Zte ZXR10 8900 Series, ZXR10 8902, ZXR10 8905, ZXR10 8908, ZXR10 8912 User Manual

ZXR108900Series

10GigabitRoutingSwitch

UserManual(EthernetSwitchingVolume)

Version2.8.02.C

ZTECORPORATION
NO.55,Hi-techRoadSouth,ShenZhen,P .R.China
Postcode:518057
Tel:[phone]
Fax:[phone]
URL:http://ensupport.zte.com.cn
E-mail:[e-mail]

LEGALINFORMATION

Copyright©2010ZTECORPORATION.

Thecontentsofthisdocumentareprotectedbycopyrightlawsandinternationaltreaties.Anyreproductionordistributionof
thisdocumentoranyportionofthisdocument,inanyformbyanymeans,withoutthepriorwrittenconsentofZTECORPO­RATIONisprohibited.Additionally ,thecontentsofthisdocumentareprotectedbycontractualcondentialityobligations.

Allcompany ,brandandproductnamesaretradeorservicemarks,orregisteredtradeorservicemarks,ofZTECORPORA TION
oroftheirrespectiveowners.

Thisdocumentisprovided“asis”,andallexpress,implied,orstatutorywarranties,representationsorconditionsaredis­claimed,includingwithoutlimitationanyimpliedwarrantyofmerchantability ,tnessforaparticularpurpose,titleornon-in­fringement.ZTECORPORATIONanditslicensorsshallnotbeliablefordamagesresultingfromtheuseoforrelianceonthe
informationcontainedherein.

ZTECORPORATIONoritslicensorsmayhavecurrentorpendingintellectualpropertyrightsorapplicationscoveringthesubject
matterofthisdocument.ExceptasexpresslyprovidedinanywrittenlicensebetweenZTECORPORA TIONanditslicensee,
theuserofthisdocumentshallnotacquireanylicensetothesubjectmatterherein.

ZTECORPORATIONreservestherighttoupgradeormaketechnicalchangetothisproductwithoutfurthernotice.

UsersmayvisitZTEtechnicalsupportwebsitehttp://ensupport.zte.com.cntoinquirerelatedinformation.

TheultimaterighttointerpretthisproductresidesinZTECORPORATION.

RevisionHistory

RevisionNo.RevisionDateRevisionReason

R1.320100205

Editionupdate

SerialNumber:sjzl20093838

Contents

AboutThisManual.............................................I

SafetyInstruction.............................................1

SafetyInstruction...........................................................1

SafetySigns..................................................................1

VLANConguration...........................................3

VLANOverview..............................................................3

VLANType.................................................................4

VLANTag...................................................................4

VLANLinkT ype..........................................................5

DefaultVLAN.............................................................5

PVLAN.......................................................................5

QinQ.........................................................................6

SubnetVLAN.............................................................7

ProtocolVLAN............................................................7

VLANTranslation........................................................7

EnhancedVLANT ranslation..........................................8

SuperVLAN................................................................8

SVLAN......................................................................8

ConguringVLAN..........................................................11

CreatingVLAN...........................................................11

SettingVLANLinkT ypeonInterface.............................12

AddingVLANMemberPort..........................................13

SettingPortNativeVLAN............................................13

SettingPortVLANFiltering..........................................14

SettingPortFameTypeFiltering..................................14

CreatingVLANL3Interface.........................................15

Bindingdpi-template..................................................15

VLANCongurationExample.......................................15

ConguringPVLAN.........................................................16

ConguringQinQ...........................................................17

ConguringSubnetVLAN................................................18

CondentialandProprietaryInformationofZTECORPORATIONI

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

ConguringProtocolVLAN..............................................19

ConguringVLANT ranslation..........................................20

ConguringEnhancedVLANT ranslation............................21

ConguringSuperVLAN..................................................22

ConguringSVLAN........................................................25

VLANMaintenanceandDiagnosis.....................................29

STPConguration............................................31

STPOverview...............................................................31

SSTPMode...............................................................31

RSTPMode...............................................................32

MSTPMode...............................................................32

BPDUProtection........................................................34

ConguringSTP............................................................38

EnablingSTP.............................................................38

ConguringSTPMode................................................38

ConguringSTPParameters........................................39

CreatinganInstance..................................................40

ConguringMSTCongurationNameandVersion..........40

ConguringSwitchPriority..........................................41

ConguringSTPProtocolT ransparentTransmission

ID...................................................................41

ConguringBPDUProtection...........................................42

ConguringEdgePortBPDUProtection.........................42

ConguringPortLoopbackProtection...........................42

ConguringPortRootProtection..................................43

STPCongurationExample.............................................43

STPMaintenanceandDiagnosis.......................................45

MACTableOperation.......................................47

MACAddressT ableOverview...........................................47

CompositionandMeaningofMACAddressT able............47

MACAddressCategories.............................................48

MACAddressT ableCreationandDeletion.....................49

ConguringMACT able...................................................50

ConguringMACAddressAgingTime...........................50

BurningMACAddress.................................................50

BindingMACAddress.................................................51

ConguringPortMACAddressLearning........................51

LimitingNumberofMACAddresses..............................52

ConguringPortMACAddressLearningProtection.........52

ConguringMACAddressFiltration...............................53

IICondentialandProprietaryInformationofZTECORPORATION

Conguring256KMode..............................................54

ViewingMACAddressT able.........................................54

MACAddressT ableCongurationExample........................55

ESMConguration...........................................57

ESMOverview...............................................................57

ConguringESM............................................................57

InitializingESM.........................................................57

ConguringESMMode...............................................58

ESMCongurationExample............................................58

ESMMaintenanceandDiagnosis......................................58

LinkAggregationConguration.......................59

LinkAggregationOverview.............................................59

ConguringLinkAggregation..........................................60

LinkAggregationCongurationExample...........................61

LinkAggregationMaintenanceandDiagnosis.....................62

IGMPSnoopingConguration..........................65

IGMPSnoopingOverview................................................65

MulticastGroupJoin...................................................66

MulticastGroupLeave................................................66

FastLeave................................................................67

ConguringIGMPSnooping.............................................67

EnablingIGMPSnoopingFunction................................67

ConguringIGMPSnoopingssm-mapping.....................68

ConguringProxyQueryFacility..................................68

RestrictingMulticastGroup.........................................69

ConguringStaticIGMPSnooping................................69

ModifyingIGMPSnoopingTimeParameters...................70

ConguringMaster/SlaveRouterInterface....................70

IGMPSnoopingCongurationExample.............................71

IGMPSnoopingMaintenanceandDiagnosis.......................72

LinkProtectionConguration..........................75

ZESRConguration........................................................75

ZESROverview.........................................................75

ConguringZESR......................................................76

ZESRCongurationExample.......................................77

ZESSConguration........................................................79

ZESSOverview.........................................................79

ConguringZESS......................................................80

Dual-UplinkProtection....................................................80

CondentialandProprietaryInformationofZTECORPORATIONIII

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

Dual-UplinkProtectionOverview..................................80

Dual-UplinkProtectionCongurationExample...............81

EthernetOAMConguration............................85

Conguring802.3ah......................................................85

802.3ahOverview.....................................................85

RemoteDiscovery.............................................86

RemoteLoopback..............................................86

LinkMonitor.....................................................86

Conguring802.3ah..................................................87

802.3ahCongurationExample...................................90

MaintenanceandDiagnosisof802.3ah.........................91

ConguringCFM............................................................93

CFMOverview...........................................................93

ConguringCFM........................................................95

OAMLinkControlEventCongurationExample............102

CFMProxyCardFunctionIllustration..........................103

CFMCongurationExample.......................................104

CFMMaintenanceandDiagnosis................................107

EPONOLTConguration................................109

EPONOLTOverview.....................................................109

ConguringEPONOL T..................................................111

ConguringOLTInterface........................................111

ConguringEPONGlobalParameters..........................112

ConguringONULocalManagement...........................116

ConguringOLTOpticalLineProtection.......................117

ConguringQoS......................................................118

ConguringOLTAlarm.............................................119

ConguringONURemoteManagement.......................120

EPONOLTCongurationExample...................................125

EPONOLTMaintenanceandDiagnosis............................127

UDLDConguration.......................................133

UDLDOverview...........................................................133

ConguringUDLD........................................................135

UDLDCongurationExample.........................................136

ConguringOne-commandforCollection

Function........................................................137

One-commandforCollectionFunctionOverview...............137

IntroductiontoRunningEnvironmentofOne-command

CollectionFunction..............................................137

IVCondentialandProprietaryInformationofZTECORPORATION

BasicCongurationofOne-commandforCollection

Function.............................................................138

IntroductiontoOne-commandforCollecting

Information...................................................138

IntroductiontoOne-commandforCollectingFault

DiagnosisInformation......................................139

IntroductiontoOne-commandforConguring.............140

CommandofViewingOne-commandfor

Conguring.....................................................142

Figures..........................................................145

Glossary........................................................147

CondentialandProprietaryInformationofZTECORPORATIONV

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

Thispageisintentionallyblank.

VICondentialandProprietaryInformationofZTECORPORATION

AboutThisManual

WhatIsinThis

Purpose

ThismanualisZXR108900Series(V2.8.02.C)10GigabitRouting
SwitchUserManual(EthernetSwitchingVolume)andappliesto
ZXR108902/8905/8908/891210Gigabitroutingswitch.

Intended
Audience

Thismanualisintendedforthefollowingengineers:

�On-sitemaintenanceengineers

�Networkmonitoringengineers

�Systemmaintenanceengineers

Thismanualcontainsthefollowingcontents:

Manual

ChapterOverview

Chapter1Safety
Instruction

Chapter2VLAN
Conguration

Chapter3STP
Conguration

Chapter4MACT able
Operation

Describessafetyinstructionsandsignsused
inthismanual.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
VLAN,PVLAN,QinQ,SubnetVLAN,Protocol
VLAN,VLANtranslation,SuperVLANand
SVLAN.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
STPandBPDUprotection.

Thischapterdescribesbasicconceptand
relatedoperationsofMACaddresstable.

Chapter5ESM
Conguration

Chapter6Link
Aggregation
Conguration

Chapter7IGMP
SnoopingConguration

Chapter8
LinkProtection
Conguration

Chapter9Ethernet
OAMConguration

Chapter10EPONOLT
Conguration

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
ESM.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
linkaggregation.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
IGMPSnooping.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
ZESRandZESS.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
EthernetOAM.

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
EPONOL T .

CondentialandProprietaryInformationofZTECORPORATIONI

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

ChapterOverview

Chapter11UDLD
Conguration

Chapter12Conguring
One-commandfor
CollectionFunction

Documentation

Related

Thefollowingdocumentationisrelatedtothismanual:

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

Thischapterdescribesbasicconcept,
congurationandcongurationexampleof
UDLD.

ThischapterdescribesOne-commandfor
CollectionFunction.

HardwareInstallationManual

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

HardwareManual

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(BasicConguration)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(EthernetSwitching)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(IPv4Routing)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(IPv6)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(MPLS)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(DPI)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitchUser

Manual(Firewall)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(Index)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(BasicCongurationVolumeI)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(BasicCongurationVolumeII)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(BasicCongurationVolumeIII)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(EthernetSwitching)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(IPv4RoutingVolumeI)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(IPv4RoutingVolumeII)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(IPv6)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(MPLS)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(NetworkManagement)

IICondentialandProprietaryInformationofZTECORPORATION

AboutThisManual

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(QoS)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(Security)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(VoiceandVideo)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(Multicast)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(DPI)

�ZXR108900Series(V2.8.02.C)10GigabitRoutingSwitch

CommandReference(Firewall)

CondentialandProprietaryInformationofZTECORPORATIONIII

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

Thispageisintentionallyblank.

IVCondentialandProprietaryInformationofZTECORPORATION

Chapter1

SafetyInstruction

TableofContents

SafetyInstruction...............................................................1

SafetySigns......................................................................1

SafetyInstruction

Onlydulytrainedandqualiedpersonnelcaninstall,operateand
maintainthedevices.

Duringthedeviceinstallation,operationandmaintenance,please
abidebythelocalsafetyspecicationsandrelatedoperationin­structions,otherwisephysicalinjurymayoccurordevicesmaybe
broken.Thesafetyprecautionsmentionedinthismanualareonly
supplementoflocalsafetyspecications.

Thedebugcommandsonthedeviceswillaffecttheperformance
ofthedevices,whichmaybringseriousconsequences.Sotake
caretousedebugcommands.Especially ,thedebugallcom-
mandwillopenalldebugprocesses,sothiscommandmustnot
beusedonthedeviceswithservices.Itisnotrecommendedto
usethedebugcommandswhentheusernetworksareinnormal
state.

ZTECorporationwillassumenoresponsibilityforconsequencesre­sultingfromviolationofgeneralspecicationsforsafetyoperations
orofsafetyrulesfordesign,productionanduseofthedevices.

SafetySigns

Thecontentsthatusersshouldpayattentiontowhentheyinstall,
operateandmaintaindevicesareexplainedinthefollowingfor­mats:

Warning:

Indicatesthemattersneedingcloseattention.Ifthisisignored,
seriousinjuryaccidentsmayhappenordevicesmaybedamaged.

CondentialandProprietaryInformationofZTECORPORATION1

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

Caution:

Indicatesthemattersneedingattentionduringconguration.

Note:

Indicatesthedescription,hint,tip,andsoonforcongurationop­erations.

2CondentialandProprietaryInformationofZTECORPORATION

Chapter2

VLANConfiguration

TableofContents

VLANOverview..................................................................3

ConguringVLAN..............................................................11

ConguringPVLAN.............................................................16

ConguringQinQ...............................................................17

ConguringSubnetVLAN....................................................18

ConguringProtocolVLAN..................................................19

ConguringVLANT ranslation..............................................20

ConguringEnhancedVLANT ranslation................................21

ConguringSuperVLAN......................................................22

ConguringSVLAN............................................................25

VLANMaintenanceandDiagnosis.........................................29

VLANOverview

VirtualLocalAreaNetwork(VLAN)isatechnologythatdividesa
physicalnetworkintomultiplelogical(virtual)LAN.EveryVLAN
hasaVLANidentier(VID).

TakingadvantageofVLANtechnology,networkadministratorscan
dividetheusersinthesamephysicalLANintodifferentbroadcast
domains(onebroadcastdomainisoneVLAN).Thisensuresthat
theuserswiththesamedemandsbelongtosamebroadcastdo­mainanduserswithdifferentdemandsbelongtodifferentbroad­castdomain.

EveryVLANislikeanindependentlogicalLAN,havingthesame
attributeswithphysicalLAN.Allbroadcastandunicasttrafcinthe
sameVLANarerestrictedtotheVLANinsteadofbeingforwarded
tootherVLAN.Communicationbetweendevicesbelongingtodif­ferentVLANisforwardedbytheLayer3routers.

VLANhasthefollowingfeatures:

�Reducingbroadcasttrafcinthenetwork

�Enhancingnetworksecurity

�Simplifyingnetworkmanagementandcontrol

CondentialandProprietaryInformationofZTECORPORATION3

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

VLANType

VLANtypeisdeterminedbythemethoddividingareceivedframe
toaspecicVLAN.ZXR108900seriesswitchsupportsport-based
VLAN,whichisthemostsimpleandeffectivemethod.Itassigns
portsofswitchingequipmenttodifferentVLANs;consequently,
thetrafcreceivedfromtheportbelongstotheVLANconnected
totheport.

Forexample,ifport1,port2andport3belongtothesameVLAN,
andotherportsbelongtootherVLANs,framereceivedbyport1
canbetransmittedoverport2andport3exclusively.Ifauserin
VLANmovestoanewplace,itdoesnotbelongtotheoldVLAN
unlessVLANisrecongured.

VLANTag

MultipleVLANservicescanbetransmittedinonelinkiftheVLAN
thattheframeresidesincanbepresentedinacertainmethod
whenframeistransmittinginthenetwork.IEEE802.1Qimple­mentsthefunctionbyinsertingaVLANtagintoEthernetframe
structure.

VLANtagis4-bytelong,inEthernetframe,itslocationisbehind
sourceMACaddress,andbeforelength/typesegment.Formatof
VLANtagisshowninFigure1.

FIGURE1FORMATOFVLANTAG

VLANtagismostfrequentlyappliedinthecaseofcross-switch
creationofVLAN;heretheconnectionbetweenswitchesiscalled
Trunk.Cross-multiple-switchVLANcanbecreatedthroughoneor
moretrunksafterapplyingtag.Whentheportconnectedtothe
switchreceivesataggedframe,itcanjudgewhichVLANtheframe
belongstoaccordingtoVLANtag.

Each802.1QportisallocatedwithadefaultVLANID,whichis
calledPVID.Whentheportreceivesuntaggedframe,theframeis
consideredtobelongtoportdefaultVLAN,andforwardedinthe
VLAN.

ZXR108900seriesswitchsupportsIEEE802.1Qstandardtag.

4CondentialandProprietaryInformationofZTECORPORATION

Chapter2VLANConguration

VLANLinkType

PortsonZXR108900seriesswitchsupportthefollowingtypesof
VLANlinks.

�Accesslink

Accesslinkisusedtoconnectthedevices(forexample,work­station)thatcannotidentifyVLANtagtoVLANswitchport.It
onlytransmitsuntaggedVLANframeandisassociatedwith
onlyoneVLAN.

�Trunklink

TrunklinkconnectstwodevicesthatcanidentifyVLANtagand
transmitsmultipleVLANservices.Itonlytransmitstagged
VLANframeandcanbearmultipleVLANs.Mostpopulartrunk
linkistheonewhichconnectstwoVLANswitches.

�Hybridlink

Hybridlinkcantransmittaggedanduntaggedframes.How­ever ,foraspecicVLAN,allframestransmittedbythehybrid
linkmustbeofsametype.

DefaultVLAN

ZXR108900seriesswitchinitiallyhasadefaultVLANwiththefol­lowingfeatures:

�VLANIDofdefaultVLANis1.

�NameofdefaultVLANisVLAN0001.

�DefaultVLANcontainsallports.

�AllportsofdefaultVLANisuntaggedbydefault.

PVLAN

Toisolatemessagesofusersforbetternetworksecurity ,traditional
solutionisusedtoassignaVLANtoeachuser .Limitationsofthis
methodaredescribedasfollows:

�MaximumnumberofVLANssupportedbyIEEE802.1Qstan-

dardis4094andthenumberofusersislimited;consequently ,
itgoesagainstnetworkexpansion.

�EachVLANcorrespondstooneIPsubnet,soalargequantity

ofsubnetsaredividedisawasteofIPaddresses.

�PlanningandmanagementofalargequantityofVLANsandIP

subnetscomplicatesnetworkmanagement.

NewtechnologyPrivateVLAN(PVLAN)solvesalltheproblems.

Function

PVLANclassiesportsinVLANintotwocategories:Isolateport
thatconnectswithusers,andPromiscuousportthatconnectsto

CondentialandProprietaryInformationofZTECORPORATION5

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

router .IsolateportcancommunicatewithPromiscuousportonly.
CommunicationbetweenIsolateportsisdisabled.So,portsinthe
sameVLANareisolated,userscanonlycommunicatewithdefault
gateway.Thisensuresthenetworksecurity .

QinQ

QinQisatunnelingprotocol,basedonIEEE802.1Qencapsulation,
whichisalsocalledVLANstack.QinQtechnologyistoaddaVLAN
tag(outertag)outsideoldVLANtag(innertag).Outertagcan
shieldtheinnertag.

QinQrequiresnosupportfromprotocol,bywhichL2VPNisreal­ized.ItisparticularlysuitableforthesmallLANwithlayer3switch
asthebackbone.

TypicalnetworkingorQinQtechnologyisshowninFigure2.Port
connectingusernetworkiscalledcustomerportandtheportcon­nectingSPnetworkiscalleduplinkport.EdgeaccessdeviceofSP
networkiscalledProviderEdge(PE).

FIGURE2TYPICALQINQNETWORK

UsernetworkisaccessedtoPEthroughT runkVLANmode.Up­linkportsinServiceProvider(SP)networkaresymmetricallycon­nectedthroughT runkVLANmode.

WhenmessagereachescustomerportofswitchAfromusernet­work1,nomatterthemessageistaggedoruntagged,switchA
insertsoutertag(VLANIDis10)forcibly.IntheSPnetwork,the
messagetransmitsalongVLAN10portsuntilitreachesswitchB.
SwitchBndsthattheportconnectingusernetwork2iscustomer
port,soitpeelsofftheoutertagaccordingtotraditional802.1Q.
Itresumestheoriginalmessageandtransmitsittousernetwork

2.

6CondentialandProprietaryInformationofZTECORPORATION

Chapter2VLANConguration

Asaresult,usernetwork1and2canperformtransparenttrans­missionthroughSPnetwork.Usernetworkcandeneitsown
privatenetworkVLANIDthatdoesnothaveaconictwithSPnet­workVLANID.

SubnetVLAN

VLANbasedonsubnetisappliedtotheVLANnetworkofLayer2,
andimplementsexiblecongurationofdataframe.VLANbased
onsubnettransmitstheframetocorrespondingVLANaccordingto
thesourceIPaddressofthedataframe.VLANthatiscomposed
accordingtosourceIPaddressmakesitpossibleforusersindif­ferentnetworksectiontotransmitframesthroughmultiVLANs.
ButthememberidentityoftheVLANisnotchanged.

SubnetVLANspacesthedataframesofdifferentsourceIPad­dressesout,sousersgetthedatabelongingtothesamenetwork
sects.PRItotransmitsubnetVLANofUNTAGframeishigherthan
protocolVLANandPVID.TAGframetransmitsdatainTAGmode,
soitsPRIishigherthansubnetVLAN.

ProtocolVLAN

VLANbasedonprotocolisexibleandapplicabletoLayer3.A
VLANthatisbasedonprotocolisplottedaccordingtotheencap­sulationprotocolinnetworklayerofthedatapacket.Packetsof
samelabelareinthesameprotocolVLAN.VLANthatiscomposed
accordingtotheprotocolsinnetworklayermakesitpossiblefor
thebroadcastingregiontocovermultiswitches.Userscanmove
freelywithinthenetwork,andthememberidentityoftheVLANis
notchanged.

Whentheuser’sphysicalpositionischangedthenthereisnoneed
toconguretheVLANtowhichtheuserbelongs;insteaditplots
theVLANaccordingtotheprotocoltype.Itdoesnotrequireaddi­tionallabeltoidentifytheVLAN.Inthisway ,thecommunication
quantityisreduced.

ProtocolVLANdefaults“enable”onphysicalinterfaces.Itplotsthe
VLANaccordingtothelabelinthedatapackets.Itspacespackets
ofdifferentlabelsout,sotheusergetsthedata’sinthesame
VLAN.

VLANTranslation

VLANtranslationisalsocalledVLANmapping.ItallowstheVLAN
IDsofdifferentEthernetswitchesusedtoaccesstoboundaryto
setassuperposition.ItmodiestheiterativeVLANIDsofdifferent
switchestodifferentVLANIDsthroughtheVLANtranslationfunc­tion,andtransmitstheminuplinkinterfaces.Soitspacesusers
outincoreswitchesofLayer2.Itpredigeststhecongurationsof
switchesaccessingtoboundary.

CondentialandProprietaryInformationofZTECORPORATION7

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

EnhancedVLANTranslation

ThefunctionandapplicationofenhancedVLANtranslationaresim­ilartothoseofVLANtranslation.Thesevenfunctionsaddedonthe
basisofVLANtranslationareasfollows:

�Importsinglelayertag,addoutertagaccordingtopolicy .

�Importsinglelayertag,modifyinnertagandaddoutertag

accordingtopolicy.

�Importdouble-layertag,deleteoutertagaccordingtopolicy .

�Importdouble-layertag,deleteoutertagandmodifyinnertag

accordingtopolicy.

�Importdouble-layertag,modifyoutertagaccordingtopolicy .

�Importdouble-layertag,modifyinnertagaccordingtopolicy .

�Importdouble-layertag,modifyinnerandoutertagsaccording

topolicy .

Ofwhichpolicymeans:

ModifysinglelayertagaccordingtoaccessportandVLANtag.

Modifydouble-layertagaccordingtoaccessportandinnerand
outertagsatthesametime.

ZZXR108902/8905/8908/8912supports4096enhancedVLAN
translationswhenwholedevicelinecardsareHboards.

SuperVLAN

TraditionalISPnetworkassignsoneIPsubnettoeachuser .Three
IPaddressesareoccupiedwhenonesubnetisassigned,whichre­spectivelyserveassubnetnumber ,broadcastaddressanddefault
gateway.AlargequantityofunassignedIPaddressesintheuser
subnetscannotbeassignedtootherusers.Thismethodwastes
numberofIPaddress.

SuperVLANsolvestheproblemeffectively .Itcanconvertmultiple
VLANs(calledsubvlan)intoaSuperVLAN.Allthesubvlansusethe
sameIPsubnetanddefaultgateway.

TakingadvantageofSuperVLANtechnology ,ISPneedstoassign
oneIPsubnetforSuperVLANandcreateonesub-VLANforeach
user .Allsub-VLANscanassignIPaddressesinSuperVLANsubnet
exiblyanduseSuperVLANdefaultgateway.Everysub-VLANisan
independentbroadcastdomain,ensuringisolationbetweendiffer­entusers.Communicationbetweensub-VLANsisroutedthrough
SuperVLAN.

SVLAN

SelectiveVLAN(SVLAN)isakindofVLANtunneltechniques.
SVLANtechnologyistoaddaVLANtag(outertag)outsideold

8CondentialandProprietaryInformationofZTECORPORATION

Chapter2VLANConguration

VLANtag(innertag).Outertagcanshieldtheinnertag.When
amessagearrivesatPEaftertransparenttransmissionthrough
serviceprovidernetwork,outertagisremoved.Thiscontributes
atransparenttransmissionserviceofpointtomulti-pointVPN
andprovidesasimpleL2VPNtunnelforcustomers.Thedouble
decksoftagsextendthenumberofVLANseffectively.Itis
upto4094*4094.OuterVLANiscalledServiceProviderVLAN
(SPVLAN),andinnerVLANiscalledcustomerVLAN(CVLAN).

QinQtechnologyonlyaddsoutertagstomessagesthatarriveata
port.Thislimitsthenetworkbuildingexibilitydramatically.While
SVLANtechnologyaddsdifferentoutertagstomessagesthatare
receivedatthesameportaccordingtocustomerdemands.

Someserviceowsrequiremessagesnottobedisturbedwhen
messagespassbyswitches.Thatis,tagnumberandvaluearenot
changed.SVLANtechnologysupportstransparenttransmission
VLANservices.

SVLANtechnologyalsosupports802.1Pcosprioritymappingbe­tweenoutertagandinnertag.

SVLANFunctions

SVLANhasthefollowingfunctions.

�SVLANaddsdifferentoutertagstodifferentinnertags.Thisis

describedwiththefollowingsteps.

i.SVLANmapsinnertagprioritytooutertag,asshownin

Figure3.

FIGURE3PRIORITYMAPPING

ii.FixedprioritiesofouterlayersareasshowninFigure4.

FIGURE4FIXINGPRIORITIESOFOUTERTAGS

CondentialandProprietaryInformationofZTECORPORATION9

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

iii.SVLANdoesnotcareouterlayerpriority ,asshowninFigure

5.

FIGURE5MARKINGANOUTERTAGONLY

�SVLANswitchesmessagesthatarewiththesameoutertag

butdifferentportstoasameegress,asshowninFigure6.

FIGURE6SWITCHINGTOTHESAMEEGRESS

�SVLANdoesnotaddoutertagtomessagesthatarewithdes-

ignatedinnertags.Thatis,SVLANtransmitssuchmessages
transparently,asshowninFigure7.

FIGURE7SVLANTRANSPARENTTRANSMISSION

10CondentialandProprietaryInformationofZTECORPORATION

�Figure8showsamorecomplexsituation.

FIGURE8AMORECOMPLEXSITUATION

Chapter2VLANConguration

ConfiguringVLAN

CreatingVLAN

1.CreatingspeciedVLANandenteringVLANconguration
mode.

St­ep

1

2

CommandFunction

ZXR10(config)#vlan<vlan-id>OnlyVLAN1isavailableon

ZXR10(config-vlan)#name<vlan-name>

Insomecommands,aliascanbeusedtoreplaceVLANnum­ber .VLANaliascanbegroupname,department,areaand
soon,usedtodistinguishVLANs.VLANaliasiscomposedof
VLAN+VLANIDbydefault,whereVLANIDcontains4digits
anduses0tolltheblankahead.Forexample,asforvlan
whoseidis4,thealiasidvlan0004bydefault.

2.CreatingVLANsinbatch.

switch.Withthiscommand,
otherVLANscanbecreated.

ThissetsaliasforVLAN.

CondentialandProprietaryInformationofZTECORPORATION11

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

St­ep

1

2

3

CommandFunction

ZXR10#vlandatabaseThisentersVLANdatabase.

ZXR10(vlan)#vlan<vlan-list>ThiscreatesVLANsin

ZXR10(config-vlan)#name<vlan-name>

databaseinbatch.

ThissetsaliasforVLAN.

Insomecommands,aliascanbeusedtoreplaceVLANnum­ber .VLANaliascanbegroupname,department,areaand
soon,usedtodistinguishVLANs.VLANaliasiscomposedof
VLAN+VLANIDbydefault,whereVLANIDcontains4digits
anduses0tolltheblankahead.Forexample,asforvlan
whoseidis4,thealiasidvlan0004bydefault.

SettingVLANLinkTypeonInterface

St­ep

1

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

switch.

2

ZXR10(config-if)#switchportmode{access|trunk

|hybrid}

ThissetsVLANlinktypeof
theEthernetinterface.

TherearethreeVLANlinktypesonEthernetinterface:access
mode,trunkmodeandhybridmode.Accessmodeisthedefault
conguration.

�Theportconnectingwithaccesslinkcanonlybelongtoone

VLAN.Itshallbeuntaggedandisusedtoconnecthostinusual
cases.

�Theportconnectingwithtrunklinkcanbelongtomultiple

vlans.Itmustbetagged,canreceiveandsendpacketsof
multiplevlans,andisusedtoconnecttwoswitchesinusual
cases.

�Theportconnectingwithhybridlinkcanbelongtomultiple

vlans.Usercancustomizewhethertoattachtagtothepacket
ontheport.Itcanreceiveandsendpacketsofmultiplevlans
andcanbeusedtoconnecttwoswitchesortoconnectpc.

Thedifferencebetweenhybridportandtrunkportliesinthathy­bridportcansendbothtaggedanduntaggedframes,whilepack­etssentfromtrunkportareuntaggedonlywhentheyaresent
fromdefaultvlan.

12CondentialandProprietaryInformationofZTECORPORATION

Chapter2VLANConguration

AddingVLANMemberPort

Accessportcanjoinonlyonevlan,whiletrunkportandhybrid
portcanjoinmultiplevlans.

�Joiningaccessporttodesignatedvlan.

St­ep

1

2

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

ZXR10(config-if)#switchportaccessvlan

{<vlan-id>|<vlan-name>}

switch.

Thissetsthevlanwhereport
belongsto.

�Joiningtrunkporttodesignatedvlan.

St­ep

1

2

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

switch.

ZXR10(config-if)#switchporttrunkvlan<vlan-list>Thissetsthevlanwhereport

belongsto.

�JoiningHybridporttodesignatedvlan.

St­ep

1

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

switch.

2

ZXR10(config-if)#switchporthybridvlan

<vlan-list>[tag|untag]

�AddingVLANmemberportsinbatch.

CommandFunction

ZXR10(config-vlan)#switchport{pvid|tag|untag}<por

t-list>

SettingPortNativeVLAN

AccessportonlybelongstooneVLAN,soitsnativeVLANisthatit
locatesanditdoesn'tneedtosetnativeVLAN.

CondentialandProprietaryInformationofZTECORPORATION13

Thissetsthevlanwhere
portbelongstoandspecies
whethertotagpacketssent
fromthesevlans.

Thisaddsvlanmemberports
inbatchinvlanconguration
mode.

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

Trunkportandhybridportbelongtomultiplevlansandtheyneed
tosetnativevlan.Ifnativevlanissetonport,whenoneframe
withnovlantagisreceivedonport,itwillbeforwardedtotheport
belongingtothisnativevlan.Nativevlanoftrunkportandhybrid
portisvlan1bydefault.

St­ep

1

2

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

ZXR10(config-if)#switchport{trunk|hybrid}

nativevlan{<vlan-id>|<vlan-name>}

switch.

ThissetsnativeVLANoftrunk
portandhybridport.

SettingPortVLANFiltering

St­ep

1

2

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

ZXR10(config-if)#ingressfiltering{enable|disab

le}

switch.

ThissetsportVLANltering.
VLANingresslteringis
enabledbydefault.

Afterenablingingressltering,ifthisingressdoesn'tbelongtothe
VLANthatframereceivedontheportbelongsto,theframewillbe
dropped.

SettingPortFameTypeFiltering

St­ep

1

2

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interfaceon

switch.

ZXR10(config-if)#acceptableframetypes{all|tag}Thissetsportfametypefor

ltering.

Thiscommandisusedtocongurethetypeofframethatcanbe
acceptedbyport.Usercanchoosetoacceptallframes(including
taggedframesandtaggedframes)oronlyaccepttaggedframes.

14CondentialandProprietaryInformationofZTECORPORATION

CreatingVLANL3Interface

CommandFunction

Chapter2VLANConguration

1

2

3

ZXR10(config)#vlan<vlan-id>ThiscreatesVLAN.

ZXR10(config-vlan)#exit

ZXR10(config)#interfacevlan<vlan-id>

ThisexitsVLANconguration
mode.

ThiscreatesVLANL3
interface.

CommandshutdowncanbeusedtodisableVLANL3interface
andcommandnoshutdowncanbeusedtoenableVLANL3in-
terface.

WhenallEthernetinterfacesunderVLANinterfacearedown,vlan
interfaceisdownbydefault;whenoneormoreEthernetinterfaces
underoneVLANinterfaceareup,thevlaninterfaceisup.

Bindingdpi-template

St­ep

1

CommandFunction

ZXR10(config)#interfacevlan<vlan-id>

ThiscreatesVLANL3
interface.

2

ZXR10(config-if-vlan1)#binddpi-template

<template-id>

Thisbindsrelated
dpi-template.

VLANConfigurationExample

AsshowninFigure9,interfacesgei_3/1andgei_3/2ofswitch
Aandgei_7/1andgei_7/2ofswitchBbelongtovlan10;inter­facesgei_3/4andgei_3/5ofswitchAandgei_7/4andgei_7/5of
switchBbelongtovlan20.Alloftheseinterfacesareaccessport.
Twoswitchesareinterconnectedintrunkmodethroughinterfaces
gei_3/24andgei_7/24.Thetwointerfacesaretrunkport.

FIGURE9TYPICALVLANNETWORKING

CondentialandProprietaryInformationofZTECORPORATION15

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

CongurationofSwitchA:

ZXR10_A(config)#vlan10
ZXR10_A(config-vlan)#switchportpvidgei_3/1-2
ZXR10_A(config)#vlan20
ZXR10_A(config-vlan)#switchportpvidgei_3/4-5
ZXR10_A(config)#interfacegei_3/24
ZXR10_A(config-if)#switchportmodetrunk
ZXR10_A(config-if)#switchporttrunkvlan10
ZXR10_A(config-if)#switchporttrunkvlan20

CongurationofswitchB

ZXR10_B(config)#vlan10
ZXR10_B(config-vlan)#switchportpvidgei_7/1-2
ZXR10_B(config)#vlan20
ZXR10_B(config-vlan)#switchportpvidgei_7/4-5
ZXR10_B(config)#interfacegei_7/24
ZXR10_B(config-if)#switchportmodetrunk
ZXR10_B(config-if)#switchporttrunkvlan10
ZXR10_B(config-if)#switchporttrunkvlan20

ConfiguringPVLAN

TocongurePVLAN,performthefollowingsteps.

St­ep

1

2

CommandFunction

ZXR10(config)#vlanprivate-mapsession-id<id>[c

ommunity<port-list>][isolate<port-list>][promis
<port-list>][vlan<vlan-list>]

ZXR10(config)#showvlanprivate-mapThisviewsPVLAN

Thisconguresisolateand
promiscuousport

congurationinformation

Note:

ZXR108900seriesswitchsupports256PVLANgroups.Eachgroup
canselectanyporttoisolatefromeachother .Atmost4portscan
beselectedtobeuplinkport.

Example

TwoIsolategroupsareconguredinthefollowingconguration
example:

�Isolategroup1:gei_3/1,gei_3/2,fei_7/4andfei_7/5areiso-

lateports;gei_5/10isPromiscuousport.

�Isolategroup2:gei_3/7,gei_3/8,fei_7/10andfei_7/11are

isolateports;gei_5/12isPromiscuousport.

Detailedcongurationisshownbelow.

ZXR10(config)#vlanprivate-mapsession-id1
isolategei_3/1-2,fei_7/4-5promisgei_5/10
ZXR10(config)#vlanprivate-mapsession-id2
isolategei_3/7-8,fei_7/10-11promisgei_5/12
ZXR10(config)#showvlanprivate-map
Session_idIsolate_PortsPromis_Ports

16CondentialandProprietaryInformationofZTECORPORATION

-------------------------------------------------

1gei_3/1-2,fei_7/4-5,gei_5/10
2gei_3/7-8,gei_5/12
ZXR10#

ConfiguringQinQ

Chapter2VLANConguration

St­ep

1

2

3

FIGURE10TYPICALQINQNETWORKING

CommandFunction

ZXR10(config)#interface<interface-name>ThisaccessesL2interface.

ZXR10(config-if)#switchportqinq{normal|uplink

|customer|tpid<tpid>}

ZXR10(config-if)#showqinq

Example

ThiscongureQinQport
attribute,wherenormal
indicatesnoQinQ.Portis
innormalstatebydefault.
Uplinkindicatestheportis
connectedwithupstream
carrier .Customerindicates
theportisconnectedwith
downstreamuser .

ThisshowsQinQconguration
result.

AsshowninFigure10,assumethatcustomerportofswitchAis
gei_3/1anduplinkportisgei_3/24;customerportofswitchB
isgei_7/1anduplinkportisgei_7/24.WhenconguringQinQ,
customerportofSPVLANneedstobeconguredtountaggedand
uplinkportneedstobeconguredtotagged.

CongurationofSwitchA:

ZXR10_A(config)#vlan10
ZXR10_A(config)#interfacegei_3/1
ZXR10_A(config-if)#switchportqinqcustomer

CondentialandProprietaryInformationofZTECORPORATION17

ZXR108900SeriesUserManual(EthernetSwitchingVolume)

ZXR10_A(config-if)#switchportaccessvlan10
ZXR10_A(config)#interfacegei_3/24
ZXR10_A(config-if)#switchportqinquplink
ZXR10_A(config-if)#switchportmodetrunk
ZXR10_A(config-if)#switchporttrunkvlan10

CongurationofswitchB

ZXR10_B(config)#vlan10
ZXR10_B(config)#interfacegei_7/1
ZXR10_B(config-if)#switchportqinqcustomer
ZXR10_B(config-if)#switchportaccessvlan10
ZXR10_B(config)#interfacegei_7/24
ZXR10_B(config-if)#switchportqinquplink
ZXR10_B(config-if)#switchportmodetrunk
ZXR10_B(config-if)#switchporttrunkvlan10

ConfiguringSubnetVLAN

ToconguresubnetVLAN,performthefollowingsteps.

St­ep

1

2

CommandFunction

ZXR10(config)#vlansubnet-mapsession-no<session

-no><ipaddr><mask>vlan{<vlanid><name>}

ZXR10(config)#showvlansubnet-mapThisviewssubnetVLAN

ThisconguressubnetVLAN
function

congurationinformation

Note:

ZXR108900seriesswitchsupports128subnetVLANs,andcan
processdataframesof128typesofsourceIPnetworksects.

Example

Figure11

showscongurationofsubnetVLANdataontheswitch,
VLAN20andVLAN30.Interfacefei_1/1belongstoVLAN20;in­terfacefei_1/2belongstoVLAN30.Interfacefei_1/10belongsto
VLAN20andVLAN30.PVIDsoffei_1/1,fei_1/2andfei_1/10are
different.PCsofsourceIPaddress20.20.20.0/24networksect
areaccessibletoserver1,andPCsofIPaddress30.30.30.1are
accessibletoserver2.

18CondentialandProprietaryInformationofZTECORPORATION