H3C LS-3100-52P-OVS-H3 Operation Manual - page 193
1-9
To do...
Use the command...
Remarks
Exit to system view
quit
—
Enter the interface view of the uplink
port
interface interface-type
interface-number
—
Configure the uplink port as a DHCP
snooping trusted port
dhcp-snooping trust
Required
By default, all ports with
DHCP snooping
enabled are DHCP
snooping untrusted
ports.
Configure the uplink port as an ARP
trusted port
arp detection trust
Required
By default, all ports are
ARP untrusted ports.
Set the link type of the uplink port to
trunk
port link-type trunk
Required
Configure the uplink port to permit the
specified SVLANs to pass through
port trunk permit vlan
{ vlan-id-list | all }
Required
By default, a trunk port
permits only VLAN 1 to
pass through.
Enable service provider side QinQ
qinq enable uplink
Required
Disabled by default.
z
To defend against attacks, you are recommended to enable ARP detection for each CVLAN.
z
Before applying a QoS policy to the downlink port, enable customer-side QinQ on the port; before
disabling customer-side QinQ on the downlink port, remove the QoS policy.
z
To change a VLAN mapping, you must first use the reset dhcp-snooping command to clear the
corresponding DHCP snooping address binding entry (refer to DHCP Commands in the IP
Services Volume) or disable the dynamic address binding function of IP Source Guard on the
downlink port and then enable dynamic address binding again (refer to IP Source Guard
Commands in the Security Volume).
z
You can configure the qinq enable uplink command or the qinq enable downlink command in
port group view to make it take effect on all ports in the port group.
Table 1-3 Configure an uplink policy
To do...
Use the command...
Remarks
Enter system view
system-view
—
Create a class and enter class
view
traffic classifier tcl-name
operator or
Required
Specify the CVLANs for the
VLAN mapping
if-match customer-vlan-id
{ vlan-id-list | vlan-id1 to
vlan-id2 }
Required
Exit to system view
quit
—