Home » TP-Link Manuals » Hubs & Switches » TP-Link TL-SG5426 » Manual Viewer

TP-Link TL-SG5426 User Guide - Page 177

Layer 2 Flow for Packets Coming into a Tunnel Access Port, many tags the incoming packet has

UPC - 845973020729

Add to My Manuals
Save this manual to your list of manuals

Page 177 highlights

3 Configuring the Switch A port configured to support QinQ tunneling must be set to tunnel port mode. The Service Provider VLAN (SPVLAN) ID for the specific customer must be assigned to the QinQ tunnel access port on the edge switch where the customer traffic enters the service provider's network. Each customer requires a separate SPVLAN, but this VLAN supports all of the customer's internal VLANs. The QinQ tunnel uplink port that passes traffic from the edge switch into the service provider's metro network must also be added to this SPVLAN. The uplink port can be added to multiple SPVLANs to carry inbound traffic for different customers onto the service provider's network. When a double-tagged packet enters another trunk port in an intermediate or core switch in the service provider's network, the outer tag is stripped for packet processing. When the packet exits another trunk port on the same core switch, the same SPVLAN tag is again added to the packet. When a packet enters the trunk port on the service provider's egress switch, the outer tag is again stripped for packet processing. However, the SPVLAN tag is not added when it is sent out the tunnel access port on the edge switch into the customer's network. The packet is sent as a normal IEEE 802.1Q-tagged frame, preserving the original VLAN numbers used in the customer's network. Layer 2 Flow for Packets Coming into a Tunnel Access Port A QinQ tunnel port may receive either tagged or untagged packets. No matter how many tags the incoming packet has, it is treated as tagged packet. The ingress process does source and destination lookups. If both lookups are successful, the ingress process writes the packet to memory. Then the egress process transmits the packet. Packets entering a QinQ tunnel port are processed in the following manner: 1. New SPVLAN tags are added to all incoming packets, no matter how many tags they already have. The ingress process constructs and inserts the outer tag (SPVLAN) into the packet based on the default VLAN ID and Tag Protocol Identifier (TPID, that is, the ether-type of the tag). This outer tag is used for learning and switching packets. The priority of the inner tag is copied to the outer 3-134

Section	Page
Chapter 1: Introduction	26
Key Features	26
Description of Software Features	27
System Defaults	31
Chapter 2: Initial Configuration	34
Connecting to the Switch	34
Configuration Options	34
Required Connections	35
Remote Connections	36
Basic Configuration	36
Console Connection	36
Setting Passwords	37
Setting an IP Address	37
Enabling SNMP Management Access	39
Saving Configuration Settings	41
Managing System Files	53
Displaying Switch Hardware/Software Versions	54
Displaying Bridge Extension Capabilities	56
Setting the Switch’s IP Address	57
Enabling Jumbo Frames	60
Managing Firmware	60
Saving or Restoring Configuration Settings	62
Console Port Settings	64
Telnet Settings	66
Configuring Event Logging	68
Renumbering the System	73
Resetting the System	73
Setting the System Clock	74
Simple Network Management Protocol	76
Setting Community Access Strings	76
Specifying Trap Managers and Trap Types	77
Enabling SNMP Agent Status	78
Configuring SNMPv3 Management Access	79
Configuring SNMPv3 Users	80
Configuring Remote SNMPv3 Users	83
Configuring SNMPv3 Groups	84
Setting SNMPv3 Views	88
User Authentication	89
Configuring User Accounts	89
Configuring Local/Remote Logon Authentication	91
Configuring HTTPS	95
Configuring the Secure Shell	97
Configuring Port Security	102
Configuring 802.1X Port Authentication	103
Access Control Lists	110
Configuring Access Control Lists	110
Binding a Port to an Access Control List	116
Filtering IP Addresses for Management Access	117
Port Configuration	119
Displaying Connection Status	119
Configuring Interface Connections	121
Creating Trunk Groups	123
Setting Broadcast Storm Thresholds	134
Configuring Port Mirroring	136
Configuring Rate Limits	137
Showing Port Statistics	138
Address Table Settings	142
Setting Static Addresses	142
Displaying the Address Table	143
Changing the Aging Time	145
Spanning Tree Algorithm Configuration	145
Displaying Global Settings	148
Configuring Global Settings	150
Displaying Interface Settings	154
Configuring Interface Settings	157
Configuring Multiple Spanning Trees	159
Displaying Interface Settings for MSTP	161
Configuring Interface Settings for MSTP	163
VLAN Configuration	165
IEEE 802.1Q VLANs	165
Configuring IEEE 802.1Q Tunneling	176
Enabling QinQ Tunneling on the Switch	180
Adding an Interface to a QinQ Tunnel	181
Configuring Private VLANs	184
Enabling Private VLANs	184
Configuring Uplink and Downlink Ports	185
Protocol VLANs	185
Class of Service Configuration	187
Layer 2 Queue Settings	187
Layer 3/4 Priority Settings	192
Quality of Service	197
Configuring Quality of Service Parameters	198
Multicast Filtering	205
Layer 2 IGMP (Snooping and Query)	205
IGMP Filtering and Throttling	212
Multicast VLAN Registration	218
Displaying MVR Interface Status	219
Displaying Port Members of Multicast Groups	221
Configuring MVR Interface Status	222
Assigning Static Multicast Groups to Interfaces	223
Configuring Domain Name Service	224
Configuring General DNS Service Parameters	224
Configuring Static DNS Host to Address Entries	226
Displaying the DNS Cache	228
DHCP Snooping	229
DHCP Snooping Configuration	230
DHCP Snooping VLAN Configuration	231
DHCP Snooping Information Option Configuration	231
DHCP Snooping Port Configuration	232
DHCP Snooping Binding Information	233
IP Source Guard	234
IP Source Guard Port Configuration	234
Static IP Source Guard Binding Configuration	235
Dynamic IP Source Guard Binding Information	236
Switch Clustering	237
Cluster Configuration	238
Cluster Member Configuration	239
Cluster Member Information	240
Cluster Candidate Information	241
Chapter 4: Command Line Interface	242
Using the Command Line Interface	242
Accessing the CLI	242
Console Connection	242
Telnet Connection	243
Entering Commands	244
Keywords and Arguments	244
Minimum Abbreviation	244
Command Completion	244
Getting Help on Commands	244
Showing Commands	245
Partial Keyword Lookup	246
Negating the Effect of Commands	246
Using Command History	246
Understanding Command Modes	246
Exec Commands	247
Configuration Commands	248
Command Line Processing	249
Command Groups	250
Line Commands	251
line	252
login	252
password	253
timeout login response	254
exec-timeout	254
password-thresh	255
silent-time	256
databits	256
parity	257
speed	258
stopbits	258
disconnect	259
show line	259
General Commands	260
enable	260
disable	261
configure	262
show history	262
reload	263
end	263
exit	264
quit	264
System Management Commands	265
Device Designation Commands	265
User Access Commands	266
IP Filter Commands	268
Web Server Commands	270
Telnet Server Commands	273
Secure Shell Commands	274
Event Logging Commands	284
SMTP Alert Commands	290
Time Commands	294
System Status Commands	298
Frame Size Commands	304
Flash/File Commands	305
copy	305
delete	308
dir	309
whichboot	310
boot system	310
Authentication Commands	311
Authentication Sequence	311
RADIUS Client	314
TACACS+ Client	318
Port Security Commands	320
802.1X Port Authentication	322
Access Control List Commands	330
IP ACLs	331
MAC ACLs	335
ACL Information	340
SNMP Commands	341
snmp-server	342
show snmp	342
snmp-server community	343
snmp-server contact	344
snmp-server location	344
snmp-server host	345
snmp-server enable traps	347
snmp-server engine-id	348
show snmp engine-id	349
snmp-server view	350
show snmp view	351
snmp-server group	351
show snmp group	353
snmp-server user	354
show snmp user	356
Interface Commands	357
interface	357
description	358
speed-duplex	358
negotiation	359
capabilities	360
flowcontrol	361
shutdown	362
switchport broadcast packet-rate	363
clear counters	363
show interfaces status	364
show interfaces counters	365
show interfaces switchport	366
Mirror Port Commands	368
port monitor	368
show port monitor	369
Rate Limit Commands	370
rate-limit	370
Link Aggregation Commands	371
channel-group	372
lacp	373
lacp system-priority	374
lacp admin-key (Ethernet Interface)	375
lacp admin-key (Port Channel)	376
lacp port-priority	377
show lacp	377
Address Table Commands	381
mac-address-table static	381
clear mac-address-table dynamic	382
show mac-address-table	382
mac-address-table aging-time	383
show mac-address-table aging-time	384
Spanning Tree Commands	385
spanning-tree	386
spanning-tree mode	386
spanning-tree forward-time	387
spanning-tree hello-time	388
spanning-tree max-age	389
spanning-tree priority	389
spanning-tree pathcost method	390
spanning-tree transmission-limit	391
spanning-tree mst-configuration	391
mst vlan	392
mst priority	392
name	393
revision	394
max-hops	394
spanning-tree spanning-disabled	395
spanning-tree cost	395
spanning-tree port-priority	396
spanning-tree edge-port	397
spanning-tree portfast	397
spanning-tree link-type	398
spanning-tree mst cost	399
spanning-tree mst port-priority	400
spanning-tree protocol-migration	401
show spanning-tree	401
show spanning-tree mst configuration	403
VLAN Commands	404
GVRP and Bridge Extension Commands	404
Editing VLAN Groups	408
Configuring VLAN Interfaces	410
Displaying VLAN Information	416
Configuring IEEE 802.1Q Tunneling	417
Configuring Private VLANs	420
Configuring Protocol-based VLANs	422
Priority Commands	425
Priority Commands (Layer 2)	425
Priority Commands (Layer 3 and 4)	430
Quality of Service Commands	433
Example	442
Multicast Filtering Commands	442
IGMP Snooping Commands	442
IGMP Query Commands (Layer 2)	447
Static Multicast Routing Commands	450
IGMP Filtering and Throttling Commands	452
Multicast VLAN Registration Commands	458
IP Interface Commands	464
ip address	464
ip default-gateway	465
ip dhcp restart	495
show ip interface	495

Match case Limit results 1 per page

Configuring the Switch

3-134

A port configured to support QinQ tunneling must be set to tunnel port mode. The

Service Provider VLAN (SPVLAN) ID for the specific customer must be assigned to

the QinQ tunnel access port on the edge switch where the customer traffic enters

the service provider’s network. Each customer requires a separate SPVLAN, but this

VLAN supports all of the customer's internal VLANs. The QinQ tunnel uplink port

that passes traffic from the edge switch into the service provider’s metro network

must also be added to this SPVLAN. The uplink port can be added to multiple

SPVLANs to carry inbound traffic for different customers onto the service provider’s

network.

When a double-tagged packet enters another trunk port in an intermediate or core

switch in the service provider’s network, the outer tag is stripped for packet

processing. When the packet exits another trunk port on the same core switch, the

same SPVLAN tag is again added to the packet.

When a packet enters the trunk port on the service provider’s egress switch, the

outer tag is again stripped for packet processing. However, the SPVLAN tag is not

added when it is sent out the tunnel access port on the edge switch into the

customer’s network. The packet is sent as a normal IEEE 802.1Q-tagged frame,

preserving the original VLAN numbers used in the customer’s network.

Layer 2 Flow for Packets Coming into a Tunnel Access Port

A QinQ tunnel port may receive either tagged or untagged packets. No matter how

many tags the incoming packet has, it is treated as tagged packet.

The ingress process does source and destination lookups. If both lookups are

successful, the ingress process writes the packet to memory. Then the egress

process transmits the packet. Packets entering a QinQ tunnel port are processed in

the following manner:

New SPVLAN tags are added to all incoming packets, no matter how many tags

they already have. The ingress process constructs and inserts the outer tag

(SPVLAN) into the packet based on the default VLAN ID and Tag Protocol

Identifier (TPID, that is, the ether-type of the tag). This outer tag is used for

learning and switching packets. The priority of the inner tag is copied to the outer