58
Set up rule No.3 for limiting Https Port 443 bandwidth.
-
Select
“
Destination or Source
”
. This means that both Destination Address and Source
Address with the specified port number will follow the bandwidth setting.
-
Set Port Start and Port End to 443.
-
Select Q2.
Set Queue 2
’
s reserved bandwidth to 4096K.
Set Queue 3
’
s reserved bandwidth to 12288K.
2.6.6 Configure Q-in-Q
The IEEE 802.1Q double tagging VLAN is also referred to Q-in-Q or VLAN stacking (IEEE
802.1ad). Its purpose is to expand the 802.1q VLAN space by tagging the inner tagged
packets. In this way, a “double
-
tagged” frame is created
so as to separate customer traffic
within a service provider network. As shown below in
“
Double-Tagged Frame
”
illustration, an
outer tag is added between source destination and inner tag
at the provider network’s edge.
This can support C-VLAN (Customer VLAN) over Metro Area Networks and ensure
complete separation between traffic from different user groups. Moreover, the addition of
double-tagged space increases the number of available VLAN tags which allow service
providers to use a single SP-VLAN (Service Provider VLAN) tag per customer over the
Metro Ethernet network.
Preamble
SFD
D
A
S
A
Type/LEN
PAYLOAD
FCS
Original frame
Preamble
SFD
D
A
S
A
TAG
TCI/P/C/VID
Type/LEN
PAYLOAD
FCS
802.1q
Frame
Preamble
SFD
D
A
S
A
Outer Tag
or SP-Tag
Inner Tag
or C-Tag
TCI/P/C/VID
Type/LEN
PAYLOAD
FCS
Double-
tagged
Frame
Double-Tagged Frame
As shown below in
“
Q-in-Q Example
”
illustration, Headquarter A wants to communicate with
Branch 1 that is 1000 mile away. One common thing about these two locations is that they
have the same VLAN ID of 20, called C-VLAN (Customer VLAN). Since customer traffic will
be routed to service provider
’
s backbone, there is a possibility that traffic might be forwarded
insecurely, for example due to the same VLAN ID used. Therefore, in order to get the
information from Headquarter to Branch 1, the easiest way for the carrier to ensure security