Professional Documents
Culture Documents
Triple Play v2
Triple Play v2
Triple Play v2
3. VPN Service
Requirement
Vlan
S-VLAN: 701
C-VLAN: 101 to 200
Security : cvlan, port isolation
QoS: Deploy on MAN E
4. Configuration on Lanswitch
Step 1 Define Vlan for service
#
vlan batch 1 to 4094
Step 2 Define port trunk permit vlan on interface Trunk connect to UPE
#
interface GigabitEthernet0/0/1
description “connect to UPE-MANE”
port trunk allow-pass vlan 99 2400 455 701
bpdu enable
ntdp enable
ndp enable
Step 3 Configure QinQ on port connect to subscriber, IGMP snooping and multicast
vlan
#
interface GigabitEthernet0/0/16
description “connect to CPE1”
port link-type hybrid
port trunk allow-pass vlan 2400 / Vlan for VoD
port hybrid untagged vlan 455 701 / SVlan for HSI and VPN, enable the interface to add the
outer VLAN tags to received frames.
bpdu enable
trust 8021p / The priority carried in the frames received on an interface is set to trusted.
qinq vlan-translation enable / Enable selective QinQ function
port vlan-stacking vlan 90 to 95 push vlan 455 priority-inherit /QinQ for HSI, Cvlan90, Svlan 455
port vlan-stacking vlan 101 push vlan 701 priority-inherit /QinQ for VPN, Cvlan 101, svlan 701
port-isolate enable / port isolate
qos lr cir 10000 cbs 5000 /limit bandwidth 10M
ntdp enable
ndp enable
#
igmp-snooping enable /enable igmp-snooping
#
multicast-vlan enable /enable multicast-vlan
#
vlan 2400
igmp-snooping enable /enable igmp-snooping for vlan2400
vlan 99
igmp-snooping enable
multicast-vlan enable
multicast user-vlan 2400 /define users vlan
5. Configuration on CPE
- Configure port access vlan for HSI (90)
- Configure port access vlan for VPN (101)
- Configure port access vlan for IPTV/VoD (2400)
- Configure port trunk connect to Lanswitch permit vlan 90, 101, 2400