Vlan Double Tagging

AlliedWare PlusTM Operating System

Bridge Protocol Data Unit (BPDU) Protection BPDU Protection adds extra security to the Spanning Tree Protocol (STP). It protects the spanning tree configuration by preventing malicious DoS attacks caused by spoofed BPDUs.

BPDU Protection is designed to be enabled on ports that should not receive BPDUs.These are edge ports connected to end user devices that do not run spanning tree. If a spoofed BPDU packet is received on a protected port, the BPDU Protection feature disables the port and alerts the network manager.

VLAN double tagging allows network service providers to use a single VLAN to support customers with multiple VLANs. In this way, they can simply and cost-effectively offer IP-based solutions in scalable implementations.

Service providers often have customers whose VLAN range requirements overlap, and the traffic from different customers is mixed in with the service providers' infrastructure. With VLAN double tagging, each customer is given a customer-ID (CID), which is a unique identifier within the service provider infrastructure.Traffic from individual customers is tagged with the CID and segregated from other customer's traffic.The VLANs identification of the customer's network can be preserved while the traffic is tunnelled through the network service provider's infrastructure.

Allied Telesis