Got it

Special feature of tunneling and hybrid port link type

Created: Mar 27, 2020 13:47:34Latest reply: Mar 29, 2020 18:05:05 169 7 0 0
  Rewarded HiCoins: 0 (problem resolved)

please let some one explain to me the special feature of tunneling and hubrid port link type.

  • x
  • convention:

Featured Answers

Recommended answer

Admin Created Mar 28, 2020 01:54:27 Helpful(0) Helpful(0)

Hello@Idris_abu

Huawei defines four interface types (access, trunk, hybrid, and QinQ) and two link types (access and trunk). Figure 5-3 shows access, trunk, and hybrid interfaces. QinQ Configuration shows the QinQ interface.

Hybrid interface

A hybrid interface can connect to not only a user terminal (such as a user host or server) or network device (such as a hub or simplified Layer 2 switch) that cannot identify tags, but also a switch, router, voice terminal, or AP that can receive and send tagged and untagged frames. It allows tagged frames from multiple VLANs. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration.

Hybrid and trunk interfaces can be interchanged in some scenarios, but hybrid interfaces must be used in specified scenarios, for example, selective QinQ scenario. Before packets from multiple VLANs provided by a service provider enter a user network, the outer VLAN tags must be removed. The trunk interface cannot be used here because the trunk interface allows only untagged packets from the default VLAN of the interface to pass through. For details about selective QinQ, see Configuring Selective QinQ in "QinQ Configuration".

Overview of VPN Tunnels

VPN data is transmitted over tunnels, including LSP tunnels and Traffic Engineering (TE) tunnels. TE tunnels are constraint-based routed label switched path (CR-LSP) tunnels.
  • LSP tunnel

    An LSP forwards packets through label switching and is often used in BGP/MPLS IP VPN. If LSPs are used as public network tunnels, only PE devices need to analyze IP packet headers. Other devices through which VPN packets pass do not need to analyze IP packet headers. This reduces the processing time and packet transmission delay of VPN packets. In addition, MPLS labels are supported by all link layers. An LSP is similar to an ATM virtual circuit (VC) or FR VC in functionality and security. If all the devices on the backbone network support MPLS, it is recommended that LSP tunnels or MPLS TE tunnels be used as public network tunnels.

    For details about LSPs, see MPLS LDP Configuration in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - MPLS.

  • MPLS TE tunnel

    As a combination of MPLS and TE technologies, MPLS TE can balance network traffic by setting up LSPs along specified nodes and steering traffic away from congested nodes. LSPs in MPLS TE are called MPLS TE tunnels, which are also widely used in BGP/MPLS IP VPN.

    In addition to the advantages of LSP, MPLS TE tunnels can handle network congestion. Using MPLS TE tunnels, SPs can fully utilize existing network resources to provide diversified services. MPLS TE tunnels also allow SPs to optimize and manage network resources.

    Usually, carriers are required to provide VPN users with end-to-end QoS for various services, such as voice, video, data, and Internet access. Carriers can use MPLS TE tunnels to provide their users with QoS guarantees.

    Using MPLS TE tunnels, carriers can also provide QoS-guaranteed services for different VPN users based on policies.

    For details about MPLS TE, see MPLS TE Configuration in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - MPLS.

  • For more details, please refer to https://support.huawei.com/enterprise/en/doc/EDOC1100075353/c2ff41a7

  • Glad to help you! Any further questions, let us know.


View more
  • x
  • convention:

All Answers
yogijain MVE Created Mar 27, 2020 14:02:33 Helpful(0) Helpful(0)

Hi Friend
I hope you are looking for Trunk and Hybrid port link type..Please reshare your query in details

Below is the details will help you out , Please check

https://support.huawei.com/enterprise/en/doc/EDOC1000178168/8ebf93dc/link-and-interface-types


Link and Interface Types


All frames processed in a switch carry VLAN tags. On a network, some devices connected to a switch can only receive and send untagged frames. To enable communication between the switch and these devices, the switch interfaces must be able to identify the untagged frames and add or remove VLAN tags from the frames. Hosts in the same VLAN may be connected to different switches, and more than one VLAN may span multiple switches. To enable communication between hosts, interfaces between switches must be able to identify and send VLAN frames.

To accommodate different connections and networking, Huawei defines four interface types (access, trunk, hybrid, and QinQ) and two link types (access and trunk). Figure 5-3 shows access, trunk, and hybrid interfaces. QinQ Configuration shows the QinQ interface.

Figure 5-3  Link and interface types
imgDownload?uuid=a08f7de70a1a4e0a9997e24

Link Types

As shown in Figure 5-3, Ethernet links fall into the following types, depending on the number of allowed VLANs:

  • Access link

    An access link can transmit data frames of only one VLAN. It connects a switch to a user terminal, such as a host, server, and simplified Layer 2 switch. Generally, user terminals do not need to know the VLANs to which they belong and cannot identify tagged frames; therefore, only untagged frames are transmitted along an access link.

  • Trunk link

    A trunk link can transmit data frames from multiple VLANs. It connects a switch to another switch or a router. Frames on a trunk link must be tagged so that other network devices can correctly identify VLAN information in the frames.

Interface Types

As shown in Figure 5-3, Ethernet interfaces are classified into the following types depending on the objects connected to them and the way they process frames:

  • Access interface

    An access interface often connects to a user terminal such as a user host or server that cannot identify VLAN tags, or is used when VLANs do not need to be differentiated. In most cases, access interfaces can only receive and send untagged frames, and can add only a unique VLAN tag to untagged frames. However, if the VID and PVID are the same in tagged frames, access interfaces can receive and process the tagged frames.

  • Trunk interface

    A trunk interface often connects to a switch, router, AP, or voice terminal that can receive and send tagged and untagged frames simultaneously. It allows tagged frames from multiple VLANs and untagged frames from only one VLAN.

  • Hybrid interface

    A hybrid interface can connect to not only a user terminal (such as a user host or server) or network device (such as a hub or simplified Layer 2 switch) that cannot identify tags, but also a switch, router, voice terminal, or AP that can receive and send tagged and untagged frames. It allows tagged frames from multiple VLANs. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration.

    Hybrid and trunk interfaces can be interchanged in some scenarios, but hybrid interfaces must be used in specified scenarios, for example, selective QinQ scenario. Before packets from multiple VLANs provided by a service provider enter a user network, the outer VLAN tags must be removed. The trunk interface cannot be used here because the trunk interface allows only untagged packets from the default VLAN of the interface to pass through. For details about selective QinQ, see Configuring Selective QinQ in "QinQ Configuration".

  • QinQ interface

    An 802.1Q-in-802.1Q (QinQ) interface often connects a private network to a public network. It can add an additional 802.1Q tag to a tagged frame. QinQ supports up to 4094 x 4094 VLANs, thereby extending VLANs over the network. The outer tag is often called the public tag and identifies the VLAN ID of the public network, whereas the inner tag is often called the private tag and identifies the VLAN ID of the private network.

    For details about the QinQ interface and QinQ frame format, see QinQ Fundamentals.



View more
  • x
  • convention:

Idris_abu
Idris_abu Created Mar 27, 2020 22:42:37
Hi,
You know with regards to VLAN there are three different port links which are
1.Trunk
2. Access
3. hybrid

And with regards to VPN, concept of "tunneling" , encapsulating protocols include
1 IPSec
2. GRE
3. L2F
4. PPTP...etc
My questions here are:
1. With regards to Vlan what is the special feature of hybrid port link type as compare to trunk/access port link type?
2. With regards to vpn, what is the speciality about "tunneling" as a whole?
I hope I'm more elaborate in 
sohaib.ansar MVE Created Mar 27, 2020 19:24:41 Helpful(0) Helpful(0)

Hi User,

A company has multiple departments located in different buildings. For service security, it is required that employees in one department be able to communicate with each other, whereas employees in different departments be prohibited from communicating with each other. Devices on the network shown in Figure 8-5 are configured as follows:

  • Add ports connecting devices to PCs of the financial department to VLAN 5 and ports connecting devices to PCs of the marketing department to VLAN 9. This configuration prevents employees in financial and marketing departments from communicating with each other.

  • Configure links between CE and PE as trunk links to allow frames from VLAN 5 and VLAN 9 to pass through, allowing employees of the same department but different buildings to communicate with each other.

By configuring port-based VLANs on the PE, CE1, and CE2, employees in the same department can communicate with each other, whereas employees in different departments cannot.

Figure 8-5 Networking diagram for configuring a VLAN based on ports
imgDownload?uuid=10341bb226d9445bbc60aac

Pre-configuration Tasks

Before configuring a VLAN based on ports, complete the following task:

  • Connecting ports and configuring physical parameters of the ports, ensuring that the ports are physically Up

Configuration Procedures

Figure 8-6 Procedure of configuring a VLAN based on ports
imgDownload?uuid=2bf171a7983c4de49353896

Creating a VLAN

Creating a VLAN isolates PCs that do not need to communicate with each other. This improves network security, reduces broadcast traffic, and prevents broadcast storms.

Procedure

  1. Run system-view


    The system view is displayed.


  2. Run vlan vlan-id


    A VLAN is created, and the VLAN view is displayed. If the specified VLAN has been created, the VLAN view is directly displayed.

    The VLAN ID ranges from 1 to 4094. If VLANs need to be created in batches, you can run the vlan batch command to create VLANs in batches, and then run the vlan vlan-id command to enter the view of a specified VLAN.

    imgDownload?uuid=2d95fea0784649f5b8d00f0 NOTE:

    If a device is configured with multiple VLANs, do as follows to configure a name for each VLAN:

    Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.


  3. Run commit


    The configuration is committed.


Configuring the Type of a Layer 2 Ethernet Port

On a Layer 2 switching device, some ports identify frames with VLAN tags, whereas the others do not. Configure ports types for Layer 2 Ethernet ports as needed.

Context

Table 8-2 lists Layer 2 Ethernet port types.

Table 8-2 Port types

Port Type

Method for Processing a Received Untagged Frame

Method for Processing a Received Tagged Frame

Method for Sending a Frame

Application

Access port

Accepts the frame and adds a tag with the default VLAN ID to the frame.

  • Accepts the frame if the VLAN ID carried in the frame is the same as the default VLAN ID.

  • Discards the frame if the VLAN ID carried in the frame is different from the default VLAN ID.

Removes the tag from the frame and sends the frame.

An access port connects a switch to a PC and can be added to only one VLAN.

Trunk port

Discards the frame.

  • Accepts the frame if the port permits the VLAN ID carried in the frame.

  • Discards the frame if the port denies the VLAN ID carried in the frame.

  • Directly sends the frame if the port permits the VLAN ID carried in the frame.

  • Discards the frame if the port denies the VLAN ID carried in the frame.

A trunk port can be added to multiple VLANs to send and receive frames for these VLANs. A trunk port connects a switch to another switch or to a router.

Hybrid port

  • If only the port default vlan command is run on a hybrid port, the hybrid port receives the frame and adds the default VLAN tag to the frame.

  • If only the port trunk allow-pass command is run on a hybrid port, the hybrid port discards the frame.

  • If both the port default vlan and port trunk allow-pass commands are run on a hybrid port, the hybrid port receives the frame and adds the VLAN tag with the default VLAN ID specified in the port default vlan command to the frame.

  • If only the port default vlan command is run on a hybrid port:

    • The hybrid port accepts the frame if the frame's VLAN ID is the same as the default VLAN ID of the port.

    • The hybrid port discards the frame if the frame's VLAN ID is different from the default VLAN ID of the port.

  • If only the port trunk allow-pass command is run on a hybrid port:

    • The hybrid port accepts the frame if the frame's VLAN ID is in the permitted range of VLAN IDs.

    • The hybrid port discards the frame if the frame's VLAN ID is not in the permitted range of VLAN IDs.

  • If both the port default vlan and port trunk allow-pass commands are run on a hybrid port:

    • The hybrid port accepts the frame if the frame's VLAN ID is in the permitted range of VLAN IDs or is the same as the default VLAN ID specified in the port default vlan command.

    • The hybrid port discards the frame if the frame's VLAN ID is not in the permitted range of VLAN IDs or is different from the default VLAN ID specified in the port default vlan command.

  • If only the port default vlan command is run on a hybrid port and the frame's VLAN ID is the same as the default VLAN ID, the hybrid port removes the VLAN tag and forwards the frame; otherwise, the hybrid port discards the frame.

  • If only the port trunk allow-pass command is run on a hybrid port:

    • The hybrid port forwards the frame if the frame's VLAN ID is in the permitted range of VLAN IDs.

    • The hybrid port discards the frame if the frame's VLAN ID is not in the permitted range of VLAN IDs.

  • If both the port default vlan and port trunk allow-pass commands are run on a hybrid port:NOTE:

    The hybrid port removes the VLAN tag and forwards the frame if the frame's VLAN ID is the same as the default VLAN ID configured using the port default vlan and the default VLAN ID is in the permitted range of VLAN IDs specified in the port trunk allow-pass command.

    • The hybrid port removes the VLAN tag and forwards the frame if the frame's VLAN ID is the same as the default VLAN ID of the port.

    • The hybrid port forwards the frame if the frame's VLAN ID is different from the default VLAN ID of the port but in the permitted range of VLAN IDs specified in the port trunk allow-pass; otherwise, the hybrid port discards the frame.

A hybrid port can be added to multiple VLANs to send and receive frames for these VLANs. A hybrid port can connect a switch to a PC or connect a network device to another network device.

QinQ port

QinQ ports are enabled with the IEEE 802.1QinQ protocol. A QinQ port adds a tag to a single-tagged frame, and thus the number of VLANs can meet the requirement of a Metropolitan Area Network.

Procedure

  1. Run system-view


    The system view is displayed.


  2. Run interface interface-type interface-number


    The view of a Layer 3 Ethernet interface to be added to a VLAN is displayed.


  3. Run portswitch


    The Layer 3 interface is switched to the Layer 2 mode.

    imgDownload?uuid=2d95fea0784649f5b8d00f0 NOTE:

    If many Layer 3 Ethernet interfaces need to be added to the VLAN, run the portswitch batch interface-type { interface-number1 [ to interface-number2 ] } &<1-10> command in the system view to switch the working mode of these Ethernet interfaces in batches.


  • If an interface is borrowing the IP address of an Ethernet, a GE, or an Eth-Trunk, the portswitch command cannot be run on the Ethernet, GE, or Eth-Trunk.

  • If the Ethernet, GE, or Eth-Trunk has any Layer 3 configuration, the portswitch command cannot be run on the interface. Before running the portswitch command on the interface, clear all Layer 3 configurations on the interface.

Run port link-type { access | dot1q-tunnel | hybrid | trunk }


The port type is configured.

imgDownload?uuid=2d95fea0784649f5b8d00f0 NOTE:

If you have specified a Dot1q-tunnel interface, run the port dot1q-tunneldiscard untag-frame command to enable this Dot1q-tunnel interface to discard incoming untagged packets to ensure network security.


Run commit


The configuration is committed.


Adding a Port to a VLAN

Adding a port to a VLAN associates the port with the VLAN.

Context

  • A port connecting a switch to a PC must be configured as an access or a hybrid port.

    The port trunk allow-pass vlan command is invalid on access ports.

  • A port connecting one switch to another must be configured as a trunk or hybrid port.

    The port default vlan command cannot be used on trunk ports.

Procedure

  • For access or QinQ ports:



  1. Run the port default vlan vlan-id command to add a port to a specified VLAN.

    To add ports to a VLAN in batches, run the port interface-type { interface-number1 [ to interface-number2 ] } &<1-10> command in the VLAN view.

    imgDownload?uuid=2d95fea0784649f5b8d00f0 NOTE:

    The input port format must be correct. The port number following to must be greater than the port number before to. If a group of ports are specified, ensure that these ports are of the same type and all specified ports exist.

    In one port command, a maximum of 10 groups of ports can be specified by using to.

  2. Run commit

    The configuration is committed.

For trunk ports:



  1. Run the port trunk allow-pass vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } command to add the port to specified VLANs.

  2. Run commit

    The configuration is committed.

Verifying the Configuration of a Layer 2 Interface-based VLAN

After configuring a Layer 2 interface-based VLAN, verify the configuration.

Prerequisites

All functions of a Layer 2 interface-based VLAN have been configured.

Procedure

  • Run the display vlan command to check VLAN information.

  • Run the display port vlan command to check information about all interfaces belonging to the configured VLANs.

  • Run the display port vlan interface-type interface-number active command to check information about interfaces with specified types and numbers within the configured VLANs.

Example

Run the display vlan command. The command output shows how many VLANs have been configured successfully on the device and their specific types.

<HUAWEI> display vlan The total number of vlans is : 7 VID  Type     Status  Property  MAC-LRN STAT    BC  MC  UC  Description -------------------------------------------------------------------------------- 1    common   enable  default   enable  disable FWD FWD FWD VLAN 0001 2    common   enable  default   enable  disable FWD FWD FWD VLAN 0002 3    common   enable  default   enable  disable FWD FWD FWD VLAN 0003 4    common   enable  default   enable  disable FWD FWD FWD VLAN 0004 5    common   enable  default   enable  disable FWD FWD FWD VLAN 0005 6    common   enable  default   enable  disable FWD FWD FWD VLAN 0006 7    common   enable  default   enable  disable FWD FWD FWD VLAN 0007

Run the display port vlan command. The command output shows information about all interfaces belonging to the configured VLANs.

<HUAWEI> display port vlan Port                    Link Type    PVID  Trunk VLAN List ------------------------------------------------------------------------------- Eth-Trunk1              hybrid       1     1-11                                  Eth-Trunk2              hybrid       1     2-3                                   GigabitEthernet3/0/1    hybrid       0     -

Run the display port vlan interface-type interface-number active command. The command output shows information about interfaces with specified types and numbers within the configured VLANs.

<HUAWEI> display port vlan GigabitEthernet1/0/1 active T=TAG U=UNTAG Port                    Link Type    PVID        VLAN List 
------------------------------------------------------------------------------- GigabitEthernet1/0/1    hybrid       1           U:25


View more
  • x
  • convention:

jason_hu Admin Created Mar 28, 2020 01:54:27 Helpful(0) Helpful(0)

Hello@Idris_abu

Huawei defines four interface types (access, trunk, hybrid, and QinQ) and two link types (access and trunk). Figure 5-3 shows access, trunk, and hybrid interfaces. QinQ Configuration shows the QinQ interface.

Hybrid interface

A hybrid interface can connect to not only a user terminal (such as a user host or server) or network device (such as a hub or simplified Layer 2 switch) that cannot identify tags, but also a switch, router, voice terminal, or AP that can receive and send tagged and untagged frames. It allows tagged frames from multiple VLANs. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration.

Hybrid and trunk interfaces can be interchanged in some scenarios, but hybrid interfaces must be used in specified scenarios, for example, selective QinQ scenario. Before packets from multiple VLANs provided by a service provider enter a user network, the outer VLAN tags must be removed. The trunk interface cannot be used here because the trunk interface allows only untagged packets from the default VLAN of the interface to pass through. For details about selective QinQ, see Configuring Selective QinQ in "QinQ Configuration".

Overview of VPN Tunnels

VPN data is transmitted over tunnels, including LSP tunnels and Traffic Engineering (TE) tunnels. TE tunnels are constraint-based routed label switched path (CR-LSP) tunnels.
  • LSP tunnel

    An LSP forwards packets through label switching and is often used in BGP/MPLS IP VPN. If LSPs are used as public network tunnels, only PE devices need to analyze IP packet headers. Other devices through which VPN packets pass do not need to analyze IP packet headers. This reduces the processing time and packet transmission delay of VPN packets. In addition, MPLS labels are supported by all link layers. An LSP is similar to an ATM virtual circuit (VC) or FR VC in functionality and security. If all the devices on the backbone network support MPLS, it is recommended that LSP tunnels or MPLS TE tunnels be used as public network tunnels.

    For details about LSPs, see MPLS LDP Configuration in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - MPLS.

  • MPLS TE tunnel

    As a combination of MPLS and TE technologies, MPLS TE can balance network traffic by setting up LSPs along specified nodes and steering traffic away from congested nodes. LSPs in MPLS TE are called MPLS TE tunnels, which are also widely used in BGP/MPLS IP VPN.

    In addition to the advantages of LSP, MPLS TE tunnels can handle network congestion. Using MPLS TE tunnels, SPs can fully utilize existing network resources to provide diversified services. MPLS TE tunnels also allow SPs to optimize and manage network resources.

    Usually, carriers are required to provide VPN users with end-to-end QoS for various services, such as voice, video, data, and Internet access. Carriers can use MPLS TE tunnels to provide their users with QoS guarantees.

    Using MPLS TE tunnels, carriers can also provide QoS-guaranteed services for different VPN users based on policies.

    For details about MPLS TE, see MPLS TE Configuration in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - MPLS.

  • For more details, please refer to https://support.huawei.com/enterprise/en/doc/EDOC1100075353/c2ff41a7

  • Glad to help you! Any further questions, let us know.


View more
  • x
  • convention:

Idris_abu Created Mar 29, 2020 17:21:31 Helpful(0) Helpful(0)

Awesome!
Thank you.
View more
  • x
  • convention:

Saqib123 Created Mar 29, 2020 18:04:54 Helpful(2) Helpful(2)

Good
View more
  • x
  • convention:

Saqib123 Created Mar 29, 2020 18:05:05 Helpful(0) Helpful(0)

:)
View more
  • x
  • convention:

Comment

Comment
You need to log in to comment to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.