华为交换机-配置基于流的灵活QinQ示例

SE_YT

2025-1-24

交换机

组网需求

如图1所示，PC上网用户和VoIP用户通过SwitchA和SwitchB接入运营商网络，通过运营商的网络互相通信。

要求PC上网用户和VoIP用户分别以VLAN2和VLAN3通过运营商网络。

Switch可以使用流策略的相关命令来实现灵活QinQ的功能。

图1 配置基于流的灵活QinQ组网图

配置思路

采用如下的思路配置基于流的灵活QinQ：

在SwitchA和SwitchB上创建相关VLAN。
在SwitchA和SwitchB上配置流分类、流行为和流策略。
在SwitchA和SwitchB上配置接口类型并加入VLAN。
在SwitchA和SwitchB的接口上应用流策略来实现灵活QinQ功能。

操作步骤

创建VLAN# 在SwitchA上创建VLAN2、VLAN3，即叠加后的外层VLAN。

<HUAWEI> system-view
[HUAWEI] sysname SwitchA
[SwitchA] vlan batch 2 3

# 在SwitchB上创建VLAN2、VLAN3，即叠加后的外层VLAN。

<HUAWEI> system-view
[HUAWEI] sysname SwitchB
[SwitchB] vlan batch 2 3

在Switch上配置流策略# 配置SwitchA的流分类、流行为和流策略。

[SwitchA] traffic classifier name1
[SwitchA-classifier-name1] if-match vlan-id 100 to 200
[SwitchA-classifier-name1] quit
[SwitchA] traffic behavior name1
[SwitchA-behavior-name1] add-tag vlan-id 2
[SwitchA-behavior-name1] quit
[SwitchA] traffic classifier name2
[SwitchA-classifier-name2] if-match vlan-id 300 to 400
[SwitchA-classifier-name2] quit
[SwitchA] traffic behavior name2
[SwitchA-behavior-name2] add-tag vlan-id 3
[SwitchA-behavior-name2] quit
[SwitchA] traffic policy name1
[SwitchA-trafficpolicy-name1] classifier name1 behavior name1
[SwitchA-trafficpolicy-name1] classifier name2 behavior name2
[SwitchA-trafficpolicy-name1] quit

# 配置SwitchB的流分类、流行为和流策略。

[SwitchB] traffic classifier name1
[SwitchB-classifier-name1] if-match vlan-id 100 to 200
[SwitchB-classifier-name1] quit
[SwitchB] traffic behavior name1
[SwitchB-behavior-name1] add-tag vlan-id 2
[SwitchB-behavior-name1] quit
[SwitchB] traffic classifier name2
[SwitchB-classifier-name2] if-match vlan-id 300 to 400
[SwitchB-classifier-name2] quit
[SwitchB] traffic behavior name2
[SwitchB-behavior-name2] add-tag vlan-id 3
[SwitchB-behavior-name2] quit
[SwitchB] traffic policy name1
[SwitchB-trafficpolicy-name1] classifier name1 behavior name1
[SwitchB-trafficpolicy-name1] classifier name2 behavior name2
[SwitchB-trafficpolicy-name1] quit

在接口上应用流策略实现灵活QinQ功能。# 配置SwitchA的接口GE1/0/1。

[SwitchA] interface gigabitethernet 1/0/1
[SwitchA-GigabitEthernet1/0/1] port link-type hybrid
[SwitchA-GigabitEthernet1/0/1] port hybrid untagged vlan 2 3
[SwitchA-GigabitEthernet1/0/1] traffic-policy name1 inbound
[SwitchA-GigabitEthernet1/0/1] quit

# 配置SwitchB的接口GE1/0/1。

[SwitchB] interface gigabitethernet 1/0/1
[SwitchA-GigabitEthernet1/0/1] port link-type hybrid
[SwitchB-GigabitEthernet1/0/1] port hybrid untagged vlan 2 3
[SwitchB-GigabitEthernet1/0/1] traffic-policy name1 inbound
[SwitchB-GigabitEthernet1/0/1] quit

配置其它接口# 在SwitchA上配置接口GE1/0/2加入VLAN2、VLAN3。

[SwitchA] interface gigabitethernet 1/0/2
[SwitchA-GigabitEthernet1/0/2] port link-type trunk
[SwitchA-GigabitEthernet1/0/2] port trunk allow-pass vlan 2 3
[SwitchA-GigabitEthernet1/0/2] quit

# 在SwitchB上配置接口GE1/0/2加入VLAN2、VLAN3。

[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] port link-type trunk
[SwitchB-GigabitEthernet1/0/2] port trunk allow-pass vlan 2 3
[SwitchB-GigabitEthernet1/0/2] quit

验证配置结果如果SwitchA、SwitchB上配置正确，则：
- PC上网用户可以通过运营商网络互相通信。
- VoIP用户可以通过运营商网络互相通信。

配置文件

SwitchA的配置文件

#
sysname SwitchA
#
vlan batch 2 to 3
#
traffic classifier name1 operator or precedence 5
 if-match vlan-id 100 to 200
traffic classifier name2 operator or precedence 10
 if-match vlan-id 300 to 400
#
traffic behavior name1
 permit
 add-tag vlan-id 2
traffic behavior name2
 permit
 add-tag vlan-id 3
#
traffic policy name1 match-order config
 classifier name1 behavior name1
 classifier name2 behavior name2
#
interface GigabitEthernet1/0/1
 port link-type hybrid
 port hybrid untagged vlan 2 to 3
 traffic-policy name1 inbound
#
interface GigabitEthernet1/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 3
#
return

SwitchB的配置文件

#
sysname SwitchB
#
vlan batch 2 to 3
#
traffic classifier name1 operator or precedence 5
 if-match vlan-id 100 to 200
traffic classifier name2 operator or precedence 10
 if-match vlan-id 300 to 400
#
traffic behavior name1
 permit
 add-tag vlan-id 2
traffic behavior name2
 permit
 add-tag vlan-id 3
#
traffic policy name1 match-order config
 classifier name1 behavior name1
 classifier name2 behavior name2
#
interface GigabitEthernet1/0/1
 port link-type hybrid
 port hybrid untagged vlan 2 to 3
 traffic-policy name1 inbound
#
interface GigabitEthernet1/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 to 3
#
return

阅读剩余

作者：SE_YT

链接：https://www.cnesa.cn/3024.html

文章版权归作者所有，未经允许请勿转载。

THE END

华为交换机-配置灵活QinQ示例-流策略接入

<<上一篇

华为交换机-配置单层VLAN Mapping子接口接入VLL示例

下一篇>>