Huawei Training

7/18/2019 Huawei Training

http://slidepdf.com/reader/full/huawei-training 1/21

HUAWEI TECHNOLOGIES CO., LTD. All rights reserved

www.huawei.com

QinQ Principles




Foreword

QinQ encapsulates public network VLAN tagging besides

private network VLAN tagging. In the public network messages

transfer only based on the public network VLAN tag. QinQ

provides a kind of simple layer 2 VPN tunnel to the user. This

section aims to introduce the basic principles andimplementation of QinQ.

Page 2




Objectives

Upon completion of this course, you will be able to:

Understand QinQ basic principles and implementation

Master QinQ basic configuration

Master the technical application of QinQ

Page 3




Contents

QinQ introduction

QinQ basic principles

QinQ configuration

Page 4



HUAWEI TECHNOLOGIES CO., LTD. All rights reserved Page 5

QinQ

What is QinQ?

Tunnel protocol based on 802.1Q encapsulation

The packet is encapsulated by two layers of VLAN Tagging

QinQ advantages

Solves the increasingly deficient public network VLAN ID resources

Users can plan private network VLAN IDs

Provides a simple layer-2 VPN solution

Gives the user network a higher independence




Contents

QinQ introduction


QinQ configuration

Page 6


http://slidepdf.com/reader/full/huawei-training 7/21HUAWEI TECHNOLOGIES CO., LTD. All rights reserved Page 7

The Implementation Method Based on

Traditional 802.1Q Protocol

SWBSWA

SWC

SWD SWE

Host A

Host B

ISP Network

LAN A

LAN B

Trunk VLAN 200-300 Trunk VLAN 200-300

Trunk VLAN 200-300

Trunk VLAN 200-300

Trunk VLAN 200-300




QinQ Implementation

SWBSWA

SWC

SWD SWE

Host A

Host B

ISP Network

LAN A

LAN B

Trunk VLAN 200-300 QinQ access port

belongs to VLAN 3

Trunk VLAN 200-300

QinQ access port

belongs to VLAN 3

Trunk VLAN 3




QinQ Encapsulation

DA SA TYPE DATA FCS

DA SA TAG TYPE DATA FCS

Untagged frame

Tagged Frame

0x8100 PRI

C

F

I

VLAN ID 12b

TPID TCI

6B 6B 2B 64-1500B 4B

6B 6B 2B 64-1500B 4B4B

2B2B

DA SA Outer TAG Inner TAG TYPE DATA FCS

QinQ encapsulation

6B 4B 2B 64-1500B 4B4B6B




SWBSWA

SWC

SWD SWE

Host A

Host B

ISP Network

LAN A

LAN B

Trunk VLAN 200-300 QinQ access port

belongs to VLAN 3

Trunk VLAN 200-300

QinQ access port

belongs to VLAN 3

Trunk VLAN 3

3

Data Forwarding Process

200-300

3

200-300

200-300

200-300




QinQ classification

QinQ can be classified based on the following:

Based on port QinQ

Basic port based QinQ

Flexible QinQ

VLAN stacking

Based on flow flexible QinQ

Based on ACL flexible QinQ

Page 11




Based on port QinQ

If this function is configured on the port, equipment will add a VLAN ID

for the packets which come from this port as outer layer VLAN tag of the

port PVID.

Port based QinQ is achieved through the configuration of the dot1q-

tunnel type.

When port type is dot1q-tunnel, the added VLAN of this port doesn’t

support layer 2 multicast functionality.

Page 12




Flexible QinQ

Various conditions can allow flexible QinQ to add the service VLAN (S-

VLAN) tagging for incoming packets.

Specified conditions include an incoming packets’ outer tag VLAN,

or VLAN with 802.1p.

Implemented by configuring the VLAN Stacking on the port.

Strengths:

Compared to port based QinQ, flexible QinQ can choose add S-

VLAN tag or not according to the outer VLAN tag and 802.1p, and

the S-VLAN tag can be configured.

Page 13




Flow based flexible QinQ

Flow based flexible QinQ is configured by global configuration of flow

classification and flow behavior.

Strengths:

Compared to flexible QinQ, flow based flexible QinQ also can add S-

VLAN tag according to the packets’ inlayer VLAN, Configuration

range is more flexible. Such as:

− Inlayer VLAN, inlayer VLAN+802.1p, out layer VLAN, out

layer+802.1p and so on

To understand flow based flexible QinQ it it necessary to know QoS

first, and some basic principles in this course.

Page 14




Contents

QinQ introduction


QinQ configuration

Page 15




SWBSWA

SWC

SWD SWE

Host A

Host B

ISP Network

LAN A

LAN B

[SWA]interface ethernet 0/1

[SWA-Ethernet0/1]port link-type trunk[SWA-Ethernet0/1]port trunk permit vlan 200 to 300

QinQ Configuration

0/1

1/0/1

0/1

1/0/2

[SWE]interface ethernet 0/1

[SWE-Ethernet0/1]port link-type trunk

[SWE-Ethernet0/1]port trunk permit vlan 200 to 300

VLAN 200-300

VLAN 200-300Host C

Host D

Trunk VLAN 3




SWBSWA

SWC

SWD SWE

Host A

ISP NetworkLAN A

LAN B

[SWB]vlan 3

[SWB]interface ethernet 1/0/1

[SWB-Ethernet1/0/1]port access vlan 3[SWB-Ethernet1/0/1]stp disable

[SWB-Ethernet1/0/1]undo ntdp enable

[SWB-Ethernet1/0/1]vlan-vpn enable

[SWB]interface Ethernet 1/0/2

[SWB-Ethernet1/0/2]port link-type trunk

[SWB-Ethernet1/0/2]port trunk permit vlan 3

QinQ Configuration

0/1

1/0/1

0/1

1/0/2

Host B

Host C

Host D

VLAN 200-300

VLAN 200-300




SWBSWA

SWC

SWD SWE

Host A

ISP Network

LAN A

LAN B

[SWC]vlan 3[SWC]inter eth 1/0/1

[SWC-Ethernet1/0/1]port link-type trunk

[SWC-Ethernet1/0/1]port trunk permit vlan 3

[SWC]interface ethernet 1/0/2

[SWC-Ethernet1/0/2]port link-type trunk

[SWC-Ethernet1/0/2]port trunk permit vlan 3

QinQ Configuration

0/1

1/0/1

0/1

1/0/2

Host B

Host C

Host D

VLAN 200-300

VLAN 200-300




SWBSWA

SWC

SWD SWE

Host A

ISP NetworkLAN A

LAN B

[SWB]vlan-vpn tpid 9100[SWB]interface ethernet 1/0/2

[SWB-Ethernet1/0/2]port link-type trunk

[SWB-Ethernet1/0/2]port trunk permit vlan 3

[SWB-Ethernet1/0/2]vlan-vpn uplink enable

TPID Configuration

0/1

1/0/1

0/1

1/0/2

Host B

Host C

Host D

VLAN 200-300

VLAN 200-300




Summary

What is the function of QinQ?

When forwarding the QinQ frame in

the public network, will the inner tag

be checked?

What is the default TPID in the outer

tag of a QinQ frame? Can it be

modified?



Thank you

www.huawei.com

Documents

Huawei Training