SmartAX MA5600 VLAN New Service

Foreword As there are some demands for L2 VPN and VLAN extension, Huawei DSLAM MA5600 provides the QinQ VLAN and VLAN Stacking to implement those service. Page 2

References SmartAX MA5600 Technical Manual SmartAX MA5600 Operation Manual Page 3

Objectives Upon completion this course, you will be able to: Describe the QinQ VLAN working principle Perform the QinQ VLAN application configuration Describe the Stacking VLAN working principle Carry out the Stacking VLAN application configuration Page 4

Contents Chapter 1 QinQ VLAN Chapter 2 VLAN Stacking Page 5

Contents Chapter 1 QinQ VLAN 1.1 QinQ VLAN Working Principle 1.2 QinQ VLAN Configuration Page 6

Technical Background More and more enterprises require to communicate with branches in virtual private network to enhance the data security. The technology of network access for enterprises usually is xDSL technologies. Under the situation of above, The MA5600 series provides QinQ VLAN solution for enterprise private line interconnection. Page 7

QinQ VLAN Networking and Flow MAN L2/L3 L2/L3 E E CON CON A ETH A ETH MON MON D D A A GE0/7/0 GE0/7/0 QinQ private line A ESM MA5600_A ESM MA5600_B QinQ private line B Modem Modem LSW LSW VLAN 2 VLAN 3 VLAN 2 VLAN 3 Company A Company B Company A Company B Page 8

QinQ VLAN Working Principle 802.1q in 802.1q (QinQ) VLAN enables transmission of VLANs and services of a private network to the peer end transparently. In summary, the packet delivered in the backbone network has two layers of IEEE 802.1q tags: public VLAN tag private VLAN tag In this way, transparent delivery of private VLAN is realized and public VLAN resources are greatly saved. After receiving a packet with private VLAN tag, the MA5600 will assign a public VLAN ID to the packet and send it to the upstream network. The packet is transmitted in the metropolitan backbone network based on its public VLAN ID. When the packet reaches the MA5600 series on the other end of the backbone network, the MA5600 series will extract its public VLAN tag and restore the original user packet. The MA5600 series will then send the packet to the CPE. Page 9

Traffic Tagging L2/L3 SCU Service Board Service Board RTU RTU Page 10 Forwarding according to SP VLAN +DMAC Forwarding according to the SP VLAN+DMAC L2/L3 Data with two Tags here SCU Finding out the port and PVC ,taking off the SP VLAN Service Board Service Board Adding the SP VLAN according to the PVC RTU RTU C-VLAN C-VLAN Page 10

Forwarding Procedure Upstream forwarding: Service port receiving data with one Customer VLAN Tag Discarding data if it is Untag or with double tag Service board adding SP VLAN SCU forwarding data according to the SP VLAN +DMAC/SMAC Downstream forwarding: SCU forwarding data according to the SP VLAN+DMAC/SMAC to service board Service board finding out the relationship between SP VLAN/PVC/Port then taking off the SP VLAN and forwarding to the service port Thus the data sent to the customer only with Customer VLAN Tag Page 11

Contents Chapter 1 QinQ VLAN 1.1 QinQ VLAN Working Principle 1.2 QinQ VLAN Configuration Page 12

Configuration Flow Chart Page 13

Networking Example Page 14 MA5600_A SCU S A E H MA5600_B L2/L3 Branch A of the company Branch B of the LSW Modem MAN ETH MON CON Page 14

Data Plan Item Parameter MA5600_A SHDSL Port: 0/1/1 Upstream port: 0/7/0 VLAN ID: 50 MA5600_B Page 15

Data Configuration Configuration in MA5600_A (the configuration in MA5600_B is the same): Create VLAN 50. MA5600(config)#vlan 50 smart Set the attribute of VLAN 50. MA5600(config)#vlan attrib 50 q-in-q Add the upstream port. MA5600(config)#port vlan 50 0/7 0 Add the virtual service port the QinQ VLAN. MA5600(config)#service-port vlan 50 shdsl 0/1/1 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 Page 16

Data Configuration Show the VLAN configuration. MA5600(config)#display vlan 50 VLAN ID: 50 VLAN type: smart VLAN attribute: QinQ ------------------------------ ------------------------------ F / S/ P Native VLAN State Type State F/ S/ P VPI VCI 0 / 7/ 0 1 up shl up 0/1/ 1 0 35 ------------------------------ Standard port number: 1 After the above operation, the two branches can communicate with each other. Page 17

Contents Chapter 1 QinQ VLAN Chapter 2 VLAN Stacking Page 18

Contents Chapter 2 VLAN Stacking 2.1 VLAN Stacking Working Principle 2.2 VLAN Stacking Configuration Page 19

Technical Background In the Metropolitan Area Network (MAN), there may exist multiple ISPs, each ISP has own subscribers and needs private line wholesale service from the network carrier. Subscribers usually are identified with different VLAN-ID, but the VLAN-ID resource is limited. MA5600 supporting the VLAN Stacking technology to provides private line wholesale service solution to meet the requirement of ISP, and VLAN-ID extension to identification of subscribers. Page 20

VLAN Stacking Working Principle Internet ISP2 BRAS ISP1 FE/GE MAN FE/GE L2/L3 ISP2 wholesale FE/GE ISP1 wholesale L2/L3 Common user with double Tag, BRAS equipment will process them. FE/GE FE/GE IP DSLAM IP DSLAM IP DSLAM Modem Modem PC PC PC Enterprise A Enterprise B Page 21

VLAN Stacking Working Principle Traffic from users will be tagged with two 802.1q tags by MA5600: inner tag and outer tag. The outer VLAN tag called SP VLAN, realizes private line wholesale service, different SP VLAN for different ISP. The inner VLAN tag called customer VLAN, cooperates with the outer VLAN tag to identify subscribers. The inner VLAN-ID resource is multiplexing in different SP VLAN, so the total of VLAN identification is: 4,095 X 4,095 = 16,769,025 The network forward will the data according to the SP VLAN, after reaching the BRAS equipment, taking off the SP VLAN then authenticating customer by the inner Tag. DMAC SMAC Outer-tag Inner-tag data FCS TYPE Page 22

Traffic Tagging L2/L3 SCU Service Board Service Board RTU RTU Page 23 Forwarding according to SP VLAN+DMAC Forwarding according to SP VLAN+DMAC L2/L3 Data with double Tags SCU Finding out the port and PVC ,taking off two Tags Add two Tags according to PVC Service Board Service Board RTU RTU Untag Data UntagData Page 23

Forwarding Procedure Upstream forwarding: Service port receiving data without Tag, discarding data with any Tags Adding 2 VLAN Tags according to the PVC. Internal one is customer VLAN, external one is SP VLAN SCU forwarding data according to the SP VLAN+DMAC Downstream forwarding: SCU receives data with two Tags and forwards to service board according to the SP VLAN+DMAC Service board finds out the port and PVC and peels two Tags Sent the data without Tags to the customer Page 24

Contents Chapter 2 VLAN Stacking 2.1 VLAN Stacking Working Principle 2.2 VLAN Stacking Configuration Page 25

Configuration Flow Chart Page 26

Networking Example MAN Page 27 ISP 1 ISP 2 L2 L2 A D D G G E E SCU CON CON D ETH D ETH MON MON G G E E G E0/7/0 G E0/7/0 SCU MA5600_A SCU MA5600_B Modem Modem Company A Company B Page 27

Data Plan Item Data Company A Wholesale user: ISP 1 Connects to: MA5600_A ADSL2+ port: 0/1/0 Upstream port: 0/7/0 VLAN ID: 60 Company B Wholesale user: ISP 2 Connects to: MA5600_B VLAN ID: 61 Page 28

Data Configuration Configuration in MA5600_A, the configuration in MA5600_B is the same: Create a VLAN. MA5600(config)#vlan 60 smart Set the VLAN attribute. MA5600(config)#vlan attrib 60 stacking Add the upstream port. MA5600(config)#port vlan 60 0/7 0 Page 29

Data Configuration Add the virtual port. Set the inner label. MA5600(config)#service-port vlan 60 adsl 0/1/0 vpi 0 vci 35 rx-cttr 0 tx-cttr 0 Set the inner label. MA5600(config)#stacking label vlan 60 baselabel 10 Activate the port. MA5600(config-if-adsl-0/1)#activate 1 profile-index 1002 Save the data. MA5600(config)#save Page 30

Summary In this chapter, we have learned the QinQ VLAN and VLAN Stacking. QinQ VLAN is used as the corporation interconnection Stacking VLAN is used as wholesale service and VLAN extension Page 31