System Architecture of 802.1x
Step 3 Run the display ssh user-information command to query the authentication mode of an SSH user
8 VLAN Configuration
About This Chapter
This topic describes how to configure the VLANs supported by the MA5600T.
NOTE
This document describes the configuration on the MA5600T. Each chapter provides an overview of the service configuration, describes the configuration flow with one or more configuration examples, and then provides a detailed description of the basic operations on the MA5600T.
For the readers who are familiar with the MA5600T, it is recommended that you read the configuration example (s) directly.
For the readers who are not familiar with the MA5600T, it is recommended that you read the basic operations first.
8.1 Overview
This topic describes the VLAN technology, and also the count, types and attributes of the VLANs supported by the MA5600T.
8.2 Configuration Example of a VLAN
This topic provides an example for configuring a MUX VLAN to implement the ADSL2+ access service. For the configuration examples of VLANs of other types, see "8.1 Overview."
8.3 Configuration Example of a MUX VLAN
This topic provides an example for configuring a MUX VLAN to implement the GPON access service. For the configuration example of VLANs of other types, see "8.1 Overview."
8.4 Creating a VLAN
This topic describes how to create a VLAN or VLANs of the same type in batches. To control the communication between different ports of a device, you need to create the VLAN to logically group the ports into different subnets.
8.5 Configuring the VLAN Attribute
This topic describes how to configure the VLAN attribute. You can configure the VLAN attribute to QinQ, stacking or common as required.
8.6 Setting the Inner and Outer Ethernet Protocols Type of a VLAN Stacking
This topic describes how to set the inner and outer Ethernet protocol type that a stacking VLAN supports. The inner VLAN tag does not adopt the standard 802.1q protocol. Therefore, to enable the interconnection between the MA5600T and the devices of other vendors, you must configure
the inner and outer Ethernet protocol type of a stacking VLAN to be the same as the inner and outer Ethernet protocol type of the interconnected devices.
8.7 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN
This topic describes how to set the inner VLAN priority of the service port in a stacking VLAN.
To classify different users, you can configure the important user packets with higher priorities.
In this way, these packets can be processed first.
8.8 Adding an Upstream Port to a VLAN
This topic describes how to add an upstream port to a VLAN. To transmit the user packets with the VLAN tag through the upstream port, you must add the upstream port to a VLAN.
8.9 Adding a Service Port to a VLANAdding Service Port(s) to a VLAN
This topic describes how to add a service port to a VLAN. This topic describes how to add service port(s) to a VLAN. The service port is used for user access. For the user connected to a user port of the MA5600T through a terminal, the service traffic of this user is borne on one service port of the user port.
8.10 Adding Service Ports in Batches
This topic describes how to add service ports in batches. The MA5600T supports the function of adding multiple service ports on an ADSL2+ board, a SHDSL board, or a VDSL board to a smart VLAN. The MA5600T also supports the function of adding multiple service ports on one or more ADSL2+, SHDSL, or VDSL boards to different successive MUX VLANs at a time.
8.11 Configuring the Description of a Service Port
This topic describes how to configure the description of a service port. Then the service ports are identified and classified based on the description to facilitate the management and maintenance of users or services.
8.1 Overview
This topic describes the VLAN technology, and also the count, types and attributes of the VLANs supported by the MA5600T.
Service Description
Virtual local area network (VLAN) technology is a technology used to form virtual workgroups by logically grouping the devices of a LAN into different subtnets. The Institute of Electrical and Electronics Engineers (IEEE) issued draft IEEE 802.1q in 1999, aiming at standardizing VLAN implementations.
For details on the VLAN feature, refer to "VLAN" in the MA5600T Feature Description.
Service Specification
The MA5600T supports up to 4K VLANs.
The MA5600T supports the following types of VLANs:
l Standard VLAN
l Smart VLAN
l MUX VLAN
l Super VLAN
Table 8-1 lists the VLAN types and applications.
Table 8-1 VLAN types and applications
Type Description Application
Standard VLAN
l Ethernet ports in a standard VLAN can communicate with each other.
l An Ethernet port in a standard VLAN is isolated from an Ethernet port in another standard VLAN.
It is applied only to Ethernet ports for network management and
subtending.
For the configuration of the standard VLAN, see "3.4 Configuration Example of an Inband NMS."
Type Description Application Smart VLAN A smart VLAN can contain multiple xDSL
service ports. The service streams of any two service ports in a smart VLAN are isolated.
The service streams of different VLANs are also isolated from each other. A smart VLAN can serve multiple users, thus saving VLAN resources.
A smart VLAN can contain multiple GPON service ports. Service streams of these ports in a smart VLAN are isolated from each other. Service streams of different VLANs are also isolated from each other. A smart VLAN can serve multiple users, thus saving VLAN resources.
MUX VLAN A MUX VLAN can contain only one xDSL service port. Service streams of different VLANs are isolated from each other. One-to-one mapping can be set up between a MUX VLAN and an access user. In this way, a MUX VLAN can uniquely identify an access user.
A MUX VLAN can contain only one GPON service port. Service streams of different VLANs are isolated from each other. One-to-one mapping can be set up between a MUX VLAN and an access user. In this way, a MUX VLAN can uniquely identify an access user.
Super VLAN A super VLAN is a layer 3 (an L3)-based VLAN. It consists of multiple sub VLANs.
The sub VLANs can communicate with each other based on the ARP proxy feature. A sub VLAN can be a smart VLAN or a MUX VLAN.
It is used for saving IP address resources, thus
The attributes of a VLAN are as follows:
l Common
l QinQ
l Stacking
Table 8-2 lists the attributes of a VLAN.
Table 8-2 VLAN attributes VLAN
attribute Application
Common A VLAN with this attribute can be used as an L2 VLAN. You can create an L3 virtual interface for a common VLAN if necessary.
QinQ When a packet contains the tag of a VLAN with the QinQ attribute, the packet contains two VLAN tags:
l Inner VLAN tag from the private network
l Outer VLAN tag allocated by the MA5600T
Through the outer VLAN tag, an L2 VPN tunnel can be set up to
transparently transmit service data among private networks. For details on the QinQ VLAN, see "29 QinQ VLAN Private Line Service
Configuration."
Stacking When a packet contains the tag of a VLAN with the stacking attribute, the packet contains two VLAN tags allocated by the MA5600T: inner VLAN tag and outer VLAN tag.
The upper layer BRAS can authenticate users based on the double VLAN tags, thus increasing the number of access users. The upper layer network working in L2 mode can forward packets based on the outer VLAN tag + MAC to provide the wholesale service function for ISPs. For details on the stacking VLAN, see "28 VLAN Stacking Wholesale Service
Configuration."
8.2 Configuration Example of a VLAN
This topic provides an example for configuring a MUX VLAN to implement the ADSL2+ access service. For the configuration examples of VLANs of other types, see "8.1 Overview."
Networking
Figure 8-1 shows an example network for configuring a MUX VLAN.
In this example network, the PCs are connected to the MA5600T through modems. PC1 and PC2 belong to different MUX VLANs. On the control board of the MA5600T, the packets from PC1 and PC2 are differentiated by the VLAN, and transmitted to the upper layer network.
Figure 8-1 Example network for configuring a MUX VLAN
MA5600T SCU
GE 0/9/0
A
F L D
Modem
PC1
Modem
PC2
Router
ETH CON ESC
Data Plan
Table 8-3 provides the data plan for configuring a MUX VLAN.
Table 8-3 Data plan for configuring a MUX VLAN
Item Data
ADSL2+ board ADSL2+ port: 0/11/0
VPI/VCI: 0/35 VLAN ID: 20
ADSL2+ board ADSL2+ port: 0/11/1
VPI/VCI: 0/35 VLAN ID: 21
Upstream port 0/9/0
Prerequisites
l The network devices and lines must be in the normal state.
l All the boards of the MA5600T must be in the normal state.
l The VPI/VCI of the modem is 0/35.