66-2
igure to add the tag of VLAN 1002 to the packets of
the flexibility of network management. On the other hand, network resources are well utilized,
are also isolated by their inner VLAN tags. This helps to improve network
MAC Addr
ts. Thus,
users, they may be broadcast if their
AC address table of the outer VLANs.
packets
telephone users (in VLAN 201 to VLAN 300). Packets of all these users are forwarded by Switch A to
the public network.
After the selective QinQ feature and the inner-to-outer tag mapping feature are enabled on the port
connecting Switch A to these users, the port will add different outer VLAN tags to the packets according
to their inner VLAN tags. For example, you can conf
IP telephone users in VLAN 201 to VLAN 300 and forward the packets to the VoIP device, which is
responsible for processing IP telephone services.
To guarantee the quality of voice packet transmission, you can configure QoS policies in the public
network to reserve bandwidth for packets of VLAN 1002 and forward them preferentially.
In this way, you can configure different forwarding policies for data of different type of users, thus
improving
and users of the same type
security.
ess Replicating
Like the VLAN-VPN feature, a port with the selective QinQ enabled adds the source MAC addresses of
user packets to the MAC address table of the default VLAN on the port. However, the port with selective
QinQ enabled can insert an outer VLAN tag other than that of the default VLAN to the packe
when packets are forwarded from the service provider to
destination MAC addresses cannot be found in the M
Figure 66-2
Learn MAC addresses of selective QinQ
As shown in
Figure 66-2
, the default VLAN of the port used to receive packets is VLAN 2. The port is
configured to receive packets of VLAN 3, tag the received packets with the outer tag of VLAN 4, and add
red to
corresponding to the outer tag. With the inter-VLAN MAC address replicating feature enabled, when a
the source MAC addresses (MAC-A) of the packets to the MAC address table of its default VLAN (VLAN
2).
When a response packet is returned to the device from VLAN 4 of the service provider network, the
device searches the outbound port for MAC-A in the MAC address table of VLAN 4. However, because
the corresponding entry is not added to the MAC address table of VLAN 4, this packet is conside
be a unicast packet with unknown destination MAC address. As a result, this packet will be broadcast to
all the ports in VLAN 4, which wastes the network resources and incurs potential security risks.
The Switch 4500 series Ethernet switches provide the inter-VLAN MAC address replicating feature,
which can replicate the entries in the MAC address table of the default VLAN to that of the VLAN
