H3C Technologies H3C S3600 Series Switches - Manual (Page 1036)

1-7
Network diagram
Figure 1-3 Network diagram for VLAN-VPN configuration
Configuration procedure
z Configure Switch A.
# Enable the VLAN-VPN feature on Ethernet 1/0/11 of Switch A and tag the packets received on this
port with the tag of VLAN 1040 as the outer VLAN tag.
system-view
[SwitchA] vlan 1040
[SwitchA-vlan1040] port Ethernet 1/0/11
[SwitchA-vlan1040] quit
[SwitchA] interface Ethernet 1/0/11
[SwitchA-Ethernet1/0/11] vlan-vpn enable
[SwitchA-Ethernet1/0/11] quit
# Set the TPID value of Ethernet 1/0/12 to 0x9200 (for intercommunication with the devices in the public
network) and configure the port as a trunk port permitting packets of VLAN 1040.
[SwitchA] interface Ethernet 1/0/12
[SwitchA-Ethernet1/0/12] vlan-vpn tpid 9200
[SwitchA-Ethernet1/0/12] port link-type trunk
[SwitchA-Ethernet1/0/12] port trunk permit vlan 1040
z Configure Switch B.
# Enable the VLAN-VPN feature on Ethernet 1/0/21 of Switch B and tag the packets received on this
port with the tag of VLAN 1040 as the outer VLAN tag.
system-view
[SwitchB] vlan 1040
[SwitchB-vlan1040] port Ethernet 1/0/21
[SwitchB-vlan1040] quit