Hi Friend
I hope you are looking for Trunk and Hybrid port link type..Please reshare your query in details

Below is the details will help you out , Please check

https://support.huawei.com/enterprise/en/doc/EDOC1000178168/8ebf93dc/link-and-interface-types

Link and Interface Types

All frames processed in a switch carry VLAN tags. On a network, some devices connected to a switch can only receive and send untagged frames. To enable communication between the switch and these devices, the switch interfaces must be able to identify the untagged frames and add or remove VLAN tags from the frames. Hosts in the same VLAN may be connected to different switches, and more than one VLAN may span multiple switches. To enable communication between hosts, interfaces between switches must be able to identify and send VLAN frames.

To accommodate different connections and networking, Huawei defines four interface types (access, trunk, hybrid, and QinQ) and two link types (access and trunk). Figure 5-3 shows access, trunk, and hybrid interfaces. QinQ Configuration shows the QinQ interface.

Figure 5-3  Link and interface types

Link Types

As shown in Figure 5-3, Ethernet links fall into the following types, depending on the number of allowed VLANs:

• Access link

  An access link can transmit data frames of only one VLAN. It connects a switch to a user terminal, such as a host, server, and simplified Layer 2 switch. Generally, user terminals do not need to know the VLANs to which they belong and cannot identify tagged frames; therefore, only untagged frames are transmitted along an access link.

• Trunk link

  A trunk link can transmit data frames from multiple VLANs. It connects a switch to another switch or a router. Frames on a trunk link must be tagged so that other network devices can correctly identify VLAN information in the frames.

Interface Types

As shown in Figure 5-3, Ethernet interfaces are classified into the following types depending on the objects connected to them and the way they process frames:

• Access interface

  An access interface often connects to a user terminal such as a user host or server that cannot identify VLAN tags, or is used when VLANs do not need to be differentiated. In most cases, access interfaces can only receive and send untagged frames, and can add only a unique VLAN tag to untagged frames. However, if the VID and PVID are the same in tagged frames, access interfaces can receive and process the tagged frames.

• Trunk interface

  A trunk interface often connects to a switch, router, AP, or voice terminal that can receive and send tagged and untagged frames simultaneously. It allows tagged frames from multiple VLANs and untagged frames from only one VLAN.

• Hybrid interface

  A hybrid interface can connect to not only a user terminal (such as a user host or server) or network device (such as a hub or simplified Layer 2 switch) that cannot identify tags, but also a switch, router, voice terminal, or AP that can receive and send tagged and untagged frames. It allows tagged frames from multiple VLANs. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration.

  Hybrid and trunk interfaces can be interchanged in some scenarios, but hybrid interfaces must be used in specified scenarios, for example, selective QinQ scenario. Before packets from multiple VLANs provided by a service provider enter a user network, the outer VLAN tags must be removed. The trunk interface cannot be used here because the trunk interface allows only untagged packets from the default VLAN of the interface to pass through. For details about selective QinQ, see Configuring Selective QinQ in "QinQ Configuration".

• QinQ interface

  An 802.1Q-in-802.1Q (QinQ) interface often connects a private network to a public network. It can add an additional 802.1Q tag to a tagged frame. QinQ supports up to 4094 x 4094 VLANs, thereby extending VLANs over the network. The outer tag is often called the public tag and identifies the VLAN ID of the public network, whereas the inner tag is often called the private tag and identifies the VLAN ID of the private network.

  For details about the QinQ interface and QinQ frame format, see QinQ Fundamentals.

• 
  

Hi User,

A company has multiple departments located in different buildings. For service security, it is required that employees in one department be able to communicate with each other, whereas employees in different departments be prohibited from communicating with each other. Devices on the network shown in Figure 8-5 are configured as follows:

• Add ports connecting devices to PCs of the financial department to VLAN 5 and ports connecting devices to PCs of the marketing department to VLAN 9. This configuration prevents employees in financial and marketing departments from communicating with each other.

• Configure links between CE and PE as trunk links to allow frames from VLAN 5 and VLAN 9 to pass through, allowing employees of the same department but different buildings to communicate with each other.

By configuring port-based VLANs on the PE, CE1, and CE2, employees in the same department can communicate with each other, whereas employees in different departments cannot.

Figure 8-5 Networking diagram for configuring a VLAN based on ports

Pre-configuration Tasks

Before configuring a VLAN based on ports, complete the following task:

• Connecting ports and configuring physical parameters of the ports, ensuring that the ports are physically Up

Configuration Procedures

Figure 8-6 Procedure of configuring a VLAN based on ports

• Creating a VLAN
  Creating a VLAN isolates PCs that do not need to communicate with each other. This improves network security, reduces broadcast traffic, and prevents broadcast storms.

• Configuring the Type of a Layer 2 Ethernet Port
  On a Layer 2 switching device, some ports identify frames with VLAN tags, whereas the others do not. Configure ports types for Layer 2 Ethernet ports as needed.

• Adding a Port to a VLAN
  Adding a port to a VLAN associates the port with the VLAN.

• Verifying the Configuration of a Layer 2 Interface-based VLAN
  After configuring a Layer 2 interface-based VLAN, verify the configuration.

Creating a VLAN

Creating a VLAN isolates PCs that do not need to communicate with each other. This improves network security, reduces broadcast traffic, and prevents broadcast storms.

Procedure

1. Run system-view

   
   

   The system view is displayed.

   
   

2. Run vlan vlan-id

   
   

   A VLAN is created, and the VLAN view is displayed. If the specified VLAN has been created, the VLAN view is directly displayed.

   The VLAN ID ranges from 1 to 4094. If VLANs need to be created in batches, you can run the vlan batch command to create VLANs in batches, and then run the vlan vlan-id command to enter the view of a specified VLAN.

    NOTE:

   If a device is configured with multiple VLANs, do as follows to configure a name for each VLAN:

   Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.

   
   

3. Run commit

   
   

   The configuration is committed.

   
   

Configuring the Type of a Layer 2 Ethernet Port

On a Layer 2 switching device, some ports identify frames with VLAN tags, whereas the others do not. Configure ports types for Layer 2 Ethernet ports as needed.

Context

Table 8-2 lists Layer 2 Ethernet port types.

Table 8-2 Port types

Procedure

1. Run system-view

   
   

   The system view is displayed.

   
   

2. Run interface interface-type interface-number

   
   

   The view of a Layer 3 Ethernet interface to be added to a VLAN is displayed.

   
   

3. Run portswitch

   
   

   The Layer 3 interface is switched to the Layer 2 mode.

    NOTE:

   If many Layer 3 Ethernet interfaces need to be added to the VLAN, run the portswitch batch interface-type { interface-number1 [ to interface-number2 ] } &<1-10> command in the system view to switch the working mode of these Ethernet interfaces in batches.

   
   

• If an interface is borrowing the IP address of an Ethernet, a GE, or an Eth-Trunk, the portswitch command cannot be run on the Ethernet, GE, or Eth-Trunk.

• If the Ethernet, GE, or Eth-Trunk has any Layer 3 configuration, the portswitch command cannot be run on the interface. Before running the portswitch command on the interface, clear all Layer 3 configurations on the interface.

Run port link-type { access | dot1q-tunnel | hybrid | trunk }

The port type is configured.

 NOTE:

If you have specified a Dot1q-tunnel interface, run the port dot1q-tunneldiscard untag-frame command to enable this Dot1q-tunnel interface to discard incoming untagged packets to ensure network security.

Run commit

The configuration is committed.

Adding a Port to a VLAN

Adding a port to a VLAN associates the port with the VLAN.

Context

• A port connecting a switch to a PC must be configured as an access or a hybrid port.

  The port trunk allow-pass vlan command is invalid on access ports.

• A port connecting one switch to another must be configured as a trunk or hybrid port.

  The port default vlan command cannot be used on trunk ports.

Procedure

• For access or QinQ ports:

  
  

  
  

1. Run the port default vlan vlan-id command to add a port to a specified VLAN.

   To add ports to a VLAN in batches, run the port interface-type { interface-number1 [ to interface-number2 ] } &<1-10> command in the VLAN view.

    NOTE:

   The input port format must be correct. The port number following to must be greater than the port number before to. If a group of ports are specified, ensure that these ports are of the same type and all specified ports exist.

   In one port command, a maximum of 10 groups of ports can be specified by using to.

2. Run commit

   The configuration is committed.

For trunk ports:

1. Run the port trunk allow-pass vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } command to add the port to specified VLANs.

2. Run commit

   The configuration is committed.

Verifying the Configuration of a Layer 2 Interface-based VLAN

After configuring a Layer 2 interface-based VLAN, verify the configuration.

Prerequisites

All functions of a Layer 2 interface-based VLAN have been configured.

Procedure

• Run the display vlan command to check VLAN information.

• Run the display port vlan command to check information about all interfaces belonging to the configured VLANs.

• Run the display port vlan interface-type interface-number active command to check information about interfaces with specified types and numbers within the configured VLANs.

Example

Run the display vlan command. The command output shows how many VLANs have been configured successfully on the device and their specific types.

<HUAWEI> display vlan The total number of vlans is : 7 VID  Type     Status  Property  MAC-LRN STAT    BC  MC  UC  Description -------------------------------------------------------------------------------- 1    common   enable  default   enable  disable FWD FWD FWD VLAN 0001 2    common   enable  default   enable  disable FWD FWD FWD VLAN 0002 3    common   enable  default   enable  disable FWD FWD FWD VLAN 0003 4    common   enable  default   enable  disable FWD FWD FWD VLAN 0004 5    common   enable  default   enable  disable FWD FWD FWD VLAN 0005 6    common   enable  default   enable  disable FWD FWD FWD VLAN 0006 7    common   enable  default   enable  disable FWD FWD FWD VLAN 0007

Run the display port vlan command. The command output shows information about all interfaces belonging to the configured VLANs.

<HUAWEI> display port vlan Port                    Link Type    PVID  Trunk VLAN List ------------------------------------------------------------------------------- Eth-Trunk1              hybrid       1     1-11                                  Eth-Trunk2              hybrid       1     2-3                                   GigabitEthernet3/0/1    hybrid       0     -

Run the display port vlan interface-type interface-number active command. The command output shows information about interfaces with specified types and numbers within the configured VLANs.

<HUAWEI> display port vlan GigabitEthernet1/0/1 active T=TAG U=UNTAG Port                    Link Type    PVID        VLAN List 

------------------------------------------------------------------------------- GigabitEthernet1/0/1    hybrid       1           U:25

Hello@Idris_abu，

Huawei defines four interface types (access, trunk, hybrid, and QinQ) and two link types (access and trunk). Figure 5-3 shows access, trunk, and hybrid interfaces. QinQ Configuration shows the QinQ interface.

Hybrid interface

A hybrid interface can connect to not only a user terminal (such as a user host or server) or network device (such as a hub or simplified Layer 2 switch) that cannot identify tags, but also a switch, router, voice terminal, or AP that can receive and send tagged and untagged frames. It allows tagged frames from multiple VLANs. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration.

Hybrid and trunk interfaces can be interchanged in some scenarios, but hybrid interfaces must be used in specified scenarios, for example, selective QinQ scenario. Before packets from multiple VLANs provided by a service provider enter a user network, the outer VLAN tags must be removed. The trunk interface cannot be used here because the trunk interface allows only untagged packets from the default VLAN of the interface to pass through. For details about selective QinQ, see Configuring Selective QinQ in "QinQ Configuration".

Overview of VPN Tunnels