Siemens S223 User Manual

Page of 381
UMN:CLI                                                                                                                                                              User  Manual 
SURPASS hiD 6615 S223/S323 R1.5 
184                                                                         A50010-Y3-C150-2-7619 
8.1.8 QinQ 
QinQ or Double Tagging is one way for tunneling between networks 
T
U
T
U
T
T
T
U
U
T
T
T
VLAN 200
VLAN 200
VLAN 201
VLAN 201
VLAN 641
PVID 641
T: Tagged
U: Untagged
Customer A
Customer A
Customer B
Customer B
Trunk Port
Trunk Port
Tunnel Port
Tunnel Port
Tunnel Port
Tunnel Port
 
Fig. 8.2 
Example of QinQ Configuration 
 
If QinQ is configured on the hiD 6615 S223/S323, it transmits packets adding another Tag 
to original Tag. Customer A group and customer B group can guarantee security because 
telecommunication is done between each VLANs at Double Tagging part. 
Double tagging is implemented with another VLAN tag in Ethernet frame header. 
Preamble
Destination
Source
802.1Q VLAN Tag
Type/Length
LLC
Data
FCS
TPID 8100
Priority
Canonical
12-bit identifier
VLAN Ethernet Frame
Preamble
Destination
Source
802.1Q VLAN Tag
Type/Length
LLC
Data
FCS
VLAN Tag
TPID 8100/9100
Priority
Canonical
12-bit identifier
TPID 8100
Priority
Canonical
12-bit identifier
Ethernet Frame using 802.1Q Tunneling
 
Fig. 8.3 
QinQ Frame 
 
Port which connected with Service Provider is Uplink port (internal), and which connected 
with customer is Access port (external). 
 
Tunnel Port 
By tunnel port we mean a LAN port that is configured to offer 802.1Q-tunneling support. A 
tunnel port is always connected to the end customer, and the input traffic to a tunnel port 
is always 802.1Q tagged traffic. The different customer VLANs existing in the traffic to a 
tunnel port shall be preserved when the traffic is carried across the network 
 
Trunk Port
 
By trunk port we mean a LAN port that is configured to operate as an interswitch link/port,