid to endvlanid command.
2 To configure attributes for the VLANs with inconsecutive IDs in batches, run the vlan attrib vlan-list command.
Step 3 (Optional) Configure VLAN description.
To configure VLAN description, run the vlan desc command. You can configure VLAN
description to facilitate maintenance. The general VLAN description includes the usage and service information of the VLAN.
Step 4 (Optional) Configure the VLAN forwarding policy.
vlan-connect corresponds to the S+C forwarding policy, which ensures higher security by
solving the problems of insufficiency in the MAC address space, MAC address aging, and MAC address spoofing and attacks.
To configure the VLAN forwarding policy in the VLAN service profile, do as follows:
1. Run the vlan service-profile command to create a VLAN service profile and enter the
VLAN service profile mode.
2. Run the forwarding command to configure the VLAN forwarding policy. The default
VLAN forwarding policy is VLAN+MAC in the system.
3. Run the commit command to validate the profile configuration. The configuration of the
VLAN service profile takes effect only after execution of this command.
4. Run the quit command to quit the VLAN service profile mode.
5. Run the vlan bind service-profile command to bind the VLAN to the VLAN service profile
created in 4.1.
—-End
Example for configure a VLAN on Huawei MA5612
Assume that a stacking VLAN with ID of 50 is to be configured for extension of the VLAN. A service port is added to VLAN 50. The outer VLAN tag 50 of the stacking VLAN identifies the access device and the inner VLAN tag 10 identifies the user with access to the device. For the VLAN, description needs to be configured for easy maintenance.
To configure such a VLAN, do as follows:
huawei(config)#vlan 50 smart
huawei(config)#vlan attrib 50 stacking
huawei(config)#service-port vlan 50 eth 0/4/3 multi-service user-encap pppoe
rx-cttr 6 tx-cttr 5
huawei(config)#stacking label vlan 50 baselabel 10
huawei(config)#vlan desc 50 description stackingvlan/label10
Assume that a QinQ VLAN with ID of 100 is to be configured for an enterprise user to ensure
higher security and the VLAN forwarding policy is S+C. For the VLAN, description needs to be configured for easy maintenance. To configure such a VLAN, do as follows:
huawei(config)#vlan 100 smart
huawei(config)#vlan attrib 100 q-in-q
huawei(config)#vlan desc 100 description qinqvlan/forhuawei
huawei(config)#vlan service-profile profile-id 1
huawei(config-vlan-srvprof-1)#forwarding vlan-connec
Info: Please use the commit command to make modifications take effect
huawei(config-vlan-srvprof-1)#commit
huawei(config-vlan-srvprof-1)#quit
huawei(config)#vlan bind service-profile 100 profile-id 1
Customers interested in purchasing Huawei MA5600 or the price, please refer to below links:
More related:
No comments:
Post a Comment