Operation Manual – VLAN-VPNH3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration1-7# Enable the VLAN-VPN feature on Ethernet 1/0/21 of Switch B and tag the packetsreceived on this port with the tag of VLAN 1040 as the outer VLAN tag. system-view[SwitchB] vlan 1040[SwitchB-vlan1040] port Ethernet 1/0/21[SwitchB-vlan1040] quit[SwitchB] interface Ethernet 1/0/21[SwitchB-Ethernet1/0/21] vlan-vpn enable# Set the global TPID value to 0x9200 (for intercommunication with the devices in thepublic network) and set Ethernet 1/0/22 as a trunk port permitting packets of VLAN1024.[SwitchB-Ethernet1/0/21] quit[SwitchB] vlan-vpn tpid 9200[SwitchB] interface Ethernet 1/0/22[SwitchB-Ethernet1/0/22] port link-type trunk[SwitchB-Ethernet1/0/22] port trunk permit vlan 1040Note:z Do not configure VLAN 1040 as the default VLAN of Ethernet 1/0/12 of Switch A andEthernet 1/0/22 of Switch B. Otherwise, the outer VLAN tag of a packet will beremoved during transmission.z In this example, both Ethernet1/0/11 of Switch A and Ethernet1/0/21 of Switch B areaccess ports. In cases where the ports are trunk ports or hybrid ports, you need toconfigure the two ports to remove the outer VLAN tags before transmitting packetsof VLAN 1040. Refer to VLAN in this manual for detailed configuration.z Configure the devices in the public network# As the devices in the public network are from other vendors, only the basic principlesare introduced here. That is, you need to configure the devices connecting to Ethernet1/0/12 of Switch A and Ethernet 1/0/22 of Switch B to permit the corresponding ports totransmit tagged packets of VLAN 1040.IV. Data transfer processThe following describes how a packet is forwarded from Switch A to Switch B in thisexample.1) As Ethernet 1/0/11 of Switch A is a VLAN-VPN port, when a packet from thecustomer’s network side reaches this port, it is tagged with the default VLAN tag ofthe port (VLAN 1040).
