D-Link DES-7200 Refrigerator User Manual


  Open as PDF
of 1968
 
DES-7200 Configuration Guide Chapter 12 QinQ Configuration
12-11
Command Function
traffic-redirect access-group acl
nested-vlan VID in
Configure the flow-based policy to add the
VID of outer tag.
no traffic-redirect access-group acl
nested-vlan VID in
Remove the configuration
end
Exit the interface mode.
show running-config
Show the configuration.
Note
When this function is enabled on the 7200-24P, 7200-24G,
7200-48P, 7200-2XG, 7200-4XG, and 7200-48 line cards
of DES-7200 series, the egress should reside on the
chipset different from dot1q-tunnel port (for DES-7200
series, number of chipsets on line cards is computed on
the basis of one chipset per 24 gigabit ports or one chipset
per 2 10G ports). Flow separation is enabled on the
dot11-tunnle port to prevent broadcast, multicast or
unknown unicast communications with any other
interfaces of the chipset.
Flow-based VID change policy table takes precedence
over protocol-based VID change policy table.
When you configure member port on AP, the configured
VID add policy or VID change policy will be deleted.
Reconfiguration of VID add policy or VID change policy is
necessary. It is recommended to configure VID policy on
AP after configuring member port.
Once ACL is deleted, the ACL related policies will be
deleted as well.
When the packets with the tag larger than or equal to
Layer 2 are received on the dot1q-tunnel port, you can add
tag by flow-based match rule.
If a packet matches two or more flow policies without
priority specified simultaneously, the early configured
policy takes effect.
The following example adds the VID 9 to the packets from 1.1.1.3:
DES-7200# configure
DES-7200(config)# ip access-list standard 20
DES-7200(config-acl-std)# permit host 1.1.1.3
DES-7200(config-acl-std)# exit
DES-7200(config)# interface gigabitEthernet 0/1
DES-7200(config-if)# switchport mode dot1q-tunnel
DES-7200(config-if)# traffic-redirect access-group 20 nested-vlan 10 in