H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

QACL Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135 Chapter 2 QACL Configuration Examples
2-11
z VLAN 10 and VLAN 20 of the client-side network are connected to GigabitEthernet
2/0/1 of Switch A. In VLAN 20, there are some devices whose MAC addresses are
in the range of 1234-5678-9000 to 1234-5678-90FF.
z Packets of VLAN 10 and VLAN 20 in the client-side network arrive at
GigabitEthernet 2/0/1 single-tagged.
2.2.1 Flow-Based Selective QinQ Configuration Example
I. Network requirements
Configure flow-based selective QinQ to satisfy the following requirements:
z Tag VLAN 10 packets with VLAN 100. Thus, the clients in VLAN 10 can access
servers in VLAN 10 in the network connected to Switch B across the service
provider network.
z Tag VLAN 20 packets whose source MAC addresses are in the range of
1234-5678-9000 to 1234-5678-90FF with VLAN 200. Thus, the sending clients
can access servers in VLAN 20 in the network connected to Switch C across the
service provider network.
z Tag VLAN 20 packets whose source MAC addresses are beyond the range of
1234-5678-9000 to 1234-5678-90FF with VLAN 100. Thus, the sending clients
can access servers in VLAN 20 in the network connected to Switch B across the
service provider network.
II. Network diagram
Refer to Figure 2-6.
III. Configuration procedure
1) Configuration on Switch A
# Create Layer-2 ACL 4000 to sort out the packets with source MAC addresses in the
range of 1234-5678-9000 to 1234-5678-90FF.
<H3C> system-view
[H3C] acl number 4000
[H3C-acl-link-4000] rule permit ingress 1234-5678-9000 ffff-ffff-ff00
[H3C-acl-link-4000] quit
# Configure GigabitEthernet 2/0/2 to be a hybrid port and to forward packets of VLAN
100 and VLAN 200 without removing the outer VLAN tag.
[H3C] interface GigabitEthernet 2/0/2
[H3C-GigabitEthernet2/0/2] port link-type hybrid
[H3C-GigabitEthernet2/0/2] port hybrid vlan 100 200 tagged
[H3C-GigabitEthernet2/0/2] quit