What Is SSH
Step 3 Run the display ssh user-information command to query the authentication mode of SSH user
9 Configuring the VLAN
About This Chapter
This chapter describes the classification of VLANs supported by the MA5600 and how to configure a VLAN.
9.1 Overview
This section describes VLAN technology, as well as count, types and attributes of VLAN supported by the MA5600.
9.2 Configuration Example of a Standard VLAN
This example shows how to subtend two MA5600 devices through a standard VLAN. For details, refer to "25.3 Configuration Example of the Subtended Network Through the SCU Board" or "25.4 Configuration Example of Subtending Device Through the ETHA Board."
9.3 Configuration Example of a Smart VLAN
This example shows how to configure a smart VLAN to realize ADSL2+ access.
9.4 Configuration Example of a MUX VLAN
This example shows how to configure a MUX VLAN to realize ADSL2+ access.
9.5 Configuration Example of the Super VLAN
This example shows how to configure the super VLAN to enable users whose services are isolated at layer 2 to communicate with each other at layer 3.
9.6 Creating a VLAN
This operation enables you to create a VLAN or VLANs of the same type in batches.
9.7 Configuring the VLAN Attribute
This operation enables you to configure the VLAN attribute to QinQ, stacking or common.
9.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLAN
This operation enables you to set the inner and outer Ethernet protocol type of a stacking VLAN supports.
9.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN
This operation enables you to set the inner VLAN priority of the service port in a stacking VLAN.
9.10 Adding an Upstream Port to a VLAN
This operation enables you to add an upstream port to a VLAN.
9.11 Adding a Service Port to a VLAN
This operation enables you to add a service port to a VLAN.
9.12 Adding Service Ports in Batches
This operation enables you to add service ports in batches: To run the multi-service-port vlan command to add multiple service ports on an asymmetric digital subscriber line 2 plus (ADSL2+)/single-pair high-speed digital subscriber line (SHDSL) board to a smart VLAN or a standard VLAN. To run the multi-service-port from-vlan command to add multiple service ports on one or multiple ADSL2+/SHDSL boards to different MUX VLANs at a time.
9.13 Setting the Description of a Service Port
This operation enables you to set the description of a service port.
9.1 Overview
This section describes VLAN technology, as well as count, types and attributes of VLAN supported by the MA5600.
Service Description
Virtual local area network (VLAN) is a technology used to form virtual workgroups by logically grouping the devices of a LAN. The Institute of Electrical and Electronics Engineers (IEEE) issued draft IEEE 802.1q in 1999, aiming at standardizing VLAN implementations.
For details on the VLAN feature, refer to the chapter "VLAN" in the Feature Description VLAN.
Service Specification
The MA5600 supports up to 4000 VLANs.
The MA5600 supports the following types of VLANs:
l Standard VLAN
l Smart VLAN
l MUX VLAN
l Super VLAN
Table 9-1 lists the VLAN types and applications.
Table 9-1 VLAN types and applications
Type Description Application
Standard VLAN
l Ethernet ports in a standard VLAN can communicate with each other.
l An Ethernet port in a standard VLAN is isolated from an Ethernet port in another standard VLAN.
l The service ports of the same VLANs on different service boards can realize the layer 2 interconnection.
Used for Ethernet ports and service ports. Applied in service virtual port of the AIUG board to work with the MPLS subboard and realize the ATM uplink of the MPLS service.
Type Description Application Smart VLAN A smart VLAN can contain multiple xDSL
service ports. Traffic streams of these ports in a smart VLAN are isolated from each other. Traffic streams of different VLANs are also isolated from each other. A smart VLAN can serve multiple xDSL users, thus saving VLAN resources.
Applied to xDSL access, such as residential areas to provide access to the Internet.
MUX VLAN A MUX VLAN can contain only one service port. Traffic streams of different VLANs are isolated from each other. One-to-one mapping can be set up between a MUX VLAN and an access user. So, a MUX VLAN can uniquely identify an access user.
Applied when users are distinguished by VLANs.
Super VLAN A super VLAN is a layer 3 based VLAN. It consists of multiple sub VLANs. A sub VLAN can be a smart VLAN or a MUX VLAN.
Applied to save IP addresses resources.
The following lists the attributes of VLANs:
l Common
l QinQ
l Stacking
Table 9-2 lists the attributes of VLANs.
Table 9-2 VLAN attributes VLAN
attribute Application
Common A VLAN with this attribute can be used as a layer 2 VLAN. You can create a layer 3 virtual interface for it if necessary.
The standard VLAN with the common attribute can also be configured as the service virtual port of the AIUG board for the ATM uplink of the MPLS service after mpls vlan is enabled.
VLAN
attribute Application
QinQ When a packet is added with the tag of a VLAN with QinQ attribute, the packet contains two VLAN tags:
l Inner VLAN tag from the private network
l Outer VLAN tag from the MA5600
Through the outer VLAN tag, a layer 2 VPN tunnel can be set up to transparently transmit service data among private networks.
When standard VLANs are used to realize the interconnection between service ports, set the attribute of the standard VLANs as QinQ.
For details about the QinQ VLAN, see the chapter "30 Configuring the QinQ VLAN Leased Line Service."
Stacking When a packet is added with the tag of a VLAN with Stacking attribute, the packet contains two VLAN tags: inner VLAN tag and outer VLAN tag allocated by the MA5600. With this attribute, the upper layer BRAS can authenticate users based on the double VLAN tags, thus increasing the number of access users. The upper layer network working in layer 2 mode can forward packets based on the outer "VLAN+MAC" to provide the multi-ISP wholesale service. For details about the stacking VLAN, see the chapter "29 Configuring the VLAN Stacking Wholesale Service."
9.2 Configuration Example of a Standard VLAN
This example shows how to subtend two MA5600 devices through a standard VLAN. For details, refer to "25.3 Configuration Example of the Subtended Network Through the SCU Board" or "25.4 Configuration Example of Subtending Device Through the ETHA Board."
9.3 Configuration Example of a Smart VLAN
This example shows how to configure a smart VLAN to realize ADSL2+ access.
Networking
Figure 9-1 shows a sample network for configuring a smart VLAN.
Figure 9-1 Sample network for configuring a smart VLAN
MA5600 SCU
ETH MON CON
GE0/7/0 A
E G D
A
E G D
PC2 Modem
PC1 Modem
Internet Router
Data Plan
Table 9-3 lists the data plan for configuring a smart VLAN.
Table 9-3 Data plan for configuring a smart VLAN
Item Data
ADSL2+ board ADSL2+ port: 0/2/0
VPI/VCI: 0/35
ADSL2+ board ADSL2+ port: 0/3/0
VPI/VCI: 0/35
Smart VLAN VLAN ID: 10
Upstream port 0/7/0
Prerequisite
l The network devices and lines are normal.
l All boards of the MA5600 are normal.
l The VPI/VCI of the modem is 0/35.
Configuration Flowchart
Figure 9-2 shows the flowchart for configuring a smart VLAN.
Figure 9-2 Flowchart for configuring a smart VLAN.
Create a smart VLAN Start
Add the upstream port
Add the virtual port
Save the data
End