Create/modify a VLAN

Purpose

Use this procedure to:

When creating a VLAN, the following provisionable items are required:

Background on VLANs

The AnyMedia® Access System system supports three types of VLANs:

Not all packs support all VLAN types. The table below shows which VLAN types are supported by the individual pack types.

Pack type

 

VLAN types

 

Port-based VLANs

 

L3 VLAN

 

Tunnel-VLAN

 

Normal VLANs

 

Shared VLANs

 

IPFM

 

×

 

×

 

×

 

×

 

VoIP AP

 

× 1, 2

 
     

VSIM AP

 

×

 
   

×

 

ESIM

 

×

 

×

 

×

 

×

 

Notes:

1

VoIP APs support only exactly one VLAN for all AP ports.

2

VLAN provisioning on a VoIP AP is done differently to VLAN provisioning on other packs.

Port-based VLANs

Ingress filter

 

Accepted frames

 

Result

 

Disabled

 

All

 

All received packets are accepted at the port. However they might be dropped later by subsequent policies

 

Tagged only

 

Enabled

 

All

 

Untagged and/or tagged packets with a valid VLAN ID are accepted 1

 

Tagged only

 

Only tagged packets with a valid VLAN ID are accepted 1

 

Notes:

1

A VLAN ID is valid, when the port is a member of this VLAN.

Shared VLANs

There are applications (e.g. video broadcast), where it might be helpful to split protocols in different VLANs (e.g. control data and video stream).

Layer 3 VLANs

Layer 3 VLANs (L3 VLANs) allow routing in the packs of the AnyMedia® Access System.

Tunnel-VLANs

Tunnel-VLANs (also called QinQ or stacked VLANs) support an additional (outer) VLAN tag on a packet.

Provisioning scenarios

Provisioning scenarios for the different VLAN types are provided in the Applications and Planning Guide for IP-based services (363-211-587).

Procedure

Task Steps
1

From the menu bar select IP Subsystem -> IP Data -> L2 Functions -> VLAN Configuration…

Result:  The VLAN Configuration window opens.


2

Select the applicable Slot.


3

IF...

 

THEN...

 

you want to create a VLAN

 

go to Step 4

 

you want to enable or disable a filter for the incoming packets on an IPFM port or on a VSIM port

 

click on PVID.

In the PORT VLAN ID window select the correct slot, then move the cursor to the line with the applicable port and right-click in the column Ingress Filter. From the pop-up menu entry Ingress Filter select Disable or Enable and click Apply.

END OF STEPS

 

you want to provision the acceptable frame types on an IPFM port or on a VSIM port

 

click on PVID.

In the PORT VLAN ID window select the correct slot, then move the cursor to the line with the applicable port and right-click in the column Acceptable Frame. From the pop-up menu entry Acceptable Frame select All or Tagged only and click Apply.

END OF STEPS

 

you want to provision the PVID for individual ports on a VSIM AP

 

click on PVID.

In the PORT VLAN ID window select the correct slot, then move the cursor to the line with the applicable port and right-click in the column PVID. From the pop-up menu entry PVID select Modify PVID and enter a new PVID for the selected VLAN. Click Apply.

END OF STEPS

 

4

From the VLAN Type pull-down menu select either VLAN or Tunnel.


5

IF...

 

THEN...

 

you want to create a standard VLAN

 

go to Step 6

 

you want to create a tunnel-VLAN

 

go to Step 8

 

6

Enter the following VLAN information:

  • VLAN ID (in the range of 1...4092)

  • VLAN Name

  • Broadcast Storm Control (optional)

  • IP Address (not applicable for Layer 2 VLANs)

  • Subnetmask (not applicable for Layer 2 VLANs).


7

Select the associated VLAN ports and determine the egress rule for each port:

In the Port List field right click in the Egress Rule field of the selected port and select the applicable egress rule for this port. The ports 1 to n are the links to the AP slots. Then go to Step 10.

Additional Info - The following VLAN egress can be selected:

  • Egress Tagged (standard VLAN)

    To frames that are transmitted from these ports, a 4-byte tag including the VLAN ID will be added (or kept if already contained) to the MAC frame header.

  • Egress Untagged (standard VLAN)

    Originally tagged frames that are transmitted from these ports, become untagged (the tag field will be removed). An untagged frame remains untagged.

  • Egress Shared (standard VLAN)

    Egress shared refers to overlapping VLAN domains.

The ingress VLAN assignment (PVID setting) is derived from the provisioned egress untagged VLAN membership of that particular port.

System Failure:

The creation of a new VLAN will be refused in the following cases:

  • A given port is defined in a new standard VLAN and that port was already defined as QinQ-access-port in an existing tunnel-VLAN.


8

Enter the following VLAN information:

  • VLAN ID (in the range of 1...4092)

  • VLAN Name

  • Broadcast Storm Control (optional)


9

Select the associated VLAN ports and determine the egress rule for each port:

In the Port List field right click in the Egress Rule field of the selected port and select the applicable egress rule for this port. The ports 1 to n are the links to the AP slots. Go to Step 10.

Additional Info - The following VLAN egress can be selected:

  • QinQ-port (for tunnel-VLANS only)

    Any packet received on the port should be a double tagged packet with a second 802.1Q tag which VLAN ID should be the same as the VLAN ID of the tunnel-VLAN.

    If an untagged packet is received on the port, the packet will belong to the other VLAN associated with the PVID of the port. If a tagged packet is received on the port and the VLAN ID in the outer tag is different to the VLAN ID of the tunnel-VLAN, then the packet will be discarded. Any packet to be forwarded from the tunnel-VLAN to the tagged port will be transmitted as double tagged packet and the VLAN ID in the outer tag will be defined by the VLAN ID of the tunnel-VLAN.(for tunnel-VLANs only)

  • QinQ-access-port (for tunnel-VLANS only)

    Any packet received on the port will be tagged with a second 802.1q tag regardless of the tagged/untagged type of the original packets. The VLAN ID in the outer tag will be defined by the VLAN ID of the tunnel-VLAN. Any packet to be forwarded from the tunnel-VLAN to the port will be transmitted with the second IEEE 802.1Q tag removed.

    A given port can only be defined as QinQ-access-port in one tunnel-VLAN. A port can only be provisioned as a QinQ-access-port if it is not in any non-default standard VLAN or any tunnel-VLAN.

The ingress VLAN assignment (PVID setting) is derived from the provisioned egress untagged VLAN membership of that particular port.

System Failure:

The creation of a new VLAN will be refused in the following cases:

  • A given port is defined as QinQ-access-port in a new tunnel-VLAN and that port was already defined in an existing non-default standard VLAN.


10

Click Apply.

Result: The VLAN is created and is displayed in the table.


11

IF...

 

THEN...

 

you want to modify the VLAN regarding ingress filter or acceptable frames or if you want to modify PVIDs for VSIM ports

 

return to Step 3

 

you do not want to modify the VLAN

 

go to Step 12

 

12

Save these changes to the NVDS:

From the menu bar select IP SubSystem -> IP Data -> System -> Save Changes to NVDS.

Result:  A confirmation window appears. Click YES.

End of steps



© Lucent Technologies