Fortinet black logo

Accept specific VLANs at the provider ingress

6.4.6
Copy Link
Copy Doc ID 6ef27415-7086-11eb-9995-00505692583a:341883
Download PDF

Accept specific VLANs at the provider ingress

Optionally, you can accept specific VLANs at the provider ingress on PSW1 and PSW3. To do this, use VLAN mapping inside QinQ. You need to enable vlan-mapping-miss-drop and specify each customer and the corresponding service tags. For example:

config vlan-mapping

edit 1

set match-c-vlan 10

set new-s-vlan 100

next

end

Service tags must be listed as allowed-vlans.

The following example accepts only VLAN 10.

config switch interface

edit "port1"

set native-vlan 100

config qnq

set status enable

set vlan-mapping-miss-drop enable

config vlan-mapping

edit 1

set match-c-vlan 10

set new-s-vlan 100

next

end

next

end

Accept specific VLANs at the provider ingress

Optionally, you can accept specific VLANs at the provider ingress on PSW1 and PSW3. To do this, use VLAN mapping inside QinQ. You need to enable vlan-mapping-miss-drop and specify each customer and the corresponding service tags. For example:

config vlan-mapping

edit 1

set match-c-vlan 10

set new-s-vlan 100

next

end

Service tags must be listed as allowed-vlans.

The following example accepts only VLAN 10.

config switch interface

edit "port1"

set native-vlan 100

config qnq

set status enable

set vlan-mapping-miss-drop enable

config vlan-mapping

edit 1

set match-c-vlan 10

set new-s-vlan 100

next

end

next

end