SGS-6341-Series User Manual
Table Of Contents
- Chapter 1 INTRODUCTION
- Chapter 2 INSTALLATION
- Chapter 3 Switch Management
- Chapter 4 Basic Switch Configuration
- Chapter 5 File System Operations
- Chapter 6 Cluster Configuration
- Chapter 7 Port Configuration
- Chapter 8 Port Isolation Function Configuration
- Chapter 9 Port Loopback Detection Function Configuration
- Chapter 10 ULDP Function Configuration
- Chapter 11 LLDP Function Operation Configuration
- Chapter 12 Port Channel Configuration
- Chapter 13 MTU Configuration
- Chapter 14 EFM OAM Configuration
- Chapter 15 PORT SECURITY
- Chapter 16 DDM Configuration
- Chapter 17 LLDP-MED
- Chapter 18 bpdu-tunnel Configuration
- Chapter 19 EEE Energy-saving Configuration
- Chapter 20 VLAN Configuration
- Chapter 21 MAC Table Configuration
- Chapter 22 MSTP Configuration
- Chapter 23 QoS Configuration
- Chapter 24 Flow-based Redirection
- Chapter 25 Flexible Q-in-Q Configuration
- Chapter 26 Layer 3 Management Configuration
- Chapter 27 ARP Scanning Prevention Function Configuration
- Chapter 28 Prevent ARP Spoofing Configuration
- Chapter 29 ARP GUARD Configuration
- Chapter 30 Gratuitous ARP Configuration
- Chapter 31 DHCP Configuration
- Chapter 32 DHCPv6 Configuration
- Chapter 33 DHCP Option 82 Configuration
- Chapter 34 DHCP Option 60 and option 43
- Chapter 35 DHCPv6 Options 37, 38
- Chapter 36 DHCP Snooping Configuration
- Chapter 37 DHCP Snooping Option 82 Configuration
- Chapter 38 IPv4 Multicast Protocol
- Chapter 39 IPv6 Multicast Protocol
- Chapter 40 Multicast VLAN
- Chapter 41 ACL Configuration
- Chapter 42 802.1x Configuration
- 42.1 Introduction to 802.1x
- 42.2 802.1x Configuration Task List
- 42.3 802.1x Application Example
- 42.4 802.1x Troubleshooting
- Chapter 43 The Number Limitation Function of MAC and IP in Port, VLAN Configuration
- Chapter 44 Operational Configuration of AM Function
- Chapter 45 Security Feature Configuration
- 45.1 Introduction to Security Feature
- 45.2 Security Feature Configuration
- 45.2.1 Prevent IP Spoofing Function Configuration Task Sequence
- 45.2.2 Prevent TCP Unauthorized Label Attack Function Configuration Task Sequence
- 45.2.3 Anti Port Cheat Function Configuration Task Sequence
- 45.2.4 Prevent TCP Fragment Attack Function Configuration Task Sequence
- 45.2.5 Prevent ICMP Fragment Attack Function Configuration Task Sequence
- 45.3 Security Feature Example
- Chapter 46 TACACS+ Configuration
- Chapter 47 RADIUS Configuration
- Chapter 48 SSL Configuration
- Chapter 49 IPv6 Security RA Configuration
- Chapter 50 MAB Configuration
- Chapter 51 PPPoE Intermediate Agent Configuration
- Chapter 52 Web Portal Configuration
- Chapter 53 VLAN-ACL Configuration
- Chapter 54 SAVI Configuration
- Chapter 55 MRPP Configuration
- Chapter 56 ULPP Configuration
- Chapter 57 ULSM Configuration
- Chapter 58 Mirror Configuration
- Chapter 59 sFlow Configuration
- Chapter 60 RSPAN Configuration
- Chapter 61 ERSPAN
- Chapter 62 SNTP Configuration
- Chapter 63 NTP Function Configuration
- Chapter 64 Summer Time Configuration
- Chapter 65 DNSv4/v6 Configuration
- Chapter 66 Monitor and Debug
- Chapter 67 Reload Switch after Specified Time
- Chapter 68 Debugging and Diagnosis for Packets Received and Sent by CPU
- Chapter 69 Dying Gasp Configuration
- Chapter 70 PoE Configuration
20-85
switch(config-if-ethernet1/1)#switchport hybrid allowed vlan 1000 untag
# Configure the mapping rules for selective Q-in-Q on Ehernet1/1 to insert VLAN 1000 tag as
the outer VLAN tag in packets with the tags of VLAN 100 through VLAN 200.
switch(config-if-ethernet1/1)#dot1q-tunnel selective s-vlan 1000 c-vlan 100-200
# Enable selective Q-in-Q on Ethernet1/1.
switch(config-if-ethernet1/1)#dot1q-tunnel selective enable
# Configure Ethernet 1/2 as a hybrid port and configure it to remove VLAN tags when
forwarding packets of VLAN 2000.
switch(config-if-ethernet1/2)#switchport mode hybrid
switch(config-if-ethernet1/2)#switchport hybrid allowed vlan 2000 untag
# Configure mapping rules for selective Q-in-Q on Ehernet1/2 to insert VLAN 2000 tag as the
outer VLAN tag in packets with the tags of VLAN 201 through VLAN 300.
switch(config-if-ethernet1/2)#dot1q-tunnel selective s-vlan 2000 c-vlan 201-300
# Enable selective Q-in-Q on Ethernet 1/2.
switch(config-if-ethernet1/2)#dot1q-tunnel selective enable
# Configure uplink port Ethernet 1/9 as a hybrid port and configure it to save VLAN tags when
forwarding packets of VLAN 1000 and VLAN 2000.
switch(config-if-ethernet1/2)#interface ethernet 1/9
switch(config-if-ethernet1/9)#switchport mode hybrid
switch(config-if-ethernet1/9)#switchport hybrid allowed vlan 1000;2000 tag
After the above configuration, packets of VLAN 100 through VLAN 200 from Ethernet1/1 are
automatically tagged with the tag of VLAN 1000 as the outer VLAN tag, and packets of VLAN
201 through VLAN 300 from Ethernet1/2 are automatically tagged with the tag of VLAN 2000
as the outer VLAN tag on SwitchA.
User’s Manual of SGS-6341 series