Hello.

We are using switch Quidway S5352C-EI (VRP (R) software, Version 5.150 (S5300 V200R005C00SPC300) + s5300ei-v200r005sph006.pat)

My test configuration:

vlan batch 10 to 11 100 to 110 200 to 210
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 11
#
interface GigabitEthernet0/0/2
qinq vlan-translation enable
port hybrid pvid vlan 11
port hybrid untagged vlan 10 to 11
port vlan-stacking vlan 100 to 110 stack-vlan 10
port vlan-stacking vlan 200 to 210 stack-vlan 10
#
interface GigabitEthernet0/0/3
qinq vlan-translation enable
port hybrid untagged vlan 10
port vlan-stacking vlan 100 to 110 stack-vlan 10
#
interface GigabitEthernet0/0/4
qinq vlan-translation enable
port hybrid untagged vlan 10
port vlan-stacking vlan 200 to 210 stack-vlan 10
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 10 to 11

On port 2 I have test server with vlan 11(Untagged) and tagged vlan 100 to 110 and 200 to 210

On port 3 - tested client with tagged vlan 100 to 110

On port 4 - tested client with tagged vlan 200 to 210

But from port 3 I can communicate with vlan 200 to port 2, from port 4 - with vlan 100 to port 2, and

from port 3 to port 4 - on any vlan in range 100-110 & 200-210.

In my opinion, it's wrong behavior.
What's wrong with my configuration?

My idea for using this sheme is illustrated in picture

An second question: how I can add  another vlan in tagged mode to port 2?