H3C Technologies H3C S3600 Series Switches - Manual (Page 1035)

1-6
z If your switch is required to process the IGMP messages received on a VLAN-VPN port (for
example, because IGMP or IGMP snooping is enabled on the port), you must disable transparent
IGMP message transmission on the port so that the switch can process the IGMP messages
normally.
z Do not enable transparent IGMP message transmission on a port without VLAN-VPN enabled.
Displaying and Maintaining VLAN-VPN Configuration
To do... Use the command... Remarks
Display the VLAN-VPN configurations
of all the ports
display port vlan-vpn Available in any view
VLAN-VPN Configuration Example
Transmitting User Packets through a Tunnel in the Public Network by Using
VLAN-VPN
Network requirements
As shown in Figure 1-3 , Switch A and Switch B are both S3600 series switches. They connect the users
to the servers through the public network.
z PC users and PC servers are in VLAN 100 created in the private network, while terminal users and
terminal servers are in VLAN 200, which is also created in the private network. The VLAN VPN
connection is established in VLAN 1040 of the public network.
z Switches of other vendors’ are used in the public network. They use the TPID value 0x9200.
z Employ VLAN-VPN on Switch A and Switch B to enable the PC users and PC servers to
communicate with each through a VPN, and employ VLAN-VPN on Switch A and Switch B to
enable the Terminal users and Terminal servers to communicate with each other through a VPN.