User guide

provider mode

(double tagging, q-in-q)

In provider network environments, it is very common to use double VLAN tagging to pass along the

customer tag through the provider network by adding a provider tag on top of the customer tag. Double

Tagging is a way to isolate one IEEE 802.1Q VLAN from other IEEE 802.1Q VLANs in a hierarchical fashion

that is compatible with IEEE 802.1Q aware switches. This method places an extra or Double Tag in front

of a frame’s normal tag (assuming the frame was already Tagged), increasing the frame size by 4 bytes.

Provider mode works for the WAN port only, and is simply enabled with the following syntax. The ingress

ports default VLAN VID will be used as the double tag.

Note: Client ports must have their ingress 802.1Q mode set to disable

# Syntax is switch --set-port-802dot1q-provider-mode = Enable # Note default

VLAN must be defined for the ports

# Sets the IEEE 802.1Q provider mode for the WAN port.

# ENABLE is either

# 0=disable, disables IEEE 802.1Q (Q-in-Q) double tagging

# 1=enable, enables IEEE 802.1Q (Q-in-Q) double tagging

# The tag value is set by the --set-port-default-vid=0:VID option

# Example

switch --set-port-802dot1q-provider-mode = 1

isolate lan ports

ThedefaultisthatthetrafccanbeswitchbetweentheLANports.TheLANportcanbeisolatedbyeach

other by issuing the command:

# Syntax for a port based VLAN is:--set-port-vlan-table=port:WAN_ENABLE:LAN1_

ENABLE:LAN2_ENABLE: LAN3_ENABLE:LAN4_ENABLE:CPU_ENABLE

# Enable which ports are enabled for communication.

# PORT_ENABLE is in the range 0..1

# Example, LAN1, LAN2, LAN3 and LAN4 can communicate with WAN but not between

the LAN ports

switch –set-port-vlan-table=0:1:1:1:1:1:1

switch –set-port-vlan-table=1:1:1:0:0:0:0

switch –set-port-vlan-table=2:1:0:1:0:0:0

switch –set-port-vlan-table=3:1:0:0:1:0:0

switch –set-port-vlan-table=4:1:0:0:0:1:0

# Please note that the ingress port setting mode for the client ports must be

set to disable

switch –set-port-802dot1q-mode=1:0

switch –set-port-802dot1q-mode=2:0

switch –set-port-802dot1q-mode=3:0

switch –set-port-802dot1q-mode=4:0

enable lan

TheLANportsaredisabledperdefault.ThereforethecongurationleshouldenabletheLANportsby