Siemens S323, S223 user manual QinQ, Tunnel Port, Trunk Port, Tagged, Untagged

UMN:CLI	User Manual
	SURPASS hiD 6615 S223/S323 R1.5

8.1.8QinQ

QinQ or Double Tagging is one way for tunneling between networks

Customer A			Customer A
VLAN 200	VLAN 641	PVID 641	VLAN 200

TU

Tunnel Port

Tunnel Port

T U

T	T	T
Trunk Port

U	T
	Tunnel Port

T

Trunk Port Tunnel Port

U T

VLAN 201		VLAN 201
	T: Tagged	Customer B
Customer B
	U: Untagged

Fig. 8.2 Example of QinQ Configuration

If QinQ is configured on the hiD 6615 S223/S323, it transmits packets adding another Tag to original Tag. Customer A group and customer B group can guarantee security because telecommunication is done between each VLANs at Double Tagging part.

Double tagging is implemented with another VLAN tag in Ethernet frame header.

Preamble

Destination

Source

802.1Q VLAN Tag

Type/Length

LLC

Data

FCS

TPID 8100

Priority

Canonical

12-bit identifier

VLAN Ethernet Frame

Preamble

Destination

Source

VLAN Tag

802.1Q VLAN Tag

Type/Length

LLC

Data

FCS

TPID 8100/9100

Priority

Canonical

12-bit identifier

TPID 8100

Priority

Canonical

12-bit identifier

Ethernet Frame using 802.1Q Tunneling

Fig. 8.3 QinQ Frame

Port which connected with Service Provider is Uplink port (internal), and which connected with customer is Access port (external).

Tunnel Port

By tunnel port we mean a LAN port that is configured to offer 802.1Q-tunneling support. A tunnel port is always connected to the end customer, and the input traffic to a tunnel port is always 802.1Q tagged traffic. The different customer VLANs existing in the traffic to a tunnel port shall be preserved when the traffic is carried across the network

Trunk Port

By trunk port we mean a LAN port that is configured to operate as an interswitch link/port,

184 A50010-Y3-C150-2-7619